1}, 0x0) 2033/05/18 03:36:57 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x7fffe, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000340), &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f00000001c0)=0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000100)) 2033/05/18 03:36:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0x9, 0x4000000000000000, 0x7, 0x3, 0x2, [{0x5, 0xffffffffffffbe71, 0x9, 0x0, 0x0, 0x1}, {0x1, 0x7fff, 0xe514}]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5ad400000000000000000000000000000", 0x18) 2033/05/18 03:36:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22003093683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:36:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '(:selfem0'}], 0xa, "be118e6718f69e60715ef5"}, 0x20) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4bd, 0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x5, 0x8, 0xad4, 0x1ff, 0x6, 0x4, 0x6}, 0xc) 2033/05/18 03:36:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:36:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:57 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 832.725386] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:36:58 executing program 0: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x33}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x90}}, 0xe8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xf9, "7b9f3a58a193e51d76f62dac536a080908aa58a06cbecdd7ea3b9e3cb0d5c45ef69f1ee3645c05e754f81c4f382973c271696ff638c3d2f5f1d4959e660cedb76aaf05d7851e877ae60c5140637278951c698fb1c46591c5065140fb4bfa940cb91c1e23595b2d27d2c661aaf6661116a22027fc6f7ce95ee3f198e04a4ef8d769dec27830744e8b725b81af98c5ab27b668af5ca92f5bd86e374bedf75e79f0a1ce6e8d9d1037c966862ecc80a58be941cb725905e4c7cb7e44fe77c7292550de3277dce19c2480af7ec8040010bb5b704c74d6679061f9828dbc3735ad517a8d84b50c78bb601819bad3f577439b519e186e441b09750762"}, &(0x7f0000000000)=0x101) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000040)={r0, 0x1}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa}, 0x1c) 2033/05/18 03:36:58 executing program 7: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) prctl$intptr(0x1c, 0x64) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1a00001}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {0x10}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xab4c}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_AF={0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9910}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1c00000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x91) 2033/05/18 03:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4c}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0xfee5) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) connect(r0, &(0x7f0000000140)=@ipx={0x4, 0x10000, 0x100000001, "d7e896127811", 0x7}, 0x80) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1b7) 2033/05/18 03:36:58 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x80) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='/\x00') setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="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", 0x121) socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000200)="e30c1137d4b219b01e979bde583796aae8ca7a689afb61c9801bdaa8505e72e7d48477e3d8a29fd9e8133d3371c15095eb1181be7f1351c153e111b4b43255d52507a7be89d8cc2d9c34cdc1f93fdf5ee2ab2c372d47f194a00f8f240513d80e4b3bc1aacfe8", 0x66, 0x5, 0x0, 0x0) 2033/05/18 03:36:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:36:58 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:36:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000ffff40150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7a00000000000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x12180) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x100000001, 0x5}, &(0x7f0000000080)=0x8) r2 = semget$private(0x0, 0xb1ce66a0ba4c184b, 0x422) semctl$SETVAL(r2, 0x5, 0x10, &(0x7f00000002c0)=0x3) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, [0x200, 0x1, 0x80000001, 0x2, 0x739, 0x0, 0x1, 0x6, 0x3, 0x80, 0xca, 0xf6, 0x4, 0x4, 0x800]}, &(0x7f00000001c0)=0x100) personality(0x35375d2df5f70313) uname(&(0x7f0000000440)=""/176) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000340)=0x4) [ 832.915542] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:36:58 executing program 3: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xffffff2b, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) close(r1) 2033/05/18 03:36:58 executing program 0: r0 = socket(0x1, 0xfffffffffffffffe, 0x400000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="f1adeb1af858baacf3badb1d79cae63160297c5622f1bd4355db6251ba98a1e2907b45d18f94a4870400", 0x2a, 0xfffffffffffffffb) fcntl$setpipe(r0, 0x407, 0x5) 2033/05/18 03:36:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x400) ioctl$TIOCNXCL(r1, 0x540d) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:36:58 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x74000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000002683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 833.146282] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:36:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x4400) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="31c61e04bf3b9e984ca91d871d9ecba374ad1ebed7a880aa8febdecc48fdb4b3a371e195245a2426de42748d043b62450a8e7b20a9ad1fa8bd128657967a34cd89faa9b68d3d231b7bdf9b67905d5ed73eb52cc36097c057d8381aa99fe93695078780231d3296ff962d235bd2ea345643725a498b6b148d748b9d6e0952048f0573b11e6b0d9e008d55308a1f93b1ae65e84f46fe4cbe3eae79b0687268c4bd206a482a66a06f73687198dc", 0xac}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0xfffffed1}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 2033/05/18 03:36:59 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregs(0x3, r1, 0x0, &(0x7f0000000000)=""/38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'bridge0\x00', 0x400}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000240)={r4, 0x2}) renameat2(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x3) 2033/05/18 03:36:59 executing program 0: r0 = socket$inet6(0xa, 0x21, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x10, &(0x7f0000000180)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@multicast1=0xe0000001}}, {{@in=@rand_addr}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) 2033/05/18 03:36:59 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:36:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:36:59 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001840)='/dev/audio#\x00', 0x1, 0x4c200) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001880)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendmsg$rds(r1, &(0x7f0000001800)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000000c0)=""/51, 0x33}], 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="30000000000000001401000003000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000030000000000000001401000003000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0010000000000000", @ANYPTR=&(0x7f0000001380)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="140000000000000018000000000000001401000002000000020000000700000058000000000000001401000009000000030000005f010000", @ANYPTR=&(0x7f00000013c0)=ANY=[@ANYBLOB="ff01000000000000"], @ANYPTR=&(0x7f0000001400)=ANY=[@ANYBLOB="0600000000000000"], @ANYBLOB="01000000000000000500000000000000001000000000000060fd00000000000003000000000000000200000000000000580000000000000014010000090000000500000000000000", @ANYPTR=&(0x7f0000001440)=ANY=[@ANYBLOB="0500000000000000"], @ANYPTR=&(0x7f0000001480)=ANY=[@ANYBLOB="ffffff7f00000000"], @ANYBLOB="050000000000000008000000000000000004000000000000090000000000000002000000000000000400000000000000580000000000000014010000090000004a41000020000000", @ANYPTR=&(0x7f00000014c0)=ANY=[@ANYBLOB="82b5ffffffffffff"], @ANYPTR=&(0x7f0000001500)=ANY=[@ANYBLOB="a676000000000000"], @ANYBLOB="07000000000000000900000000000000000400000000000006000000000000001000000000000000080000000000000030000000000000001401000003000000", @ANYPTR=&(0x7f0000001540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="9900000000000000e4cb124c03a765be2b950a7a6d01dfc67d8b1bb0a79be73b96c70abd8b9ded6f7c3478b93f59b85b62609a54e62cfaebd969e73ee07d9abc6f409af3498be5eef87797e72b68215417c26d7092970d30c9ee95b3d599bfc97dc0d043988a4d7b40b825451b99ff8fd52d539920ad8df2481e6e4475236893b644a7bd8489be3b7def6a967ca8", @ANYPTR=&(0x7f0000001600)=ANY=[@ANYBLOB='\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1b0, 0x8080}, 0x4000) sendto$inet(r1, &(0x7f0000001840), 0x0, 0x10, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r1, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150224001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:36:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85ff0100020200082500000210173cb145c49ea538000000000081ba20889500000000ff0e00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2033/05/18 03:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 833.895685] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:36:59 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:36:59 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) times(&(0x7f0000000100)) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x2) 2033/05/18 03:36:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r1 = dup3(r0, r0, 0x80000) bind$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 2033/05/18 03:36:59 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x4) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 2033/05/18 03:36:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024021d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:36:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000030000000000000000000000", 0x10}]) 2033/05/18 03:36:59 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:36:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 834.120809] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500000000000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:59 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) times(&(0x7f0000000100)) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x2) 2033/05/18 03:36:59 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x4], 0x1, 0x2, 0xfffffffffffffff7, 0xb9, 0x0, 0xf2, {0x4, 0x8000000000002, 0xfffffffffffffffb, 0xe65, 0x3ff, 0x100000001, 0x47, 0x3, 0x9, 0x136fddb8, 0x8, 0x4080000000, 0x6, 0x6, "ac8fc611bcb2b20aedfb1152c0a7ca0c78a2da8d46b227451b571c43b518f383"}}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="ed", 0x1}], 0x1) sendto(r0, &(0x7f0000000000)="a6", 0x1, 0x801, &(0x7f00000003c0)=@can={0x1d}, 0x80) 2033/05/18 03:36:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80605414, &(0x7f0000000340)=""/4096) 2033/05/18 03:36:59 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:36:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) r1 = memfd_create(&(0x7f00000000c0)='bridge0\x00', 0x2) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x8}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x18}, 0x5}, 0x4, [0x6, 0x81, 0x401, 0x1d, 0x1, 0x0, 0x1, 0x7]}, 0x5c) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0xf6, 0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x8, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23}, 0x310, 0xfffffffffffffff7, 0x1, 0x80000001, 0x100, &(0x7f0000000080)='bridge0\x00', 0x100000000, 0xd, 0x4}) 2033/05/18 03:36:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:36:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d021fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4c000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:59 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0675b005", 0x5) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket(0x1, 0x80005, 0x401) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) sendmmsg$alg(r1, &(0x7f0000006040)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002480)="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", 0xb88}], 0x1, &(0x7f0000000080)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f0000001480)=""/4096, 0xfe15}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2033/05/18 03:36:59 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 834.353419] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:36:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x9}, @in6={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, [], 0xa}, 0x1}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x9a5, @dev={0xfe, 0x80, [], 0x18}, 0xfffffffffffff1ee}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x7f}], 0xc4) 2033/05/18 03:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x68000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@random={'btrfs.', "113a00"}, &(0x7f0000000400)='/dev/net/tun\x00', 0xd, 0x1) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffe01, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0xffffffe4) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x40) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000340)={0x7fff, 0x100000001}) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r2 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x303840) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x6, &(0x7f00000000c0)=@raw=[@exit={0x95}, @jmp={0x5, 0x20, 0x8, 0x9, 0xb, 0x20}, @alu={0x4, 0x6afa, 0xa, 0xf, 0xe, 0xfffffffc}], &(0x7f0000000140)='syzkaller\x00', 0x1, 0xa8, &(0x7f0000000180)=""/168, 0x40f00, 0x1}, 0x48) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000002c0)=r3) 2033/05/18 03:36:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x2000804c}], 0x1}, 0x0) 2033/05/18 03:36:59 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:36:59 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xa55e, 0x101000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001500)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000001640)=0xe8) stat(&(0x7f0000001680)='./bus\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001740)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001780)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000001880)=0xe8) r8 = getgid() r9 = getpid() lstat(&(0x7f0000001b80)='./bus\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000001cc0)=0x0) r13 = geteuid() r14 = getgid() r15 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002240)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000002340)=0xe8) lstat(&(0x7f0000002380)='./bus\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000003a00)=[{&(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000100)="77637249dd34003dafa23a991fb4c9e6a1ed3c52883fd4321f7f11d4807df230048fadd7a8d0f2", 0x27}, {&(0x7f0000000280)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40050}, {&(0x7f00000012c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001340)="efff66b8023dc5daf29840c88216d2c8e301de41880d3d2dc8201b6ada2004a1a61878c4ed02d7c4f4bf59a1c7cd4e3caf843704ce59fe8ef826b229ba2ebef0cde9ddbefd930eda978863f1a969761055144102e2bcc5371d1940b7e30408405d2dd32ddb44b3553a157c7b3e0857d2b9f04196112fef184901a83fabe6feb1a88ea0c6c33cc76195f63326293631f864a5fd90d31b5f5d38ddbfc4f08c6a3eaac9c1", 0xa3}, {&(0x7f0000001400)="4102674567984e2ebd5a50d13ba8a2f8362d3b01e1", 0x15}, {&(0x7f0000001440)="deace75a8ed774383c92f14ce1d4cd686a3d0122ad3f6db9a8f0332342c10bcf20824ea05eecdc4ce61972afab962dd10f739ab30a264049618b2696586cac672a6578c8acaf00749f901896535ccfdb7c82fbd4283aed7d306fc25fe75de4dabd4ed9122e966f73fb8a8fb916360415111623b0fd153a072707026ca1a2b8", 0x7f}], 0x3, &(0x7f0000003b40)=ANY=[@ANYBLOB="2000000000000000010ec40ecc4dcaa87048e3999b9e4e16babf21f37800", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x4000000}, {&(0x7f0000001940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f00000019c0)="5863460b61a7161130c7d583a0bfd15d56a057d5e52d150eb36fc699305df316b45c702d174b0db3a6d92682cd5ac700de2efd511db75777ea154d35625a03ae8e6d352105624a4434ab05f6e1accb4edfa4a5095d70a6835e41907f7cc1ff436c9c4e56a2ff131efd98fd037749038c8242911068403ef01de2ce7f44d780e8ba603fa9225d50011c4329bbb36c387d158b498a873c524bb13632888cbc7af9ede78eb15946677887af3641ef87", 0xae}, {&(0x7f0000001a80)="e2c26fd36296d9bda3395ee51a29de943bf71e0909271606320b1732bd0b5655fc522d923676e934e832bd9237e5bd4cf0ef703b8e6114362b75c23480fcea88ccfb7d025d39a435f2b9de9080e57e234f830d6ff0f1354005447a5781d0b3a6b03a200c437ec156c814cbdec3fdeca48b32e40b2a1f429289f2781e6cea4e34adc58b6046614cb6f251bf253475e968c6a26bc4b3b3ae8a9e144c7f2dc7ff013f6189947f3d400a09253870348c768dfdf5e5a770a2d73fd2", 0xb9}], 0x2, &(0x7f0000001d00)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x68, 0xc0}, {&(0x7f0000001d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001e00)="e2bb424e72b447b2b213e0b215af099b36722e8153886ab5f2a9991fbb5aba4363cc116b67e068f185fae0ef59f044eca2c5c9f7dcbd4b4caded49fa48e04235faf85318f672a83004ccd8bae7f6418d2935c0425dbb9b961c164be231186fae68740392b343edb65bbe416539a2adf88b7dc60642ced55dfc18f355aa0b839728ee12effc515f07aaf1886f36c584bcb27b58b194ccde", 0x97}, {&(0x7f0000001ec0)="4b66c4e1d8ba7a066fe327b8c57190c7489c8085c71e92765764856dea3b954e71d1dea8d83005eacd2e", 0x2a}, {&(0x7f0000001f00)="cbd586b08bae98272f48c364b1045792eac79f5787d2c45e123f240500a7c210f33ab4c1ff22a6bd832aa4a0a55bd78456d617a95407d633a725276138b96f05022ce0b631c1ac41258f3adb4f5791a414b45bd0afabddb58cf90d28b9b5bf91bcc8a9a5108b679e00313b2b1d2d51158a3eb8f2a13e0aab0d5c7d69b751138164fa9d975f247c82d59cbc2ee8dfe1c94fb90fa98c7b0ffbd67db4470bf83016bf527453bf4faac84b414e42a46c219cbc6b03bd8dc95898f7ad044e87d0f4987945be92e54bb1e7e2f0", 0xca}, {&(0x7f0000002000)="18de832a8ab3743ed6664aa4b7c16e457e77d6b3f10582ff1c04455462be399e56f3f197a8b7a6d1cc8c17d70698d13927928592b168fdec16859dbc6cd61caa75001260f5eb17193a7d27b6931996f811778fb7d94b13564ad892ea9288298dcca21287c4a6e93f60146e26eb4a2aa5e006e46b04941621b279404667339bb55e2d9f1776a4041f88bfc09711728ce2c1b42a0d36b995546e8bf0c312911a86ec788b42ee06ddb5fe99ab3740f24829ce807ec5e2ef5e14c2de03830720b49233b2f6cfbb96cd1eb420cd4abe6d7f777136519511026b22893e90be0572b427758d4c", 0xe3}, {&(0x7f0000002100)="75441deddf0b04828fa51a5410d30204adf0fe9d7d2349dde34fc9187eadb2e4c5f2acdce094922a17eb393730d4f6d2bbb84016904e40e544eba405c1d4924f8721994aff355ec31027ada1e9a634855f13651232c6b985ff234fff2dd553670e6515e06c30a84003fe0bbc65fc64c0fc9508a1aab4ec3a50cb1251c20b5b96a2", 0x81}], 0x5, &(0x7f0000002440)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0x70, 0x8000}, {&(0x7f0000002500)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="769aa4949ef4594b69233b0dba7c54a365579eb6fca57687116f04012eed961702ed7bb416eab04a2985a421a589bd39fc227143f106d2a60475f16c94349e000d0dc7bbfc87bf2061d0036b41296b21ece6c7b92674ff388407af4f0dbac169c9025ea7f873b3edd9d70122500a689698d2c4b4e65521600be509fde0b00214b8eefa20530f228f35d4", 0x8a}, {&(0x7f0000003640)="081bfaf8ea657bc455148a56432399132c8eed28845a9128ec969592d2bd9341c9acbc2689e9fb0ff171cb653ab4ba92748a7bd05dfef244417ffa3bbb01814d00e51fd5bd46ee7b0dcb71702945dd93c6b5e8a32ee5fb51de4fec0a69f6e9a001c59c5ff8d927c466f46cc67f4ccb8b0ac98b486901701e650d2dea210744163f5f239fc0520b38d131829cf9528d3a1f9b0d6ff2b7e84c2c2939f7c55a6d60a2e6c640b30790f7fa5c158557eab1ecc5", 0xb1}, {&(0x7f0000003700)}, {&(0x7f0000003740)="5f3235411d5f8a217d3fecd22fda8ce0331a1cc084cbc2494eea", 0x1a}, {&(0x7f0000003780)="5c2418a914a35d85d430c2a69c727d0688de33869deb4301b0b89c3772913ce0eeceea5388a6da4a56f9e194a755c39236f5c98e347253386adb09b033bd76656e032f93042e3ac711c138380093c693686ad9b18569bd1ba6482c012e6928a4351824757045b21eb38a65feaf4ca6ea6b04c44b6ffdfc5028229eee5c05e8df2c14972cf687ffee383a162db0d5d9f19d1e08d2a58fabdaad0c959d120c78faff7f53e3cd2db1f2e2a9e4e00cd98b3eeec4f586952770dcb392aeb72b8f1e93b17909cf", 0xc4}, {&(0x7f0000003880)="c9092b5191cdbda0d88ed1b76c035c3d2302a5a2f867b880321c9354bdbfd49d37e7ab01798adf5be6180b46be28cc8c42ebf89cbad9fc43c6f0a8ba512785c7b81019cf35e6845ba52719008a7047cb9f03fc5b4232ab9ea16a9c9fe0200252022db2fae221dc9437c59e28ca0dc4cc97e11dfcfd578513e9f7313602d755ef6edbf78a3dd9b39eff9fd090ef165bbd55aec74a463fe850a18155d234dc102d6130cf9321030350ba320cccb0f639252b074013964a08ad2d56ec80", 0xbc}], 0x7, &(0x7f00000039c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="00a40800"], 0x38, 0x20000000}], 0x5, 0x24004000) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000003700)=0x6, 0x4) syz_mount_image$cifs(&(0x7f00000024c0)='cifs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002400), 0x11000, &(0x7f0000000140)='user(}t\x00') unlink(&(0x7f0000000040)='./bus\x00') recvmmsg(r0, &(0x7f0000006940)=[{{&(0x7f00000018c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003bc0)=""/80, 0x50}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/184, 0xb8}, {&(0x7f0000003dc0)=""/77, 0x4d}, {&(0x7f0000003e40)=""/230, 0xe6}, {&(0x7f0000003f40)=""/3, 0x3}, {&(0x7f0000003f80)=""/83, 0x53}, {&(0x7f0000004000)=""/128, 0x80}], 0x8, &(0x7f0000004100)=""/107, 0x6b, 0x1}, 0x1}, {{&(0x7f0000004180)=@can, 0x80, &(0x7f00000054c0)=[{&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/29, 0x1d}, {&(0x7f0000005240)=""/131, 0x83}, {&(0x7f0000005300)=""/20, 0x14}, {&(0x7f0000005340)=""/122, 0x7a}, {&(0x7f00000053c0)=""/50, 0x32}, {&(0x7f0000005400)=""/153, 0x99}], 0x7, &(0x7f0000005540)=""/181, 0xb5, 0x7}, 0xff}, {{&(0x7f0000005600)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/159, 0x9f}, {&(0x7f0000006740)=""/65, 0x41}, {&(0x7f00000067c0)=""/49, 0x31}], 0x4, &(0x7f0000006840)=""/232, 0xe8, 0x2}, 0x8}], 0x3, 0x40000100, 0x0) 2033/05/18 03:36:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:36:59 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x6b21, 0x6}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x9, 0x5, 0x7fff, 0x20}, 0x14) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80802, 0x0) write$cgroup_int(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="3d48ae017436eb8a0b054d0ee8300e6ff22355d322de607638d2672436ae1d9e34fd370820c7c1cb85e8994134d9ea1c340812dad2ef47722d2822f54c997055a174137ec5a6"], 0x1300) pselect6(0x40, &(0x7f00000000c0)={0x7, 0x3f, 0x8, 0xc9, 0x2, 0x3, 0x8, 0x8}, &(0x7f0000000140)={0x4b8e, 0x5, 0x6, 0x9bd, 0x4, 0x401, 0x7, 0x8}, &(0x7f00000001c0)={0x101, 0x0, 0x5, 0x8, 0x9, 0x10001, 0x100000000, 0xd294}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={0x7fffffff}, 0x8}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x528, 0x118, 0x3a0, 0x118, 0x2a0, 0x2a0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, &(0x7f0000000440), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xd}, @empty, 0xffffffff, 0xffffff00, 'syz_tun\x00', 'veth0_to_team\x00', {}, {}, 0x1d, 0x2, 0x34}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x1f, 0xef6c}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3f}}}, {{@ip={@loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffff00, 0xff, 'bridge0\x00', 'vlan0\x00', {0xff}, {}, 0x67, 0x3, 0x25}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@ip={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffff00, 0x0, 'dummy0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0xff, 0x1, 0x10}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x3f, @multicast2=0xe0000002, 0x4e23}}}, {{@ip={@empty, @empty, 0x478a35cb9af52e94, 0xff000000, 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x7f, 0x1, 0x18}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x4, [0x9, 0x7fff, 0x100, 0x0, 0x4b21432f, 0x97c0000000000000], 0xada00, 0x3, 0xfffffffffffffff7}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3f, 0x3}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x7c3, 0xffff}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x3ff, 0x3}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x588) ppoll(&(0x7f0000000180)=[{r2, 0x8600}, {r2, 0x100}, {r2, 0x2400}, {r2}], 0x4, &(0x7f00000003c0)={r3, r4+10000000}, &(0x7f0000000400)={0x4}, 0x8) 2033/05/18 03:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x470e0000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) timerfd_gettime(r1, &(0x7f00000000c0)) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffff8b, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:36:59 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x7fff) r1 = memfd_create(&(0x7f0000000000)='@trustedposix_acl_access\x00', 0x1) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000200)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0xfffffffffffffffd) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a80)="880f", 0x2}], 0x1, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="d09a", 0x2}], 0x1, &(0x7f0000000280)}, 0x0) [ 834.688718] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:36:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="36de45fdc34072aad276faf792bee95765b3ddb7dd83663f5702a9943dfcb95618111b04d01d8ea5c48f94ad8751f18ce842728c76a033a2e3f83b295dec4cb5d43e4c441937c3c8808a8f027b9ac77eb93276ebd467ff742bb6a1be734461f584", 0x61, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") keyctl$setperm(0x5, r2, 0x22000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000073, 0x101, 0xc0010004]}) 2033/05/18 03:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:36:59 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x33fe0}], 0x1}, 0x0) 2033/05/18 03:37:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000000140)=""/101, 0x65, 0x120, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x18800) getdents(r1, &(0x7f00000000c0)=""/34, 0x22) [ 834.877941] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 834.941181] kvm [20969]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x0 2033/05/18 03:37:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6c00}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:01 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x7ffff000}], 0x1}, 0x0) 2033/05/18 03:37:01 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x6, 0x4) r1 = socket(0x9, 0x3, 0x5) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f00000000c0)="aca833650519e37004edfd1c9ee74fed601ea718d1eb9b23d6481cddb3fe1ab08c70d45a9ae9122aa96531d7a019cb3c35eb7325daed31e8c3abeede5c68ec041ac23a007c8b3c6e5da6525589215e97847e2f3df8d3a91f972e6c8d4b4a156f28a880df71a16d9e97dbcd95754c2cb658f637275bda88913c1cb960abcb6fdf268d3795e2b707f554b3ccea48b4dd886f1bfd9f628fd957a596e08a6eeb1755b550d326428c781db2ba67", 0xab) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 2033/05/18 03:37:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0xffffff8d) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x65, 0x120, 0x0, 0x0) accept$packet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', r1}) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:37:01 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cd9ff4)='/dev/rfkill\x00', 0x0, 0x0) getpeername$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000084fffc)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cba000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000200), &(0x7f0000000100)=0x2b9) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="05000049a758fc8c5ed9fe820bad"], &(0x7f0000000080)=0xe) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) 2033/05/18 03:37:01 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) shutdown(r0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") recvfrom(r0, &(0x7f0000000000)=""/109, 0xfffffffffffffff8, 0x0, &(0x7f00000001c0)=@ax25={0x3, {"468f6d2031a862"}}, 0xffffffffffffff89) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r2) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@multicast1, @multicast1, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x1e}, @remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, 0xffffffffffff0000, 0x1000, 0x80, 0x100, 0x1, 0x200000, r3}) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x400042) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000000c0)) 2033/05/18 03:37:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000cc0)="f3dfddeb711027f9af501168347a8a2410ff42f80700000000000000f6771e53eeb00de995469816c32eec0c64c1e057b53094aede48876bf434f3db1b3d47fd88bb9e54d01a25eee35c34460dbc7c806ff69a1b9168a9b5ececf4cd6542b747eb11c4875ab2768858b253005fb1571fe81759", 0xfe6d, 0x20008005, &(0x7f0000000d40)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f0000000c80)) sendmmsg$nfc_llcp(r1, &(0x7f0000000bc0)=[{&(0x7f0000000140)={0x27, 0x0, 0x2, 0x5, 0x1, 0xffffffff80000001, "c3e17ed5d36fe89db29f6ac7dd0196ac740d81d9d87457ad6bd08e8157ba2f6e8b346afdc7303fed9aaed3e35e551d54d9483bc303db4df24cd4035ad44031", 0x3d}, 0x60, &(0x7f0000000640)=[{&(0x7f00000001c0)="f3bd87253226d30deb85c96d24b2ae8ef46b8818ed4e4eb8ec1844c67588a00ea050eb80b3727027a843c533880a9f1a0cd4bfc3a75d762b4b80a3bc2aa051d1cb5b2fda31a86f4b7d99d5534ba138cbbef8ec8bb47636e1789bca", 0x5b}, {&(0x7f0000000240)="c28ae75963c8e5032f5fce101ddb37559fd06ea86928b6e43b4779109e5f0180160ba738de542b56a723eaaa16f6dfebd2df7b2259296c9b944518c1cbd370e4466a4fe34980aa840e2a47016051087ed8e113c3088f0e7ad2f067a0531146553fba01764f8ee7436eaecda3b8cdd59066247e518eee77e834bf9091c9ec55921b0b0ef03ef5722aacc7594dd2cd226507a1215d0f66e552d611050a90e4e926b999924df1e27740eb503e51a1ccdb8bfaeb645104e8", 0xb6}, {&(0x7f0000000300)="6e1b06a032aefb700053b1dd177b863a561e38b9e83617f9d3321682bc09ed8be41cab0a2f3041f59aa4dd71e47387c30f483897b80d695183ff02b7c6394ded90ccf4b9004dac71ddc500acc875573b4e48343511d4c161345f862911c8450109cc67bd8ea269a677f1831bc542ee468504a2f2d9381817ec829b6e4d8f77faffb655ec8637327c6c90d76bff529523b58e5893dfeb359451f226264b33817e981a7bd2214cfb87a1fec65c1647ecd3e40133ee0803783275fdda7c5ee116d3a4d48cb34e4435d4de19f4cd9f1cb973736c1ed875004f82cb67ae2651fb738b9fb2811d702e0ff55dcb047453aefcdc51", 0xf1}, {&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000000500)="82b5e6b4e26e78ade8d7718f0c036229cfcdb91d4e37d08338f4f26564abbbd69475e4f2cceda407076ff2e92bf233b4fa2119ab5900779ea27bd59efd76dec47f08c3127b3a474b06ea5a1ddc2b3bf23e53ad4386d92f18edb6d5dae295ed7e341934c3d2ad7a75caf3ab30f7a99fddd98fc63eea287edd72b2d148d1e7ba", 0x7f}, {&(0x7f0000000580)="c4c2c01d8391d11d7c18c5bce0021c60d31e3ba4dac4b6c5182404e1cc624df994f4480830ffe7e6b86c76132feb1552ec5d03343b6e4c6099b5e41745afc755548ecc18c81fb3d656a5625d523332407d4524b93a17ff198cdc2a6c727313b12cbc50ec0a66217011da8c8348488436744c7b05daddaa9b988bc43ba08d2f6ddc121e0cd5e17a35881441972b297b179d31b9d52f6a004ee69ecea653ef350dd100a82551b003f935ce6fc446c28e7b68029841102278e520", 0xb9}], 0x6, &(0x7f00000000c0)={0x10, 0x3a, 0x7}, 0x10, 0x90}, {&(0x7f00000006c0)={0x27, 0x0, 0x2, 0x7, 0xb5f8, 0x100, "832d5492494dc5e96291afecc46f0066f41fda5ff7b0eea5207153b46bbafb857e6d2fe50382da0add48dd1b5b4745c59ac91282960ee0f95209d67920142a", 0x23}, 0x60, &(0x7f0000000880)=[{&(0x7f0000000740)="c5ab2cb5ff9b60d6f0a5d786a2adcd6ccc532118f8a854525c89db46f11168b519567b77efceeba571f2efa77b65", 0x2e}, {&(0x7f0000000780)="ac8a3404f65cbfd0617ce0e6816d1f8a2f5fd12aab0968ed81a93a3ddf5db060d4e75b1cc7a7998904e3067c5e76d8996ed59d2fc962da597ec9c9672ed105595d8dce53737f", 0x46}, {&(0x7f0000000800)="6be3d1f62ed43f42166b873f4f7e80850ae7a54370402a2d3f5bb0b89400f960b4942a9d073de5e7845521a4ec786d1f49e66c4ffb5732141b61fad1d3b5f7e5fdd89c0b9c370a5efc422f9e694c50", 0x4f}], 0x3, &(0x7f00000008c0)={0x90, 0x1ff, 0x500, "a078dad796526a7abe6fca922f39034990e9692c4f88c464fb2509574e869873dd50ecb1affc97cf2cec6c669f4843762f97836167cbfcdaf6a3d554dd74f09d2e9000047f1f7f3e142509d3136118151da65fd7c22ee5cedf125b7a0c2ebec3ac96ca6b322aa46ab06b0167435554c5aa8510e66954d7f6a5730116c15b55"}, 0x90, 0x88c4}, {&(0x7f0000000980)={0x27, 0x0, 0x2, 0x6, 0x7, 0xff, "40c78630440cbbcfdc5d4f45511ca3efcf88d4b5f5d186ec7f201bdcc3b804965045c36dd673d3a1ff7e82736dfbc5ed4dcd67900a5002bb9bb9fca519b2e9", 0x2d}, 0x60, &(0x7f0000000b00)=[{&(0x7f0000000a00)="edbca0313f2d6c077661f7c7b92c13b70a64b03675979cd4054dc7a1d06171c2d229d1ff5d9477ae68b4fb926b8d2a1393b368f95ab2326db1316f9342e746aa05be1cb9d962c2db61281b35cb70cac2e1d126512d8d89e2674454436910778e87b0f32440f191c991c3cf99e0864402aae1b1cc0c2eacfb6ea3bfd1c988d52e2dd94c2b7dad41298c159186c1199a917811ee971983235a739c77974cfa230b7f227897899e37d1f74920e15977f316eedf04c76686ba4822bd4ea1144a8d49fe6a0a73971c6a8df09d875692c1eca251497dd975b1edcd9bd8f1c2379e0bc3cbddd17bb0aa14205df7df4d71ba794fff76571ce14299f5b6b0a7c00fd3", 0xfe}], 0x1, &(0x7f0000000b40)={0x70, 0x13e, 0x9, "2eabb79c2cc2fbe247abb4ab57f5e17dd2a0d156274a8fdd75d148546806472855648b0fc9100fb984b3b51b9ae1211bdc51fa790eeae67c14bcad0441662854901b8352473cc87bb61c926144ad7945b0416a0cf931265a2d"}, 0x70, 0x8010}], 0x3, 0x200048d0) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 836.276178] validate_nla: 12 callbacks suppressed [ 836.276186] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 836.308756] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:01 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:01 executing program 0: prctl$void(0x1e) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x8d3, 0x4, 0x100000001, 0x3f}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x401}, &(0x7f0000000100)=0x8) 2033/05/18 03:37:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40284504, &(0x7f0000000040)=[0x8000000000000000]) 2033/05/18 03:37:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0xc0}], 0x1}, 0x0) 2033/05/18 03:37:01 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getcwd(&(0x7f0000000000)=""/62, 0x3e) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x7592da07}}, 0x14}, 0x1}, 0x0) [ 836.424432] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:01 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="3271c3f87471a9679cf2ca4e5079ca827ed834cc5b7b361d61f117acc910575369600c84026297f2c428647604e7c2506c3f8b51dd80fd96ae45bd85fbd5ac602945c8b392ef19310a78fbf28f3e04947a78ab0812d4032482ea6867540574a48bbf3a79c8349f7d1a18424107ba8200b5943af00d", 0x75, 0xfffffffffffffffb) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f00000003c0)="e6d825f5be95cab1010c", 0xfffffffffffffe56, 0x14, &(0x7f0000db4ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0xfffffffffffffd3f) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x800}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r4, 0x3}, 0x1) fchmod(r1, 0x1) sendto$inet(r1, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:37:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x4, 0x4]}, 0x8) keyctl$invalidate(0x15, r0) keyctl$setperm(0x5, r0, 0x0) [ 836.505841] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:02 executing program 3: clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000c8c0)=[{{&(0x7f000000b1c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f000000c840)}}], 0x1, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x10000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x7, 0x1f, 0x401, 0x0, 0xda5, 0x5}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r1, 0x40086607, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 2033/05/18 03:37:02 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600000000000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:02 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000040)=""/104, &(0x7f0000000100)=0x68) write(r0, &(0x7f0000000200)="7677f4d7308fc05f33a9cde1556ab23a541af26b8c80130ec32e5ca09355af5d4961ffb1dcb0d5468f96c4c9beb6c85f605e6ee5ee4377e397f0e763603e65f122746867b986ab689cd9ffbc4d0127ba41f3387d033725d6c89e7e30d1dfbdf0700103dcd31fcf33d37d0cd632fffd160a557b039c4d3432024abeff1cf30b6183d81697de489d9f507c2d99fbc77228216ae02aacfc0595af23536dcbca6f9f23eafea08e5b338fd3b492c8d117c83f141572a6f22307ed966532385fba5f69f2b92a1275ab97a53e358c6eb819c0999032be21e626fc3930527cbac9b6407547f7a8c98233c1a766133d1428e10e8300", 0xf1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) ftruncate(r0, 0x7fffffff) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) ioctl$VT_DISALLOCATE(r0, 0x5608) 2033/05/18 03:37:02 executing program 0: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local}, &(0x7f0000000080)=0x8) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}, 0x1}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x5, 0x4) recvmmsg(r1, &(0x7f000000a040)=[{{&(0x7f0000008640)=@nfc_llcp, 0x80, &(0x7f0000008780), 0x0, &(0x7f00000087c0)=""/165, 0xa5}}, {{&(0x7f0000008880)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001580), 0x0, &(0x7f0000009f40)=""/253, 0xfd}}], 0x2, 0x0, 0x0) 2033/05/18 03:37:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008005, &(0x7f0000000080)={0x2, 0x1004e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:37:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0xf}], 0x1}, 0x0) 2033/05/18 03:37:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 837.498611] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 837.511602] netlink: 192 bytes leftover after parsing attributes in process `syz-executor0'. [ 837.519513] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:02 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:02 executing program 7: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1}, r3, 0x800000000000000, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r4, 0x1}, &(0x7f0000000240)=0xc) 2033/05/18 03:37:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 837.562100] netlink: 192 bytes leftover after parsing attributes in process `syz-executor0'. 2033/05/18 03:37:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0xec0}], 0x1}, 0x0) 2033/05/18 03:37:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:02 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clock_gettime(0xfffffffffffffff9, &(0x7f0000000140)) r1 = add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 2033/05/18 03:37:02 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) munmap(&(0x7f00004b4000/0x1000)=nil, 0x1000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) r1 = socket(0xd, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x0, &(0x7f0000000180), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(0xffffffffffffffff, &(0x7f0000000280)=""/100, 0x64) read(r0, &(0x7f0000000400)=""/100, 0x64) 2033/05/18 03:37:02 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 837.689695] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 837.715587] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:03 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2}}}, &(0x7f0000000180)=0x98) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000200)={{0x2, 0x1, 0x8, 0x0, 0x4}, 0x6, 0x8001, 'id1\x00', 'timer0\x00', 0x0, 0x7fff, 0x9, 0x70, 0x5}) 2033/05/18 03:37:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x2}, 0x0) 2033/05/18 03:37:03 executing program 0: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000200)=@nl=@unspec, &(0x7f0000000280)=0x80, 0x800) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@int=0xf77d, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) bind$ipx(r1, &(0x7f00000001c0)={0x4, 0x2, 0x4, "7a109f36a296"}, 0x10) getsockname$packet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in=@loopback=0x7f000001, @in=@multicast1=0xe0000001, 0x4e23, 0x3ff, 0x4e22, 0x3, 0x0, 0x0, 0x20, 0x2f, r2, r3}, {0x1f, 0x6e1, 0x80000000, 0x7, 0x10000, 0x1, 0x4, 0x1}, {0x7, 0xffffffffffffff3d, 0x8, 0x1}, 0x101, 0x6e6bbb, 0x0, 0x1, 0x2, 0x3}, {{@in6, 0x4d2, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3507, 0x3, 0x3, 0x8, 0x5, 0xc3, 0x1}}, 0xe8) r4 = socket$inet6(0xa, 0x202000000802, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={{0x63d000000, 0x8, 0x0, 0x1, 0x4, 0x9}, 0x3d09, 0x80000000, 0x0, 0xe436, 0x0, "ec21cb4ee2aa595eedf8085fd67e72d0ef0aa87f48b5f8e3ba4a2fb8d1ed2bedf86313968c531f50fa9e933077d263e04058bbd76cd728298f4260b7fc2fd78fd9c4c2ddf38afc9aef864e7825ab32a0cae0c7298582c18a143569e082189c8d6a84b9ae6448f9a8d3ffe910bc9f2d418476d74dc8175a9794167f8a64131663"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r6 = socket$inet6(0xa, 0x802, 0x0) dup2(r6, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 2033/05/18 03:37:03 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x9}, 0x11) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x7}, 0x10) fcntl$getown(r0, 0x9) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x620000, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xffffffffffffff9c, 0x0, 0x1, 0x9fb, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'ipddp0\x00', {0x2, 0x4e21, @multicast1=0xe0000001}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x7f, r2, &(0x7f0000000180)="4af37e0aca0788458988af7d47151cda5d65e52e9372e891be51a0540f8e688422527f3850c5e7b48a7eb3988923ce8250664abbafe066609dd77b9e3e922fc14e0671158847f1abe1748f9ac118607460fe897228dd3704fe01b78aa082faa58193ed229bf45c3f8eb771f750277c0ad6758063e0788e9b7d911fec92042ba22d27c79dad571bc0861fa40631357694843a4ffc6883", 0x96, 0x4, 0x0, 0x0, r2}, &(0x7f0000000280)) 2033/05/18 03:37:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x4475fb6ebad09480, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xe3c7, 0x448000) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x6001, 0x6, 0xfff, 0x8}) 2033/05/18 03:37:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 838.778844] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 838.787364] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 838.792319] sctp: [Deprecated]: syz-executor7 (pid 21127) Use of int in maxseg socket option. [ 838.792319] Use struct sctp_assoc_value instead 2033/05/18 03:37:04 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x5, 0xaa5, 0xc146, 0x101, 0x0, 0x9, 0x80004, 0x2, 0x8001, 0xfff, 0x7, 0x0, 0x7, 0x1, 0x9, 0xffffffff, 0x6, 0x5, 0x1000000000000000, 0x5, 0x0, 0x2, 0x1f, 0x1ff, 0xdc5, 0x6, 0x280, 0x0, 0x0, 0x8, 0x6, 0x5, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x99, 0x3, @perf_config_ext={0x4, 0x4}, 0x10801, 0x10001, 0x5, 0x0, 0x4, 0x8000, 0x2}, r0, 0x9, r0, 0x2) perf_event_open(&(0x7f0000000100)={0xfffffffffffffffe, 0x70, 0x0, 0x3, 0x7, 0x9, 0x0, 0x5, 0x8000, 0x1, 0x3, 0xe000, 0x1, 0xbe, 0x16, 0x5, 0x80, 0x5, 0x51, 0x4, 0x5, 0x66, 0x7, 0xa54f, 0xfffffffffffffffb, 0x4, 0x8, 0x3ff, 0x7ff, 0x20, 0x1f, 0x9, 0x1, 0x10000, 0x7f, 0x3ff, 0xfffffffffff6ffff, 0x4, 0x0, 0x300000000000000, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x1000, 0xfeb, 0x1, 0x7, 0x0, 0x36, 0x3}, 0x0, 0xb, r0, 0x1) ioctl$EVIOCGPROP(r0, 0x4004743d, &(0x7f0000000180)=""/246) 2033/05/18 03:37:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e20}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2033/05/18 03:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xba0e000000000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:04 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 838.873086] sctp: [Deprecated]: syz-executor7 (pid 21137) Use of int in maxseg socket option. [ 838.873086] Use struct sctp_assoc_value instead 2033/05/18 03:37:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x8}, 0x0) 2033/05/18 03:37:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [0x40000003, 0x1]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000100), &(0x7f00000000c0)}, 0x20) fsync(r4) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'speck64-generic\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xf, 0x4, 0x81000000004, 0x8000000007}, 0x2c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xdd, 0x4, 0x6, 0x0, r6}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000040), &(0x7f0000000140)=""/114}, 0x18) [ 838.971655] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) getsockopt(r0, 0x5e, 0x8000, &(0x7f0000000080)=""/116, &(0x7f0000000140)=0x74) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 839.041663] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:04 executing program 3: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0x50, &(0x7f00000001c0)}, 0x10) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000180)=@req={0xff, 0x0, 0x3, 0xfff}, 0x1b4) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x878c, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a151f323130fc093a52a7d86bd1be078254fd04cfdf", 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f00000000c0)={0x9ced, 0xc452}) 2033/05/18 03:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6c000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r1, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f0000214000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f0000414000)}, 0x0) shutdown(r1, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4a4200, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x7, 0x4) shutdown(r1, 0x1) 2033/05/18 03:37:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1500}, 0x0) 2033/05/18 03:37:04 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:04 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x81, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000340)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) capset(&(0x7f0000000200)={0x20080522, r2}, &(0x7f0000000240)={0x0, 0x3, 0x1, 0x7ff, 0x100000000, 0x3}) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x27a) sendto$inet(r1, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r3 = dup3(r1, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r4, 0x7fffffff}, 0x8) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x507) 2033/05/18 03:37:04 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x16, 0xfffffffffffffffc}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 839.199721] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 839.225376] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb90e}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:04 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 839.301312] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:37:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xec0}, 0x0) [ 839.342860] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000001a00)='/dev/sg#\x00', 0x200, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={0xffffffffffffff9c, 0x2, 0x1, 0x9, &(0x7f00000018c0)=[0x0, 0x0], 0x2}, 0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000001940)={0x0, 0x1, 0x2, 0x8001, 0x81, 0x5}, &(0x7f0000001980)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000019c0)={r3}, 0x8) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r4, 0x0, 0x0, 0x73e0) sendfile(r1, r4, &(0x7f0000000000), 0xffa) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001840)={0x53, 0xffffffffffffffff, 0x97, 0x6, @scatter={0x9, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000080)=""/228, 0xe4}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000600)=""/72, 0x48}]}, &(0x7f0000000740)="e4006b1dea441c4eb9745b9e999805ce4ae4861001070655d17eca8cad61dcbee8d4f82456cbb8f272914ba50cd4c3963fb58f4f19a37dc300edc13ba37f788add512d3ca132225f2531d50dfbd15bbed45b20ff1d5fa5d6d742a494705861c42b584fb0f22a8f2590373a276f707fe8ac4af756a2dafc4be3bd39a962c4fdb0f78f5cbc563c19df650f7fb0b6b6db08a6bb11644a9327", &(0x7f0000000800)=""/4096, 0x1f, 0x10, 0x3, &(0x7f0000001800)}) 2033/05/18 03:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00e}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:04 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'veth0_to_team\x00', 0x8}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x400002d, 0x80400) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/16, 0x10}], 0x4, &(0x7f0000000640)=""/48, 0x30, 0x3}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xca}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback=0x7f000001}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8091}, 0x4008011) socket(0x2, 0x1, 0x0) ioctl(r1, 0x8001, &(0x7f0000000240)="e125") io_setup(0x9, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f00000002c0)="41dacb1b88b7514cf21b937d933544cddea13bb8c251106cc9f427a52aac5763a6484c2bf3522df824f6f4aa14d0bd7f0151cfc4ac08", 0x36, 0x5, 0x0, 0x1, r0}]) 2033/05/18 03:37:04 executing program 7: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0xffffffffffffff33) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x1) 2033/05/18 03:37:04 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:04 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) socket(0x1f, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) read(r2, &(0x7f0000000180)=""/251, 0xfb) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000000000000000000000000000000570000000000000000030000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bc4311c8aae4c0858ad5b37a77d9abfeecec3e632e84cdf3c0553643c4cdb1"], 0x78) [ 839.474349] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 839.494449] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:04 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf, 0x0, 0x74, 0x401, 0x2, r0, 0x1}, 0x2c) getrusage(0xffffffffffffffff, &(0x7f0000000100)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4016}) ioctl$TUNDETACHFILTER(r2, 0x800454dd, 0x6f3000) 2033/05/18 03:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x68}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 839.668537] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000140)="b1b2ace640c8e848f1183976b1e32ffd8aab0ae19380065e2a9de45f8edb33a41a0dbc66f78611ae2c66ed7e74deee1d177a485e9380d38b3981358254f0f179d913ce1e3d5c6edb0f2ead2e239b4eb3e038d8cfcd985a995dcfe6614217b957b458833e28938bf062bdbac1d820bd51c7f19b64315db1b8a378eef1b64a54c7f32a0b5eae0b9d5e6557c0f4acfe12eef340839dcda7ec9d43e9e667f7493d047e3f69de85bf6555a4ee84e347dc0920a1478a6c61b1c94db6cee6c90394ee4dfa0e73bf068d9826011b14209355bce4157b50dbef6ef5d9dcaf4564c446cf8001340b9af1a0b1744f5405fedb502f7ba0e6", 0xf2, 0x8001, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x5}, 0x10) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) prctl$setfpexc(0xc, 0x80080) ioctl$int_in(r0, 0xeb1b8c7ca5349c1e, &(0x7f00000000c0)=0x3f) 2033/05/18 03:37:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x34000}, 0x0) [ 840.390285] sg_write: data in/out 220/78 bytes for SCSI command 0x0-- guessing data in; [ 840.390285] program syz-executor3 not setting count and/or reply_len properly 2033/05/18 03:37:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00e}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:05 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:05 executing program 3: r0 = socket(0x1, 0x80001, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8947, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}}) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") io_setup(0x6, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000200)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280)=0x8, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000000), 0x4) io_getevents(r3, 0x1, 0x259, &(0x7f00000001c0)=[{}], &(0x7f0000000240)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) io_submit(r3, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x121}]) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000180)={{0xfff, 0x0, 0x8, 0x8, 0x8000, 0x1ff}, 0x3, 0x1, 0x6}) 2033/05/18 03:37:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x101000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'teql0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'\x00', {0x2, 0x4e23, @broadcast=0xffffffff}}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0xe12134508657614f, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0x7) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001c00070f000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="04000000"], 0x1c}, 0x1}, 0x8000000) 2033/05/18 03:37:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe47}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:05 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28486120}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000028bd7000ffa937aa42f9151c2900010043d0b33a82de494e"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000001180)=""/4096, 0xfffffffffffffc85) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000100)=0x1) 2033/05/18 03:37:05 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 840.496239] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:05 executing program 7: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x98300, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r1 = socket(0x2, 0x2, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0)=0x2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) setresuid(r2, 0x0, r2) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$cgroup_subtree(r0, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}) 2033/05/18 03:37:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000000010000001c", @ANYRES32=0x0, @ANYBLOB="000000efffffffffffffff00"], 0x24}, 0x1}, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x6a) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000200)=0x634) 2033/05/18 03:37:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x0, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 2033/05/18 03:37:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4000, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0xa0) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:37:05 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6000000000000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:05 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) poll(&(0x7f00000000c0)=[{r0, 0x2}, {r0, 0x20}], 0x2, 0xbd4e) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0x3, 0x0, 0x0, 0x2]}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000080)='./file0\x00', 0x25) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x8, 0x4) close(r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'dummy0\x00'}, 0x18) 2033/05/18 03:37:05 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0), 0x4) [ 840.752476] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 840.768411] sctp: [Deprecated]: syz-executor0 (pid 21304) Use of int in max_burst socket option deprecated. [ 840.768411] Use struct sctp_assoc_value instead 2033/05/18 03:37:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xffffff7f00000000}, 0x0) 2033/05/18 03:37:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc1105511, &(0x7f0000000040)={0x9}) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:37:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = accept$inet(r2, &(0x7f00000001c0)={0x0, 0x0, @dev}, &(0x7f00000002c0)=0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000480)={0x303, 0x33}, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0002090005075019e007200100380c07002000000000"], &(0x7f00000000c0)=0x1a) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0x81, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x50}, {0x6}]}, 0x10) userfaultfd(0x80000) sendto(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)=@generic={0x0, "fd040942bbc0987bed83134663536ad4184e3f0efc75576fc176d1c32c4fc29d92453a144e251185da69ceb46c3a72f06266285e394c4b57ae23a573110b41170874b2bf80651065d645b94315ad056afe137d81d6d517014eee9e97429c52f6f291125a5a7a0cec045ae5c25fb4f8d68079d705d3a8ac9d7541b0e9c434"}, 0x80) clock_settime(0x1, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0x2}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000540)={r5, 0x200, 0x7}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) chroot(&(0x7f00000004c0)='./file0\x00') ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x0, 0x38b}) ioctl$int_out(r0, 0x5460, &(0x7f0000000100)) [ 840.810381] sctp: [Deprecated]: syz-executor0 (pid 21314) Use of int in max_burst socket option deprecated. [ 840.810381] Use struct sctp_assoc_value instead 2033/05/18 03:37:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) r1 = dup(r0) lookup_dcookie(0xc34c, &(0x7f0000000000)=""/55, 0x37) setsockopt$IP_VS_SO_SET_ADD(r1, 0x3a, 0x482, &(0x7f0000000540)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'none\x00'}, 0x2c) 2033/05/18 03:37:06 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 840.905212] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x0, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 840.968940] QAT: Invalid ioctl 2033/05/18 03:37:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000335000), 0xfc94) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@loopback={0x0, 0x1}}, @in6=@local={0xfe, 0x80, [], 0xaa}, {@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@rand_addr}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback={0x0, 0x1}}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}]}]}, 0x16c}, 0x1}, 0x0) 2033/05/18 03:37:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40030000000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 840.995519] QAT: Invalid ioctl 2033/05/18 03:37:06 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:06 executing program 3: r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x200, 0x3, 0x7, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e21, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}, [0x57, 0xffffffffffff0000, 0x5, 0x0, 0x9, 0x4, 0x1, 0x6, 0x401, 0x65, 0x400, 0x20, 0x400, 0xffffffffffffffc0, 0x2]}, &(0x7f0000000180)=0x100) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x3, 0x20, 0x8001, 'queue0\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000280)=[{0x8b, 0x7, 0x0, 0x0, @tick, {}, {}, @time}], 0x1c) 2033/05/18 03:37:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xfffff000}, 0x0) [ 841.144688] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 841.592956] FAULT_FLAG_ALLOW_RETRY missing 30 [ 841.597863] CPU: 0 PID: 21311 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #56 [ 841.601086] Unknown ioctl 1080602275 [ 841.605134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.618228] Call Trace: [ 841.620816] dump_stack+0x1b9/0x294 [ 841.624435] ? dump_stack_print_info.cold.2+0x52/0x52 [ 841.629635] ? kasan_check_write+0x14/0x20 [ 841.633862] ? do_raw_spin_lock+0xc1/0x200 [ 841.638088] handle_userfault.cold.32+0x44/0x5a [ 841.642747] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 841.647332] ? debug_check_no_locks_freed+0x310/0x310 [ 841.652510] ? graph_lock+0x170/0x170 [ 841.656293] ? print_usage_bug+0xc0/0xc0 [ 841.660514] ? pick_next_task_fair+0x97c/0x1780 [ 841.665167] ? print_usage_bug+0xc0/0xc0 [ 841.669214] ? get_user_pages_fast+0x2a1/0x440 [ 841.673781] ? find_held_lock+0x36/0x1c0 [ 841.677843] ? __lock_acquire+0x7f5/0x5140 [ 841.682148] ? graph_lock+0x170/0x170 [ 841.685939] ? find_held_lock+0x36/0x1c0 [ 841.689987] ? lock_downgrade+0x8e0/0x8e0 [ 841.694126] ? kasan_check_read+0x11/0x20 [ 841.698260] ? do_raw_spin_unlock+0x9e/0x2e0 [ 841.702653] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 841.707221] ? kasan_check_write+0x14/0x20 [ 841.711439] ? do_raw_spin_lock+0xc1/0x200 [ 841.715665] __handle_mm_fault+0x38d8/0x4310 [ 841.720067] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 841.724807] ? graph_lock+0x170/0x170 [ 841.728683] ? find_held_lock+0x36/0x1c0 [ 841.732731] ? lock_downgrade+0x8e0/0x8e0 [ 841.736955] ? handle_mm_fault+0x8c0/0xc70 [ 841.741176] handle_mm_fault+0x53a/0xc70 [ 841.745220] ? __handle_mm_fault+0x4310/0x4310 [ 841.749787] ? find_vma+0x34/0x190 [ 841.753325] __do_page_fault+0x60b/0xe40 [ 841.757373] ? do_raw_spin_lock+0xc1/0x200 [ 841.761602] ? mm_fault_error+0x380/0x380 [ 841.765734] ? graph_lock+0x170/0x170 [ 841.769546] do_page_fault+0xee/0x8a7 [ 841.773343] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 841.778527] ? vmalloc_sync_all+0x30/0x30 [ 841.782660] ? find_held_lock+0x36/0x1c0 [ 841.786710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 841.791541] page_fault+0x1e/0x30 [ 841.794989] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 841.800606] RSP: 0018:ffff8801d01ef810 EFLAGS: 00010202 [ 841.805953] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 841.813205] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801d01ef8b0 [ 841.820470] RBP: ffff8801d01ef848 R08: ffffed003a03df17 R09: ffffed003a03df16 [ 841.827724] R10: ffffed003a03df16 R11: 0000000000000003 R12: 0000000020013004 [ 841.834977] R13: 0000000020013000 R14: ffff8801d01ef8b0 R15: 00007ffffffff000 [ 841.842250] ? _copy_from_user+0x10d/0x150 [ 841.846473] evdev_do_ioctl+0xb8f/0x21c0 [ 841.850522] ? lock_downgrade+0x8e0/0x8e0 [ 841.854657] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 841.859833] ? str_to_user+0x90/0x90 [ 841.863529] ? do_futex+0x249/0x27d0 [ 841.867226] ? rcu_is_watching+0x85/0x140 [ 841.871355] ? graph_lock+0x170/0x170 [ 841.875139] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 841.880321] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 841.885497] ? exit_robust_list+0x290/0x290 [ 841.889822] ? find_held_lock+0x36/0x1c0 [ 841.893878] ? lock_downgrade+0x8e0/0x8e0 [ 841.898034] ? kasan_check_read+0x11/0x20 [ 841.902166] ? rcu_is_watching+0x85/0x140 [ 841.906300] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 841.911493] ? __fget+0x40c/0x650 [ 841.914940] evdev_ioctl_handler+0x144/0x1a0 [ 841.919335] evdev_ioctl+0x27/0x2e [ 841.922865] ? evdev_ioctl_compat+0x30/0x30 [ 841.927175] do_vfs_ioctl+0x1cf/0x16a0 [ 841.931049] ? rcu_pm_notify+0xc0/0xc0 [ 841.934927] ? ioctl_preallocate+0x2e0/0x2e0 [ 841.939324] ? fget_raw+0x20/0x20 [ 841.942757] ? putname+0xf2/0x130 [ 841.946196] ? rcu_read_lock_sched_held+0x108/0x120 [ 841.951199] ? kmem_cache_free+0x25c/0x2d0 [ 841.955417] ? __x64_sys_futex+0x477/0x680 [ 841.959636] ? do_futex+0x27d0/0x27d0 [ 841.963420] ? security_file_ioctl+0x94/0xc0 [ 841.967826] ksys_ioctl+0xa9/0xd0 [ 841.971274] __x64_sys_ioctl+0x73/0xb0 [ 841.975148] do_syscall_64+0x1b1/0x800 [ 841.979037] ? finish_task_switch+0x1ca/0x840 [ 841.983518] ? syscall_return_slowpath+0x5c0/0x5c0 [ 841.988432] ? syscall_return_slowpath+0x30f/0x5c0 [ 841.993358] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 841.998709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 842.003547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 842.008718] RIP: 0033:0x455a09 [ 842.011888] RSP: 002b:00007f6d7fd1fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.019578] RAX: ffffffffffffffda RBX: 00007f6d7fd206d4 RCX: 0000000000455a09 [ 842.026837] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000014 [ 842.034096] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:37:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000300)={0x100000000, 0x7, 0x4, 0x3, 0x2, [{0x7, 0x400, 0x0, 0x0, 0x0, 0x200}, {0x4, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x400}]}) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0xa0, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1, 0x2, [{{0x2, 0x4e23, @loopback=0x7f000001}}, {{0x2, 0x4e24, @broadcast=0xffffffff}}]}, 0x190) 2033/05/18 03:37:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x6c0e0000}, 0x0) [ 842.041352] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 842.048625] R13: 00000000000001fc R14: 00000000006f7040 R15: 0000000000000000 [ 842.066307] Unknown ioctl 1080602275 2033/05/18 03:37:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9effffff00000000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0xff) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020290000000b0000007300000000000400"], 0x18}}], 0x1, 0x0) 2033/05/18 03:37:07 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x0, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:07 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000380)={0x5, 0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0x0, 0x8000}]}) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xe15, 0x8000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) prctl$setfpexc(0xc, 0x160003) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000200)={r3, 0x4}, 0x8) r4 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000300)=0x7, 0x4) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000240)={0x1, 0x5, 0x7}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'veth1\x00', 0x102}) 2033/05/18 03:37:07 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1000024) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x28002, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x20, 0x1, 0xfffffffffffffffa, 0x4, 0x6, 0x8000, 0x1, 0x1, 0x7f, 0xa9, 0x5, 0x1}, {0x400, 0x101, 0x8000, 0x9, 0xd7e7, 0x8, 0x9, 0x9d0b, 0x0, 0x8, 0x6, 0x2, 0xa7f}, {0x7fff, 0xfffffffffffffff8, 0x6, 0x20, 0xff, 0x7f, 0x100, 0x8, 0xb6, 0x3, 0x90, 0x6, 0x1000}], 0x401}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000400)={@empty, 0x0}, &(0x7f0000000440)=0x14) getsockname$packet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x240) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) getsockname$packet(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000740)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000840)={@remote, 0x0}, &(0x7f0000000880)=0x14) accept(r0, &(0x7f00000008c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000940)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000d00)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000e00)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000e40)={@loopback, 0x0}, &(0x7f0000000e80)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000f00)={'vcan0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000001000)=@ll={0x0, 0x0, 0x0}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001080)=""/79, 0x4f}, {&(0x7f0000001100)=""/242, 0xf2}], 0x2, 0x0, 0x0, 0x200}, 0x40010002) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001340)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000001440)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000001a00)={&(0x7f0000002080)=ANY=[@ANYBLOB="50050000", @ANYRES16=r2, @ANYBLOB="000025bd7000fbdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="ec00020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ffffffff38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004001508000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r4, @ANYBLOB="bc000200400001826b0001007072696f726974790000000000e5ffffff000000000000b1eeae18c58f6e9700080003000e000000080004000300000008000600463891cbe2270b68c409f17fa103d0ffffff7f00000000f04c7c54d6a3b7ac9678c10bb76e80900debc7a60277cda4549fb977bffb2c56f634785e16a23fbdbf51a3a26e57e7663f30dae68a9f37cad4cb6e34e7e2f3b987357011f67ff9d2f26c350cfdd106911c373566a612000000", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000010000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000500000008000100", @ANYRES32=r7, @ANYBLOB="f40002007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000004c00040005000808020000000100040804000000e70302060800000001003aff0400000001f82f0702000000f7ff0004be0e000001000700050000000008330409000000000003020200000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="f000020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="880102004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="4000010024000100717565c4665f696400000000000000000000000000000000000000000000000008000300030000000800040000000000080006007715d9c4fed1ad67e4ce85a8a409ade477838d8437ebdf357ce0494dd3389a3db2", @ANYRES32=r13, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000c7cb34d71d50a192000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004001500000008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400ff7f00000800070000000000"], 0x550}, 0x1, 0x0, 0x0, 0x4}, 0x40008c0) [ 842.124337] validate_nla: 6 callbacks suppressed [ 842.124345] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 842.146347] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:07 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:07 executing program 0: r0 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) write$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffff}, 0x111, 0xb}}, 0x20) write$rdma_cm(r1, &(0x7f0000000180)=@disconnect={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) 2033/05/18 03:37:07 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:07 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x7, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), 0x4) sendfile(r0, r1, &(0x7f0000000000)=0x63, 0x80000002) 2033/05/18 03:37:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xf0ffffff}, 0x0) 2033/05/18 03:37:07 executing program 3: socketpair(0x0, 0xb, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) accept$packet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={"77797a5f74756eb921f9848000", r2}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000c3bff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x1000, 0x4f42}, {0x80000006}]}, 0x10) sendto(r4, &(0x7f000002af28), 0xfd09, 0x0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r7, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) sendto$inet6(r6, &(0x7f0000000000)="1f1bc61dd4cc70fc5622ce596c714aa0a6c120ca3e99307155a2df13bc06647953877022fd506aa4f7532974c02da3b151ae72505e918a33ed60e3dff0f993e6ed7403df67cd85677e72e36e680ecd699493bdea20af4a1adec9ba09cf650d3e071a11157b472e6e7a554bdebc30e5b32ea723698337903769ce391f81f683a11a168d3b4b0df984aa8a3dd124c3d14759b1bbaef26559274feb52d9b1afe9ed9bc11cec3624d2bb71031cee09f4426069fc18c73cdf6ca87a78f5bd37344d9231860b9db4ec65b70ca19eb5c2938a7ecd3179ab3d2a09eb7843a9ffb55f00adfb9b5cd082a62c4521e241da630dfe59445b8c64643588", 0xf7, 0x4000010, 0x0, 0x0) 2033/05/18 03:37:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0xc00, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0xc, 0x91, 0x9, "79109cc5ed1567406ee21511"}) sendto$inet(r1, &(0x7f00000005c0)="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", 0xa2, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0xdedb}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x46fe}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x9ea, 0x101, 0x6, 0x3}, 0x14) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 842.386529] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 842.399200] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10dd}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x438, &(0x7f00001a7f05)=""/251}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7fffffff}, [@generic={0xfffffffffffffff7, 0x7f, 0x80, 0x7}, @generic={0x8, 0x7fffffff, 0x1ff, 0x10000}, @ldst={0x0, 0x3, 0x6, 0x1, 0x5, 0xffffffc0, 0x1}], {0x95}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1e, &(0x7f0000000180)=""/30, 0x40f00, 0x1}, 0x48) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x4040) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2033/05/18 03:37:07 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0xfff, @dev={0xfe, 0x80, [], 0x18}, 0x7fffffff}}, 0x6, 0xffffffffffffffc0, 0x2, 0x1, 0x10}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={r3, 0x9, 0x30, 0x4, 0x7}, &(0x7f00000002c0)=0x18) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) write$binfmt_aout(r0, &(0x7f0000000440), 0x20) 2033/05/18 03:37:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xba0e0000}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:07 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xd71a}, 0x0) 2033/05/18 03:37:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:07 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = socket(0xb, 0x800000804, 0x2000000000001) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x2, 0x0, 0xf9}}) [ 842.577465] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 842.618785] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:07 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f0000000100)="43f4606bc3ff92bcc5841ff5daef9b7e5d0ecdf7dd6a2e4d2006c101cc31c60474cba04eaea199a889b8d249fe70a851849bef220433f3a679130aad2267d211294a4a6b0ff7299622e473c9a68c44909bad0609061c5b903b6b7870743ce609afaba4940d7358a023") r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x1) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='//file1\x00') creat(&(0x7f00000000c0)='./file1\x00', 0x0) dup2(r1, r2) 2033/05/18 03:37:07 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={"76e8616e3000d976fcb2f9ed427800", 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x32b, &(0x7f0000000080)=[{0x34}]}) r1 = syz_open_dev$tun(&(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x20002000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1021}) sendto(r2, &(0x7f0000000040)="0f30388559721f9be7f17fd4066763f877af8e0d5fbbf42858a994", 0x1b, 0x10, &(0x7f0000000100)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x80) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000004c0)={0x9, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x1000000000}, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000580)=0x0) sched_getparam(r3, &(0x7f0000000400)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'gre0\x00', 0x102}) 2033/05/18 03:37:07 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x54, 0x8, 0x4000000000000000, 0x804ec, 0x4000000000000000}) r1 = socket(0x15, 0x80005, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@can={0x1d}, {&(0x7f0000000080)=""/243, 0xf3}, &(0x7f0000000180)}, 0xa0) 2033/05/18 03:37:07 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0x3e0, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) getpeername$inet(r0, &(0x7f0000000080)={0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 842.812447] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x9330}, 0x0) 2033/05/18 03:37:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:08 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, r0, 0x0) exit(0x0) close(r0) socketpair(0x4, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000080)=0x6, 0x4) 2033/05/18 03:37:08 executing program 3: r0 = socket(0x800000010, 0xfffffffffffffffd, 0x7) ioctl(r0, 0x5, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40)=[{{&(0x7f0000000140)=@sco={0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="3f2a3c71c360c461869a4084871935d86fab0d3c49d64da821d21d4711ebd63c1670ea9086c0b73ecc3a3e5812a7d735c8546c0f21aa69083fb436", 0x3b}], 0x100001ef, &(0x7f0000000640), 0xfffffe06, 0x8001}, 0x1}, {{&(0x7f0000000040)=@in={0x2, 0x4e21, @multicast2=0xe0000002}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000840)="7274e32ab70f46354d454b4e315739dee96000fa894cef4ba642240fcfdce006696b0732208f47daf3de35dea5a529d9f9edd212208d4636a5dd7d40dc745678156842c35eb1a9fb2168559cc82d9352006a785962008c83f43ad91e3d0dd24fe9bc", 0x62}], 0x1, &(0x7f0000001140)=[{0x1010, 0x0, 0x7, "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"}], 0x1010, 0x20000000}, 0x9}], 0x2, 0x0) 2033/05/18 03:37:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0x2000000c, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:08 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:08 executing program 7: r0 = socket(0x2000000011, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="029db0a2f8ea00000000000000b80900000091b8755d7abacb9531d189db66fba5c01ae32d985d1c919ca93f4f7d57b25d566da2e05a1b9532af1379f5fe590fadd0cfe609f40c20e2843e81bb4e277731bc6638ad24e8a9fc322c0824b4a9ff844e39486f93c193684c4241c8aa6910f735e9ddfcf501eba7e5b6e159d0deb3b699d125562acb40b2dabcff518fa691a7329e188ad5a440faefca1bec5b7f4491481f9ac573a8a18fdd9ee88207d2f091f2b79bae66ec75", 0xffc6) 2033/05/18 03:37:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_int(r0, 0x0, 0xaa7e41bc37da75d9, &(0x7f0000000180)=0x1b01, 0x4) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) recvfrom$llc(r1, &(0x7f0000000200)=""/45, 0x2d, 0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000380)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000888a247c5fe6af2bea787f4e42f9c2d2624a71ee5d500979e7a1969be13de8af550ddbd9fc647c993249c18b91edfe129dcdfe19eae8c2ea333c0860d77d7cccc5572b"], 0x48) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x5, 0x2, 0x3, 0x1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0x1, 0x1f}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30f) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) [ 843.652954] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 843.665388] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:08 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0x3, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x30) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)=0x3) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffff0, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) 2033/05/18 03:37:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xda04}, 0x0) [ 843.826321] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:09 executing program 7: unshare(0x8020000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="c626262c8523bf012cf66f") shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) setns(r1, 0x0) 2033/05/18 03:37:09 executing program 5: unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendto$inet(r0, &(0x7f0000000000)="8338c1fad0d61f6568738d1b59f46d64e5e8ff8b582b3803e248be97e57ec4fb557595532f428e601b2c831123660725fc8bbca52b054d20832e671607b80a76964a63b75efe25efbe0f335ccde2938a707f61b15cdfd9ae03600270d229a9581d58e0de055f3083c7f7ef7127798510e1214042d687f74714538d3f03815299", 0x80, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:37:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0x51, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:09 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:09 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x40) fchmodat(r0, &(0x7f0000000100)='./file0/file0\x00', 0x87) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000000c0)={0x100001, 0x109080}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) r1 = fanotify_init(0x4, 0x0) fanotify_mark(r1, 0x80, 0x20000, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 2033/05/18 03:37:09 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x40, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x1, 0x10040) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x70, 0x3ff, 0x1, 0xe, 0x10000, 0x0, 0x0, 0x0, 0xf, 0x0, 0x4, 0x4, 0xffff, 0x2, 0x7, 0x0, 0x8, 0xec, 0x401, 0x3, 0x6d8e, 0x8, 0x9, 0x1, 0xfffffffffffffffe, 0x7, 0x100000000, 0x2, 0xffff, 0x8, 0x4, 0x9, 0x800, 0x50, 0x3, 0x4, 0x9, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4, 0x1, 0x3, 0x7, 0xffff, 0x6, 0x6}, r1, 0x1, r2, 0x8) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$packet(0xffffffffffffffff, &(0x7f0000000100)='6', 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @multicast1=0xe0000001}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="69726cbb6e3000"}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)="8ad969bdc8d0403ffc9d", 0xa}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="c4e3b10b510acbdbc70f017ad6c4c1ed15c60f07b8010000000f01d936f30f2c71d1f2ab650f23c80f20e035000002000f22e0", 0x33}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000580)={0x0, 0xcd, "9b334d0df1c25934b9a6b54100970145ba128038f9fc1c138480df206f500987894a49224fcdf8ce1cab3cef6d781496a7fe1d4fb0c5cb54f1222dcce5d923687aea54608a681138a59c4f78e5e5a3af614715aeb385d76438f1484b5dce0534f9b6890f59d386cacde5d6ed6eea4ca984484b5357dfd7042a1a2f8fe04115ef826b8ff6f4ee1bd60a180be381d5bcf560e8b079057ddbbbbd4c8711aec1add6cc9bf11f9d67d9e2d694fd4f93b7857b26f98a6fa866d52449949d331751e87538d82513b6cc7d7a270789b7e4"}, &(0x7f0000000000)=0xd5) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYBLOB="0008eaff06af9e469c8c0cd7bc335ce9ab2cca9cf9aab36b929ec9c1219451bf7f61787714"], 0xa) 2033/05/18 03:37:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xfffffffffffff000}, 0x0) 2033/05/18 03:37:09 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 844.652354] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 844.664265] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:09 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000000)=[{0x3, 0x40, 0x0, 0x7c024994, @tick=0x7fff, {0x3ff, 0x8}, {0x8000, 0x9}, @control={0x3, 0xfffffffffffffffd, 0xa1}}], 0x30) r1 = accept$ipx(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r2 = accept$ipx(r1, 0x0, &(0x7f00000000c0)) ioctl$BLKRRPART(r0, 0x125f, 0x0) r3 = accept$ipx(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f0000000180)=0x6) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000002c0)={0x100000000, 0xbff, &(0x7f00000001c0)="0d19549471cc4e53ff84c078e911059a73d188", &(0x7f0000000200)="16e2cb35a7ee2793d184cb677207fff11b1ee05808b6f4ca1a56940b6726fefd3a4b41391731e317d5b4a1cf68e4dfa969db8eb25c4199fd77e06c3b8a1011beb2ad3c5734f7eb0218a3d8b04132825fe2b5caa046d26828b0dcc9beac5afb687590f0dc4fa9256e62a244df0de01c18a28239b1f6991d0d0ef0fd06c60b5754828085f9f1", 0x13, 0x85}) getsockopt$inet_dccp_buf(r2, 0x21, 0x80, &(0x7f0000000300)=""/217, &(0x7f0000000400)=0xd9) syz_mount_image$iso9660(&(0x7f0000000440)='iso9660\x00', &(0x7f0000000480)='./file0\x00', 0x100, 0x3, &(0x7f00000006c0)=[{&(0x7f00000004c0)="b4a183d41501afac7378f1f708af43984a3904445feeee6d14cfb2250bc51b6eec55fd54c1de6b2813b789a401d7125c00c698f58c7c7e98432484ae4f02a4c5b56432ebe2a158cbf5b2bfecfa9103fdf2626c4c9436aedbb21e487cc5b97473722b562e2761670e27ad9a61087c62554d9d7bbad4a37a22035501d627ac2c52659e87244c6922b8c9ac13598f861c", 0x8f, 0x5}, {&(0x7f0000000580)="e528c1820302c1d52ae5abdb30e0037dfc90479e1188f5f45d590f2f5bffc0f2231af0360c4a52c44cdfa4c7b4c7f3ea913d7720d973eba22024a1f5ba218c8955b32b8abd337f", 0x47, 0xebdb}, {&(0x7f0000000600)="2d2a816691205e4db80cd83b0cd5d184db1bf6c775c056ae850849ac3352fef252c2a37dbb09fa7af2ca4e0685440b473e63d0eb8640449ca7dcf61cfcc62ab957d6b7bf7f608220e5bea257a10fb07dcdff6080888bdbf7795ba4d239f66d40cd25200c1c7713afa7c7b6c285e3f7509c8c3e93fabaa6a5da6da4f6b993ae365e3cfa6a494562a32fa85c06121e3e41d58d6522c1ec282987d4", 0x9a, 0x8}], 0x20000, &(0x7f0000000740)={[{@nocompress='nocompress', 0x2c}, {@map_normal='map=normal', 0x2c}, {@norock='norock', 0x2c}, {@norock='norock', 0x2c}, {@sbsector={'sbsector', 0x3d, [0x39]}, 0x2c}]}) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000780)=""/231) r4 = syz_genetlink_get_family_id$team(&(0x7f00000008c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001e00)={'team0\x00', 0x0}) accept$packet(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001e80)=0x14) accept$packet(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001fc0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000020c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002100)={'teql0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000022c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002280)={&(0x7f0000002140)={0x120, r4, 0x8, 0x70bd29, 0x25dfdbfd, {0x1}, [{{0x8, 0x1, r5}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xff}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000002300)=0x1f, 0x4) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002340)='/dev/sequencer2\x00', 0x40, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002380)=0x400, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f00000023c0)=0x3, 0x4) syz_mount_image$nfs(&(0x7f0000002400)='nfs\x00', &(0x7f0000002440)='./file0\x00', 0x10001, 0x5, &(0x7f00000036c0)=[{&(0x7f0000002480)="f2a91a43c17b8ace2a0a4a565c6d7a8e177553873667974acfda704113086dea29f53d2e12d5d48bdd0edd515d56c62b040d4ee79b8dd7e0a4300d6eb4654a293cba4176d89a698616a2994bcb5a39cd982605e10e74602e7a0b34b6d63c1de52fef8be2ed62c649d60aeb4de7b9e5ba3d36b693e396798a803ac6b9d58564e8adbd0008213c02d17dd51d8408370b62de3bdc1258df89", 0x97, 0x9698}, {&(0x7f0000002540)="415d3994151873f20ad3eb172a8d8e7248cc58d5259324e64da24bfd2218e1b046a6e5b70f8a14c302c6683a1ee6990e12339491714b2adb8d62ed7ea3e3230acdfb8b6fcf9e11c63441a36f66d2d9745b328b0d1175f03db3739f6a0c", 0x5d, 0x7fff}, {&(0x7f00000025c0)="ba3e972b59d42a00ac16bd12b636bad52a3195e1cdd03954be161b55094d42dd0d71b774d12ad4c23ecc26235f8674757903333a15ef6f9b979cb86a300fd3c3b75eb43fcced3bcdbfb11ffacd6cfe02ffbe6c3914242402a5b86d607071e65546473c4fd2a8ed1289600316849cfe03cc61fbd0391ab1aaafcb5b8a703bee60e55bf97235575f849f1bd322bf73c57bff40cd407c2a54b21767bbacf0c1ed6b80a7", 0xa2, 0x3}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680), 0x0, 0x3}], 0x4, &(0x7f0000003740)='nocompress') r11 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r11, 0x3, 0x13, &(0x7f0000003780)=""/137) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000003840)=0x81, 0x4) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000003880)) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000038c0), &(0x7f0000003900)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000003940)={'security\x00', 0x1c, "1dada4e1123b9f9325a0a4e50aff309874d10358535b364094766655"}, &(0x7f0000003980)=0x40) ioctl$KVM_GET_MSRS(r10, 0xc008ae88, &(0x7f00000039c0)={0x2, 0x0, [{}, {}]}) 2033/05/18 03:37:09 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x40) fchmodat(r0, &(0x7f0000000100)='./file0/file0\x00', 0x87) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000000c0)={0x100001, 0x109080}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) r1 = fanotify_init(0x4, 0x0) fanotify_mark(r1, 0x80, 0x20000, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 2033/05/18 03:37:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xb, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xc00e000000000000}, 0x0) 2033/05/18 03:37:10 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000718000/0x2000)=nil, 0x2000, 0x9) [ 844.906977] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:10 executing program 0: syslog(0x9, &(0x7f0000000280)=""/194, 0xe3) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x200) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/77, 0x4d, &(0x7f00000000c0)=""/211, 0x3, 0x1}}, 0x68) 2033/05/18 03:37:10 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet_buf(r0, 0x0, 0xb, &(0x7f0000000080), 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x0, 0x3ff, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000000c0)) 2033/05/18 03:37:10 executing program 5: writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4bab66f2bb3adeab9f4659173864f05f3343738185ccd0e625dd9a65208dfd8c90dc9ce92d965f6a37b4d63823727b86e61ce7e98d99594a3b6e7bd3ef9013792c68ff4ac2ffa00cfc1425de1ba456d1f0f745849dd086d2fea8040888f4c65b384ddd47b716ba6347b379173d052760dd373a59c0e22e98d353061b7ff57ee17a42c100829c66c5e927da82286fe461ecc52ff0f651fc0ff2ded7068817805b6f1e9ba23ee1d5fc7027325bf4ecad875606d63164259c0b3b11115d4bd5d9f159566097bb7874fa", 0xc8}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x80000) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000100)=0x9, 0x4) accept$ipx(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) 2033/05/18 03:37:10 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$evdev(r0, &(0x7f0000000200), 0x20020) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0x5, 0x1}) 2033/05/18 03:37:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 845.081455] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 845.087802] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:10 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socketpair(0x3, 0xa, 0x7ff, &(0x7f0000000080)) mq_open(&(0x7f0000000000)='selinux\x00', 0x0, 0x0, &(0x7f0000000040)) 2033/05/18 03:37:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000060000000000000000000000", 0x10}]) 2033/05/18 03:37:10 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x44102, 0x0) write$vnet(r2, &(0x7f0000001480)={0x1, {&(0x7f0000000180)=""/76, 0x4c, &(0x7f0000001440)=""/39, 0x1, 0x1}}, 0x68) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(pcrypt(rfc4106-gcm-aesni))\x00'}, 0x58) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000000)=""/66, &(0x7f0000000080)=0x42) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') mq_timedsend(r3, &(0x7f0000000280)="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", 0x1000, 0x80000001, &(0x7f0000000100)={0x77359400}) openat$vsock(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vsock\x00', 0x2080, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001280)=ANY=[@ANYBLOB="06000000000000000a004e2202000000fe80000000000000000000000000000d030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e2301000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2303000000fe8000000000000000000000000000bbd10800000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) setsockopt$ALG_SET_KEY(r1, 0x117, 0x5, &(0x7f00000000c0), 0x10) 2033/05/18 03:37:10 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:10 executing program 0: r0 = socket(0x2, 0x1, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x6, 0x183001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0x50, &(0x7f0000000040)}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xfffffeb4, &(0x7f00000001c0)={&(0x7f00000002c0)=@mpls_delroute={0x0, 0x19, 0xda7e9faac679dc9, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x80, 0x10, 0x3, 0xfe, 0x3, 0xfd, 0xb, 0x2000}, [@RTA_DST={0x0, 0x1, [{0xfffffffffffff5b1, 0x101, 0x100}, {0x48000, 0x52, 0x2f8, 0x49d}, {0x9, 0x3, 0x1}]}, @RTA_TTL_PROPAGATE={0x0, 0x1a, 0x6}, @RTA_DST={0x0, 0x1, [{0x7, 0x7, 0xe2, 0x4}, {0x1f, 0x4, 0x4, 0x9}, {0x5, 0x0, 0x8d97, 0x6}]}]}, 0xffffff52}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2033/05/18 03:37:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xc00e0000}, 0x0) [ 845.250824] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:10 executing program 5: socketpair$unix(0x1, 0x5557bf7dd235ff8b, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) [ 845.375317] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:10 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:10 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x401, 0x20000) getsockname$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x75) sendto$inet(r1, &(0x7f0000c95ffd), 0x1c00, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2033/05/18 03:37:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:10 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000196c844b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e000002000000000000000000000000000000c7d02281839a41ae9e6bdfd5b519c49a"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x88012, r0, 0x0) userfaultfd(0x800) 2033/05/18 03:37:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xffffff9e}, 0x0) 2033/05/18 03:37:10 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [], 0x1}, r1}, 0x14) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffff}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x19, &(0x7f0000000180), &(0x7f0000000000)=0xc) [ 845.471264] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:10 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:10 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000000280)=""/165}, 0x18) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) [ 845.512498] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:10 executing program 3: prctl$getreaper(0xb, &(0x7f0000000080)) r0 = syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0x8000, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x808000) write$fuse(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000081ffffff000000000000e3ffffff070000000000000000000000000000"], 0x28) mknod(&(0x7f00000001c0)='./file0\x00', 0xc001, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x141080, 0x0) flistxattr(r1, &(0x7f00000000c0)=""/66, 0x42) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x1}, 0x1) 2033/05/18 03:37:10 executing program 7: r0 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) truncate(&(0x7f0000bec000)='./bus\x00', 0xda) truncate(&(0x7f0000000000)='./bus\x00', 0x5) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x4, 0x11, r0, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000000c0)) mknod(&(0x7f0000000040)='./bus\x00', 0x40, 0x5) 2033/05/18 03:37:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xfffffff0}, 0x0) 2033/05/18 03:37:10 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x4100) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x9a74d598f4c59d26) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x8}}) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000140)={0x1770, {{0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x2}}}, 0x88) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000100)) syz_extract_tcp_res(&(0x7f0000000240), 0x2, 0x20) getsockopt$bt_BT_SECURITY(r2, 0x6, 0x4, &(0x7f0000000000), 0x416) 2033/05/18 03:37:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 845.648538] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:10 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 845.716454] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x7a}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002c0019020000000000000000020000000c0000000800010055000000"], 0x20}, 0x1}, 0x0) membarrier(0x30, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) 2033/05/18 03:37:11 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x87b, 0x3, 0x7, 0x401, "c7081394ccb8ce17bc4db31866a3e50e95d97b6742823bee06d2abef212d559425f420c1acca541ea439a41a", 0x7752}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:37:11 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x108000003) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup2(r1, r0) connect$rds(r2, &(0x7f0000001440)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000100)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) setsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000000300)=0x6, 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40040, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4122, 0xff) write(r0, &(0x7f00000001c0), 0xffbc) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000002c0)=0x4) accept4$unix(r3, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80800) socket$inet6(0xa, 0x0, 0x9) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'bpq0\x00'}}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x5, 0x4, 0x0, 0x2}, 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000340)) 2033/05/18 03:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:11 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt(r0, 0x1, 0x7ff, &(0x7f00000002c0)="33d98aaa4e0b471c7d", 0x9) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x430a00) ioctl$KDDISABIO(r2, 0x4b37) ioctl(r1, 0x8912, &(0x7f0000000100)="c626262c8523bf01acf66f03a6729816477320f7006f682acb7933e47446841024d4c5369403a8a5cfb4324b4dbe19552b3aa50686bf4c82c935dc63c15cfde6a4e04b6a9e68cf") getpeername$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={@local={0xfe, 0x80, [], 0xaa}, 0x1d, r3}) r4 = msgget$private(0x0, 0x512) getsockname$ax25(r0, &(0x7f0000000300), &(0x7f0000000340)=0x10) msgctl$IPC_RMID(r4, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x1000, 0x65, 0x201, 0x449, 0x6, 0x0, 0x9, 0x8, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r5, 0x2d}, &(0x7f0000000280)=0x8) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000380)={0xf66, 0x8, 0x80, 0x1, 0x1f, 0x81}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'bond_slave_1\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}}) membarrier(0x2, 0x0) 2033/05/18 03:37:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x1ad7}, 0x0) 2033/05/18 03:37:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:11 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 845.896110] QAT: Invalid ioctl [ 845.896295] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 845.922324] QAT: Invalid ioctl 2033/05/18 03:37:11 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f"], 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000810000)={0x0, 0x2}, 0x8) shutdown(r0, 0x1) 2033/05/18 03:37:11 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x101400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x100000001}}) 2033/05/18 03:37:11 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x4, @empty, 0x4}}, 0x5e9, 0x100}, &(0x7f00000001c0)=0x90) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000540)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000001580), 0x0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x8004, 0x7, 0x2, r1}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x99c, 0xa, 0x1, 0xea, 0x1, 0x8, 0x8000, r1}}, @sndinfo={0x20, 0x84, 0x2, {0x7fffffff, 0x820a, 0x7, 0x6, r1}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2={0xff, 0x2, [], 0x1}}], 0xb0}, 0x0) timerfd_create(0x7, 0x80000) timer_create(0x4, &(0x7f0000000000)={0x0, 0x3e, 0x6, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3ff, 0x80400) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f00000000c0)=0x1) timer_delete(r2) 2033/05/18 03:37:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 2033/05/18 03:37:11 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000000100f000ee1000c0800060000060000", 0x24) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x3, 0x1}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x200, 0x0, 0x6b, r1}, &(0x7f0000000140)=0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x7) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x101}, &(0x7f00000000c0)=0x8) 2033/05/18 03:37:11 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x44) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0xffff, @loopback={0x0, 0x1}, 0x7}}, 0x4, 0x1, 0x3, 0x1ff, 0x6aae}, &(0x7f0000000140)=0x98) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x400200, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x7ff, 0x9, 0x330, 0xfff, 0x8, 0x0, 0x2, 0x3c3], 0x8, 0x2, 0x7, 0x4, 0x0, 0x0, {0x3, 0x1, 0xc5c0, 0x800, 0x3ff, 0x6, 0x4, 0x7, 0x7ff14e94, 0x8, 0x0, 0x2, 0x100000000, 0x4, "1276845b7132c4c575ab31290e9633561024dc2cca4c2b976b351198b253bd5c"}}) modify_ldt$write2(0x11, &(0x7f0000000240)={0x6, 0x20000000, 0xffffffff, 0x2, 0x0, 0x1000000000000, 0x0, 0xffffffffffff8000, 0x6, 0x200}, 0x10) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000380)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0xfffffffffffffff7, 0x30}, &(0x7f00000001c0)=0xc) 2033/05/18 03:37:11 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 846.149684] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2033/05/18 03:37:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x3, 0x440, [0x0, 0x20000ac0, 0x20000af0, 0x20000df8], 0x0, &(0x7f0000000000), &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]}, 0x4b8) getsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2033/05/18 03:37:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xe6c}, 0x0) 2033/05/18 03:37:12 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2d, 0x8, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) dup2(r0, r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x440000, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000180)={0x20, 0x3, 0x100000001}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/154}, 0x18) ioctl$TIOCNOTTY(r1, 0x5422) 2033/05/18 03:37:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:12 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x208) sendto$inet(r0, &(0x7f0000a63fff), 0xfffffffffffffffa, 0x20020004, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x1, 0x19a) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0xc) sendmmsg(r0, &(0x7f0000000280), 0x71e211e1306406, 0x0) [ 846.960881] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:12 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x3, &(0x7f0000000340)) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) 2033/05/18 03:37:12 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0xb, 0x2}, 0x10}, 0x1}, 0x0) 2033/05/18 03:37:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:12 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x200000000000000}, 0x0) 2033/05/18 03:37:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "804e2486cff9d9266b6504d1017e922724e09f8a6d2cec6c5849cf42d85e7f102204bb458c97a116e92825982da340dec9ee4a6bb74e77d3dd1a52f33ec1748d", "9b0fcdf54d8916989d63700e3a6899a8290800284743b044bf2cf8bdf5c1d14998d5bbac6c4deae26bc26c30222a2d0b5150e643db0873477ebc926e82d8fccc", "73f37038ac9e1afce8d30cfc76d5001a00000000aa8dd98f8db0f64fe0594b51"}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 2033/05/18 03:37:12 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2033/05/18 03:37:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 847.163963] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 847.212462] validate_nla: 6 callbacks suppressed [ 847.212471] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:13 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f0000002b40)=@hci, 0x80, &(0x7f0000003d80), 0x0, &(0x7f0000003dc0)=""/162, 0xa2}}, {{&(0x7f0000003f80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004380), 0x0, &(0x7f00000043c0)=""/232, 0xe8}}], 0x2, 0x0, &(0x7f0000004800)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x208) sendto$inet(r0, &(0x7f0000a63fff), 0xfffffffffffffffa, 0x20020004, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x1, 0x19a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000280), 0x71e211e1306406, 0x0) 2033/05/18 03:37:13 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r1, 0x40084146, &(0x7f0000000040)) 2033/05/18 03:37:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x208) sendto$inet(r0, &(0x7f0000a63fff), 0xfffffffffffffffa, 0x20020004, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x1, 0x19a) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000280), 0x71e211e1306406, 0x0) 2033/05/18 03:37:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xda04000000000000}, 0x0) 2033/05/18 03:37:13 executing program 7: r0 = socket(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000200)={0xfffffffffffff800, 0x3fffffffffe, 0xac, 0x2, 0xffffffff}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x5, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e21, @loopback=0x7f000001}, 0x0, 0x2, 0x86e, 0x8, 0x4, 0x0, 0x7c, 0x100, 0x2}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 2033/05/18 03:37:13 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:13 executing program 0: r0 = inotify_init() fcntl$setstatus(r0, 0x4, 0x800) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/177, 0xb1) [ 848.013015] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 848.022151] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x6, {0x2, 0x0, @multicast1=0xe0000001}, 'syz_tun\x00'}) 2033/05/18 03:37:13 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe0000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000280)) close(r1) [ 848.163655] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 848.316250] device bridge_slave_1 left promiscuous mode [ 848.321903] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.351223] device bridge_slave_0 left promiscuous mode [ 848.356863] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.388166] team0 (unregistering): Port device team_slave_1 removed [ 848.400472] team0 (unregistering): Port device team_slave_0 removed [ 848.410453] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 848.423103] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 848.449210] bond0 (unregistering): Released all slaves [ 849.065792] FAULT_FLAG_ALLOW_RETRY missing 30 [ 849.070404] CPU: 0 PID: 21892 Comm: syz-executor3 Not tainted 4.17.0-rc5+ #56 [ 849.077677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.087027] Call Trace: [ 849.089623] dump_stack+0x1b9/0x294 [ 849.093273] ? dump_stack_print_info.cold.2+0x52/0x52 [ 849.098468] ? kasan_check_write+0x14/0x20 [ 849.102705] ? do_raw_spin_lock+0xc1/0x200 [ 849.106950] handle_userfault.cold.32+0x44/0x5a [ 849.111666] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 849.116255] ? debug_check_no_locks_freed+0x310/0x310 [ 849.121448] ? perf_event_update_userpage+0xd10/0xd10 [ 849.126812] ? graph_lock+0x170/0x170 [ 849.130615] ? print_usage_bug+0xc0/0xc0 [ 849.134684] ? __sanitizer_cov_trace_const_cmp4+0x1/0x20 [ 849.140147] ? __perf_event_task_sched_in+0x247/0xb80 [ 849.145343] ? print_usage_bug+0xc0/0xc0 [ 849.149423] ? get_user_pages_fast+0x2a1/0x440 [ 849.150182] Unknown ioctl 1080602275 [ 849.154027] ? find_held_lock+0x36/0x1c0 [ 849.154055] ? __lock_acquire+0x7f5/0x5140 [ 849.154070] ? graph_lock+0x170/0x170 [ 849.154094] ? find_held_lock+0x36/0x1c0 [ 849.173871] ? lock_downgrade+0x8e0/0x8e0 [ 849.178015] ? kasan_check_read+0x11/0x20 [ 849.182165] ? do_raw_spin_unlock+0x9e/0x2e0 [ 849.186563] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 849.191140] ? kasan_check_write+0x14/0x20 [ 849.195372] ? do_raw_spin_lock+0xc1/0x200 [ 849.199600] __handle_mm_fault+0x38d8/0x4310 [ 849.203997] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 849.208745] ? graph_lock+0x170/0x170 [ 849.212533] ? find_held_lock+0x36/0x1c0 [ 849.216582] ? lock_downgrade+0x8e0/0x8e0 [ 849.220724] ? handle_mm_fault+0x8c0/0xc70 [ 849.224946] handle_mm_fault+0x53a/0xc70 [ 849.229005] ? __handle_mm_fault+0x4310/0x4310 [ 849.233591] ? find_vma+0x34/0x190 [ 849.237131] __do_page_fault+0x60b/0xe40 [ 849.241185] ? do_raw_spin_lock+0xc1/0x200 [ 849.245411] ? mm_fault_error+0x380/0x380 [ 849.249550] ? graph_lock+0x170/0x170 [ 849.253360] do_page_fault+0xee/0x8a7 [ 849.257155] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 849.262329] ? vmalloc_sync_all+0x30/0x30 [ 849.266466] ? find_held_lock+0x36/0x1c0 [ 849.270517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 849.275350] page_fault+0x1e/0x30 [ 849.278789] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 849.284395] RSP: 0018:ffff8801c8b4f810 EFLAGS: 00010202 [ 849.289744] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 849.297011] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801c8b4f8b0 [ 849.304278] RBP: ffff8801c8b4f848 R08: ffffed0039169f17 R09: ffffed0039169f16 [ 849.311536] R10: ffffed0039169f16 R11: 0000000000000003 R12: 0000000020013004 [ 849.318790] R13: 0000000020013000 R14: ffff8801c8b4f8b0 R15: 00007ffffffff000 [ 849.326070] ? _copy_from_user+0x10d/0x150 [ 849.330305] evdev_do_ioctl+0xb8f/0x21c0 [ 849.334370] ? lock_downgrade+0x8e0/0x8e0 [ 849.338504] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 849.343689] ? str_to_user+0x90/0x90 [ 849.347395] ? do_futex+0x249/0x27d0 [ 849.351091] ? rcu_is_watching+0x85/0x140 [ 849.355222] ? graph_lock+0x170/0x170 [ 849.359008] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 849.364192] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 849.369384] ? exit_robust_list+0x290/0x290 [ 849.373689] ? find_held_lock+0x36/0x1c0 [ 849.377736] ? lock_downgrade+0x8e0/0x8e0 [ 849.381872] ? kasan_check_read+0x11/0x20 [ 849.386012] ? rcu_is_watching+0x85/0x140 [ 849.390167] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 849.395365] ? __fget+0x40c/0x650 [ 849.398811] evdev_ioctl_handler+0x144/0x1a0 [ 849.403210] evdev_ioctl+0x27/0x2e [ 849.406752] ? evdev_ioctl_compat+0x30/0x30 [ 849.411060] do_vfs_ioctl+0x1cf/0x16a0 [ 849.414949] ? rcu_pm_notify+0xc0/0xc0 [ 849.418824] ? ioctl_preallocate+0x2e0/0x2e0 [ 849.423219] ? fget_raw+0x20/0x20 [ 849.426656] ? putname+0xf2/0x130 [ 849.430110] ? rcu_read_lock_sched_held+0x108/0x120 [ 849.435131] ? kmem_cache_free+0x25c/0x2d0 [ 849.439354] ? __x64_sys_futex+0x477/0x680 [ 849.443583] ? do_futex+0x27d0/0x27d0 [ 849.447381] ? security_file_ioctl+0x94/0xc0 [ 849.451777] ksys_ioctl+0xa9/0xd0 [ 849.455218] __x64_sys_ioctl+0x73/0xb0 [ 849.459092] do_syscall_64+0x1b1/0x800 [ 849.462964] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 849.467790] ? syscall_return_slowpath+0x5c0/0x5c0 [ 849.472702] ? syscall_return_slowpath+0x30f/0x5c0 [ 849.477616] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 849.483149] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 849.487983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 849.493182] RIP: 0033:0x455a09 [ 849.496363] RSP: 002b:00007febc164ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.504057] RAX: ffffffffffffffda RBX: 00007febc164b6d4 RCX: 0000000000455a09 2033/05/18 03:37:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xffffff7f}, 0x0) 2033/05/18 03:37:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x9) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000030000000000000000000000", 0x10}]) 2033/05/18 03:37:14 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x208) sendto$inet(r0, &(0x7f0000a63fff), 0xfffffffffffffffa, 0x20020004, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x1, 0x19a) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000280), 0x71e211e1306406, 0x0) 2033/05/18 03:37:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:14 executing program 3: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 2033/05/18 03:37:14 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xa000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:14 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 849.511311] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000015 [ 849.518575] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 849.525829] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 849.533083] R13: 00000000000001fc R14: 00000000006f7040 R15: 0000000000000000 [ 849.548718] Unknown ioctl 1080602275 [ 849.619225] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 849.624795] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:14 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xffff0000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0x4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007f8, &(0x7f00000008c0)={0x2, 0x4e23}, 0x10) 2033/05/18 03:37:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x2000000}, 0x0) 2033/05/18 03:37:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 849.793818] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 849.813104] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 849.955474] IPVS: ftp: loaded support on port[0] = 21 [ 850.355143] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.361555] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.368777] device bridge_slave_0 entered promiscuous mode [ 850.395504] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.401926] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.409122] device bridge_slave_1 entered promiscuous mode [ 850.434200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 850.461369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 850.547818] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 850.575644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 850.602574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 850.609485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 850.635225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 850.642144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 850.711060] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 850.718327] team0: Port device team_slave_0 added [ 850.743760] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 850.750907] team0: Port device team_slave_1 added [ 850.774989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.801803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.827550] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 850.834773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.843166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 850.863526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 850.870612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 850.878963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 851.099926] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.106335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.112989] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.119364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.126733] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 851.551439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 851.942949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.024336] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 852.104614] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 852.110872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 852.119881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 852.194724] 8021q: adding VLAN 0 to HW filter on device team0 2033/05/18 03:37:17 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xf401000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xc00e}, 0x0) 2033/05/18 03:37:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) 2033/05/18 03:37:17 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:17 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24020400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mq_notify(r0, &(0x7f00000000c0)={0x20000000, 0x13, 0x2, @thr={&(0x7f0000000040), &(0x7f0000000080)}}) 2033/05/18 03:37:17 executing program 7: r0 = memfd_create(&(0x7f0000000380)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000080)=[@fda={0x66646185}], &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f00000002c0)}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) [ 852.707356] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 852.733922] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000180)="1d", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) close(r0) 2033/05/18 03:37:18 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=@getstats={0x1c, 0x5e, 0x711, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006140)=[{{&(0x7f0000005ac0)=@rc, 0x80, &(0x7f0000006000), 0x0, &(0x7f0000006040)=""/193, 0xc1}}], 0x1, 0x0, &(0x7f0000006240)) 2033/05/18 03:37:18 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfe80000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) [ 852.832239] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x6c0e}, 0x0) 2033/05/18 03:37:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400c41, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1d, &(0x7f00000000c0)="71f9ea94be26643a", 0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f96a705000000b90d0a0000b80001c0feba000000000f300f01df0f2163c4c1d75c210f08def06765f405a0000000f36510a400f4da0000", 0x38}], 0x1, 0xfffffffffffffffd, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2033/05/18 03:37:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:18 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xf4010000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:18 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7fff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xaf}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffff2, &(0x7f0000000080)) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x40, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) [ 852.978315] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 853.023894] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2b17f7a900"]) 2033/05/18 03:37:18 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xffffff7f, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x2}, 0x0) 2033/05/18 03:37:18 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00'], 0x2) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 2033/05/18 03:37:18 executing program 7: sync() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'selinux'}], 0xa, "45a672c90e540ca00c895b6212f86ce09441c24cec13b154243ed00da0e5848c74784c9d3e1fd0b02e316ab88d3fbc2152408124bcce7d1b6aaf286da673c8"}, 0x52) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000240)) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000440)) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000300)={r0, r1, 0xff, 0x9ed, &(0x7f0000000180)="e5b93193b5611b5034ddab615b12b69febe8fcab293b8647c9889fd4de6711b972774e98a8eb280a450aef2343c45548408ba675566a1e34d14a09912eec34ff616a50715fab609030d7556d9e897ea70a7c00818ee79a5c76a237947b14221e533b8024bf6856d4ce58c97379ea50ef2cbb4830d997d81e5415d0d2b6b2f5f9dd8305bf7709d68ac84b1502cb28", 0x7e00000, 0x9, 0x9, 0xcf74, 0xe9, 0xffffffffffffffff, 0x9f4b, "eec33fc1628ea7ddff08b2da57ee256391f9a040b475057cb4bd4d849fdb79178f97e5ce3c996b2d7bb7e5fd2cb42961a02b1fada13a66e53a89f6c0953c9ad3c59e5ba4fb3bc8863562aff97c0da3bfcb9a990d29a1f5a7b96732e932f86fa693a06fb2285b1143dab57d"}) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000000000600000000001300770000010060221a626009e2eb11bbf639891982c501b9c5d3f00966342f6c48b6f85a9f9effa53925020095da0f305b4a793f7f733508b97494825ac64042da7cc99365ad9f35d40ae65f57aaa48d2b5063872a78b021cade901ffcaf16f1be564772bd4dc930ba63eedaffbb09950951f77f6558052fddfc84e025b9fd2bc84fb02e5620659ce7d6b791195fdb601a46ec33dec749affee7f73c1977b5fc98a68b5e14f3d05b4732ad08c33f0efe8b37bcd9c0cf4c96f9cc275fdb9b303d2be093bdfaeabce27811209eabc3f46dcf3fa6aff56c4cf1f7b19e7349a2de9d21f05db5805087ad8b"], 0x14}, 0x1}, 0x0) 2033/05/18 03:37:18 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x10, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x400}}}, 0x88) 2033/05/18 03:37:18 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x3000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 853.281178] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 853.299666] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:18 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x5000000) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c36c796f49a4acfa31dfc88cc2b90000000000000000000000000000000000000000000000000000"]) unshare(0x0) 2033/05/18 03:37:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000)=[@cstype0={0x4}, @vmwrite={0x8}], 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2033/05/18 03:37:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x1000000}, 0x0) 2033/05/18 03:37:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:18 executing program 0: prctl$void(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000140)=""/120, 0x98}) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0xeb76cc186086732d, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x0, {{0x2, 0x4e22}}}, 0x88) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@empty, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, 0x7fff, 0x0, 0x0, 0x0, 0x10001, 0x10000, r3}) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xfffffffffffffffe, 0x105082) r5 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000040), 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r4, r5, &(0x7f00000ddff8), 0x102000001) [ 853.475799] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 853.491867] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:18 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x900, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7, @empty, 0x1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e20, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x1549}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001600030000000000000000000a000000085434d069a52c37dd3f789ccdc7e4b9a049", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000bb"], 0x2c}, 0x1}, 0x0) 2033/05/18 03:37:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:18 executing program 7: r0 = syz_open_dev$loop(&(0x7f000002c000)='/dev/loop#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl(r0, 0x4400000000001279, &(0x7f0000000140)) 2033/05/18 03:37:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xd71a0000}, 0x0) 2033/05/18 03:37:18 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:18 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x101, 0x101000) recvfrom$unix(r0, &(0x7f0000000040)=""/228, 0xe4, 0x100, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xfffffffffffffd39) r1 = eventfd2(0x200000005, 0x800) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x3, 0xbc, [], 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/188}, &(0x7f0000000400)=0x78) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) readv(r1, &(0x7f0000001740)=[{&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x3) setsockopt$inet_tcp_buf(r0, 0x6, 0x1b, &(0x7f00000005c0)="387667fa38e05dddb81360feea37c26d280acd375bb1d21ed278453e934f22c88411d8085f39881559e9667e069393dd71159f14f59885c587edbb852467c0c369d3a73a9e931460898305dd41f0a630316eb067dc8b612be0d2431e3598cbef4e159fa727a2b4a5f6104efb4fef9225af9ed58f78183df7f08951ee8e106cac234c871b6760686f918e852cb10a6d36855812f25a5a7c74040edab9bdbc13f70b73c487f0", 0xa5) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0x172, 0x1, 0x6, 0x6, "123f3593749c328683440d93703b60ebf40094b305ac556c8066ebd84a3c69605f10fae2f50f6fabfcce2cd9", 0x8}, 0x0, 0x0, 0x40, r2, 0x7ff, 0x3b, "da956791c0881ff13ea642532902a3eeed16403678cd6cdea11070735b0a7cbe772c9812f3cb58f81e9ce3c17b2d3e419d0ccc78439a7cee1e3993c682ad8cd0", &(0x7f0000000440)='broute\x00', 0x7, [], [0xff, 0x1, 0x302374ab, 0x8]}) 2033/05/18 03:37:19 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001100)=""/4096, &(0x7f00000000c0)=0x11b3) [ 853.730287] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 853.732315] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 853.751582] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:19 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe0ffffffffffffff, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:19 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f00000002c0)='bpf\x00', 0x0, &(0x7f0000000280)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40080, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0) stat(&(0x7f0000000280)='./file1\x00', &(0x7f0000000300)) linkat(r0, &(0x7f0000000040)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x400) chdir(&(0x7f0000000780)='./file0\x00') syz_fuse_mount(&(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x3f, 0x0) 2033/05/18 03:37:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xf0}, 0x0) [ 853.864832] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 854.002820] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:19 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x11000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 2033/05/18 03:37:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10, 0xf0, 0x3000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000025000300000000800000000004000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:37:19 executing program 7: io_setup(0x3, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") io_submit(r0, 0x0, &(0x7f0000000540)) io_getevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], &(0x7f00000000c0)={r1}) clone(0x80000000, &(0x7f0000000040), &(0x7f0000001080), &(0x7f00000022c0), &(0x7f0000002300)) r3 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000026c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)}]) 2033/05/18 03:37:19 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x3093}, 0x0) 2033/05/18 03:37:19 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xffffff7f00000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 854.096630] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 854.134237] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:19 executing program 0: r0 = memfd_create(&(0x7f0000000400)='}\x00', 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xc002, r1, r2, 0x911b, 0xffffffffffffff10, 0x10000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x8000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x2, 0x0) write$eventfd(r0, &(0x7f00000002c0), 0xffffffffffffffc5) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 2033/05/18 03:37:19 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x80287010, &(0x7f0000000000)) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'team0\x00', @ifru_data=&(0x7f0000000040)="4842f3779bce65e93b87cdb2ef15aa7d344b04b60440fd04a43aa30d90445d1a"}}) 2033/05/18 03:37:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x40030000000000}, 0x0) 2033/05/18 03:37:19 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x300000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 854.260120] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:19 executing program 0: pipe(&(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000002280)=[{r1, 0x400}], 0x200003a6, 0x80000000bffe) vmsplice(r1, &(0x7f00004e8000)=[{&(0x7f0000004980)=';', 0x1}], 0x1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x4) write(r1, &(0x7f00000010c0)="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", 0x18c) write(r1, &(0x7f0000001280)="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", 0x1000) readv(r0, &(0x7f0000119ff0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000022c0)={0x7ff, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e22, @rand_addr=0x1000000000000000}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x1a4, 0x1f, 0xd098, 0x100000000, 0x8cb4, &(0x7f0000001080)='team_slave_1\x00', 0x8, 0x5, 0x5}) openat$autofs(0xffffffffffffff9c, &(0x7f0000001040)='/dev/autofs\x00', 0x202000, 0x0) 2033/05/18 03:37:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:19 executing program 3: r0 = getpgrp(0x0) r1 = gettid() r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2100, 0x0) sendto$ipx(r2, &(0x7f0000000080)="3ffc2dee508127408be9044528fee57458ba935972e2a67402d451c53eed3a59c17ae28f2d17747bb658a660b6f3ae1abf1f2585b4e1bbf701715f5aca8858657eb3cb7660a7671ef8961edebfab1bc2b07f00702fd8e56ee9b58021ccdeffe259cbcc29e53eb5fab168cd2cb4cbe8e8f8ee96eb605426dc2037ca4e68a6de22320990db35272c5ec5eaa837c9e59a0b387e", 0x92, 0x8000, &(0x7f0000000140)={0x4, 0x4, 0x80000001, "60e20bc93bb7", 0x200000006}, 0x10) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x3}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r3, &(0x7f0000000280)=""/128, 0xffffff39) [ 854.351536] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:19 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x6000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:19 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 854.424556] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x100000000000000}, 0x0) 2033/05/18 03:37:20 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, "1059493481b639195a8a2dd9ee3ff7e9c50e58fe75430138d7f00cfe322bea8af5c4de2e32bb0a6e99f963f4", 0x2}) 2033/05/18 03:37:20 executing program 3: r0 = memfd_create(&(0x7f0000000140)='system.', 0x0) fsetxattr(r0, &(0x7f0000003ec0)=@random={'system.', 'posix_acl_access{Y\x00'}, &(0x7f0000000080)='\'\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x3, 0x20, 0xffffffffffffffff, 0x8}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r1, 0x20}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002600)=0x0) r4 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003a00)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000003b00)=0xe8) getsockname$netlink(r0, &(0x7f0000003e00), &(0x7f0000003e40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003b40)={0x0, 0x0, 0x0}, &(0x7f0000003b80)=0xc) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000003bc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003c00)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000003d00)=0xe8) getgroups(0x9, &(0x7f0000003d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) sendmsg$netlink(r0, &(0x7f0000003dc0)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80101413}, 0xc, &(0x7f00000039c0)=[{&(0x7f0000000280)={0xec, 0x1d, 0x232, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xdc, 0x3e, [@typed={0x40, 0xc, @binary="1897316555bd049133214728da753de004cadc3719158c59b4900a60fa672971f3f93b277f34ac03faa90399ce94c5c372b47291d9e3dab88375d5fb"}, @typed={0x14, 0x24, @ipv6=@dev={0xfe, 0x80, [], 0xf}}, @typed={0x48, 0x1d, @binary="e0f4c269aab9eac6cb5de185edd2d453ff6d9321bcb7ef7e513546c1c532dc31b7c89e14c4727f5425f67598f1aac5f0000e523825548423c57e6d09ad15d10d586e"}, @typed={0xc, 0x22, @u64=0x8}, @typed={0xc, 0x7d, @str='system.'}, @typed={0x14, 0x75, @ipv6}, @typed={0x8, 0x69, @pid=r2}, @typed={0x8, 0x66, @fd=r0}]}]}, 0xec}, {&(0x7f0000000380)={0x2248, 0x2e, 0xb02, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x34, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @nested={0x1228, 0x9, [@generic="b518cf1a8b86c5dca5eb9d876be8d5ce38f44c04d052badffad7594ad96825dcff5678e2fa8c5c649abeab0227af24faa6108e846c5dcee9d010a11a50b105d3863f9bc96a34f7628eb17ebfe69875351f2c92287b00fbe7b085d3d41c00929d2b992115184319bf9118d2891a70fea4ffafd6d5197d3772459e3366a395947a2892d8ed0764335e0ffe148a1b0d88a1d98d83d3cebcd4af5f69e5fd8ac556d8930fc62a1669931aa9d41f393be6ab845ecf4d901b37b2e4aa91c4cc602c4d328a5c78aba60dff5f8c1e35cb67828c50aa57cccf89ee", @generic="be6866f72f32769870d52cbb69c48abb9cca277e", @generic="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", @generic="147ead1996ca14d79c110f1e6a67382505afd83a6b928165a9ccc14f6c403f7cdf8d8f99dcd4013eab42cce5f7fffa198749f813c9c4bc2de12d03aa7fdf5f23cb657d4a28", @generic="aece9db61ae6c1b264922c66f04e7cbbe517fe5ab9c8ec74bcac1f6dc51a32e73807a6aa32524e8a9a615b579d72dcdd5fb29a88701f106e62fbbf4e6d12ec41cd088a35167d9dd3d08db6a06b7542c9bb40fc3a22a0985db09f903d8bef358fe2353bd510c2448922503b72896fc6a1c19718036833440685a93f0336cf7450d49416b1a479794e6a61aada02bca9ff73441fc38d47063e8f5955694eb71078eae17f0e1ba37dbdc766b287892e0ef58bc6706f2187a819450af1dfa6a298825d71ee9d05b54169055561301e91bcd88c58137977f03ccc08accb9b7724083a795387bbf243ae1c17f7fb15e736be1489f417c03c"]}, @typed={0x8, 0x2d, @str='\'\x00'}, @generic="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"]}, 0x2248}, {&(0x7f0000003f00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="ae2cf8e6c9bfd6ea69d9569f780e674616f879de5035dee80a7f1393bc4d89dce87a3a69723635493cecb63ef1cc96d33d5d187ca07512e87407b8aceb4431fc9f5518a2bd32770f4264da2dfa73e8510efd0ef8dafe00005523217ad4018894aa47e0acd81d903cf7f28371db56b34205fb03d69d1e6b55c8862c203032f874efebaa877f0f867bb41a6b5426798796462d35e59193e886f0dd74f97b20857642c85d171b0a5a03884898d367d83d84827e94ab133e020c73543dff1513438fe9b3eb6268696543e56a4bd5a2b4aee16f5376d5af4a53c996fabcaece6fb89e5c8d"], 0x1360}], 0x3, &(0x7f0000003d80)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x40, 0x40}, 0x800) connect$ax25(r0, &(0x7f0000000000)={0x3, {"410838dff3f608"}, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x8002, 0x622, 0xb1a, r1}, 0x10) 2033/05/18 03:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:20 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfffffdef, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:20 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000003c0)={0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000a80)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000ac0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={r1, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000540)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000400)={r3, r4, 0xe8af}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x82000000000000, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000500)) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000440)={0xfffffffffffffffd, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x400, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000b40)={0x2, &(0x7f0000000b00)=[{0xac5, 0x6}, {0x5fbf, 0x9}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000580)={{0x3, 0x2, 0x0, 0x0, "7b8c11959196f056ef02af089c125bee1a4912f87cfcc18708fb15a4c5f915f4f33cb600af7e5fc67a3f19dd", 0x7575}, 0x3, [0x4071, 0x9, 0x3, 0x6, 0x9a8, 0xa68, 0x7, 0x9, 0xec, 0x7, 0x8000, 0xffffffff, 0x1, 0x9, 0x9, 0x4, 0x4, 0xfffffffffffffffe, 0x2, 0x4, 0x1, 0xa1, 0x7fffffff, 0x4, 0x7fc0000000000000, 0x8, 0x7, 0x8d5, 0x7, 0xfffffffffffff000, 0x9, 0x800, 0x3, 0x5, 0xfff, 0xc614, 0x1, 0x7, 0x9234, 0x5, 0x1e5, 0x400, 0x8, 0x5, 0x4, 0x6, 0x6, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, 0x6, 0x0, 0xfffffffffffffff7, 0x9, 0x1, 0x8, 0x141, 0x7, 0x6, 0x2, 0xec5, 0x101, 0x1, 0x8, 0x0, 0x9, 0x2, 0x1, 0x0, 0x1, 0x3, 0xffffffffffffffe1, 0x9, 0xcc, 0xfb30, 0x9, 0x4, 0x0, 0x0, 0x5, 0x5, 0x60327f99, 0x700000000, 0x1000, 0x7ce, 0x10001, 0x1, 0xff, 0xffffffffffff680f, 0x7, 0x1, 0x4, 0x8001, 0x6, 0x1000, 0xdb, 0x9, 0x6, 0x8, 0x6bf4, 0xfffffffffffffffa, 0x100000000, 0x7, 0x9, 0x5, 0x6, 0x61c5c614, 0x1, 0x0, 0x2, 0x2, 0x8001, 0x10001, 0x100, 0x9, 0x800, 0x6, 0x2, 0x81, 0x200, 0x5, 0x1, 0xfb6d, 0x800], {0x0, 0x1c9c380}}) ioctl$DRM_IOCTL_VERSION(r5, 0xc0044dff, &(0x7f0000000380)={0xfdfdffff, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f0000000140)=""/136, 0xc8, &(0x7f0000000280)=""/200}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000480)=0x1) 2033/05/18 03:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 854.978654] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:20 executing program 3: bpf$PROG_LOAD(0x2, &(0x7f0000001fb8)={0x0, 0x0, &(0x7f000000cfd0)=@raw, &(0x7f0000002ff6)='syzkaller\x00', 0x0, 0xe7, &(0x7f0000002f19)=""/231}, 0x48) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x48000) 2033/05/18 03:37:20 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:20 executing program 0: quotactl(0x2080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000000c0)={0x8, 0x0, [{0x81a, 0x0, 0x0, 0x0, @msi={0x800, 0x5f03, 0xffffffffffff8001}}, {0x4, 0x5, 0x0, 0x0, @msi={0x4, 0x80000001, 0x3}}, {0x9, 0x0, 0x0, 0x0, @sint={0x81, 0x4}}, {0x0, 0x3, 0x0, 0x0, @msi={0x6, 0x10001, 0x9}}, {0xfff, 0x2, 0x0, 0x0, @sint={0x0, 0x45}}, {0x800, 0x1, 0x0, 0x0, @msi={0x8, 0xa66, 0x1000}}, {0x8, 0x1, 0x0, 0x0, @adapter={0xfffffffffffffff7, 0x9, 0x200, 0x6, 0xff}}, {0xd3d, 0x4, 0x0, 0x0, @irqchip={0x81, 0x20}}]}) 2033/05/18 03:37:20 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x1c00000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xda040000}, 0x0) [ 855.188045] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:20 executing program 7: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f0000000180)}}, &(0x7f0000001180)) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000200)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)=[{0x10, 0x0, 0x7}], 0x350}}], 0x2, 0x0) ioctl$void(r0, 0x5451) socket$inet6(0xa, 0xe, 0x97) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000000, 0x101400) getsockname$netrom(r1, &(0x7f0000000040), &(0x7f0000000140)=0x10) 2033/05/18 03:37:20 executing program 3: socket(0xa, 0x1, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/211) 2033/05/18 03:37:20 executing program 5: socket(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)=0x7d, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0xd, &(0x7f0000000100), 0x8) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x1, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2033/05/18 03:37:20 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xff00, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xf0ffff}, 0x0) 2033/05/18 03:37:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:20 executing program 7: keyctl$reject(0x13, 0x0, 0x0, 0x201, 0x0) r0 = msgget(0x0, 0x3fd) msgctl$IPC_RMID(r0, 0x0) 2033/05/18 03:37:20 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:20 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x40) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0xaf, 0x8}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r3, 0x8}, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x40, 0x8000, 0x1, 0x400, 0x0, 0x7fffffff, 0x20008, 0x0, 0x2000000, 0x3, 0x2, 0x7, 0xe0000, 0x5, 0x7fff, 0x800, 0x1, 0x7, 0x6, 0x3, 0x1f, 0x1, 0x8, 0xd50, 0x81, 0x8001, 0x0, 0x7e, 0x3f, 0x80000001, 0x7, 0x1, 0xb4, 0x3, 0xfffffffffffff424, 0x4, 0x0, 0x8, 0x2, @perf_config_ext={0x3ff, 0x3}, 0x20, 0x5, 0x0, 0x6, 0x0, 0x5, 0x2}, r2, 0xe, r0, 0x8) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x8000000009, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x9, 0x0, 0x7fffffff00000}) [ 855.338493] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:20 executing program 7: r0 = socket(0xa, 0x100000803, 0x2) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @void, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0x1c) 2033/05/18 03:37:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:20 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:20 executing program 0: timer_create(0x6, &(0x7f0000000000)={0x0, 0x1, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x678, &(0x7f0000000180)=""/48) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84000) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000200)={0x40, {{0xa, 0x4e24, 0x9, @loopback={0x0, 0x1}, 0xd4}}, 0x1, 0x6, [{{0xa, 0x4e22, 0xc0000000000, @empty, 0x3ff}}, {{0xa, 0x4e22, 0x7ff, @loopback={0x0, 0x1}, 0x7ff8000000000000}}, {{0xa, 0x4e23, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x180}}, {{0xa, 0x4e21, 0x35d4000, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}, {{0xa, 0x4e20, 0x6, @empty, 0x1}}, {{0xa, 0x4e24, 0x83f, @dev={0xfe, 0x80, [], 0x10}, 0x6}}]}, 0x390) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {r1, r2+10000000}}, &(0x7f0000000100)) 2033/05/18 03:37:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x93300000}, 0x0) 2033/05/18 03:37:20 executing program 3: socketpair(0x0, 0x1, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/66) clone(0x0, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000080)) waitid(0x0, 0x0, 0x0, 0x6100000e, 0x0) 2033/05/18 03:37:20 executing program 5: socket(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:20 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x3f000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:20 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x200000) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x8, {0xff, 0x1, 0x3f, 0x7, 0x3, 0x6}, 0x2f, 0x400}, 0xe) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0xffffffffffffffff, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2033/05/18 03:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 855.718743] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:21 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f000051b000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000012f46)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ba00000000000000", @ANYPTR=&(0x7f0000006000)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}, 0x0) 2033/05/18 03:37:21 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfc00, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:21 executing program 7: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') socketpair(0x80000000000021, 0x100000e, 0x800000000000, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @connect}], 0x30) close(r1) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f0000000280)=""/92, 0x5c}, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x3ff}, &(0x7f0000000100)={0x200081}, &(0x7f0000000140)={0x77359400}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='bond_slave_1\x00', 0x10) 2033/05/18 03:37:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x4da}, 0x0) 2033/05/18 03:37:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:21 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xc0fe, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:21 executing program 0: stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x15, 0x78, &(0x7f0000000040)="e8867015d2b6273e54dd65d40c3328e2d58b92cb87babd3bbe6b551df92afadc9f0a2bcac3c91a0033da0f0d6c5106451deeee76e4307f44eda23f9e800b0e51ba9c7ffc36797e061fdbb52a4078116fcc60b08deb897b1ce1e0015d6b9bf01583a9f33bd913c0f09a250b699cf9670cc416202def8d3e20"}) 2033/05/18 03:37:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002d80)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000002dc0)="f8cf298bf353934bb16f4f368b33dedfdc78919069a1d880a3f8fe9a8948ea79bcb7d1da7ae951060eac513da0e8d705df591a475ac70fbda9ca2e2878e3", 0x3e) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) [ 855.987882] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2033/05/18 03:37:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x6c0e000000000000}, 0x0) 2033/05/18 03:37:21 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) unshare(0x100) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000140)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x20002, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x1, @ipv4=@multicast1=0xe0000001}]}, 0x1c}, 0x1}, 0x0) 2033/05/18 03:37:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:21 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x7ffffff7, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/56) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040), 0xfffffffffffffead) 2033/05/18 03:37:21 executing program 5: socket(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:21 executing program 3: r0 = dup(0xffffffffffffffff) r1 = mmap$binder(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffff9c, 0x18) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={r1}) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000020000000000000002000000400000000300000000000000000200000003ce24acddcb054d000000000000000000000000000000000000000012000000000000f1"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0xe58, 0x0, 0x138, 0x0, 0xc48, 0xc48, 0xd88, 0xd88, 0xd88, 0xd88, 0xd88, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0xcb03, 0x6, 0x1, [0xffffffffffffff01, 0x5, 0x8001, 0x0, 0x0, 0x7, 0xf2, 0x1, 0x36, 0x5, 0x2, 0xd95, 0x3, 0x9, 0xffff, 0xd8d], 0xf}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @local={0xfe, 0x80, [], 0xaa}, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xff, 0xffffff00, 0xff0000ff], 'eql\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x3e, 0x7, 0x2, 0x8}, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x8}}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @empty, [0xffffffff, 0xff000000, 0xffffffff], [0xff0000ff, 0x0, 0xffffffff, 0xff000000], 'veth1_to_team\x00', 'bcsh0\x00', {0xff}, {}, 0x1f, 0x21, 0x2, 0x26}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2={0xff, 0x2, [], 0x1}, @ipv6, 0x3, 0x14, 0x679ab449}}}, {{@uncond, 0x0, 0x8d0, 0x910, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @common=@unspec=@u32={0x7e0, 'u32\x00', 0x0, {[{[{0x8, 0x2}, {0x5}, {0x4, 0x3}, {0x200}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x3}, {0x3ff, 0x1}, {0x0, 0x2}, {0x4}, {0x7, 0x2}], [{0x39d6886f, 0x2a}, {0x3, 0x7}, {0x2, 0x10001}, {0x3f, 0x5}, {0x8, 0x2}, {0x8001, 0x20}, {0x8, 0x401}, {0x1, 0x2}, {0x81, 0x7}, {0x101, 0x2}, {0x4, 0xfffffffffffffff7}], 0x2}, {[{0xfff, 0x2}, {0x4, 0x2}, {0x3ff}, {0x7, 0x2}, {0x10001, 0x3}, {0x8, 0x3}, {0x0, 0x2}, {0x1f, 0x3}, {0x5}, {0x2, 0x3}, {0xdd94, 0x2}], [{0x3, 0x8}, {0x1ecb74d6, 0xffffffffffffff91}, {0x5, 0x81f7}, {0x1000, 0xddb}, {0x9}, {0x6, 0x779}, {0x4, 0x39d}, {0x1000, 0x6}, {0x3d, 0x3}, {0x80000000, 0x1a}, {0x4, 0x200}], 0x1, 0x6}, {[{0xffff, 0x3}, {0x1ff, 0x3}, {0x800, 0x2}, {0xffff, 0x3}, {0x2, 0x2}, {0x9b, 0x3}, {0x32, 0x1}, {0x8000, 0x2}, {0x2, 0x1}, {0x1, 0x3}, {0xffffffff00000000, 0x1}], [{0x2, 0x5}, {0x200, 0x157}, {0x0, 0x1}, {0x2, 0x9}, {0x0, 0x6}, {0x8}, {0x8000, 0x9}, {0x1, 0x7}, {0x0, 0xfffffffffffffff7}, {0x3, 0x6}, {0x6, 0xfffffffffffffeff}], 0x0, 0x7}, {[{0x7fff}, {0x1}, {0x6b20ce33}, {0x9, 0x3}, {0x0, 0x3}, {0x9, 0x2}, {0x1, 0x3}, {0x100, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x3}], [{0x52, 0xffffffff}, {0x6, 0x3}, {0x9, 0x5}, {0x10001}, {0x1, 0x8c}, {0x3219, 0x200}, {0x5, 0x2}, {0x400, 0x67}, {0xc973, 0x1f8c}, {0x4000000, 0x5a6}, {0x1, 0x81}], 0x1, 0x6}, {[{0xf66, 0x1}, {0x81, 0x3}, {0x8, 0x2}, {0xffffffffd8752eee, 0x1}, {0x5, 0x3}, {0x2}, {0x401, 0x3}, {0x2}, {0x7fff, 0x3}, {0x7, 0x1}, {0x8, 0x3}], [{0x100000001, 0x7}, {0x7, 0x2}, {0x69b76f1, 0x5}, {0x55e, 0xaa}, {0xfffffffffffffff9, 0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x3, 0x7fff}, {0x4ef8138a, 0x2}, {0x4c, 0x48}, {0x1, 0xffff}], 0x9, 0x2}, {[{0x9, 0x1}, {0x2, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x3, 0x1}, {0x9}, {0xe194, 0xb201f1c2980b27aa}, {0xa72, 0x3}, {0xffffffffffff7558, 0x1}, {0x2}, {0x101}], [{0x0, 0x8}, {0x101, 0x9}, {0x8, 0x1}, {0x2, 0x8000}, {0x0, 0x7}, {0x9c, 0x100000001}, {0x200, 0xfff}, {0x3, 0xffff}, {0xfffffffffffffff9, 0x400}, {0x9, 0x7}, {0x81, 0x7f}], 0x4, 0x8}, {[{0x3, 0x3}, {0x7}, {0x1}, {0x400b}, {0x7fff}, {0x8, 0x3}, {0x66a, 0x2}, {0xffffffff}, {0x7ff, 0x3}, {0x200, 0x1}, {0xa6}], [{0x3f, 0x4}, {0xa818, 0x2}, {0x6, 0xe7fc}, {0x3, 0x3}, {0x1f, 0x5}, {0xf45, 0x9}, {0x7, 0xc000000000000000}, {0xfffffffffffffff8}, {0x4, 0x2}, {0x5, 0x100000001}, {0x7}], 0x4, 0x9}, {[{0xfffffffffffffff9, 0x3}, {0xff, 0x1}, {0xca, 0x3}, {0x4, 0x1}, {0xfff, 0x3}, {0x800, 0x1}, {0x1ef}, {0x80, 0x1}, {0x0, 0x2}, {0x9, 0x1}, {0x80000001}], [{0x3ff, 0x1}, {0x7ff, 0x8}, {0x6, 0x4}, {0x8, 0x100}, {0x7fff}, {0x0, 0x6}, {0x4157, 0x3}, {0x2000000000000000, 0x1ff}, {0x1, 0x1}, {0x7, 0xfff}, {0xfffffffffffffffa, 0x2}], 0x9, 0xa}, {[{0x6, 0x1}, {0x9, 0x2}, {0x2, 0x2}, {0x8, 0x1}, {0x3f}, {0xfff}, {0x81}, {0x4, 0x3}, {0x9}, {0x0, 0x1}, {0x100, 0x2}], [{0x8, 0x6}, {0x3, 0x7}, {0x2, 0x80000001}, {0xb6, 0x2}, {0x100, 0x2}, {0x100000001, 0x8}, {0x4, 0x6e97}, {0x7, 0x8}, {0x1000, 0x81}, {0x1, 0x100}, {0x7ff}], 0x1, 0xb}, {[{0x7b7, 0x2}, {0x3}, {0x2, 0x3}, {0x2, 0x3}, {0x10000, 0x1}, {0x5}, {0x269, 0x1}, {0x5, 0x3}, {0x8, 0x2}, {0x7fff}, {0x8, 0x3}], [{0x6, 0x4}, {0x42f6, 0xfada}, {0x80000001, 0x81}, {0x8, 0x1f}, {0xfffffffffffffff9, 0x3ff}, {0x8, 0x3a}, {0x66e, 0x2c}, {0xffffffff, 0x3562}, {0x191f}, {0x1, 0x80}, {0x80000000, 0x3}], 0xa, 0x4}, {[{0x0, 0x2}, {0x2}, {0x8, 0x3}, {0x100000001, 0x3}, {0x3}, {0x7, 0x3}, {0x7}, {0x6, 0x2}, {0x6, 0x2}, {0x9, 0x3}, {0x4, 0x3}], [{0x9, 0x3}, {0x1, 0x8}, {0x7ff, 0x43}, {0x40, 0x5}, {0x7fff}, {0x7, 0x4}, {0x9af1, 0xfffffffffffff97f}, {0x8000, 0xb2}, {0xc6, 0x7fff}, {0x3f, 0x63}, {0x8, 0x501b}], 0x5, 0xa}], 0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x100000000, 0x2, @ipv6=@dev={0xfe, 0x80, [], 0x17}, 0x4e24}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}, @local={0xfe, 0x80, [], 0xaa}, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'veth0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x3c, 0x40, 0x1, 0x2}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @common=@hl={0x28, 'hl\x00', 0x0, {0x3}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xfffffffffffff000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xeb8) r6 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff80000001, 0x4000) mq_timedsend(r6, &(0x7f00000000c0)="ab9f6ccc929e7e5fd1a3bb92b056ce7148c7be5a9d5ad4a1b22a402b115afac9523a267f6003d169bd", 0x29, 0x7fff, &(0x7f0000000100)={0x77359400}) 2033/05/18 03:37:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 856.224523] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 856.244383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 2033/05/18 03:37:21 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x1000000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xffffffffffffff0d, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[]], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) 2033/05/18 03:37:21 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/246) close(r1) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) 2033/05/18 03:37:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xd71a000000000000}, 0x0) [ 856.402389] binder: 22632:22636 got transaction to invalid handle [ 856.408758] binder: 22632:22636 transaction failed 29201/-22, size 0-0 line 2856 [ 856.456802] binder: 22632:22636 ioctl 1267 20000040 returned -22 [ 856.477665] binder: BINDER_SET_CONTEXT_MGR already set [ 856.486416] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 856.497492] binder: BINDER_SET_CONTEXT_MGR already set [ 856.520910] binder: 22632:22636 ioctl 40046207 0 returned -16 [ 856.527519] binder: 22632:22642 ioctl 40046207 0 returned -16 2033/05/18 03:37:21 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x40000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2033/05/18 03:37:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x2, [0x0, 0x853]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000200)=0x1) epoll_create(0x9) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2033/05/18 03:37:21 executing program 7: r0 = socket$unix(0x1, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect(r0, &(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x4e21}, 0x5f) r1 = geteuid() quotactl(0x69, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)="d1995341d023b724562866fd21cdd45b49923569624d439985d3dd02fa020ee8c9489b2c55a07af01d5ed52f568c8fa8d15c7342f2f1e6f59b44ceb8fbe7d17c970e7d30f09b374c78e2bc6bba44f2bd9a080dc604f275c5e2b647bfba679751495f8a45c397d7369855681e59c1b4d87551d368bbb0a1b28f2784868ddc02ee65e474540152a0d32dbdacaf54af65579542") 2033/05/18 03:37:21 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/ipc\x00') accept4$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14, 0x80000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) tee(r0, r0, 0x8, 0x0) 2033/05/18 03:37:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x9330000000000000}, 0x0) [ 856.563449] binder: 22632:22644 ioctl 1267 20000040 returned -22 [ 856.578085] binder: 22632:22636 got transaction to invalid handle [ 856.584448] binder: 22632:22636 transaction failed 29201/-22, size 0-0 line 2856 [ 856.609555] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:37:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:21 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r1, 0x2}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f00000000c0)=0x200, 0xdd) [ 856.642836] binder: undelivered TRANSACTION_ERROR: 29201 [ 856.666655] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:21 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x9, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:21 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x2001) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000011000/0x1000)=nil, 0x1000}) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x3, 0x2180) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000001c0)=""/52) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) mincore(&(0x7f0000012000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/142) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$bt_hci(r3, 0x0, 0xe, &(0x7f0000000000)=""/40, &(0x7f0000000200)=0x244) close(r3) close(r0) 2033/05/18 03:37:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001280)=[@textreal={0x8, &(0x7f0000001200)="ba2100ecbaa00066b8f347000066efbaf80c66b88ca1de8866efbafc0c66b80000000066ef66b9f10200000f320f2222660f2d942a100f00126626f3650f01779a66b8030000000f23c80f21f86635080070000f23f80f01c9", 0x59}], 0x1, 0x0, &(0x7f00000012c0), 0x0) 2033/05/18 03:37:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x400300}, 0x0) 2033/05/18 03:37:22 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x4) capset(&(0x7f0000f4b000)={0x19980331}, &(0x7f0000fc0fe8)={0x0, 0x0, 0x0, 0x0, 0x10000000}) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000000c0)={0x5, 0xa0e, &(0x7f0000000040)="bfb1565f7d1caf84edac6d4dd0b4f6963b758432dd5dd41120244b1dbeba54e18e6a58db3658c2bf145d71761949fc2611721f", &(0x7f0000000300)="8f54356a31490edf73a8944a38b5ffafef11f380458dec848ae15065d89ab6732277", 0x33, 0x22}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x10000, 0x30, 0x7fff, 0x3}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={r3, 0x8001}, &(0x7f00000001c0)=0x8) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 2033/05/18 03:37:22 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x600000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2033/05/18 03:37:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 856.906305] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:22 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) fcntl$setsig(r0, 0xa, 0x34) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x181000) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x8, &(0x7f0000000100)=0x2) write(r0, &(0x7f000069efac)="e2", 0x1) shutdown(r0, 0x2) recvfrom(r0, &(0x7f0000000180)=""/226, 0xfffffffffffffff6, 0x0, 0x0, 0xfffffffffffffcd1) 2033/05/18 03:37:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200080, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x8000, 0x9}, &(0x7f00000000c0)=0xfffffeea) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1, 0x0, 0x42}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000100), &(0x7f00000000c0)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0xdd, 0x4, 0x6}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000040), &(0x7f0000000140)=""/114}, 0x18) 2033/05/18 03:37:22 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x900000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0xf000}, 0x0) 2033/05/18 03:37:22 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:22 executing program 2 (fault-call:13 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xe79, 0x402000) openat$cgroup_int(r1, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x100, 0x4) bind$inet6(r2, &(0x7f00001fefe4)={0xa}, 0x1c) listen(r2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2033/05/18 03:37:22 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000003840), 0x0, &(0x7f00000038c0)=""/239, 0xef}}], 0x1, 0x0, &(0x7f0000003b80)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) setpgid(r2, r2) sendto$unix(r1, &(0x7f0000000cc0), 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040), 0x4) 2033/05/18 03:37:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:22 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='.', &(0x7f0000000040), 0x1004, 0x0) mkdir(&(0x7f0000000ec0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000f80)) execve(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000007c0)=[&(0x7f00000002c0)='quota=on', &(0x7f0000000680)='vmnet1[selinuxvmnet1{%vboxnet0cgroup{\x00', &(0x7f00000006c0)='vxfs\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='rgrplvb', &(0x7f0000000780)='em0security\x00'], &(0x7f0000000800)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000180)='./file0/file0\x00', 0x6, 0x4, &(0x7f0000000600)=[{&(0x7f0000000380)="7d50019d6fb093327205185c525309496caeb0c94fbc715a35672162714ad9176a1b8f0fab11ef46fabec2b5459dbb8631a832c062b62a573758c7e8676021b8f31f96296be06835394e43776fd7cc2adb3568b4071b33a42c878778d4847e869040388232e872da33ee6ff2023cea17b616ab64df19c390974ebf7715764e7134272273ba1a7f5591c8d47c8933f46f7686b0eb67107866302059085c0b9c", 0x9f, 0xf69}, {&(0x7f0000000440)="f054073cb664c4f8521db7a0da758b3ee18f7bea4d313271d00acab09eaaa4d01bd5148098cf925c0f785ff11fc75a0e41eba56ba18088b3ffb461b2704e9f3ae0af", 0x42, 0x40a44727}, {&(0x7f00000004c0)="7f8f1bfeddc2543685b76243610eb598662e8d079f3548bf3c00bb79581f418cae71ff31f80c489dc3d48c0f457ac231a1df154d69f414fb2434bb5e591d80633a9d704f8c8a", 0x46, 0x4}, {&(0x7f0000000540)="4edec2f0b61c5808e7bd25b922c6448395ba93f4a9adeb430b6005a112efd35aca174e4a98c85fddc0681576bc866a5d64875e52496f42df18571d6a3099cea14e846528a9239a21b0d1e4b70e02106c5dabb5896b9057c985edd7992fc10ba92a8449d7583d0c9a9119a49376b9dccf08663bb7c5ab54af15382de6ee0125904af78ea321afe67a447792c66f25ab01fb9a90453215c7e22cafd8d75f", 0x9d, 0x100000001}], 0x10020, &(0x7f00000001c0)={[{@rgrplvb='rgrplvb', 0x2c}, {@quota_off='quota=off', 0x2c}, {@data_ordered='data=ordered', 0x2c}, {@quota_on='quota=on', 0x2c}]}) [ 857.711931] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:22 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x1f4, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 857.799119] FAULT_INJECTION: forcing a failure. [ 857.799119] name failslab, interval 1, probability 0, space 0, times 0 [ 857.810438] CPU: 0 PID: 22738 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 857.817729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.827100] Call Trace: [ 857.829713] dump_stack+0x1b9/0x294 [ 857.833364] ? dump_stack_print_info.cold.2+0x52/0x52 [ 857.838576] ? debug_check_no_locks_freed+0x310/0x310 [ 857.843784] should_fail.cold.4+0xa/0x1a [ 857.847864] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 857.852989] ? graph_lock+0x170/0x170 [ 857.856804] ? print_usage_bug+0xc0/0xc0 [ 857.860875] ? find_held_lock+0x36/0x1c0 [ 857.864962] ? find_held_lock+0x36/0x1c0 [ 857.869043] ? __lock_is_held+0xb5/0x140 [ 857.873119] ? xen_get_runstate_snapshot_cpu_delta+0x520/0x790 [ 857.879116] ? check_same_owner+0x320/0x320 [ 857.883455] ? print_usage_bug+0xc0/0xc0 [ 857.887521] ? alloc_set_pte+0x1013/0x1600 [ 857.891752] ? rcu_note_context_switch+0x710/0x710 [ 857.896671] __should_failslab+0x124/0x180 [ 857.900897] should_failslab+0x9/0x14 [ 857.904709] kmem_cache_alloc+0x2af/0x760 [ 857.908849] mmu_topup_memory_caches+0xf7/0x3a0 [ 857.913504] ? debug_check_no_locks_freed+0x310/0x310 [ 857.918685] kvm_mmu_load+0x21/0x10e0 [ 857.922482] vcpu_enter_guest+0x3a83/0x6060 [ 857.926802] ? kvm_set_msr_common+0x2680/0x2680 [ 857.931480] ? vmx_vcpu_load+0xadd/0xfe0 [ 857.935532] ? __lock_acquire+0x7f5/0x5140 [ 857.939752] ? vmx_vcpu_reset+0x1030/0x1030 [ 857.944060] ? graph_lock+0x170/0x170 [ 857.947857] ? graph_lock+0x170/0x170 [ 857.951645] ? __lock_acquire+0x7f5/0x5140 [ 857.955870] ? debug_check_no_locks_freed+0x310/0x310 [ 857.961059] ? __lock_is_held+0xb5/0x140 [ 857.965118] ? do_suspend.cold.1+0x13a/0x359 [ 857.969526] ? lock_acquire+0x1dc/0x520 [ 857.973489] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 857.978493] ? lock_release+0xa10/0xa10 [ 857.982453] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 857.987715] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 857.992200] ? preempt_notifier_dec+0x20/0x20 [ 857.996688] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 858.001516] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 858.006527] kvm_vcpu_ioctl+0x79d/0x12e0 [ 858.010577] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 858.016283] ? graph_lock+0x170/0x170 [ 858.020074] ? find_held_lock+0x36/0x1c0 [ 858.024128] ? lock_downgrade+0x8e0/0x8e0 [ 858.028276] ? kasan_check_read+0x11/0x20 [ 858.032418] ? rcu_is_watching+0x85/0x140 [ 858.036554] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 858.041735] ? __fget+0x40c/0x650 [ 858.045176] ? match_held_lock+0x841/0x8b0 [ 858.049398] ? expand_files.part.8+0x9a0/0x9a0 [ 858.053969] ? kasan_check_write+0x14/0x20 [ 858.058193] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 858.063110] ? wait_for_completion+0x870/0x870 [ 858.067695] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 858.072881] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 858.078593] do_vfs_ioctl+0x1cf/0x16a0 [ 858.082486] ? ioctl_preallocate+0x2e0/0x2e0 [ 858.086886] ? fget_raw+0x20/0x20 [ 858.090330] ? __sb_end_write+0xac/0xe0 [ 858.094303] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 858.099833] ? fput+0x130/0x1a0 [ 858.103109] ? ksys_write+0x1a6/0x250 [ 858.106898] ? security_file_ioctl+0x94/0xc0 [ 858.111299] ksys_ioctl+0xa9/0xd0 [ 858.114739] __x64_sys_ioctl+0x73/0xb0 [ 858.118615] do_syscall_64+0x1b1/0x800 [ 858.122487] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 858.127317] ? syscall_return_slowpath+0x5c0/0x5c0 [ 858.132233] ? syscall_return_slowpath+0x30f/0x5c0 [ 858.137154] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 858.142506] ? trace_hardirqs_off_thunk+0x1a/0x1c 2033/05/18 03:37:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r2) 2033/05/18 03:37:23 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xa00000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 858.147424] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.152598] RIP: 0033:0x455a09 [ 858.155772] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.163826] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 858.171080] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 858.178345] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 858.185611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 858.192865] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000000 2033/05/18 03:37:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x9effffff}, 0x0) [ 858.203530] validate_nla: 14 callbacks suppressed [ 858.203539] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:23 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @multicast2}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x3f}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xf, 0xd6, &(0x7f00000000c0)="9a232f9d5d30b0378e8c0bcdf6a8eb", &(0x7f0000000200)=""/214}, 0x28) [ 858.280714] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) write$fuse(r1, &(0x7f0000000180)={0x18, 0x0, 0x6, @fuse_bmap_out={0x40}}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)="6869676873706565511b", 0x1) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x102d) 2033/05/18 03:37:23 executing program 2 (fault-call:13 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:23 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xf7ffff7f00000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x9330000000000000}, 0x0) 2033/05/18 03:37:23 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:23 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40201, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = getpgrp(0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000110099a55df0347e063adf250000000028d35df620a5be71963340e6a1d33ab87633", @ANYRES32=r1, @ANYBLOB="e10802000000010008001e008000000008001000e1000000080025006300000008001300", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) r3 = socket(0xc, 0x3, 0xcd51) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r4, 0x33}) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x50, 0x18, 0x1, 0x0, 0x0, {0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x9}}, @RTA_GATEWAY={0x8, 0x5, @multicast2=0xe0000002}, @RTA_FLOW={0x8, 0xb}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}, @RTA_MARK={0x8, 0x10}]}, 0x50}, 0x1}, 0x0) 2033/05/18 03:37:23 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xb9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x7}, 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0xa40, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000140)={'irlan0\x00', {0x4, 0x9, 0x1f, "d479f4960a63", 0x3ff}}) accept$alg(r2, 0x0, 0x0) getsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) accept4$inet6(r0, &(0x7f0000000200), &(0x7f0000000240)=0x1c, 0x800) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000280)=0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000002c0)=0x8) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000340)={0x3, 0x5, 0x8, 'queue0\x00', 0x3}) r3 = shmget(0x2, 0x4000, 0xa00, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000440)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x99175e29dba7dc17}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbff, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x11}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x4044014) shmctl$IPC_RMID(r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000540)={0x9, 0x2559, 0xffff, 0x8, 0x4}, 0x14) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000580)) lremovexattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='system.advise\x00') shmctl$IPC_RMID(r3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000700)=0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x6, 0x4, 0x0, 0xfd5, 0x0, 0x1d7, 0x220, 0xc, 0x8, 0x1, 0x2, 0x7fff, 0x3, 0x9, 0x960, 0x7, 0x0, 0x20, 0x20, 0x200, 0x0, 0xfffffffffffffff7, 0x4, 0x1000, 0xffffffffffff0001, 0x80, 0x0, 0xfb, 0x1, 0xad, 0xfffffffffffffffd, 0x6, 0x9, 0x800, 0x4, 0x6, 0x0, 0xb95, 0x5, @perf_bp={&(0x7f0000000640), 0x2}, 0x80, 0x9, 0x9, 0x5, 0xc7b, 0xfffffffffffff029, 0x45c}, r5, 0xd, r0, 0x1) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000740)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000780)={{0x0, 0x6}, 'port0\x00', 0x0, 0x10, 0x9, 0x9, 0x5, 0x0, 0x7fff, 0x0, 0x7, 0xffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000840)={r1, 0x80000001, 0x30}, &(0x7f0000000880)=0xc) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000008c0)=0x80000000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x800, 0x9, 0x14, 0x1, "90b73ae319af9660d6b607809d22494914f90233ef98d257f0e0a8d6d3f3860837c3cd7a07c984f60d2944e372a644784ac3c1355c4138309da6730b8fc9405f", "7f4761949d09852f0b743f0633b0acd0a3c3da71364954f19b3881a84a4e3800", [0x3, 0xfec]}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)={r1, 0x6, 0xa, [0xf0, 0x0, 0x9, 0x1f, 0x8, 0x6, 0x5, 0x3, 0x2, 0xfffffffffffffeff]}, 0x1c) [ 858.550567] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 858.556918] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:23 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x4000000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r0, 0x86c, 0x13, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x80, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x5, 0x4b6b1bfd, 0x8}) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0xd000, &(0x7f0000000180), 0x0, r2, 0xa}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000001240)={0x0, 0x2, 0x0, 0xffff, 0x0, 0x4}, &(0x7f0000001280)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000012c0)={r3, 0x4f, "c7c1abd743f8b43f411bb858fbc5ea97224504eaa045b000f7d79d113c18283c810605fc55e8f28250800e5373b73d7492b4c55dcb486b1617a50aef12f8f38ba6f7f967bf872fcddf2241fabf844e"}, &(0x7f0000001340)=0x57) getsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_ipx_SIOCIPXNCPCONN(r2, 0x89e3, &(0x7f0000000080)=0x9) [ 858.669381] FAULT_INJECTION: forcing a failure. [ 858.669381] name failslab, interval 1, probability 0, space 0, times 0 [ 858.680745] CPU: 0 PID: 22791 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 858.688031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.697393] Call Trace: [ 858.700002] dump_stack+0x1b9/0x294 [ 858.703649] ? dump_stack_print_info.cold.2+0x52/0x52 [ 858.708854] ? __save_stack_trace+0x7e/0xd0 [ 858.713200] should_fail.cold.4+0xa/0x1a [ 858.717274] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 858.722391] ? kasan_kmalloc+0xc4/0xe0 [ 858.726292] ? kasan_slab_alloc+0x12/0x20 [ 858.730454] ? kmem_cache_alloc+0x12e/0x760 [ 858.734790] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 858.739640] ? kvm_mmu_load+0x21/0x10e0 [ 858.743633] ? vcpu_enter_guest+0x3a83/0x6060 [ 858.748142] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 858.753171] ? graph_lock+0x170/0x170 [ 858.756982] ? do_syscall_64+0x1b1/0x800 [ 858.761055] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.766436] ? find_held_lock+0x36/0x1c0 [ 858.770545] ? __lock_is_held+0xb5/0x140 [ 858.774629] ? check_same_owner+0x320/0x320 [ 858.778967] ? rcu_note_context_switch+0x710/0x710 [ 858.783919] __should_failslab+0x124/0x180 [ 858.788166] should_failslab+0x9/0x14 [ 858.791980] kmem_cache_alloc+0x2af/0x760 [ 858.796138] ? kvm_clock_read+0x25/0x30 [ 858.800127] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 858.805156] ? ktime_get_with_offset+0x326/0x4a0 [ 858.809931] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 858.814790] mmu_topup_memory_caches+0xf7/0x3a0 2033/05/18 03:37:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x800) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x100000000, 0xffffffffff0ea080, 0xcd, 0x8, 0x80000001, 0x8000}}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in6}, @in6=@loopback={0x0, 0x1}}}, 0x40}, 0x1}, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626182c8523bf012cf66f") write(r0, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2033/05/18 03:37:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0xee}, 0xfffffffffffffd85) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) socketpair(0x11, 0x4, 0x9, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000180)={0x2, 0x0, 0x5e, 0x7, 0x5, 0x5e1}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 2033/05/18 03:37:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x400300}, 0x0) [ 858.818423] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 858.819475] kvm_mmu_load+0x21/0x10e0 [ 858.819510] ? vcpu_enter_guest+0x296a/0x6060 [ 858.835059] vcpu_enter_guest+0x3a83/0x6060 [ 858.839492] ? kvm_set_msr_common+0x2680/0x2680 [ 858.844172] ? vmx_vcpu_load+0xadd/0xfe0 [ 858.848242] ? __lock_acquire+0x7f5/0x5140 [ 858.852489] ? vmx_vcpu_reset+0x1030/0x1030 [ 858.856818] ? graph_lock+0x170/0x170 [ 858.860628] ? graph_lock+0x170/0x170 [ 858.864438] ? __lock_acquire+0x7f5/0x5140 2033/05/18 03:37:24 executing program 5: r0 = socket(0x0, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 858.868773] ? debug_check_no_locks_freed+0x310/0x310 [ 858.873978] ? __lock_is_held+0xb5/0x140 [ 858.878051] ? lock_acquire+0x1dc/0x520 [ 858.882037] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 858.887067] ? lock_release+0xa10/0xa10 [ 858.891056] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 858.896379] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 858.900890] ? preempt_notifier_dec+0x20/0x20 [ 858.905408] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 858.910262] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 858.915300] kvm_vcpu_ioctl+0x79d/0x12e0 [ 858.919464] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 858.925186] ? graph_lock+0x170/0x170 [ 858.928999] ? find_held_lock+0x36/0x1c0 [ 858.933077] ? lock_downgrade+0x8e0/0x8e0 [ 858.937238] ? kasan_check_read+0x11/0x20 [ 858.941397] ? rcu_is_watching+0x85/0x140 [ 858.945558] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 858.950767] ? __fget+0x40c/0x650 [ 858.954231] ? match_held_lock+0x841/0x8b0 [ 858.958477] ? expand_files.part.8+0x9a0/0x9a0 [ 858.963073] ? kasan_check_write+0x14/0x20 [ 858.967320] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 858.972267] ? wait_for_completion+0x870/0x870 [ 858.976901] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 858.982103] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 858.987823] do_vfs_ioctl+0x1cf/0x16a0 [ 858.991725] ? ioctl_preallocate+0x2e0/0x2e0 [ 858.996145] ? fget_raw+0x20/0x20 [ 858.999608] ? __sb_end_write+0xac/0xe0 [ 859.003596] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 859.009140] ? fput+0x130/0x1a0 [ 859.012429] ? ksys_write+0x1a6/0x250 [ 859.016241] ? security_file_ioctl+0x94/0xc0 [ 859.020666] ksys_ioctl+0xa9/0xd0 [ 859.024135] __x64_sys_ioctl+0x73/0xb0 [ 859.028035] do_syscall_64+0x1b1/0x800 [ 859.031930] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 859.036787] ? syscall_return_slowpath+0x5c0/0x5c0 [ 859.041728] ? syscall_return_slowpath+0x30f/0x5c0 [ 859.046686] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 859.052065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 859.056931] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 859.062123] RIP: 0033:0x455a09 [ 859.065316] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.073035] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 859.080309] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 859.084909] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 859.087590] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 859.087599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 859.087608] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000001 2033/05/18 03:37:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:24 executing program 7: r0 = socket(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') 2033/05/18 03:37:24 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x100000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:24 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0xa623, 0x0, 0x2}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x8}, &(0x7f00000001c0)=0x8) connect$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x28) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$LOOP_CLR_FD(r3, 0x4c01) 2033/05/18 03:37:24 executing program 2 (fault-call:13 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:24 executing program 5: r0 = socket(0x0, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 2033/05/18 03:37:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) write$fuse(r1, &(0x7f0000000180)={0x18, 0x0, 0x6, @fuse_bmap_out={0x40}}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)="6869676873706565511b", 0x1) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x102d) [ 859.488993] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 859.502591] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:24 executing program 0: unshare(0x2000400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000500), 0x8) prctl$setendian(0x14, 0x3) 2033/05/18 03:37:24 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe00, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 859.563815] FAULT_INJECTION: forcing a failure. [ 859.563815] name failslab, interval 1, probability 0, space 0, times 0 [ 859.575286] CPU: 0 PID: 22844 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 859.582574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.591937] Call Trace: [ 859.594549] dump_stack+0x1b9/0x294 [ 859.598203] ? dump_stack_print_info.cold.2+0x52/0x52 [ 859.603410] ? __save_stack_trace+0x7e/0xd0 [ 859.607753] should_fail.cold.4+0xa/0x1a [ 859.611830] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 859.616955] ? kasan_kmalloc+0xc4/0xe0 [ 859.620853] ? kasan_slab_alloc+0x12/0x20 [ 859.625013] ? kmem_cache_alloc+0x12e/0x760 [ 859.629375] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 859.631908] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 859.634227] ? kvm_mmu_load+0x21/0x10e0 [ 859.634247] ? vcpu_enter_guest+0x3a83/0x6060 [ 859.634262] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 859.634276] ? graph_lock+0x170/0x170 [ 859.634298] ? do_syscall_64+0x1b1/0x800 2033/05/18 03:37:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xd71a}, 0x0) 2033/05/18 03:37:24 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfc000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 859.662874] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 859.668258] ? find_held_lock+0x36/0x1c0 [ 859.672342] ? __lock_is_held+0xb5/0x140 [ 859.676431] ? check_same_owner+0x320/0x320 [ 859.680773] ? rcu_note_context_switch+0x710/0x710 [ 859.685720] __should_failslab+0x124/0x180 [ 859.689973] should_failslab+0x9/0x14 [ 859.693785] kmem_cache_alloc+0x2af/0x760 [ 859.697954] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 859.702809] mmu_topup_memory_caches+0xf7/0x3a0 [ 859.707488] ? debug_check_no_locks_freed+0x310/0x310 [ 859.712697] kvm_mmu_load+0x21/0x10e0 [ 859.716513] ? kasan_check_write+0x14/0x20 [ 859.720766] vcpu_enter_guest+0x3a83/0x6060 [ 859.725100] ? print_usage_bug+0xc0/0xc0 [ 859.729172] ? kvm_set_msr_common+0x2680/0x2680 [ 859.732880] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 859.733840] ? vmx_vcpu_load+0xadd/0xfe0 [ 859.733859] ? __lock_acquire+0x7f5/0x5140 [ 859.733879] ? vmx_vcpu_reset+0x1030/0x1030 [ 859.733891] ? graph_lock+0x170/0x170 [ 859.733906] ? graph_lock+0x170/0x170 [ 859.764555] ? __lock_acquire+0x7f5/0x5140 [ 859.768808] ? debug_check_no_locks_freed+0x310/0x310 [ 859.774013] ? __lock_is_held+0xb5/0x140 [ 859.778087] ? lock_acquire+0x1dc/0x520 [ 859.782068] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 859.787094] ? lock_release+0xa10/0xa10 [ 859.791079] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 859.796361] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 859.800872] ? preempt_notifier_dec+0x20/0x20 [ 859.805385] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 859.810241] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 859.815276] kvm_vcpu_ioctl+0x79d/0x12e0 [ 859.819800] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 859.825523] ? graph_lock+0x170/0x170 [ 859.829334] ? find_held_lock+0x36/0x1c0 [ 859.833411] ? lock_downgrade+0x8e0/0x8e0 [ 859.837578] ? kasan_check_read+0x11/0x20 [ 859.841737] ? rcu_is_watching+0x85/0x140 [ 859.845906] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 859.851115] ? __fget+0x40c/0x650 [ 859.854579] ? match_held_lock+0x841/0x8b0 [ 859.858830] ? expand_files.part.8+0x9a0/0x9a0 [ 859.863430] ? kasan_check_write+0x14/0x20 [ 859.867671] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 859.872618] ? wait_for_completion+0x870/0x870 [ 859.877212] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 859.882419] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 859.888141] do_vfs_ioctl+0x1cf/0x16a0 [ 859.892049] ? ioctl_preallocate+0x2e0/0x2e0 [ 859.896469] ? fget_raw+0x20/0x20 [ 859.899936] ? __sb_end_write+0xac/0xe0 [ 859.903923] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 859.909467] ? fput+0x130/0x1a0 [ 859.912758] ? ksys_write+0x1a6/0x250 [ 859.916571] ? security_file_ioctl+0x94/0xc0 [ 859.920994] ksys_ioctl+0xa9/0xd0 [ 859.924460] __x64_sys_ioctl+0x73/0xb0 [ 859.928352] do_syscall_64+0x1b1/0x800 [ 859.932244] ? finish_task_switch+0x1ca/0x840 [ 859.936747] ? syscall_return_slowpath+0x5c0/0x5c0 [ 859.941684] ? syscall_return_slowpath+0x30f/0x5c0 [ 859.946620] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 859.951991] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 859.956842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 859.962035] RIP: 0033:0x455a09 [ 859.965208] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.972901] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 859.980153] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 859.987406] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 859.994657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 860.001916] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000002 2033/05/18 03:37:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:25 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x700, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xe6c}, 0x0) 2033/05/18 03:37:25 executing program 7: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = dup3(r0, r0, 0x80000) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/194) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 2033/05/18 03:37:25 executing program 5: r0 = socket(0x0, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, "1059493481b639195a8a2dd9ee3ff7e9c50e58fe75430138d7f00cfe322bea8af5c4de2e32bb0a6e99f963f4"}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x10001, 0x3, &(0x7f0000000340)=[{&(0x7f0000000100)="0bb2f40e2d749920dc9833ab42ff82dbd45a", 0x12, 0xc99}, {&(0x7f0000000140)="4962d7687a4fa2dcc971fc909facb72965ab115afacec68571a66c28605e8b3e7b2f675f70032135a43f7122f9c8f0fdf5c82519c173e773fc8b399b3868affd41bb3e5f1c70edb5e239827f74cd06d22d6fe9bc57207153ed60f92174177e8b00db92b389635c801c46b168fa31842a8a70293dee4d8307b40f0b65ea5373ee32877f67c5f07adb062bc928557abbb6716e9144ce829d6d2d312f8f41a61261bd1fed284481777b14cc8d4116b8536737980dd516b42dd22e37c484d9d047d6b6dfae4999744edb6249b90f7a6057311886248b2fb2a45a1c6c15120a69d59d06c367aa209fee69abb42d173651597b3c", 0xf1, 0x101}, {&(0x7f0000000240)="858b83e0eea2bd870ef9ae012bb3ab83dedd16b55cbd834a17b79315ba9d2b8bd8c830af7105c5bce7a0df2f85a10d3fcccfa6f15d7c6972b5345b715d2229b033938b84b89fda9a32f952d642ca75c98b3c7d26655ca20e87dba7f8c7172c0284db7875c44547ab6219d4631654cf3d5e005545e1cb263ef06e7e1f1ca83a63dab5dfa87bfa1ebbb1b12a2befa5583f74a14b2d115fdffffe3469c5faed2ce3b2e8a2dc002c6fd2c66af6195e93b6a0ff202cf0127932a442f4994b29addbc2ceedbd963d3e3104a6", 0xc9, 0xff}], 0x0, &(0x7f00000003c0)={[{@flush='flush', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@nfs_nostale_ro='nfs=nostale_ro', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}]}) r1 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0xab4, 0x199ddd729f4d5cf) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000440)={&(0x7f0000ffb000/0x3000)=nil, 0x9, 0x2, 0xa0, &(0x7f0000ffc000/0x1000)=nil, 0x10001}) io_setup(0x8, &(0x7f0000000480)=0x0) io_submit(r2, 0x2, &(0x7f00000006c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f00000004c0)="8cfc9d588cc76272544012a012262a90c0a54f5b5947662452315725cdb3681deb4b1c99b5d42631cbad7e8f26f5ab2c56a604e5ef55f79ba4e19dfe157a252deeabf2bdbc14a22a9cc675aa8660b4d11f4755a54fdf8141524c7ad4fcafa79879f0e6e1cb739e1262a1e37910dab4dd0ea19a3e5e50d9b2b0d06665325c70e3d259dfbb82c2168bb28016992094446e9e790e37f57efca7aaca227436e8ef1a67c8a12ee4b8df9eb5d8015cb6a3007f1bca533f72072728c56afd674e0ba9f9d45dcdc4e0", 0xc5, 0x8f, 0x0, 0x1, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xa, 0x0, r0, &(0x7f0000000600)="89364b5fce83c30389595fa99eb63e56d0d61aba1fd5285779afa80b075a6eb1b4e1c1b26bdcb146d177bd6392c00502ac6650db00f540b74877830cfcc6474f7d", 0x41, 0x8, 0x0, 0x0, r1}]) 2033/05/18 03:37:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x80000000000000, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x30) mq_notify(r0, &(0x7f0000000200)={0x0, 0x2, 0x0, @thr={&(0x7f00000002c0)="95f4d9155afad5ce9b228ce41122c3a5c32e69d16a9d09db216917a4e9440ebc4e02a8448f90c10639b9231ac564735e1339d33c1c259c34f89410cb3937aac6afcd4050bf9cd4233b02a99d9888dcba2893d709a5f65082e217b2b7469672335f7cdb19febcfdca777af6ff20a6965ed07c12da534b20f7e532f17317f98433369c1d6bc9c18daf82ee61e6faaf67c7bd68ab94b37d969dd00015fc51a75405edeb73d6153ce89880a2a7ae9b2b4707024a35bdda92e2f31d316de6cac08695d6197218ac9617ecdb6efa4f496dd8c45e9b6a", &(0x7f00000001c0)="28e22a2f444fcdbc9451788ecb91aeb0e2aad8c208a6"}}) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00') 2033/05/18 03:37:25 executing program 2 (fault-call:13 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 860.437655] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 860.455584] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:25 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x2000000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 860.484646] FAT-fs (loop3): bogus number of reserved sectors [ 860.490608] FAT-fs (loop3): Can't find a valid FAT filesystem [ 860.538660] FAULT_INJECTION: forcing a failure. [ 860.538660] name failslab, interval 1, probability 0, space 0, times 0 [ 860.550059] CPU: 0 PID: 22889 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 860.557350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.566715] Call Trace: [ 860.569328] dump_stack+0x1b9/0x294 [ 860.572983] ? dump_stack_print_info.cold.2+0x52/0x52 [ 860.578183] ? __save_stack_trace+0x7e/0xd0 [ 860.582512] should_fail.cold.4+0xa/0x1a [ 860.586570] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 860.591677] ? kasan_kmalloc+0xc4/0xe0 [ 860.595555] ? kasan_slab_alloc+0x12/0x20 [ 860.599779] ? kmem_cache_alloc+0x12e/0x760 [ 860.604275] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 860.609118] ? kvm_mmu_load+0x21/0x10e0 [ 860.613084] ? vcpu_enter_guest+0x3a83/0x6060 [ 860.617573] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 860.622581] ? graph_lock+0x170/0x170 [ 860.626371] ? do_syscall_64+0x1b1/0x800 [ 860.630422] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 860.635796] ? find_held_lock+0x36/0x1c0 [ 860.639855] ? __lock_is_held+0xb5/0x140 [ 860.643915] ? aa_change_profile+0x1b00/0x2fe0 [ 860.648502] ? check_same_owner+0x320/0x320 [ 860.652913] ? rcu_note_context_switch+0x710/0x710 [ 860.657846] __should_failslab+0x124/0x180 [ 860.662078] should_failslab+0x9/0x14 [ 860.665959] kmem_cache_alloc+0x2af/0x760 [ 860.670202] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 860.675049] mmu_topup_memory_caches+0xf7/0x3a0 [ 860.679711] ? debug_check_no_locks_freed+0x310/0x310 [ 860.684913] kvm_mmu_load+0x21/0x10e0 [ 860.690193] ? kasan_check_write+0x14/0x20 [ 860.694424] vcpu_enter_guest+0x3a83/0x6060 [ 860.698738] ? perf_trace_lock+0xd6/0x900 [ 860.702882] ? print_usage_bug+0xc0/0xc0 [ 860.706939] ? kvm_set_msr_common+0x2680/0x2680 [ 860.711597] ? vmx_vcpu_load+0xadd/0xfe0 [ 860.715662] ? __lock_acquire+0x7f5/0x5140 [ 860.719890] ? vmx_vcpu_reset+0x1030/0x1030 [ 860.724201] ? graph_lock+0x170/0x170 [ 860.727996] ? graph_lock+0x170/0x170 [ 860.731792] ? __lock_acquire+0x7f5/0x5140 [ 860.736039] ? debug_check_no_locks_freed+0x310/0x310 [ 860.741232] ? __lock_is_held+0xb5/0x140 [ 860.745282] ? aa_change_profile+0x12d0/0x2fe0 [ 860.749860] ? lock_acquire+0x1dc/0x520 [ 860.753834] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 860.758857] ? lock_release+0xa10/0xa10 [ 860.762819] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 860.768088] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 860.772571] ? preempt_notifier_dec+0x20/0x20 [ 860.777067] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 860.781906] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 860.786927] kvm_vcpu_ioctl+0x79d/0x12e0 [ 860.790982] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 860.796685] ? graph_lock+0x170/0x170 [ 860.800478] ? find_held_lock+0x36/0x1c0 [ 860.804546] ? lock_downgrade+0x8e0/0x8e0 [ 860.808688] ? rcu_is_watching+0x85/0x140 [ 860.812828] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 860.818048] ? __fget+0x40c/0x650 [ 860.821495] ? match_held_lock+0x841/0x8b0 [ 860.825722] ? expand_files.part.8+0x9a0/0x9a0 [ 860.833170] ? kasan_check_write+0x14/0x20 [ 860.837400] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 860.842346] ? wait_for_completion+0x870/0x870 [ 860.846921] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 860.852103] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 860.857805] do_vfs_ioctl+0x1cf/0x16a0 [ 860.861688] ? ioctl_preallocate+0x2e0/0x2e0 [ 860.866096] ? fget_raw+0x20/0x20 [ 860.869540] ? __sb_end_write+0xac/0xe0 [ 860.873514] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 860.879041] ? fput+0x130/0x1a0 [ 860.882312] ? ksys_write+0x1a6/0x250 [ 860.886107] ? security_file_ioctl+0x94/0xc0 [ 860.890509] ksys_ioctl+0xa9/0xd0 [ 860.893958] __x64_sys_ioctl+0x73/0xb0 [ 860.897842] do_syscall_64+0x1b1/0x800 [ 860.901716] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 860.906551] ? syscall_return_slowpath+0x5c0/0x5c0 [ 860.911473] ? syscall_return_slowpath+0x30f/0x5c0 [ 860.916395] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 860.921761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 860.926601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 860.931777] RIP: 0033:0x455a09 2033/05/18 03:37:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 860.934958] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.942656] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 860.950347] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 860.957608] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 860.964864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 860.972134] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000003 2033/05/18 03:37:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xd71a000000000000}, 0x0) 2033/05/18 03:37:26 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x2000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 861.027768] FAT-fs (loop3): bogus number of reserved sectors [ 861.033687] FAT-fs (loop3): Can't find a valid FAT filesystem [ 861.045971] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, "1059493481b639195a8a2dd9ee3ff7e9c50e58fe75430138d7f00cfe322bea8af5c4de2e32bb0a6e99f963f4"}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x10001, 0x3, &(0x7f0000000340)=[{&(0x7f0000000100)="0bb2f40e2d749920dc9833ab42ff82dbd45a", 0x12, 0xc99}, {&(0x7f0000000140)="4962d7687a4fa2dcc971fc909facb72965ab115afacec68571a66c28605e8b3e7b2f675f70032135a43f7122f9c8f0fdf5c82519c173e773fc8b399b3868affd41bb3e5f1c70edb5e239827f74cd06d22d6fe9bc57207153ed60f92174177e8b00db92b389635c801c46b168fa31842a8a70293dee4d8307b40f0b65ea5373ee32877f67c5f07adb062bc928557abbb6716e9144ce829d6d2d312f8f41a61261bd1fed284481777b14cc8d4116b8536737980dd516b42dd22e37c484d9d047d6b6dfae4999744edb6249b90f7a6057311886248b2fb2a45a1c6c15120a69d59d06c367aa209fee69abb42d173651597b3c", 0xf1, 0x101}, {&(0x7f0000000240)="858b83e0eea2bd870ef9ae012bb3ab83dedd16b55cbd834a17b79315ba9d2b8bd8c830af7105c5bce7a0df2f85a10d3fcccfa6f15d7c6972b5345b715d2229b033938b84b89fda9a32f952d642ca75c98b3c7d26655ca20e87dba7f8c7172c0284db7875c44547ab6219d4631654cf3d5e005545e1cb263ef06e7e1f1ca83a63dab5dfa87bfa1ebbb1b12a2befa5583f74a14b2d115fdffffe3469c5faed2ce3b2e8a2dc002c6fd2c66af6195e93b6a0ff202cf0127932a442f4994b29addbc2ceedbd963d3e3104a6", 0xc9, 0xff}], 0x0, &(0x7f00000003c0)={[{@flush='flush', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@nfs_nostale_ro='nfs=nostale_ro', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}]}) r1 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0xab4, 0x199ddd729f4d5cf) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000440)={&(0x7f0000ffb000/0x3000)=nil, 0x9, 0x2, 0xa0, &(0x7f0000ffc000/0x1000)=nil, 0x10001}) io_setup(0x8, &(0x7f0000000480)=0x0) io_submit(r2, 0x2, &(0x7f00000006c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f00000004c0)="8cfc9d588cc76272544012a012262a90c0a54f5b5947662452315725cdb3681deb4b1c99b5d42631cbad7e8f26f5ab2c56a604e5ef55f79ba4e19dfe157a252deeabf2bdbc14a22a9cc675aa8660b4d11f4755a54fdf8141524c7ad4fcafa79879f0e6e1cb739e1262a1e37910dab4dd0ea19a3e5e50d9b2b0d06665325c70e3d259dfbb82c2168bb28016992094446e9e790e37f57efca7aaca227436e8ef1a67c8a12ee4b8df9eb5d8015cb6a3007f1bca533f72072728c56afd674e0ba9f9d45dcdc4e0", 0xc5, 0x8f, 0x0, 0x1, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xa, 0x0, r0, &(0x7f0000000600)="89364b5fce83c30389595fa99eb63e56d0d61aba1fd5285779afa80b075a6eb1b4e1c1b26bdcb146d177bd6392c00502ac6650db00f540b74877830cfcc6474f7d", 0x41, 0x8, 0x0, 0x0, r1}]) [ 861.105920] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:26 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xf401, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 861.177964] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:26 executing program 5: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) flock(r0, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fffffff, 0x8000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) 2033/05/18 03:37:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) [ 861.225340] FAT-fs (loop3): bogus number of reserved sectors [ 861.231290] FAT-fs (loop3): Can't find a valid FAT filesystem [ 861.274680] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 861.336130] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$addseals(r0, 0x409, 0x8) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x97bf, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000280004800d60816747731323e033010000000000000000010000007b6c6e6601000000"], 0xfffffffe}, 0x1}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/48) socket$nl_generic(0x10, 0x3, 0x10) 2033/05/18 03:37:26 executing program 2 (fault-call:13 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) 2033/05/18 03:37:26 executing program 7: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900)='/dev/hwrng\x00', 0x8100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r0, 0x405) fanotify_mark(r1, 0x3, 0x10000, r2, &(0x7f0000000940)='./file0/file0\x00') r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x9, 0x100) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000a80)={0x0, 0x8, 0x9}) sendmsg(r2, &(0x7f00000006c0)={&(0x7f0000000c00)=@ipx={0x4, 0xb0e, 0x10000000000000, "c08c1d33452f", 0x3}, 0x72, &(0x7f00000000c0), 0x18c, &(0x7f00000009c0)=ANY=[], 0x0, 0x2}, 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x6}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000a40)={0x5, 0x4, 0x2692, 0x8, r4}, 0x10) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000980)='/dev/rfkill\x00', 0x402, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000200)={0x100000000, 0x2}) syz_mount_image$ocfs2(&(0x7f0000000240)='ocfs2\x00', &(0x7f0000000280)='./file0\x00', 0x26, 0x8, &(0x7f0000000800)=[{&(0x7f00000002c0)="538ad2d6479ca98d8062930a7a00d7a5b758d1024452d7fa5ff3c4c76443f81c164e53b3a8873e2d7c28b8723b5287f8d56acace6aac1ecc6210ebf61d4a60735442916d72611a10f9a975128b5615830dd55bf8669d0bff5697e245aa633044dda91d131ee573ca5bf6e50b5003b3e2a7b9241f16c684e582b71511e923a86a3e57fe0e64bb3e87eece0c7053e1c276f4", 0x91, 0x5}, {&(0x7f0000000380)="3cc7430559bf721767ca1ff9d0b6", 0xe, 0x2}, {&(0x7f00000003c0)="c4084c3ce6b3998c106f2c9d8117c9ad95bb671486fdb947fe7f04de36d2d478407cef5d5dc2b20468358a5408222c5bb456cabc4066a567446c9e18cb0b317348228e3379e350a85c73317a7a2abfe0b5856a96b2b6c36350fedf298d8e3cd45792f8e17155acbe3e729f2817efc67e188501b71bccee9b07af20f7e2a6d498377204cb", 0x84, 0x4}, {&(0x7f0000000480)="5bc4d780e2408bf195c0ef077d5e4e73206c96bdca958ab6c63337755644ec8764f9c80168baba2038e76c2dcf3e", 0x2e, 0x2}, {&(0x7f00000004c0)="4dede49c3a890dd45c8d421877be", 0xe, 0x4}, {&(0x7f0000000500)="bec23c9af6099bbd32839480eb5b9b5e6fb126d75970bdb961fe882bfcec90970322ac7d546bb76d3a3309f63890726a5d924eeeaafdf8a3adf58b54cc3502cc56bfdb556042e7e434a66f2940c55c1f864868e1c02534d0f67257c02f0d608da735d6829de77befd9e48534e0b1210ef02b7856ef81c9b9e59884558fde71dfc1eae8369072edd6fc1cfde1cf31e18b3b13bc6504510e287520c914c21d29e231cf0dd5513e", 0xa6, 0x200}, {&(0x7f00000005c0)="d55fe49f6ee907ff68e8f5529d30786d463d298c263c284ce9c131f1ceb346a61f36c4eed3a3154c74c16e61503d3c6d8036125887c1472d8c8830f17a2b947235bbf8dd9ec4ffd282ba65e3edf6d21451289557a05c270f35c957a53a30705d18da2db798a765c57448dbfee5a56ce279e5bee3066969c6e31ed472f832a00f77e6ac873082d84dd154783a89a0d97d3ad59aa16ff80bbd1bde1678518139d886057f3866957a8058ae681929273e51ae80c8f186bfe0ce89ef0f7e6025cda060414f1e2aabb5d4b117fe15abc8393a70942558f5974fbf379d06cb8dd8d953e6bd1ca79d81c2a1e119737d34c7", 0xee, 0x9}, {&(0x7f0000000700)="1075ad02d11306acf29e8c039918408e92bfd9b9748fce458f78036444a01b240514514c6c0700c15ecfa3c08fd571a36f76e584bf1b3cab1c8e94fb2c89cc77a49707664a53eafcef8c1193ff791784ad3480869f2bb148e140aaadf8367314a98d5f0681a3b1488ac18f0a8756f4aac3288f653d908e2e251d71fb4fad9b1cbe1505b33994b472bcb03af7983f19f5585dae554d47189d7361ec5b30afce18b500c141dbbbe27c48d78ebe1a755fa776cc854dd5939d1f303c5dc17e44c8bcd3", 0xc1, 0x36a7}], 0x0, &(0x7f00000008c0)='wlan0ppp0*\x00') 2033/05/18 03:37:26 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0xff, &(0x7f000089b000), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8002) 2033/05/18 03:37:26 executing program 5: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:26 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x4, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 861.552190] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 861.554532] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:26 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfec00000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="393a340dbe917f91675803496016440c0da5d754df64e939237a535807a784f7f54da3a8e4b4605e1ac888a83701"], 0x10) [ 861.662067] FAULT_INJECTION: forcing a failure. [ 861.662067] name failslab, interval 1, probability 0, space 0, times 0 [ 861.673659] CPU: 1 PID: 22960 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 861.680947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.690307] Call Trace: [ 861.692918] dump_stack+0x1b9/0x294 [ 861.696563] ? dump_stack_print_info.cold.2+0x52/0x52 [ 861.701767] ? should_fail+0x20a/0xbcd [ 861.705673] should_fail.cold.4+0xa/0x1a [ 861.709750] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 861.714867] ? kasan_kmalloc+0xc4/0xe0 [ 861.718768] ? kasan_slab_alloc+0x12/0x20 [ 861.722927] ? kmem_cache_alloc+0x12e/0x760 [ 861.727261] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 861.732115] ? kvm_mmu_load+0x21/0x10e0 [ 861.736101] ? vcpu_enter_guest+0x3a83/0x6060 [ 861.740602] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 861.745630] ? graph_lock+0x170/0x170 [ 861.749446] ? do_syscall_64+0x1b1/0x800 [ 861.753520] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.758902] ? find_held_lock+0x36/0x1c0 [ 861.762981] ? __lock_is_held+0xb5/0x140 [ 861.767064] ? check_same_owner+0x320/0x320 [ 861.771399] ? rcu_note_context_switch+0x710/0x710 [ 861.776345] __should_failslab+0x124/0x180 [ 861.780590] should_failslab+0x9/0x14 [ 861.784401] kmem_cache_alloc+0x2af/0x760 [ 861.788604] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 861.793480] mmu_topup_memory_caches+0xf7/0x3a0 [ 861.798511] ? debug_check_no_locks_freed+0x310/0x310 [ 861.803723] kvm_mmu_load+0x21/0x10e0 [ 861.807541] ? kasan_check_write+0x14/0x20 [ 861.811793] vcpu_enter_guest+0x3a83/0x6060 [ 861.816132] ? print_usage_bug+0xc0/0xc0 [ 861.820208] ? kvm_set_msr_common+0x2680/0x2680 [ 861.824888] ? vmx_vcpu_load+0xadd/0xfe0 [ 861.828965] ? __lock_acquire+0x7f5/0x5140 [ 861.833249] ? vmx_vcpu_reset+0x1030/0x1030 [ 861.837605] ? graph_lock+0x170/0x170 [ 861.841418] ? graph_lock+0x170/0x170 [ 861.845231] ? __lock_acquire+0x7f5/0x5140 [ 861.849479] ? debug_check_no_locks_freed+0x310/0x310 [ 861.854679] ? __lock_is_held+0xb5/0x140 [ 861.858752] ? lock_acquire+0x1dc/0x520 2033/05/18 03:37:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0) 2033/05/18 03:37:27 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x4000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 861.862736] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 861.867767] ? lock_release+0xa10/0xa10 [ 861.871749] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 861.877037] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 861.881543] ? preempt_notifier_dec+0x20/0x20 [ 861.886056] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 861.890908] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 861.895946] kvm_vcpu_ioctl+0x79d/0x12e0 [ 861.900026] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 861.905761] ? graph_lock+0x170/0x170 [ 861.909572] ? find_held_lock+0x36/0x1c0 [ 861.913654] ? lock_downgrade+0x8e0/0x8e0 [ 861.917814] ? kasan_check_read+0x11/0x20 [ 861.921968] ? rcu_is_watching+0x85/0x140 [ 861.926126] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 861.931346] ? __fget+0x40c/0x650 [ 861.932761] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 861.934814] ? match_held_lock+0x841/0x8b0 [ 861.934834] ? expand_files.part.8+0x9a0/0x9a0 [ 861.934850] ? kasan_check_write+0x14/0x20 [ 861.934868] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 861.963123] ? wait_for_completion+0x870/0x870 [ 861.967717] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 861.972921] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 861.978637] do_vfs_ioctl+0x1cf/0x16a0 [ 861.982537] ? ioctl_preallocate+0x2e0/0x2e0 [ 861.986961] ? fget_raw+0x20/0x20 [ 861.990425] ? __sb_end_write+0xac/0xe0 [ 861.994434] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 861.999978] ? fput+0x130/0x1a0 [ 862.003290] ? ksys_write+0x1a6/0x250 [ 862.007115] ? security_file_ioctl+0x94/0xc0 [ 862.011535] ksys_ioctl+0xa9/0xd0 [ 862.015001] __x64_sys_ioctl+0x73/0xb0 [ 862.018903] do_syscall_64+0x1b1/0x800 [ 862.022808] ? finish_task_switch+0x1ca/0x840 [ 862.027318] ? syscall_return_slowpath+0x5c0/0x5c0 [ 862.032274] ? syscall_return_slowpath+0x30f/0x5c0 [ 862.037222] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 862.042575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 862.047403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 862.052571] RIP: 0033:0x455a09 [ 862.055759] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.063466] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 862.070728] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 862.077993] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 862.085263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 862.092515] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000004 2033/05/18 03:37:27 executing program 3: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, &(0x7f0000000000), &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'bond_slave_1\x00', 'yam0\x00', 'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [0x0, 0x0, 0x0, 0x2], 0xa8, 0x148, 0x198, [@cluster={'cluster\x00', 0x10}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipddp0\x00', 'syz_tun\x00', 'ifb0\x00', @random="60f9a9d474aa", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x70, 0x1a0}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x440) 2033/05/18 03:37:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x1779}, {0xa, 0x4e21, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x10000}, 0x6, [0x10000, 0x8000, 0x9, 0x0, 0x5f9f, 0x3f, 0xffffffffffffffff, 0x4]}, 0x5c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2000, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000140)=0x400) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000029000000d70e1958e2b6b602000002000000"], 0x28}}], 0x1, 0x0) 2033/05/18 03:37:27 executing program 5: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:27 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x80fe, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 2033/05/18 03:37:27 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080)=0x7, 0x4) r1 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='\x00', 0x0) r2 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)='mime_typeself-]\x00', 0x0) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="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", 0xfa, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/22, 0x16, &(0x7f0000000440)={&(0x7f00000003c0)={'sm3\x00'}, &(0x7f0000000400)="3ad3791bf91f4068729367c3d91cd9bdc7c77fda546784b2ea4274a98a97178b2ad5e0ea833dacb85f7d9de9", 0x2c}) 2033/05/18 03:37:27 executing program 2 (fault-call:13 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000180)=0x3, 0x4) ioctl$TIOCCBRK(r4, 0x5428) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000000)=""/205) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000300)="c4e12dfbf60f3066bad00466edb8010000000f01d9b97b0a0000b80e640000ba000000000f3066baf80cb8f4fbbe86ef66bafc0c66ed66b87a008ec80f01c3410f30660ffa8e08000000", 0x4a}], 0x1, 0x0, &(0x7f0000000400), 0x1029) [ 862.445418] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 862.468656] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'broute' 2033/05/18 03:37:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:27 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x500, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:27 executing program 7: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f00000000c0)='./bus\x00', 0x2, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="37ad", 0x2, 0x2}, {&(0x7f0000000180)="699cd040845f022006c8eecaf4438c", 0xf, 0xfffffffffffffff9}], 0x40000, &(0x7f0000000200)={[{@balloc_test4='block-allocator=test4', 0x2c}, {@resize={'resize', 0x3d, [0x36, 0x35]}, 0x2c}, {@errors_ro_remount='errors=ro-remount', 0x2c}, {@jqfmt_vfsv0='jqfmt=vfsv0', 0x2c}, {@barrier_flush='barrier=flush', 0x2c}]}) open(&(0x7f0000000040)='./bus\x00', 0x40, 0x0) truncate(&(0x7f0000000100)='./bus\x00', 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x80000000) 2033/05/18 03:37:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x141082, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x4, 0x8, 0x8}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x440040, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000400)={{0x7002, 0x1, 0x1d, 0xa26d, 0x8, 0x6, 0xfffffffffffffffa, 0x40, 0x4, 0x200, 0x100000001, 0xd28}, {0x7000, 0xf001, 0x9, 0x20, 0xffff, 0xf9, 0x7ff, 0xfffffffffffffffe, 0x9969, 0x8, 0x100000000}, {0x6000, 0xf000, 0x1f, 0x8, 0x7fe, 0x100000001, 0x1, 0x81, 0x7, 0x100000000, 0xfff, 0xffffffff7fffffff}, {0x107000, 0xf002, 0xe, 0x2, 0x52, 0x1, 0xaa, 0x200, 0xffff, 0x1ff, 0x76, 0x100000001}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x487, 0x0, 0x7, 0x1, 0x7, 0x2}, {0x10f000, 0x2, 0x1e, 0x1, 0x9, 0x0, 0x8, 0xb2, 0x7, 0xa2, 0x400, 0x40}, {0xf000, 0x6000, 0x1f, 0x0, 0x7fff, 0x88, 0x6, 0x1, 0x7ff, 0xfffffffffffffff9, 0x5, 0x400}, {0x3000, 0x103000, 0xb, 0x4, 0xba9, 0x6, 0x8, 0x3ff, 0x200, 0x2, 0x1, 0xff}, {0x10006}, {0x7001}, 0x10006, 0x0, 0xd000, 0x12004, 0x9, 0x4000, 0x4, [0x80, 0x4, 0x116e, 0x6]}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x0, 0xfdfdffff, 0x0, 0x0, 0x2}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000001c0)={0x200, 0x4}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000200)=""/33) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000280)={0x0, 0xfffffffffffffffe}) [ 862.591823] FAULT_INJECTION: forcing a failure. [ 862.591823] name failslab, interval 1, probability 0, space 0, times 0 [ 862.603162] CPU: 0 PID: 23020 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 862.610443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.612162] Unknown ioctl 21544 [ 862.619807] Call Trace: [ 862.619836] dump_stack+0x1b9/0x294 [ 862.619856] ? dump_stack_print_info.cold.2+0x52/0x52 [ 862.619882] ? __save_stack_trace+0x7e/0xd0 [ 862.638859] should_fail.cold.4+0xa/0x1a [ 862.642941] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 862.648061] ? kasan_kmalloc+0xc4/0xe0 [ 862.652023] ? kasan_slab_alloc+0x12/0x20 [ 862.655098] Unknown ioctl 21544 [ 862.656194] ? kmem_cache_alloc+0x12e/0x760 [ 862.656213] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 862.656230] ? kvm_mmu_load+0x21/0x10e0 [ 862.656246] ? vcpu_enter_guest+0x3a83/0x6060 [ 862.656264] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 862.682145] ? graph_lock+0x170/0x170 [ 862.685956] ? do_syscall_64+0x1b1/0x800 2033/05/18 03:37:27 executing program 3: setgroups(0x2, &(0x7f0000000340)=[0x0, 0x0]) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getgroups(0x1, &(0x7f0000000400)=[r0]) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rtc0\x00', 0x80000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000600)={@remote, 0x0}, &(0x7f0000000640)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000680)={@empty, 0x23, r2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000040)) io_setup(0x401, &(0x7f0000000080)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f00000000c0)="811607bc5315a16396b7840218cbddf2bdd27cb169bb04d510611d3b780c320f7531d19a6578a3379656ea82b95c3756edf15ce1a186fb78ddda200445c6f6220a26da6e5d7d5cc1c301f95927d881eab1e5bb0e4f427a0ede304863a6fad1869a3ad57fe91bc210c9457d77fe1522ae1c398afcf407fe43938d2d93174068fbed323f0dd6de708fd0ba7fa81a009d2e7fa5e8c09395ff906bf9d601839e3724d1455d263fccaeada547e28edf0d05a4ba30e6f0e3bb9319a25a66f0abc3ffb8687a171e9df0c5202a2898aad6614f2e4fdc3b", 0xd3, 0x1f, 0x0, 0x1, r3}, &(0x7f0000000200)) ioctl$sock_netrom_SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000003c0)) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000240)={'nat\x00'}, &(0x7f00000002c0)=0x54) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x8000, 0x0) getsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f0000000300), &(0x7f0000000380)=0x4) 2033/05/18 03:37:27 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 862.690020] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 862.695399] ? find_held_lock+0x36/0x1c0 [ 862.699490] ? __lock_is_held+0xb5/0x140 [ 862.703575] ? check_same_owner+0x320/0x320 [ 862.707912] ? rcu_note_context_switch+0x710/0x710 [ 862.712857] __should_failslab+0x124/0x180 [ 862.717110] should_failslab+0x9/0x14 [ 862.720921] kmem_cache_alloc+0x2af/0x760 [ 862.725083] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 862.729941] mmu_topup_memory_caches+0xf7/0x3a0 [ 862.734619] ? debug_check_no_locks_freed+0x310/0x310 [ 862.739833] kvm_mmu_load+0x21/0x10e0 [ 862.743646] ? kasan_check_write+0x14/0x20 [ 862.747899] vcpu_enter_guest+0x3a83/0x6060 [ 862.752230] ? print_usage_bug+0xc0/0xc0 [ 862.756302] ? kvm_set_msr_common+0x2680/0x2680 [ 862.761152] ? vmx_vcpu_load+0xadd/0xfe0 [ 862.765227] ? __lock_acquire+0x7f5/0x5140 [ 862.769472] ? vmx_vcpu_reset+0x1030/0x1030 [ 862.773888] ? graph_lock+0x170/0x170 [ 862.777695] ? graph_lock+0x170/0x170 [ 862.781507] ? __lock_acquire+0x7f5/0x5140 [ 862.785750] ? debug_check_no_locks_freed+0x310/0x310 2033/05/18 03:37:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x1ad7}, 0x0) [ 862.790951] ? __lock_is_held+0xb5/0x140 [ 862.795018] ? lock_acquire+0x1dc/0x520 [ 862.798998] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 862.804026] ? lock_release+0xa10/0xa10 [ 862.808007] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 862.813290] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 862.817797] ? preempt_notifier_dec+0x20/0x20 [ 862.822309] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 862.827159] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 862.832189] kvm_vcpu_ioctl+0x79d/0x12e0 [ 862.836265] ? kvm_uevent_notify_change.part.29+0x440/0x440 2033/05/18 03:37:28 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 862.841989] ? graph_lock+0x170/0x170 [ 862.845803] ? find_held_lock+0x36/0x1c0 [ 862.849881] ? lock_downgrade+0x8e0/0x8e0 [ 862.854046] ? kasan_check_read+0x11/0x20 [ 862.858204] ? rcu_is_watching+0x85/0x140 [ 862.862360] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 862.867566] ? __fget+0x40c/0x650 [ 862.871031] ? match_held_lock+0x841/0x8b0 [ 862.875279] ? expand_files.part.8+0x9a0/0x9a0 [ 862.879871] ? kasan_check_write+0x14/0x20 [ 862.884114] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 862.889060] ? wait_for_completion+0x870/0x870 [ 862.893673] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 862.898880] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 862.904607] do_vfs_ioctl+0x1cf/0x16a0 [ 862.908513] ? ioctl_preallocate+0x2e0/0x2e0 [ 862.912936] ? fget_raw+0x20/0x20 [ 862.916405] ? __sb_end_write+0xac/0xe0 [ 862.920396] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 862.925943] ? fput+0x130/0x1a0 [ 862.929252] ? ksys_write+0x1a6/0x250 [ 862.933074] ? security_file_ioctl+0x94/0xc0 [ 862.937492] ksys_ioctl+0xa9/0xd0 [ 862.940961] __x64_sys_ioctl+0x73/0xb0 [ 862.944859] do_syscall_64+0x1b1/0x800 [ 862.948756] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 862.953700] ? syscall_return_slowpath+0x5c0/0x5c0 [ 862.958638] ? syscall_return_slowpath+0x30f/0x5c0 [ 862.963628] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 862.969005] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 862.973864] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 862.979062] RIP: 0033:0x455a09 [ 862.982255] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2033/05/18 03:37:28 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 862.989974] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 862.997249] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 863.004520] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 863.011971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 863.019266] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000005 [ 863.051490] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:28 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x400000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x71, &(0x7f0000000280), 0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x4, 0x2, 0x4000000, 0x100000000]}, &(0x7f0000000040)=0xc) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x200, 0x80400) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f00000000c0)={0x3, 0x5, 0x5}) close(r2) close(r1) 2033/05/18 03:37:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x2}, 0x0) 2033/05/18 03:37:28 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000040)={0x6, 0x14, [0x401, 0x1, 0x8, 0x4, 0x2]}) r3 = epoll_create(0xdc1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r3, 0x80000) 2033/05/18 03:37:28 executing program 2 (fault-call:13 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:28 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semtimedop(r0, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x3, 0xfffffffffffffffd}, {0x0, 0x808d}], 0x2, &(0x7f0000034000)={0x77359400}) prctl$setmm(0x23, 0x5, &(0x7f0000ffb000/0x4000)=nil) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000fbd000)=[0x7fff]) semtimedop(r0, &(0x7f0000000000)=[{0x5, 0xfffffffffffffff8, 0x1000}, {0x3, 0xcab5, 0x800}, {0x2, 0xffffffffffffffcd, 0x1800}, {0xcdb1f6fe2cc5d69d, 0x4, 0x800}, {0x4, 0x7f, 0x1800}, {0x0, 0xff, 0x800}], 0x6, &(0x7f0000000040)={0x0, 0x1c9c380}) 2033/05/18 03:37:28 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x9000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:28 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:28 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xffe0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 863.316510] validate_nla: 4 callbacks suppressed [ 863.316519] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 863.336868] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:28 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='jdev=.']) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x7) 2033/05/18 03:37:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0) [ 863.432058] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:28 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x300, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 863.479682] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 [ 863.507799] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 863.518208] FAULT_INJECTION: forcing a failure. [ 863.518208] name failslab, interval 1, probability 0, space 0, times 0 [ 863.518226] CPU: 0 PID: 23110 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 863.518234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.518248] Call Trace: [ 863.548688] dump_stack+0x1b9/0x294 [ 863.552336] ? dump_stack_print_info.cold.2+0x52/0x52 [ 863.557540] ? __save_stack_trace+0x7e/0xd0 [ 863.561891] should_fail.cold.4+0xa/0x1a [ 863.565972] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 863.571090] ? kasan_kmalloc+0xc4/0xe0 [ 863.574990] ? kasan_slab_alloc+0x12/0x20 [ 863.579147] ? kmem_cache_alloc+0x12e/0x760 [ 863.583479] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 863.588333] ? kvm_mmu_load+0x21/0x10e0 [ 863.592318] ? vcpu_enter_guest+0x3a83/0x6060 [ 863.596824] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 863.601850] ? graph_lock+0x170/0x170 [ 863.605661] ? do_syscall_64+0x1b1/0x800 [ 863.609731] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 863.615096] ? find_held_lock+0x36/0x1c0 [ 863.619145] ? __lock_is_held+0xb5/0x140 [ 863.623210] ? check_same_owner+0x320/0x320 [ 863.627523] ? rcu_note_context_switch+0x710/0x710 [ 863.632445] __should_failslab+0x124/0x180 [ 863.636680] should_failslab+0x9/0x14 [ 863.640474] kmem_cache_alloc+0x2af/0x760 [ 863.644615] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 863.649444] mmu_topup_memory_caches+0xf7/0x3a0 [ 863.654111] ? debug_check_no_locks_freed+0x310/0x310 [ 863.659298] kvm_mmu_load+0x21/0x10e0 [ 863.663091] ? kasan_check_write+0x14/0x20 [ 863.667320] vcpu_enter_guest+0x3a83/0x6060 [ 863.671642] ? print_usage_bug+0xc0/0xc0 [ 863.675697] ? kvm_set_msr_common+0x2680/0x2680 [ 863.680356] ? vmx_vcpu_load+0xadd/0xfe0 [ 863.684415] ? __lock_acquire+0x7f5/0x5140 [ 863.688649] ? vmx_vcpu_reset+0x1030/0x1030 [ 863.692962] ? graph_lock+0x170/0x170 [ 863.696759] ? graph_lock+0x170/0x170 [ 863.700549] ? __lock_acquire+0x7f5/0x5140 [ 863.704785] ? debug_check_no_locks_freed+0x310/0x310 [ 863.709969] ? __lock_is_held+0xb5/0x140 [ 863.714028] ? lock_acquire+0x1dc/0x520 [ 863.717995] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 863.723018] ? lock_release+0xa10/0xa10 [ 863.726984] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 863.732269] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 863.736753] ? preempt_notifier_dec+0x20/0x20 [ 863.741241] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 863.746068] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 863.751088] kvm_vcpu_ioctl+0x79d/0x12e0 [ 863.755152] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 863.760857] ? graph_lock+0x170/0x170 [ 863.764643] ? find_held_lock+0x36/0x1c0 [ 863.768692] ? lock_downgrade+0x8e0/0x8e0 [ 863.772833] ? kasan_check_read+0x11/0x20 [ 863.776976] ? rcu_is_watching+0x85/0x140 [ 863.781125] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 863.786303] ? __fget+0x40c/0x650 [ 863.789751] ? match_held_lock+0x841/0x8b0 [ 863.793984] ? expand_files.part.8+0x9a0/0x9a0 [ 863.798563] ? kasan_check_write+0x14/0x20 [ 863.802796] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 863.807723] ? wait_for_completion+0x870/0x870 [ 863.812470] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 863.817657] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 863.823359] do_vfs_ioctl+0x1cf/0x16a0 [ 863.827236] ? ioctl_preallocate+0x2e0/0x2e0 [ 863.831633] ? fget_raw+0x20/0x20 [ 863.835072] ? __sb_end_write+0xac/0xe0 [ 863.839045] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 863.844583] ? fput+0x130/0x1a0 [ 863.847864] ? ksys_write+0x1a6/0x250 [ 863.851675] ? security_file_ioctl+0x94/0xc0 [ 863.856081] ksys_ioctl+0xa9/0xd0 [ 863.859534] __x64_sys_ioctl+0x73/0xb0 [ 863.863412] do_syscall_64+0x1b1/0x800 [ 863.867292] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 863.872125] ? syscall_return_slowpath+0x5c0/0x5c0 [ 863.877051] ? syscall_return_slowpath+0x30f/0x5c0 [ 863.881974] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 863.887333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 863.892164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 863.897340] RIP: 0033:0x455a09 [ 863.900538] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.908251] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 863.915522] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 863.922786] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:37:29 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 863.930047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 863.937318] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000006 [ 863.984211] REISERFS warning (device loop7): sh-2021 reiserfs_fill_super: can not find reiserfs on loop7 2033/05/18 03:37:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 2033/05/18 03:37:29 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x5, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:29 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x80000, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xfffffffffffffc72) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3800003, 0x10010, r0, 0x3) 2033/05/18 03:37:29 executing program 2 (fault-call:13 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:29 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:29 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x4) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x1018}], 0x333) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0xffffffff, 0x3, 0x31, &(0x7f0000ffd000/0x3000)=nil, 0x1d7}) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000000)) 2033/05/18 03:37:29 executing program 3: r0 = socket(0x4, 0x1, 0x100c2) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000080607041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:29 executing program 7: timer_create(0x4, &(0x7f0000000000)={0x0, 0x16, 0x3}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x100000, &(0x7f0000000740)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}, {@commit={'commit', 0x3d, [0x33, 0x0]}, 0x2c}]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x400000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0x738, 0x510, 0x138, 0x390, 0x390, 0x510, 0x668, 0x668, 0x668, 0x668, 0x668, 0x6, &(0x7f00000005c0), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv6=@dev={0xfe, 0x80, [], 0x1b}, 0x32, 0x27, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d5, 0x10000, 0xffff, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @rand_addr=0x80000000}, @loopback={0x0, 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xffffff00], 'veth0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x3a, 0x0, 0x4, 0x67454f71adc010ed}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2=0xe0000002, @ipv6=@mcast2={0xff, 0x2, [], 0x1}, 0x17, 0x6, 0xffff}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xffffffff, 0xffffffff], 'team_slave_1\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x67}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80000001, 0x2, 0x1, [0x90, 0x14, 0x8000, 0x401, 0x1, 0x80000001, 0x8, 0x4, 0x2, 0x9, 0x3ff, 0xffff, 0x5, 0x7fff, 0x1, 0x3], 0x7}}, @common=@dst={0x48, 'dst\x00', 0x0, {0x7, 0x1, 0x1, [0x1, 0x1ff, 0x9, 0x1, 0x4, 0x3, 0x7fffffff, 0xfff, 0x1, 0x5, 0x9, 0xae, 0x80000001, 0x9b8b, 0x7fffffff, 0xfff], 0x7}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0xb0, 0x4, 0x1, [0x8000, 0xffffffffffffff81, 0x4, 0x80000001, 0xffffffffffffde12, 0x3, 0x80000001, 0xf5, 0x15, 0xfffffffffffffffd, 0x8, 0x200, 0x7fff, 0x4, 0x800, 0x10000], 0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, @ipv4=@multicast2=0xe0000002, 0x24, 0x28, 0x3f}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x798) 2033/05/18 03:37:29 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xeffdffff, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 864.214854] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 864.218976] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 864.252782] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 2033/05/18 03:37:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0xa, 0x6, 0x0) ioctl(r1, 0x4, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x22000, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xa89, 0x2) linkat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x1000) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200020c000000ffffffffffffffff020000000000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000020200000000030005000000000002004e20e094b77f910000000000000000000000000000000000"], 0x60}, 0x1}, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000100)={0x101, 0x8, 0x7, 0xffffffffffffffa3, 0x9, 0xffffffff}) 2033/05/18 03:37:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 2033/05/18 03:37:29 executing program 7: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) rt_sigtimedwait(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) rt_sigtimedwait(&(0x7f0000448000)={0x2}, &(0x7f0000000040), &(0x7f00007adff0)={0x77359400}, 0x8) read(r1, &(0x7f0000000140)=""/117, 0x75) [ 864.367406] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:29 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfec0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 864.476968] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 864.497060] FAULT_INJECTION: forcing a failure. [ 864.497060] name failslab, interval 1, probability 0, space 0, times 0 [ 864.508388] CPU: 0 PID: 23168 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 864.515664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.525006] Call Trace: [ 864.527594] dump_stack+0x1b9/0x294 [ 864.531214] ? dump_stack_print_info.cold.2+0x52/0x52 [ 864.536394] ? __save_stack_trace+0x7e/0xd0 [ 864.540708] should_fail.cold.4+0xa/0x1a [ 864.544761] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 864.549856] ? kasan_kmalloc+0xc4/0xe0 [ 864.553733] ? kasan_slab_alloc+0x12/0x20 [ 864.557883] ? kmem_cache_alloc+0x12e/0x760 [ 864.562197] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 864.567033] ? kvm_mmu_load+0x21/0x10e0 [ 864.571001] ? vcpu_enter_guest+0x3a83/0x6060 [ 864.575488] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 864.580492] ? graph_lock+0x170/0x170 [ 864.584284] ? do_syscall_64+0x1b1/0x800 [ 864.588333] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 864.593862] ? find_held_lock+0x36/0x1c0 [ 864.597924] ? __lock_is_held+0xb5/0x140 [ 864.601975] ? trace_event_raw_event_amdgpu_vm_set_ptes+0x1e0/0x340 [ 864.608384] ? check_same_owner+0x320/0x320 [ 864.612704] ? rcu_note_context_switch+0x710/0x710 [ 864.617644] __should_failslab+0x124/0x180 [ 864.621871] should_failslab+0x9/0x14 [ 864.625659] kmem_cache_alloc+0x2af/0x760 [ 864.629798] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 864.634630] mmu_topup_memory_caches+0xf7/0x3a0 [ 864.639287] ? debug_check_no_locks_freed+0x310/0x310 [ 864.644465] kvm_mmu_load+0x21/0x10e0 [ 864.648257] ? kasan_check_write+0x14/0x20 [ 864.652482] vcpu_enter_guest+0x3a83/0x6060 [ 864.656801] ? print_usage_bug+0xc0/0xc0 [ 864.660856] ? kvm_set_msr_common+0x2680/0x2680 [ 864.665511] ? vmx_vcpu_load+0xadd/0xfe0 [ 864.669557] ? __lock_acquire+0x7f5/0x5140 [ 864.673788] ? vmx_vcpu_reset+0x1030/0x1030 [ 864.678097] ? graph_lock+0x170/0x170 [ 864.681887] ? graph_lock+0x170/0x170 [ 864.685677] ? __lock_acquire+0x7f5/0x5140 [ 864.689902] ? debug_check_no_locks_freed+0x310/0x310 [ 864.695082] ? __lock_is_held+0xb5/0x140 [ 864.699130] ? trace_event_raw_event_amdgpu_vm_copy_ptes+0x260/0x2c0 [ 864.705612] ? lock_acquire+0x1dc/0x520 [ 864.709572] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 864.714588] ? lock_release+0xa10/0xa10 [ 864.718552] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 864.723817] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 864.728300] ? preempt_notifier_dec+0x20/0x20 [ 864.732789] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 864.737616] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 864.742629] kvm_vcpu_ioctl+0x79d/0x12e0 [ 864.746678] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 864.752374] ? graph_lock+0x170/0x170 [ 864.756163] ? find_held_lock+0x36/0x1c0 [ 864.760222] ? lock_downgrade+0x8e0/0x8e0 [ 864.764372] ? kasan_check_read+0x11/0x20 [ 864.768506] ? rcu_is_watching+0x85/0x140 [ 864.772643] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 864.777838] ? __fget+0x40c/0x650 [ 864.781278] ? match_held_lock+0x841/0x8b0 [ 864.785507] ? expand_files.part.8+0x9a0/0x9a0 [ 864.790077] ? kasan_check_write+0x14/0x20 [ 864.794310] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 864.799229] ? wait_for_completion+0x870/0x870 [ 864.803803] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 864.808979] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 864.814683] do_vfs_ioctl+0x1cf/0x16a0 [ 864.818568] ? ioctl_preallocate+0x2e0/0x2e0 [ 864.822968] ? fget_raw+0x20/0x20 [ 864.826435] ? __sb_end_write+0xac/0xe0 [ 864.830399] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 864.835935] ? fput+0x130/0x1a0 [ 864.839203] ? ksys_write+0x1a6/0x250 [ 864.842997] ? security_file_ioctl+0x94/0xc0 [ 864.847402] ksys_ioctl+0xa9/0xd0 [ 864.850858] __x64_sys_ioctl+0x73/0xb0 [ 864.854748] do_syscall_64+0x1b1/0x800 [ 864.858626] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 864.863460] ? syscall_return_slowpath+0x5c0/0x5c0 [ 864.868389] ? syscall_return_slowpath+0x30f/0x5c0 [ 864.873313] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 864.878668] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 864.883502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 864.888681] RIP: 0033:0x455a09 [ 864.891863] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.899573] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 864.906834] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 864.914100] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 864.921358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 2033/05/18 03:37:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 864.928613] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000007 [ 864.991990] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:30 executing program 3: r0 = socket$inet6(0xa, 0x100040000080806, 0x8000000000000000) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20, 0x807}, 0x1c) 2033/05/18 03:37:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xf0}, 0x0) 2033/05/18 03:37:30 executing program 2 (fault-call:13 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:30 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x40000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:30 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:30 executing program 7: socket(0xa, 0x1, 0x7fffffff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r0) 2033/05/18 03:37:30 executing program 0: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000000)=0x24) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r2 = getgid() fchown(r0, r1, r2) 2033/05/18 03:37:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x305, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) recvfrom(r1, &(0x7f0000000180)=""/226, 0x20000262, 0x0, &(0x7f0000000280)=@sco={0x1f}, 0x707000) [ 865.588421] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 865.600167] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:30 executing program 7: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)="6370757365742e6370755f6578636c7573697665006a1f0719e85261cbeb265cf8dc0033fe9c45a4cd7de81c5d69adb36c67d6daf95d3e083e4c0e2ab34f4222b86fca2f212738ae5b0900ed1628d164d0b04ad5b482194078efa6354a61a9a8be4025bed72b442de001e39b34771292fa261b6863924c977b0300d6d803ad7ac96db1282a2bfc7ba5529fed5ec7facc2cc4d9b1bae7f4dd525c", 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = socket(0xa, 0x2, 0x0) keyctl$clear(0x7, r1) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000004c0)={r3, 0xfff, 0x7, "ad13fe126f1960a3f932b51a3f2de1bb230f932d358dab9595b29b575d5e1f591cd11dd891f1855e3f0e8d3274250420bd8950e5af457b8a3bb08758a30c1a340b85630de444ad83bd28a5dea8e2738d22021524072826b6e894b817d1d74c72bc07e906f8ffb60cae8108331a9f3784fe8c67b14c8c4f09d1abe1c9398e474493a07bc9340eee0821bfc60970f9f4ffa62f155cf267d4b777a8a08728a9fc4c091d2d8d0fdc34f232c0c7f89f1fbfd9ed45f577a4af45990fe1bcdf144022669fb0cbdef2bf9b4f1b15d9bf76d7f96266dd7e3650adccea35e9d281b810c8"}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/sockcreate\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000000680)={0x11}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r5}, &(0x7f0000000380)=""/132, 0x84, 0x0) 2033/05/18 03:37:30 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x1c000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup(r0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="c76bcd181655d577110a8b99075e5f1790299bd129f5d25f229430850671c8f49be39b31c8115d9ce6fa517b05ace4ef402b8f2a554ca2d88f373bbf9df335c341f52967c8b5701e80be36fc578429d1450618d23b2309757704dcf283684fdecae5ac44a7a5479238", 0x69}], 0x1, &(0x7f00000002c0)=[{0x90, 0x11f, 0x80000000, "e5cc30ed5286cd15d1f6cb0a19dc2bc4cf2a62f4d48c3e94708dc1f2d23572fda00e180d8cbdedd0a29e0a9c90ae7a5997e3e9047132f43c52cfbf21f2c82fe884b0d899fb789897f3585f9fae49908a8aff3de7dfb0f9f9f7541d6f9c3cdacc629fa4dc8bee0f2c41b76d60ed9d13c0afe29756efc7e5a3ce"}, {0x28, 0x115, 0x6, "216aff5ab0de401731347d3c7b92204d3f40a08adb"}, {0x1010, 0x84, 0xf80000000000, "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"}, {0x78, 0x11f, 0x400, "73ecc03b767b7523ad9b8af625173cc910357d5e23898beae2c47994aac73e0de52809a358416053497f941c285d35bcda195a35fe731ef41dd7c3f6987abed9ed5009b9cdc7f53d6b1d61284e448893adf4706b8c8ad284ad18e8aaa1f7d58d28cf"}, {0x108, 0x10f, 0x8, "cb37cc17c8788f8e20159838e28616aea3ab60938b8f80dfca601ccdffcb5c81b0f06b027ad0484500d3805b746dcda8f45f173a3a9ce0fff3eb37e50d2e3afc80c68c27f1921b6a4dadb9e8a7b5a5b1720fba92010640aefb75639d0b4dc78b0d8974f1d1cac3f40401bb2758ea3c82f37cfcee593ef84f01700fa3a6c2916041f1583a28eda1d066062d7ff5ec6766fa5c3fd24238f9dffab6a5cf1659257cc9be582862cf85d40abdb5880f4fb91b0627b11cdee5543b2586997a03d51f95f1e3788058904b3168500ec75e6f6f3fe651e919706d6237d0597c4f884b402b5a1112fffacd20e174d638c3c092af8dc090fa19673cd5af"}], 0x1248, 0x8000}, 0x4004000) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x182) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xffffffffffffffc2}, 0x1}, 0x200) 2033/05/18 03:37:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2033/05/18 03:37:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x4da}, 0x0) 2033/05/18 03:37:31 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x400300, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x801) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x8000, 0x100000001, 0x81, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x4, 0x0, 0x0, 0x80000000, 0x6}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000180)={r1, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r1, 0x6, 0x7, 0x7fff, 0xffffffff, 0x9}, &(0x7f00000003c0)=0x14) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000300)=0x20, &(0x7f0000000340)=0x4) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000280)=0x4) signalfd(r0, &(0x7f00000000c0)={0x7}, 0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000400)=0xfffffffffffffe84) msgctl$IPC_RMID(0x0, 0x0) [ 865.770507] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 865.792982] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000040)={"62726f75746500000000000000000200", 0x0, 0x3, 0x6f, [], 0x0, &(0x7f0000000000), &(0x7f0000000200)=""/146}, &(0x7f0000000000)=0x78) [ 865.988566] FAULT_INJECTION: forcing a failure. [ 865.988566] name failslab, interval 1, probability 0, space 0, times 0 [ 865.999977] CPU: 0 PID: 23232 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 866.007247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.016595] Call Trace: [ 866.019195] dump_stack+0x1b9/0x294 [ 866.022836] ? dump_stack_print_info.cold.2+0x52/0x52 [ 866.028028] ? __save_stack_trace+0x7e/0xd0 [ 866.032346] should_fail.cold.4+0xa/0x1a [ 866.036410] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 866.041502] ? kasan_kmalloc+0xc4/0xe0 [ 866.045381] ? kasan_slab_alloc+0x12/0x20 [ 866.049514] ? kmem_cache_alloc+0x12e/0x760 [ 866.053835] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 866.058663] ? kvm_mmu_load+0x21/0x10e0 [ 866.062632] ? vcpu_enter_guest+0x3a83/0x6060 [ 866.067115] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 866.072143] ? graph_lock+0x170/0x170 [ 866.075933] ? do_syscall_64+0x1b1/0x800 [ 866.079983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 866.085345] ? find_held_lock+0x36/0x1c0 [ 866.089401] ? __lock_is_held+0xb5/0x140 [ 866.093458] ? psmouse_smbus_notifier_call+0x120/0x750 [ 866.098744] ? check_same_owner+0x320/0x320 [ 866.103057] ? rcu_note_context_switch+0x710/0x710 [ 866.107976] __should_failslab+0x124/0x180 [ 866.112205] should_failslab+0x9/0x14 [ 866.116003] kmem_cache_alloc+0x2af/0x760 [ 866.120150] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 866.124991] mmu_topup_memory_caches+0xf7/0x3a0 [ 866.129740] ? debug_check_no_locks_freed+0x310/0x310 [ 866.134921] kvm_mmu_load+0x21/0x10e0 [ 866.138724] ? kasan_check_write+0x14/0x20 [ 866.142949] vcpu_enter_guest+0x3a83/0x6060 [ 866.147262] ? print_usage_bug+0xc0/0xc0 [ 866.151315] ? kvm_set_msr_common+0x2680/0x2680 [ 866.155970] ? vmx_vcpu_load+0xadd/0xfe0 [ 866.160025] ? __lock_acquire+0x7f5/0x5140 [ 866.164248] ? vmx_vcpu_reset+0x1030/0x1030 [ 866.168554] ? graph_lock+0x170/0x170 [ 866.172339] ? graph_lock+0x170/0x170 [ 866.176126] ? __lock_acquire+0x7f5/0x5140 [ 866.180349] ? debug_check_no_locks_freed+0x310/0x310 [ 866.185528] ? __lock_is_held+0xb5/0x140 [ 866.189576] ? psmouse_smbus_create_companion+0x1c0/0x240 [ 866.195116] ? lock_acquire+0x1dc/0x520 [ 866.199083] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 866.204094] ? lock_release+0xa10/0xa10 [ 866.208064] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 866.213333] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 866.217831] ? preempt_notifier_dec+0x20/0x20 [ 866.222341] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 866.227181] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 866.232196] kvm_vcpu_ioctl+0x79d/0x12e0 [ 866.236250] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 866.241948] ? graph_lock+0x170/0x170 [ 866.245742] ? find_held_lock+0x36/0x1c0 [ 866.249799] ? lock_downgrade+0x8e0/0x8e0 [ 866.253957] ? kasan_check_read+0x11/0x20 [ 866.258095] ? rcu_is_watching+0x85/0x140 [ 866.262231] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 866.267414] ? __fget+0x40c/0x650 [ 866.270857] ? match_held_lock+0x841/0x8b0 [ 866.275080] ? expand_files.part.8+0x9a0/0x9a0 [ 866.279650] ? kasan_check_write+0x14/0x20 [ 866.283874] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 866.288793] ? wait_for_completion+0x870/0x870 [ 866.293379] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 866.298557] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 866.304257] do_vfs_ioctl+0x1cf/0x16a0 [ 866.308137] ? ioctl_preallocate+0x2e0/0x2e0 [ 866.312544] ? fget_raw+0x20/0x20 [ 866.315987] ? __sb_end_write+0xac/0xe0 [ 866.319954] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 866.325485] ? fput+0x130/0x1a0 [ 866.328765] ? ksys_write+0x1a6/0x250 [ 866.332568] ? security_file_ioctl+0x94/0xc0 [ 866.336966] ksys_ioctl+0xa9/0xd0 [ 866.340420] __x64_sys_ioctl+0x73/0xb0 [ 866.344304] do_syscall_64+0x1b1/0x800 [ 866.348186] ? syscall_return_slowpath+0x5c0/0x5c0 [ 866.353114] ? syscall_return_slowpath+0x30f/0x5c0 [ 866.358047] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 866.363407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 866.368246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 866.373420] RIP: 0033:0x455a09 [ 866.376603] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2033/05/18 03:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:31 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 2033/05/18 03:37:31 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xffffffe0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/stat\x00') fstat(r2, &(0x7f0000002380)) 2033/05/18 03:37:31 executing program 2 (fault-call:13 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:31 executing program 7: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="c626262c857fbf012cf66f") syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) 2033/05/18 03:37:31 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x4083, 0x124) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') sendfile(r0, r0, &(0x7f00000000c0)=0xffffffd, 0x3fc) [ 866.385031] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 866.392288] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 866.399543] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 866.406798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 866.414065] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000008 2033/05/18 03:37:31 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x25f25595e3d3726, 0xffffffffffffffff, &(0x7f0000098000)='./file0\x00') getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) fstat(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000300)=[r0, r1, r2, r3, r4]) [ 866.486438] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 866.488621] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:31 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xff01000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:31 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xe4, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0xb30, 0xba, "1e4a6f85d2b73da2da87a1dd38c054322f7eee9676906763712421ddb5ce10d55ca1a94ec78a4eb2fa1517ee7c97671f5df1b38e4d9d38326e3b6bc4b36dadf203c57f4c717937fac4508b8d10be758bf68b67e27d06e128340c271a7fc15f5b5eb30552e6bc85fec036449b569784d34db7b8c7ca8aa13096c55f5f3ad7b6303a51a0d2184b9d4974e2295418b1ff770904047f9ee0a73eb58ff70f3be4d46c98c7a28e0d810b2925a4b95e9f2f4f085ec0556ea285e522e34a"}, 0xc2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 2033/05/18 03:37:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) [ 866.607724] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 866.663117] FAULT_INJECTION: forcing a failure. [ 866.663117] name failslab, interval 1, probability 0, space 0, times 0 [ 866.674470] CPU: 1 PID: 23288 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 866.681755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.691119] Call Trace: [ 866.693731] dump_stack+0x1b9/0x294 [ 866.697381] ? dump_stack_print_info.cold.2+0x52/0x52 [ 866.702587] ? __save_stack_trace+0x7e/0xd0 [ 866.706933] should_fail.cold.4+0xa/0x1a [ 866.711014] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 866.716137] ? kasan_kmalloc+0xc4/0xe0 [ 866.720043] ? kasan_slab_alloc+0x12/0x20 [ 866.724214] ? kmem_cache_alloc+0x12e/0x760 [ 866.728553] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 866.733414] ? kvm_mmu_load+0x21/0x10e0 [ 866.737403] ? vcpu_enter_guest+0x3a83/0x6060 [ 866.741908] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 866.746936] ? graph_lock+0x170/0x170 [ 866.750774] ? do_syscall_64+0x1b1/0x800 [ 866.754842] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 866.760307] ? find_held_lock+0x36/0x1c0 [ 866.764380] ? __lock_is_held+0xb5/0x140 [ 866.768463] ? check_same_owner+0x320/0x320 [ 866.772797] ? rcu_note_context_switch+0x710/0x710 [ 866.777744] __should_failslab+0x124/0x180 [ 866.781988] should_failslab+0x9/0x14 [ 866.785802] kmem_cache_alloc+0x2af/0x760 [ 866.789975] ? kvm_clock_read+0x25/0x30 [ 866.793967] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 866.799004] ? ktime_get_with_offset+0x326/0x4a0 [ 866.803775] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 866.808895] mmu_topup_memory_caches+0xf7/0x3a0 [ 866.813582] kvm_mmu_load+0x21/0x10e0 [ 866.817398] ? vcpu_enter_guest+0x296a/0x6060 [ 866.821916] vcpu_enter_guest+0x3a83/0x6060 [ 866.826259] ? kvm_set_msr_common+0x2680/0x2680 [ 866.830945] ? vmx_vcpu_load+0xadd/0xfe0 [ 866.835031] ? vmx_vcpu_reset+0x1030/0x1030 [ 866.839369] ? graph_lock+0x170/0x170 [ 866.843191] ? graph_lock+0x170/0x170 [ 866.846998] ? __lock_acquire+0x7f5/0x5140 [ 866.851250] ? debug_check_no_locks_freed+0x310/0x310 [ 866.856458] ? __lock_is_held+0xb5/0x140 [ 866.860531] ? lock_acquire+0x1dc/0x520 [ 866.864513] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 866.869541] ? lock_release+0xa10/0xa10 [ 866.873529] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 866.878819] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 866.883325] ? preempt_notifier_dec+0x20/0x20 [ 866.887839] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 866.892688] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 866.897723] kvm_vcpu_ioctl+0x79d/0x12e0 [ 866.901800] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 866.907520] ? graph_lock+0x170/0x170 [ 866.911335] ? find_held_lock+0x36/0x1c0 [ 866.915417] ? lock_downgrade+0x8e0/0x8e0 [ 866.919578] ? kasan_check_read+0x11/0x20 [ 866.923736] ? rcu_is_watching+0x85/0x140 [ 866.927894] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 866.933103] ? __fget+0x40c/0x650 [ 866.936564] ? match_held_lock+0x841/0x8b0 [ 866.940804] ? expand_files.part.8+0x9a0/0x9a0 [ 866.945396] ? kasan_check_write+0x14/0x20 [ 866.949643] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 866.954585] ? wait_for_completion+0x870/0x870 [ 866.959178] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 866.964386] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 866.970113] do_vfs_ioctl+0x1cf/0x16a0 [ 866.974022] ? ioctl_preallocate+0x2e0/0x2e0 [ 866.978442] ? fget_raw+0x20/0x20 [ 866.981906] ? __sb_end_write+0xac/0xe0 [ 866.985891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 866.991434] ? fput+0x130/0x1a0 [ 866.994721] ? ksys_write+0x1a6/0x250 [ 866.998535] ? security_file_ioctl+0x94/0xc0 [ 867.002956] ksys_ioctl+0xa9/0xd0 [ 867.006421] __x64_sys_ioctl+0x73/0xb0 [ 867.010320] do_syscall_64+0x1b1/0x800 2033/05/18 03:37:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20c001, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @multicast2}, &(0x7f0000000100)=0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc4c85512, &(0x7f0000000080)=ANY=[@ANYBLOB="00bc300808937149"]) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x4) ioctl$TCSBRKP(r1, 0x5425, 0x200) 2033/05/18 03:37:31 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400080, 0x0) r1 = timerfd_create(0x0, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000180)='3em1self+%vmnet1)/@\x00', 0x14, 0x0) fcntl$setstatus(r1, 0x4, 0x46c00) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) 2033/05/18 03:37:31 executing program 7: unshare(0x400) r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") splice(r0, &(0x7f0000000000)=0x2, r0, &(0x7f0000000040), 0xffffffffffffffff, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$inet6_tcp_buf(r1, 0x6, 0x17, &(0x7f00000000c0)=""/84, &(0x7f0000000140)=0x54) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000300)='net/mcfilter6\x00') r4 = dup2(r1, r0) renameat(r3, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00') 2033/05/18 03:37:31 executing program 0: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x7, &(0x7f0000000280)="c626262c8523bf012c6a6f459ca1e6d1c4f41827861050530b8f09c3962f4167b01fd9bfa35d2d69b15b0ed997e83d7c8740899f5371070fc15c67fddb71ecfec811ca325e62c27c221e611c8ab237c9f956ed9e76f17cab11be8f3444387c39d062b5d823866fe1c575d1b55edb33a6149d242bba144dd871da940e65f4d943adbe3bbba17267b266c7aab2d2905dc5bf45ef1f9d34e8") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x5, @empty, 0xcbe}}, 0xfff, 0x3, 0xfffffffffffff6c4, 0x0, 0x42}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2033/05/18 03:37:31 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:32 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x1000, 0xfff}, 0x8) getsockname(r0, &(0x7f0000000100)=@hci, &(0x7f0000000240)=0x80) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="8b45f16e01fc381ddc47c81ece22ac676735b9aa8d6618f035d52afeaa26721de57bdfe115de4984d7e034c7c83874d034a5f3df47590b8f592216ef644ae2c83e85cee7cdac0b1960e1556d05e46c430435bc42762d37d8a69657a050f9d5520bc5bb5412580677dc95c673713d593b0edb4bbf61ef5877fb09e856f9ee1bf63dc9855a9325c8eb060470d292f2f50e4903d710", 0x94}], 0x1, 0x0) 2033/05/18 03:37:32 executing program 7: r0 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000000), 0x1fe, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000000c0)="01c26aa0e1d07a14d036ce6ffd8c3225c7b2c81391d9501f00a525be0f51e9467a0bb3da9271ff374f66a33c02ea688cb7501caad8cdd188ea26a55fa036eed8b45e1608fdf2c541e4d773c419935f2fd5d5fdf176c98cffe79128e732fd09dde554043b253ec01ea10295e035b22f27033e532f918c166e9a7d09bb340305fdef9a3b4af68c9298dcbfc7d02df3f4dd7d6ea18c0b115817e9a93fcbd226975d7012e917e54bfd7117a97211d3d623") keyctl$revoke(0xb, r0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x0, @random="bb67c531859b", 'team0\x00'}}, 0x1e) 2033/05/18 03:37:32 executing program 7: geteuid() syz_mount_image$hfsplus(&(0x7f0000000480)='hfsplus\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00f70000000000"]) [ 867.014221] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 867.019077] ? syscall_return_slowpath+0x5c0/0x5c0 [ 867.024016] ? syscall_return_slowpath+0x30f/0x5c0 [ 867.028958] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 867.034336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 867.039205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 867.044398] RIP: 0033:0x455a09 [ 867.047590] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.055310] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 867.062584] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 867.069860] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 867.077132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 867.084410] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000009 [ 867.108945] hfsplus: unable to find HFS+ superblock [ 867.114282] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:32 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xff010000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:32 executing program 2 (fault-call:13 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:32 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="445900421e0a180000002d001901000000000010000000000000"], 0x18}, 0x1}, 0x0) 2033/05/18 03:37:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2033/05/18 03:37:32 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x80000000, 0x4) bind$inet(r0, &(0x7f0000000000)={0x1e, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2033/05/18 03:37:32 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = socket(0x2, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffee9) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000040)={0x6, 0x7f}) [ 867.223138] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:32 executing program 0: chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, &(0x7f0000000080)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x10000, 0x0) getsockname$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getpgrp(0x0) getpid() fcntl$getown(r0, 0x9) gettid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) getpgid(0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) r2 = getpgid(r1) ptrace$setregs(0xf, r2, 0x1, &(0x7f00000000c0)="0eb10f0c9c953c417a4d4d9629709e747f0747f76801d78dcf95d1abdd6fb5060e386c06d00c597da8f8d2cfd0797eab23729ba3c60f5606c3d5eb6c39008c8b5acfd21241ff0e35d370f2f3a0684a2f93ec6e7185675801c717a78f167070a0a4aaa71d42ce1ab3c08c9d27ca3736ab3766ea5b0629982e") 2033/05/18 03:37:32 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x10000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:32 executing program 3: r0 = socket(0x1, 0x200000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r5 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f00000000c0)={0x747, 0x3ff}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032dbd7000ffdbdf2502000000080003002b000000ff000000b35fe765217400f8e36a785ef1613fbcd824612deb21d1259076b50030cf103ee5e8ce450a4e590c20932307d3bfee7ba77f16ea0084e5d451b9065ae692b50000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r3, &(0x7f00000069c0), 0x0, 0x20048000) [ 867.283983] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 867.368298] FAULT_INJECTION: forcing a failure. [ 867.368298] name failslab, interval 1, probability 0, space 0, times 0 [ 867.379633] CPU: 0 PID: 23366 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 867.386927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.396286] Call Trace: [ 867.398890] dump_stack+0x1b9/0x294 [ 867.402538] ? dump_stack_print_info.cold.2+0x52/0x52 [ 867.407749] ? __save_stack_trace+0x7e/0xd0 [ 867.412282] should_fail.cold.4+0xa/0x1a [ 867.416363] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 867.421487] ? kasan_kmalloc+0xc4/0xe0 [ 867.425390] ? kasan_slab_alloc+0x12/0x20 [ 867.429554] ? kmem_cache_alloc+0x12e/0x760 [ 867.433893] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 867.438756] ? kvm_mmu_load+0x21/0x10e0 [ 867.443443] ? vcpu_enter_guest+0x3a83/0x6060 [ 867.448042] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 867.453076] ? graph_lock+0x170/0x170 [ 867.456890] ? do_syscall_64+0x1b1/0x800 [ 867.460968] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 867.466352] ? find_held_lock+0x36/0x1c0 [ 867.470437] ? __lock_is_held+0xb5/0x140 [ 867.474532] ? check_same_owner+0x320/0x320 [ 867.478879] ? rcu_note_context_switch+0x710/0x710 [ 867.483829] __should_failslab+0x124/0x180 [ 867.488093] should_failslab+0x9/0x14 [ 867.491909] kmem_cache_alloc+0x2af/0x760 [ 867.496077] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 867.500937] mmu_topup_memory_caches+0xf7/0x3a0 [ 867.505620] ? debug_check_no_locks_freed+0x310/0x310 [ 867.510827] kvm_mmu_load+0x21/0x10e0 [ 867.514643] ? kasan_check_write+0x14/0x20 [ 867.518897] vcpu_enter_guest+0x3a83/0x6060 [ 867.523234] ? print_usage_bug+0xc0/0xc0 [ 867.527317] ? kvm_set_msr_common+0x2680/0x2680 [ 867.531998] ? vmx_vcpu_load+0xadd/0xfe0 [ 867.536073] ? __lock_acquire+0x7f5/0x5140 [ 867.540317] ? vmx_vcpu_reset+0x1030/0x1030 [ 867.544645] ? graph_lock+0x170/0x170 [ 867.548459] ? graph_lock+0x170/0x170 [ 867.552268] ? __lock_acquire+0x7f5/0x5140 [ 867.556519] ? debug_check_no_locks_freed+0x310/0x310 [ 867.561726] ? __lock_is_held+0xb5/0x140 [ 867.565803] ? lock_acquire+0x1dc/0x520 [ 867.569785] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 867.574813] ? lock_release+0xa10/0xa10 [ 867.578794] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 867.584084] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 867.588593] ? preempt_notifier_dec+0x20/0x20 [ 867.593109] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 867.597959] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 867.602993] kvm_vcpu_ioctl+0x79d/0x12e0 [ 867.607069] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 867.607267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 867.612794] ? graph_lock+0x170/0x170 [ 867.612810] ? find_held_lock+0x36/0x1c0 [ 867.612832] ? lock_downgrade+0x8e0/0x8e0 [ 867.612853] ? kasan_check_read+0x11/0x20 [ 867.612867] ? rcu_is_watching+0x85/0x140 [ 867.612885] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 867.646750] ? __fget+0x40c/0x650 [ 867.650220] ? match_held_lock+0x841/0x8b0 [ 867.654470] ? expand_files.part.8+0x9a0/0x9a0 [ 867.659064] ? kasan_check_write+0x14/0x20 [ 867.663309] ? __mutex_unlock_slowpath+0x180/0x8a0 2033/05/18 03:37:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:32 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000001031f001cfffd946fa283005b580a600900030009000000000015000404ff7e", 0x24}], 0x1}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x101000) 2033/05/18 03:37:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:32 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x20027d, 0x0) close(r0) ioctl(r0, 0x8001, &(0x7f0000000080)="21d34af449f5989973c18713c992bb1d13bb7a3748d29bfa3cd97448b1255e8a9940899d2ce76ebd82fbca363b6d69347de908b95b99c01d93770899ad59c464") ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x9, 0xfffffffffffffff8, 0xfffffffffffffffe]}) 2033/05/18 03:37:32 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x3f00, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:32 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x8000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 867.668251] ? wait_for_completion+0x870/0x870 [ 867.672845] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 867.678049] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 867.683778] do_vfs_ioctl+0x1cf/0x16a0 [ 867.687690] ? ioctl_preallocate+0x2e0/0x2e0 [ 867.692117] ? fget_raw+0x20/0x20 [ 867.695587] ? __sb_end_write+0xac/0xe0 [ 867.699221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 867.699566] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 867.699585] ? fput+0x130/0x1a0 [ 867.716798] ? ksys_write+0x1a6/0x250 [ 867.720616] ? security_file_ioctl+0x94/0xc0 [ 867.725042] ksys_ioctl+0xa9/0xd0 [ 867.728512] __x64_sys_ioctl+0x73/0xb0 [ 867.732415] do_syscall_64+0x1b1/0x800 [ 867.736316] ? finish_task_switch+0x1ca/0x840 [ 867.740823] ? syscall_return_slowpath+0x5c0/0x5c0 [ 867.744741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 867.745760] ? syscall_return_slowpath+0x30f/0x5c0 [ 867.745782] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 867.745801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 867.745819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 867.756482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 867.759127] RIP: 0033:0x455a09 [ 867.759136] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.759150] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 867.759159] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 867.759167] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 867.759175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 867.759184] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000000a 2033/05/18 03:37:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xda04}, 0x0) 2033/05/18 03:37:33 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x4000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:33 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:33 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000100)) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="15e0f823ba4ebbd059d347fc8879125f9e30d129b8bb765714d2f35d7163aa584879774c3fbadf8dafc8b648d0923dbcff56644e1a27680a005d553b980c4976b93485e6fd4003634d2587f99125ae6fae319e400b4e9c511ad7cda780bd3d2d9529ad79f54a79a45ebe411df9260d3a", 0x70}], 0x1, &(0x7f00000000c0)}, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000b00)=""/121, 0x79}], 0x2, &(0x7f0000000c40)=""/70, 0x46}, 0x0) 2033/05/18 03:37:33 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xd4, &(0x7f0000000200)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[], {0x8100, 0x0, 0x5e}}], {@ipv6={0x86dd, {0x0, 0x6, "08348b", 0x9a, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xa}, @remote={0xfe, 0x80, [], 0xbb}, {[@hopopts={0x0, 0x1, [], [@jumbo={0xc2, 0x4}, @pad1={0x0, 0x1}]}, @srh={0x2b, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@empty, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}]}, @srh={0x0, 0x0, 0x4}, @routing={0xc, 0x0, 0x1}], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x200]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x504}, 0x1}}, {0x8, 0x22eb, 0x3, {{0x2e6, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000000000}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000040)) r0 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 2033/05/18 03:37:33 executing program 2 (fault-call:13 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:33 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, &(0x7f000000ffe0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000a16000)=""/71, 0x47) timerfd_create(0x7, 0x80800) 2033/05/18 03:37:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 867.939837] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:33 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x4000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:33 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40081) r1 = openat$cgroup_ro(r0, &(0x7f00000013c0)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40087602, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{0x6e, 0xfffffffffffff2d1}, {0x5, 0x7}, 0x100000000, 0x2, 0x1}) openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) [ 868.005289] Unknown ioctl 1074310916 [ 868.016947] Unknown ioctl 1074310916 [ 868.080384] FAULT_INJECTION: forcing a failure. [ 868.080384] name failslab, interval 1, probability 0, space 0, times 0 [ 868.091755] CPU: 1 PID: 23429 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 868.099047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.108418] Call Trace: [ 868.111026] dump_stack+0x1b9/0x294 [ 868.114680] ? dump_stack_print_info.cold.2+0x52/0x52 [ 868.119892] ? __save_stack_trace+0x7e/0xd0 [ 868.124234] should_fail.cold.4+0xa/0x1a [ 868.128314] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 868.133436] ? kasan_kmalloc+0xc4/0xe0 [ 868.137341] ? kasan_slab_alloc+0x12/0x20 [ 868.141505] ? kmem_cache_alloc+0x12e/0x760 [ 868.145844] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 868.150703] ? kvm_mmu_load+0x21/0x10e0 [ 868.154725] ? vcpu_enter_guest+0x3a83/0x6060 [ 868.159231] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 868.164263] ? graph_lock+0x170/0x170 [ 868.168077] ? do_syscall_64+0x1b1/0x800 [ 868.172158] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 868.177541] ? find_held_lock+0x36/0x1c0 [ 868.181621] ? __lock_is_held+0xb5/0x140 [ 868.185710] ? check_same_owner+0x320/0x320 [ 868.190050] ? rcu_note_context_switch+0x710/0x710 [ 868.195000] __should_failslab+0x124/0x180 [ 868.199256] should_failslab+0x9/0x14 [ 868.203078] kmem_cache_alloc+0x2af/0x760 [ 868.207253] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 868.212117] mmu_topup_memory_caches+0xf7/0x3a0 [ 868.217682] ? debug_check_no_locks_freed+0x310/0x310 [ 868.222902] kvm_mmu_load+0x21/0x10e0 [ 868.226900] ? kasan_check_write+0x14/0x20 2033/05/18 03:37:33 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x5, 0x101, 0x5, 0x1}, {0x1, 0xfffffffffffff001, 0x4, 0x1}, {0x7, 0x8, 0x8000, 0x3ff}, {0x9e7, 0xffffffff, 0x82, 0x1}]}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x9, &(0x7f0000000000), 0x4) 2033/05/18 03:37:33 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) mprotect(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x8983, &(0x7f0000000040)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) [ 868.231174] vcpu_enter_guest+0x3a83/0x6060 [ 868.235518] ? print_usage_bug+0xc0/0xc0 [ 868.239600] ? kvm_set_msr_common+0x2680/0x2680 [ 868.244284] ? vmx_vcpu_load+0xadd/0xfe0 [ 868.248390] ? __lock_acquire+0x7f5/0x5140 [ 868.252644] ? vmx_vcpu_reset+0x1030/0x1030 [ 868.257003] ? graph_lock+0x170/0x170 [ 868.260823] ? graph_lock+0x170/0x170 [ 868.264641] ? __lock_acquire+0x7f5/0x5140 [ 868.268890] ? debug_check_no_locks_freed+0x310/0x310 [ 868.274099] ? __lock_is_held+0xb5/0x140 [ 868.278171] ? lock_acquire+0x1dc/0x520 [ 868.282159] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 868.287191] ? lock_release+0xa10/0xa10 [ 868.291208] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 868.296505] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 868.301014] ? preempt_notifier_dec+0x20/0x20 [ 868.305535] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 868.310393] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 868.315432] kvm_vcpu_ioctl+0x79d/0x12e0 [ 868.319512] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 868.325242] ? graph_lock+0x170/0x170 [ 868.329061] ? find_held_lock+0x36/0x1c0 [ 868.333123] ? lock_downgrade+0x8e0/0x8e0 [ 868.337280] ? kasan_check_read+0x11/0x20 [ 868.341443] ? rcu_is_watching+0x85/0x140 [ 868.345590] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 868.350789] ? __fget+0x40c/0x650 [ 868.354238] ? match_held_lock+0x841/0x8b0 [ 868.358473] ? expand_files.part.8+0x9a0/0x9a0 [ 868.363055] ? kasan_check_write+0x14/0x20 [ 868.367283] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 868.372201] ? wait_for_completion+0x870/0x870 [ 868.376781] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 868.381967] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 868.387669] do_vfs_ioctl+0x1cf/0x16a0 [ 868.391550] ? ioctl_preallocate+0x2e0/0x2e0 [ 868.395943] ? fget_raw+0x20/0x20 [ 868.399381] ? __sb_end_write+0xac/0xe0 [ 868.403354] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 868.408906] ? fput+0x130/0x1a0 [ 868.412195] ? ksys_write+0x1a6/0x250 [ 868.416009] ? security_file_ioctl+0x94/0xc0 [ 868.420420] ksys_ioctl+0xa9/0xd0 [ 868.423876] __x64_sys_ioctl+0x73/0xb0 [ 868.427770] do_syscall_64+0x1b1/0x800 [ 868.431655] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 868.436494] ? syscall_return_slowpath+0x5c0/0x5c0 [ 868.441425] ? syscall_return_slowpath+0x30f/0x5c0 [ 868.446352] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 868.451716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 868.456553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 868.461737] RIP: 0033:0x455a09 [ 868.464912] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.472615] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 2033/05/18 03:37:33 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:33 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x1100000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 2033/05/18 03:37:33 executing program 3: clock_gettime(0xfffffffffffffff2, &(0x7f0000000200)) r0 = socket(0x10, 0x5, 0x6) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x280000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0xf35e, 0x4) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @reserved=0x1}, 0x10) 2033/05/18 03:37:33 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000140)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000003fb8)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000012f46)=""/186, 0x130c}, &(0x7f000001a000)=[{&(0x7f0000001f34)=""/204, 0xcc}, {&(0x7f000000e000)=""/211, 0xd3}, {&(0x7f0000013f5d)=""/163, 0xa3}, {&(0x7f000001fff1)=""/15, 0xf}, {&(0x7f0000006fa1)=""/95, 0x5f}, {&(0x7f000001a000)=""/56, 0x38}, {&(0x7f000001bff7)=""/9, 0x9}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000012fe5)=""/27, 0x1b}], 0x9}}], 0x48}, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x240000) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000040)={0xfffffffffffffffb, 0xa000000, 0x1ff, 0x81, 0xfffffffffffffffe, 0x2}) 2033/05/18 03:37:33 executing program 0: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x8) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vxfs\x00', 0x40000, &(0x7f00000001c0)="7bff03af07920a59dd09fd0e76926ff2b4a9f702154c1e2e771fb89aa75434aa43c0656d509d0592cdd35b7d66a4b59c3267bb563275831808f9b936595d41212ad196bbefd50c78e7c09492f63ffa6dd9a79b9763c1431b98c642b965fbcda08df25b7b4bf302cc910c16b7b7f8efc666ec27ca45a20645ad5b894794168b3a628f60a2845b4c320ecbe8c20864c436a679101d7658fc3f0a3d0546590bc7a790c5214a4b1865d56c75db73ca1c9654684343e46afbca0b683d71c14db53d164dbc152a13ceac8b9a18c6f72ffd5e0dc4562fd6ca63d94edc084dd79f5dc3a9afec3b55db0be017ef41cbf174bb") r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x410080) unlinkat(r0, &(0x7f0000000340)='./file0\x00', 0x200) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x9, 0x121202) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x4, 0xffffffffffffffe1, 0x8, 0x500, 0x100, 0x80, r2}) 2033/05/18 03:37:33 executing program 2 (fault-call:13 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 868.479874] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 868.487128] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 868.494392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 868.501656] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000000b [ 868.579972] validate_nla: 7 callbacks suppressed [ 868.579981] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 868.591088] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 868.608273] rdma_op 00000000a659f6ae conn xmit_rdma (null) 2033/05/18 03:37:33 executing program 0: unshare(0x2000400) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000000c0)=""/80, &(0x7f0000000200)=0x50) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x401) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) r3 = dup2(r1, r2) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000380)=""/4096) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000280)=""/228) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000080)={r4}) [ 868.697210] FAULT_INJECTION: forcing a failure. [ 868.697210] name failslab, interval 1, probability 0, space 0, times 0 [ 868.708534] CPU: 0 PID: 23478 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 868.715823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.725190] Call Trace: [ 868.727799] dump_stack+0x1b9/0x294 [ 868.731455] ? dump_stack_print_info.cold.2+0x52/0x52 [ 868.736685] ? __save_stack_trace+0x7e/0xd0 [ 868.741034] should_fail.cold.4+0xa/0x1a [ 868.745121] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 868.750246] ? kasan_kmalloc+0xc4/0xe0 [ 868.754153] ? kasan_slab_alloc+0x12/0x20 [ 868.758314] ? kmem_cache_alloc+0x12e/0x760 [ 868.762658] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 868.767514] ? kvm_mmu_load+0x21/0x10e0 [ 868.771508] ? vcpu_enter_guest+0x3a83/0x6060 [ 868.776018] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 868.781051] ? graph_lock+0x170/0x170 [ 868.784871] ? do_syscall_64+0x1b1/0x800 [ 868.788942] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 868.794324] ? find_held_lock+0x36/0x1c0 [ 868.798399] ? __lock_is_held+0xb5/0x140 [ 868.802488] ? check_same_owner+0x320/0x320 [ 868.806831] ? rcu_note_context_switch+0x710/0x710 [ 868.811776] __should_failslab+0x124/0x180 [ 868.816030] should_failslab+0x9/0x14 [ 868.819850] kmem_cache_alloc+0x2af/0x760 [ 868.824021] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 868.828881] mmu_topup_memory_caches+0xf7/0x3a0 [ 868.833571] ? debug_check_no_locks_freed+0x310/0x310 [ 868.838787] kvm_mmu_load+0x21/0x10e0 [ 868.842614] ? kasan_check_write+0x14/0x20 [ 868.846885] vcpu_enter_guest+0x3a83/0x6060 [ 868.851223] ? print_usage_bug+0xc0/0xc0 [ 868.855304] ? kvm_set_msr_common+0x2680/0x2680 [ 868.860072] ? vmx_vcpu_load+0xadd/0xfe0 [ 868.864150] ? __lock_acquire+0x7f5/0x5140 [ 868.868391] ? vmx_vcpu_reset+0x1030/0x1030 [ 868.872704] ? graph_lock+0x170/0x170 [ 868.876506] ? graph_lock+0x170/0x170 [ 868.880303] ? __lock_acquire+0x7f5/0x5140 [ 868.884532] ? debug_check_no_locks_freed+0x310/0x310 [ 868.889712] ? __lock_is_held+0xb5/0x140 [ 868.893778] ? lock_acquire+0x1dc/0x520 [ 868.897748] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 868.902750] ? lock_release+0xa10/0xa10 [ 868.906717] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 868.911981] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 868.916462] ? preempt_notifier_dec+0x20/0x20 [ 868.920958] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 868.925790] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 868.930809] kvm_vcpu_ioctl+0x79d/0x12e0 [ 868.934860] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 868.940558] ? graph_lock+0x170/0x170 [ 868.944346] ? find_held_lock+0x36/0x1c0 [ 868.948396] ? lock_downgrade+0x8e0/0x8e0 [ 868.952534] ? kasan_check_read+0x11/0x20 [ 868.956669] ? rcu_is_watching+0x85/0x140 [ 868.960805] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 868.965986] ? __fget+0x40c/0x650 [ 868.969428] ? match_held_lock+0x841/0x8b0 [ 868.973654] ? expand_files.part.8+0x9a0/0x9a0 [ 868.978224] ? kasan_check_write+0x14/0x20 [ 868.982443] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 868.987359] ? wait_for_completion+0x870/0x870 [ 868.991926] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 868.997105] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 869.002801] do_vfs_ioctl+0x1cf/0x16a0 [ 869.006675] ? ioctl_preallocate+0x2e0/0x2e0 [ 869.011070] ? fget_raw+0x20/0x20 [ 869.014520] ? __sb_end_write+0xac/0xe0 [ 869.018484] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 869.024038] ? fput+0x130/0x1a0 [ 869.027304] ? ksys_write+0x1a6/0x250 [ 869.031094] ? security_file_ioctl+0x94/0xc0 [ 869.035487] ksys_ioctl+0xa9/0xd0 [ 869.038930] __x64_sys_ioctl+0x73/0xb0 [ 869.042806] do_syscall_64+0x1b1/0x800 [ 869.046678] ? finish_task_switch+0x1ca/0x840 [ 869.051158] ? syscall_return_slowpath+0x5c0/0x5c0 [ 869.056072] ? syscall_return_slowpath+0x30f/0x5c0 [ 869.060993] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 869.066347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 869.071186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 869.076361] RIP: 0033:0x455a09 [ 869.079532] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 869.087237] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 2033/05/18 03:37:34 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfc00000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:34 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0xe20, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x100000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x5, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x3}}, [0x8, 0x0, 0x8, 0x9, 0xe3, 0x10000, 0x80cf, 0x200, 0x3, 0x5, 0x3, 0x100000000, 0x5, 0x10000, 0x81]}, &(0x7f00000001c0)=0x100) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000200)=0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000240)={'ipddp0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000300)={0x1e}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="16418d3a179f0dec88478a3be7e54ccf479b13c294481fe4201342fe0903a3cf05d6f158149aa6d5e25396f2e31ae27fe552018c79584d4f144d536f52d1dfda7d97d2ade6733e9d39dfd8ff11359d9fc8605c56280229d48c4a9d93ec32925221909f3cfc1354d719915191cfdbca67f9096c2a0495034b8e2ee8add5d7ae2cc41e4c8be9021c18ba1de08d6ed51714b79452e4d5a90918cafbc44ced73b6bd7b9e15b59ab50c4bdaf529f8a33a6b2144e74b868596e712ac846d3ca02458faa90e9961bb11a6bb83", 0xc9) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000440)) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000004c0)=""/186) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000580)=""/61) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000005c0)={'bond0\x00', {0x2, 0x4e20, @multicast2=0xe0000002}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000600)={0x12000, 0x1d000}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000640)) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000700)=0xffffffff) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000007c0)) bind$inet6(r0, &(0x7f0000000800)={0xa, 0x4e21, 0x9, @empty, 0x3ff}, 0x1c) r5 = accept$netrom(r0, &(0x7f0000000840)=@full, &(0x7f00000008c0)=0x48) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000900), &(0x7f0000000940)=0x40) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000980)=@pic={0x1c323db9, 0x200, 0x2, 0x7, 0x80000000, 0x3, 0x1, 0xbde, 0xffffffffffff0001, 0x8, 0x5, 0x0, 0xfffffffff6925354, 0x74f0, 0x64dc6dc2, 0x3fc00000000}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000a80)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000bc0)={r6, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=[0x100000000], 0x11, 0x7, 0xd4bd, &(0x7f0000000b40)=[0xff, 0x6, 0x400, 0x4, 0x0, 0x8, 0x101], &(0x7f0000000b80)=[0x4, 0x6]}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000c00)={{0xa, 0x4e23, 0x7fff, @empty, 0x3}, {0xa, 0x4e20, 0xa926, @mcast2={0xff, 0x2, [], 0x1}, 0x3fff8000}, 0x7, [0x2, 0x7efe7596, 0x81, 0x3f, 0x2, 0x3, 0x7fffffff, 0x4]}, 0x5c) syz_open_dev$sndctrl(&(0x7f0000000c80)='/dev/snd/controlC#\x00', 0x0, 0x400000) 2033/05/18 03:37:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xda040000}, 0x0) 2033/05/18 03:37:34 executing program 0: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x501082, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000009edadac28c7ab7983780ed0e4880f0ac4dbb0500000000000000845e2dc0350f10bfc8dc966960536fe45ae955f8d8b9060000005e9b815e179cafdeffeea8864a1484d672ff345f6d6cf7607082ba53147af42094f5e397c4fca519e97323efdb5d79eea3c41ac8b5c7e28c19263dd87dfce33b4251a727525c819faa"], 0x3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000100)) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x7, 0x1, 0x6ff9, 0x80, 0x3, 0x6}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3f}, 0x1c) setsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f00000001c0)="1daf6c8c357cd2a3135040176c98d80a3c4b3ce4d6358be89998a52f36acc6ba667b3513132b4161486d57f138baaf10dec3cb0ed8c433d02aaade838206fe15a48ee7aea6d575c27ae6cf0ab89cbe29691502e408eba637204fab477a2a42f820e2921be036038b428c895e7cf8979c01d8a29bc7932b0353ecfc5a36f0bae3ce08c7057c5907e267acafc2a21f87eb328100f745255b104a32981783ac5746ab8a159129fce0ced89a117e7336f804be58870ac435d8539b68d4b96865b99b3b431f7c69d1ee9cc626a3a3ed2fde5e2d7e9cab0b947f574cc91b6443a98713539e0983f5fc41", 0xe7) 2033/05/18 03:37:34 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = getpid() wait4(r1, &(0x7f0000000000), 0x20000000, &(0x7f0000000040)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x1) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) read(r2, &(0x7f0000000280)=""/100, 0x64) read(r0, &(0x7f0000000400)=""/100, 0x64) 2033/05/18 03:37:34 executing program 2 (fault-call:13 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:34 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 869.094492] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 869.101753] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 869.109092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 869.116353] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000000c [ 869.168436] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 869.173235] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:34 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x40030000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:34 executing program 3: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000100)={@void, @void, @ipv4={{0x5, 0x6, 0x0, 0x0, 0x1c, 0xbdfd, 0x3a00, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0x1c) 2033/05/18 03:37:34 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ba000000ad4a000005000000d8aef00850656181e4911202622c64bc2735330f7373da48dd6003647fb38c944eb595259d640f6391fdb8abf095b8d953606622fc7bcb4e40044686bdd3db3a00027bf5df703373c30d8ab152de481425a47c56b5387b02a6200a3854b4665db2705d1b626e129305681e765a597d45ab2e959f25a8f9580f5f55e2d16a146c687ef164beaadab3a5e5f3bcbcf2182fa885befbe12020a885c16128a4492efd81ee6575ce94879f098c13a2cfa437475c244dfc5a6e6163879b"]) r2 = fcntl$getown(r1, 0x9) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000280)={0x8, 0xff}) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x5d, 0x8000, 0x7, 0x40, 0x0, 0x6, 0x100, 0x8, 0x0, 0x1bbed411, 0x7, 0x8, 0x9, 0x10001, 0x240000, 0x8, 0xffffffffffffffff, 0x60d9fcd3, 0x9, 0xff, 0x4, 0x800, 0xe90b, 0x40, 0x1b9, 0x24, 0xff, 0x5, 0x2, 0xfffffffffffffc00, 0x1000, 0x7, 0x5, 0x7, 0xfffffffffffffff8, 0x3f, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffffffff81}, 0x4, 0x9, 0x3, 0x0, 0xffffffff, 0xffffffffffff0001, 0x40}, r2, 0xc, r0, 0x1) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f00000001c0)={'veth0\x00', {0x4, 0x0, 0x80000001, "63a18b360ecf", 0x802d}}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) timer_create(0x1, &(0x7f0000000480)={0x0, 0x2d, 0x5, @thr={&(0x7f00000002c0)="5a44835f79d4983f1fd277ace6bf5b20dfb6980f0edbf69ffe4c2979d4a1cc98878582ed9b3a305d8d8b43c9bef876b22d0ad736771d3097dcfe57c518d53336b3095bba1871728925deda5595fe0c47ef2a4161096e324185a959530211a71696a1c7c31c336db107bac109c1a1963d604fed69d5d6124cdd5ecaa996e54ec5babfe1fa5b9ab538f94175e3ae00ab1d9583f2e953da87b6ad0f18df0fe87551b789c176c746ef8beff00361a9ec1b186a08d566c6793c37ca649808eaba3390bdd7b8b7", &(0x7f00000003c0)="3a76251ecab902bbf0ed9a0a4047fc57b50521f46c106f1b21f55b05dd1418dc36b17434d89dfcc27d27c595ab3ecc65009ca402aa0c39d8e2ea0e28a250fe0c39a79f1f7a191c3beba6bc2972f84694c0874cc968dc6e7ea0765635e470a4e2c2fdc353e11c86e1980af33c74a0e28f8360e8f41408a6d22c3e92fffc111300fb5d7d27a8f4651a0e10fe93e179775f13f1fc589a1188b8404417492801605cdb1c491c1ae464c2ea3c8f34d7a072952fe6f2"}}, &(0x7f00000004c0)=0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000540)={{r4, r5+30000000}, {0x0, 0x989680}}, &(0x7f0000000580)) [ 869.273594] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 869.285185] FAULT_INJECTION: forcing a failure. [ 869.285185] name failslab, interval 1, probability 0, space 0, times 0 [ 869.296588] CPU: 1 PID: 23508 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 869.303874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.313239] Call Trace: [ 869.315847] dump_stack+0x1b9/0x294 [ 869.319512] ? dump_stack_print_info.cold.2+0x52/0x52 [ 869.324741] ? __save_stack_trace+0x7e/0xd0 [ 869.329100] should_fail.cold.4+0xa/0x1a [ 869.333620] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 869.338738] ? kasan_kmalloc+0xc4/0xe0 [ 869.342640] ? kasan_slab_alloc+0x12/0x20 [ 869.346803] ? kmem_cache_alloc+0x12e/0x760 [ 869.351155] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 869.356010] ? kvm_mmu_load+0x21/0x10e0 [ 869.359989] ? vcpu_enter_guest+0x3a83/0x6060 [ 869.364487] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 869.369510] ? graph_lock+0x170/0x170 [ 869.373303] ? do_syscall_64+0x1b1/0x800 [ 869.377356] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 869.382716] ? find_held_lock+0x36/0x1c0 [ 869.386774] ? __lock_is_held+0xb5/0x140 [ 869.390853] ? check_same_owner+0x320/0x320 [ 869.395171] ? rcu_note_context_switch+0x710/0x710 [ 869.400101] __should_failslab+0x124/0x180 [ 869.404342] should_failslab+0x9/0x14 [ 869.408144] kmem_cache_alloc+0x2af/0x760 [ 869.412291] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 869.417139] mmu_topup_memory_caches+0xf7/0x3a0 [ 869.421800] ? debug_check_no_locks_freed+0x310/0x310 [ 869.426990] kvm_mmu_load+0x21/0x10e0 [ 869.430800] ? kasan_check_write+0x14/0x20 [ 869.435038] vcpu_enter_guest+0x3a83/0x6060 [ 869.439357] ? print_usage_bug+0xc0/0xc0 [ 869.443414] ? kvm_set_msr_common+0x2680/0x2680 [ 869.448085] ? vmx_vcpu_load+0xadd/0xfe0 [ 869.452158] ? __lock_acquire+0x7f5/0x5140 [ 869.456382] ? vmx_vcpu_reset+0x1030/0x1030 [ 869.460697] ? graph_lock+0x170/0x170 [ 869.464491] ? graph_lock+0x170/0x170 [ 869.468291] ? __lock_acquire+0x7f5/0x5140 [ 869.472522] ? debug_check_no_locks_freed+0x310/0x310 [ 869.477711] ? __lock_is_held+0xb5/0x140 [ 869.481767] ? lock_acquire+0x1dc/0x520 [ 869.485731] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 869.490742] ? lock_release+0xa10/0xa10 [ 869.494704] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 869.499971] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 869.504457] ? preempt_notifier_dec+0x20/0x20 [ 869.508951] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 869.513786] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 869.518803] kvm_vcpu_ioctl+0x79d/0x12e0 [ 869.522860] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 869.528563] ? graph_lock+0x170/0x170 [ 869.532355] ? find_held_lock+0x36/0x1c0 [ 869.536413] ? lock_downgrade+0x8e0/0x8e0 [ 869.540567] ? kasan_check_read+0x11/0x20 [ 869.544719] ? rcu_is_watching+0x85/0x140 [ 869.548861] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 869.554055] ? __fget+0x40c/0x650 [ 869.557502] ? match_held_lock+0x841/0x8b0 [ 869.561732] ? expand_files.part.8+0x9a0/0x9a0 [ 869.566312] ? kasan_check_write+0x14/0x20 [ 869.570549] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 869.575474] ? wait_for_completion+0x870/0x870 [ 869.580053] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 869.585495] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 869.591200] do_vfs_ioctl+0x1cf/0x16a0 [ 869.595085] ? ioctl_preallocate+0x2e0/0x2e0 [ 869.599519] ? fget_raw+0x20/0x20 [ 869.602974] ? __sb_end_write+0xac/0xe0 [ 869.606950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 869.612482] ? fput+0x130/0x1a0 [ 869.615756] ? ksys_write+0x1a6/0x250 [ 869.619554] ? security_file_ioctl+0x94/0xc0 [ 869.623970] ksys_ioctl+0xa9/0xd0 [ 869.627418] __x64_sys_ioctl+0x73/0xb0 [ 869.631297] do_syscall_64+0x1b1/0x800 [ 869.635184] ? finish_task_switch+0x1ca/0x840 [ 869.639671] ? syscall_return_slowpath+0x5c0/0x5c0 [ 869.644595] ? syscall_return_slowpath+0x30f/0x5c0 [ 869.649524] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 869.654893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 869.659732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 869.664909] RIP: 0033:0x455a09 2033/05/18 03:37:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 869.668089] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 869.675795] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 869.683056] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 869.690327] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 869.697585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 869.704846] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000000d 2033/05/18 03:37:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x6c0e0000}, 0x0) 2033/05/18 03:37:34 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xf7ffff7f, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:35 executing program 2 (fault-call:13 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0xffff, @loopback={0x0, 0x1}, 0x1000000000}, 0x7b) r2 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\x00') recvmmsg(r2, &(0x7f00000052c0)=[{{&(0x7f0000000740)=@rc, 0x80, &(0x7f0000001ac0), 0x0, &(0x7f0000001b40)=""/27, 0x1b}}, {{&(0x7f0000001b80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004200), 0x0, &(0x7f00000042c0)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f0000005340)={0x0, 0x1c9c380}) [ 869.806563] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 869.821873] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:35 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:35 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x600, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 869.978533] FAULT_INJECTION: forcing a failure. [ 869.978533] name failslab, interval 1, probability 0, space 0, times 0 [ 869.989944] CPU: 1 PID: 23537 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 869.997229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.006603] Call Trace: [ 870.009220] dump_stack+0x1b9/0x294 [ 870.012871] ? dump_stack_print_info.cold.2+0x52/0x52 [ 870.018085] ? perf_trace_lock_acquire+0xe3/0x980 [ 870.022961] should_fail.cold.4+0xa/0x1a [ 870.027044] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 870.032168] ? kasan_kmalloc+0xc4/0xe0 [ 870.036072] ? kasan_slab_alloc+0x12/0x20 [ 870.040237] ? kmem_cache_alloc+0x12e/0x760 [ 870.044579] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 870.049441] ? kvm_mmu_load+0x21/0x10e0 [ 870.053432] ? vcpu_enter_guest+0x3a83/0x6060 [ 870.057941] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 870.062970] ? graph_lock+0x170/0x170 [ 870.066785] ? do_syscall_64+0x1b1/0x800 [ 870.070857] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 870.076220] ? find_held_lock+0x36/0x1c0 [ 870.080276] ? __lock_is_held+0xb5/0x140 [ 870.084342] ? check_same_owner+0x320/0x320 [ 870.088658] ? rcu_note_context_switch+0x710/0x710 [ 870.093585] __should_failslab+0x124/0x180 [ 870.097825] should_failslab+0x9/0x14 [ 870.101704] kmem_cache_alloc+0x2af/0x760 [ 870.105850] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 870.110689] mmu_topup_memory_caches+0xf7/0x3a0 [ 870.115354] ? debug_check_no_locks_freed+0x310/0x310 [ 870.120561] kvm_mmu_load+0x21/0x10e0 [ 870.124359] ? kasan_check_write+0x14/0x20 [ 870.128588] vcpu_enter_guest+0x3a83/0x6060 [ 870.132920] ? kvm_set_msr_common+0x2680/0x2680 [ 870.137589] ? perf_trace_lock+0x900/0x900 [ 870.141820] ? __lock_acquire+0x7f5/0x5140 [ 870.146047] ? vmx_vcpu_reset+0x1030/0x1030 [ 870.150443] ? graph_lock+0x170/0x170 [ 870.154241] ? graph_lock+0x170/0x170 [ 870.158034] ? __lock_acquire+0x7f5/0x5140 [ 870.162267] ? perf_trace_lock_acquire+0xe3/0x980 [ 870.167107] ? __lock_is_held+0xb5/0x140 [ 870.171161] ? lock_acquire+0x1dc/0x520 [ 870.175138] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 870.180148] ? lock_release+0xa10/0xa10 [ 870.184119] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 870.189385] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 870.193869] ? preempt_notifier_dec+0x20/0x20 [ 870.198368] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 870.203203] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 870.208233] kvm_vcpu_ioctl+0x79d/0x12e0 [ 870.212723] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 870.219101] ? graph_lock+0x170/0x170 [ 870.222911] ? find_held_lock+0x36/0x1c0 [ 870.226982] ? lock_downgrade+0x8e0/0x8e0 [ 870.231131] ? kasan_check_read+0x11/0x20 [ 870.235266] ? rcu_is_watching+0x85/0x140 [ 870.239402] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 870.244592] ? __fget+0x40c/0x650 [ 870.248043] ? match_held_lock+0x841/0x8b0 [ 870.252269] ? expand_files.part.8+0x9a0/0x9a0 [ 870.256838] ? kasan_check_write+0x14/0x20 [ 870.261066] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 870.265990] ? wait_for_completion+0x870/0x870 [ 870.270568] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 870.275751] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 870.281469] do_vfs_ioctl+0x1cf/0x16a0 [ 870.285360] ? ioctl_preallocate+0x2e0/0x2e0 [ 870.289762] ? fget_raw+0x20/0x20 [ 870.293380] ? __sb_end_write+0xac/0xe0 [ 870.297347] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 870.302879] ? fput+0x130/0x1a0 [ 870.306151] ? ksys_write+0x1a6/0x250 [ 870.309955] ? security_file_ioctl+0x94/0xc0 [ 870.314356] ksys_ioctl+0xa9/0xd0 [ 870.317805] __x64_sys_ioctl+0x73/0xb0 [ 870.321699] do_syscall_64+0x1b1/0x800 [ 870.325575] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 870.330412] ? syscall_return_slowpath+0x5c0/0x5c0 [ 870.335330] ? syscall_return_slowpath+0x30f/0x5c0 [ 870.340264] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 870.345633] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 870.350469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 870.355646] RIP: 0033:0x455a09 [ 870.358821] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 870.366521] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 870.373778] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 870.381037] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 870.388301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 870.395560] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000000e 2033/05/18 03:37:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x93300000}, 0x0) 2033/05/18 03:37:35 executing program 2 (fault-call:13 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:35 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x8, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:35 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ba000000ad4a000005000000d8aef00850656181e4911202622c64bc2735330f7373da48dd6003647fb38c944eb595259d640f6391fdb8abf095b8d953606622fc7bcb4e40044686bdd3db3a00027bf5df703373c30d8ab152de481425a47c56b5387b02a6200a3854b4665db2705d1b626e129305681e765a597d45ab2e959f25a8f9580f5f55e2d16a146c687ef164beaadab3a5e5f3bcbcf2182fa885befbe12020a885c16128a4492efd81ee6575ce94879f098c13a2cfa437475c244dfc5a6e6163879b"]) r2 = fcntl$getown(r1, 0x9) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000280)={0x8, 0xff}) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x5d, 0x8000, 0x7, 0x40, 0x0, 0x6, 0x100, 0x8, 0x0, 0x1bbed411, 0x7, 0x8, 0x9, 0x10001, 0x240000, 0x8, 0xffffffffffffffff, 0x60d9fcd3, 0x9, 0xff, 0x4, 0x800, 0xe90b, 0x40, 0x1b9, 0x24, 0xff, 0x5, 0x2, 0xfffffffffffffc00, 0x1000, 0x7, 0x5, 0x7, 0xfffffffffffffff8, 0x3f, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffffffff81}, 0x4, 0x9, 0x3, 0x0, 0xffffffff, 0xffffffffffff0001, 0x40}, r2, 0xc, r0, 0x1) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f00000001c0)={'veth0\x00', {0x4, 0x0, 0x80000001, "63a18b360ecf", 0x802d}}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) timer_create(0x1, &(0x7f0000000480)={0x0, 0x2d, 0x5, @thr={&(0x7f00000002c0)="5a44835f79d4983f1fd277ace6bf5b20dfb6980f0edbf69ffe4c2979d4a1cc98878582ed9b3a305d8d8b43c9bef876b22d0ad736771d3097dcfe57c518d53336b3095bba1871728925deda5595fe0c47ef2a4161096e324185a959530211a71696a1c7c31c336db107bac109c1a1963d604fed69d5d6124cdd5ecaa996e54ec5babfe1fa5b9ab538f94175e3ae00ab1d9583f2e953da87b6ad0f18df0fe87551b789c176c746ef8beff00361a9ec1b186a08d566c6793c37ca649808eaba3390bdd7b8b7", &(0x7f00000003c0)="3a76251ecab902bbf0ed9a0a4047fc57b50521f46c106f1b21f55b05dd1418dc36b17434d89dfcc27d27c595ab3ecc65009ca402aa0c39d8e2ea0e28a250fe0c39a79f1f7a191c3beba6bc2972f84694c0874cc968dc6e7ea0765635e470a4e2c2fdc353e11c86e1980af33c74a0e28f8360e8f41408a6d22c3e92fffc111300fb5d7d27a8f4651a0e10fe93e179775f13f1fc589a1188b8404417492801605cdb1c491c1ae464c2ea3c8f34d7a072952fe6f2"}}, &(0x7f00000004c0)=0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000540)={{r4, r5+30000000}, {0x0, 0x989680}}, &(0x7f0000000580)) 2033/05/18 03:37:35 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x20000) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x6, 0x800000000000fff, 0x6c8a, 0x5, 0x10001, 0x2, 0x10000000ffffffff, 0x3, 0x1ff, 0x5, 0x0, 0xa2, 0x9, 0x10001, 0x40000], 0x13000, 0x20000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x401) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000280)={0xffff}) 2033/05/18 03:37:35 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:35 executing program 7: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x80000) r4 = dup3(r3, r1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x288, 0x23, 0x100, 0x70bd28, 0x25dfdbfb, {0x9}, [@typed={0x14, 0x56, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @nested={0xf8, 0x73, [@generic="7d50c36f2e73fefb1006d70e3c59f9433407ec04914e083c5a5c9192506f2a7c0ca62cbed7507e48bdc426f203855875b0082a99d63fc2487f111d3ac73afea08c097b20d8be9fedb40de04bf7e08cec361cd53e184951d4127806467e48bf012dc05af266e6eccd473a91197af5de7b812f54e914017fdd4bd2b4cd2a26915566dd7bb25ea73a7b2095a0de8000868472e02c346af0b21ce1ef7a334e309c0ea0604e319c7ef9129b3a26a9830f2400488dac2b6fa8dcb6914fdd1ad55bfc15271f9f4692a33c1a53fa5df212536252bb1d46f01b1d0fa6138414e9e6a767febdc174ed7271c9f8331da4952985e83abe6ab0"]}, @typed={0x8, 0x91, @uid=r5}, @nested={0xe8, 0x7f, [@generic="f3f11df236004de9b83e2c2c3002a3fb380602060f46f80d9ee5b423017b571776c5d88fc5320be77b5e0f61e73756dfa4f17973b1da690ff7fccae013b004c22c6904920bed8f9be77e92ba3e3513e89b0d426df55776", @generic="b4e41d0ad435726de97efbc76937797a889a0369a75147cf1da534552abe9d9e54064de930b2f97bac944a6dc88920d016bba5bbdf91cda65e310dded9999b0a229709cb3f9a1df24b8bcc351f", @generic="b1ef", @typed={0xc, 0x1c, @u64}, @typed={0x8, 0x85, @u32=0x7}, @typed={0xc, 0x1f, @u64=0x6}, @typed={0x10, 0x47, @str='/dev/ptmx\x00'}, @typed={0xc, 0x4b, @u64=0x8}]}, @nested={0x78, 0x3, [@generic="a22c6bd269cb99bc783c1c061fa5deb19480a188d824081a7b1765c0993358df59214422a13e28e0bb0f12b0bdf57bfd472c387bf1e814bda48ba4c0e60f932f45a66af2852ed109f1b707a9a458b9d2672b3edf0ec00a9a3aa55e8b4e219688eb0fe0c27b8f70", @generic, @typed={0xc, 0x2b, @u64=0x3}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) write(r1, &(0x7f0000c34fff), 0xffffff0b) socket(0x0, 0xa, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523") write(r1, &(0x7f0000000040), 0x2a3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) [ 870.696207] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 870.719102] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:35 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x10000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 870.794330] FAULT_INJECTION: forcing a failure. [ 870.794330] name failslab, interval 1, probability 0, space 0, times 0 [ 870.805727] CPU: 1 PID: 23576 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 870.813018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.822378] Call Trace: [ 870.824987] dump_stack+0x1b9/0x294 [ 870.828633] ? dump_stack_print_info.cold.2+0x52/0x52 [ 870.833839] ? __save_stack_trace+0x7e/0xd0 [ 870.838194] should_fail.cold.4+0xa/0x1a [ 870.842266] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 870.847383] ? kasan_kmalloc+0xc4/0xe0 [ 870.851282] ? kasan_slab_alloc+0x12/0x20 [ 870.855439] ? kmem_cache_alloc+0x12e/0x760 [ 870.859773] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 870.864627] ? kvm_mmu_load+0x21/0x10e0 [ 870.868612] ? vcpu_enter_guest+0x3a83/0x6060 [ 870.873115] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 870.878128] ? graph_lock+0x170/0x170 [ 870.881923] ? do_syscall_64+0x1b1/0x800 [ 870.885978] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 870.891343] ? find_held_lock+0x36/0x1c0 [ 870.895399] ? __lock_is_held+0xb5/0x140 [ 870.899451] ? do_wait+0x810/0xb60 [ 870.902990] ? check_same_owner+0x320/0x320 [ 870.907314] ? rcu_note_context_switch+0x710/0x710 [ 870.912242] __should_failslab+0x124/0x180 [ 870.916477] should_failslab+0x9/0x14 [ 870.920276] kmem_cache_alloc+0x2af/0x760 [ 870.924420] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 870.929428] mmu_topup_memory_caches+0xf7/0x3a0 [ 870.934092] ? debug_check_no_locks_freed+0x310/0x310 [ 870.939278] kvm_mmu_load+0x21/0x10e0 [ 870.943075] ? kasan_check_write+0x14/0x20 [ 870.947309] vcpu_enter_guest+0x3a83/0x6060 [ 870.951638] ? print_usage_bug+0xc0/0xc0 [ 870.955695] ? kvm_set_msr_common+0x2680/0x2680 [ 870.960351] ? vmx_vcpu_load+0xadd/0xfe0 [ 870.964412] ? __lock_acquire+0x7f5/0x5140 [ 870.968638] ? vmx_vcpu_reset+0x1030/0x1030 [ 870.972970] ? graph_lock+0x170/0x170 [ 870.976760] ? graph_lock+0x170/0x170 [ 870.980550] ? __lock_acquire+0x7f5/0x5140 [ 870.984781] ? debug_check_no_locks_freed+0x310/0x310 [ 870.989972] ? __lock_is_held+0xb5/0x140 [ 870.994033] ? wait_consider_task+0x3970/0x3990 [ 870.998705] ? lock_acquire+0x1dc/0x520 [ 871.002673] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 871.007684] ? lock_release+0xa10/0xa10 [ 871.011648] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 871.016926] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 871.021410] ? preempt_notifier_dec+0x20/0x20 [ 871.025907] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 871.030740] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 871.035755] kvm_vcpu_ioctl+0x79d/0x12e0 [ 871.039809] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 871.045508] ? graph_lock+0x170/0x170 [ 871.049301] ? find_held_lock+0x36/0x1c0 [ 871.053361] ? lock_downgrade+0x8e0/0x8e0 [ 871.057505] ? kasan_check_read+0x11/0x20 [ 871.061644] ? rcu_is_watching+0x85/0x140 [ 871.065786] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 871.070974] ? __fget+0x40c/0x650 [ 871.074418] ? match_held_lock+0x841/0x8b0 [ 871.078819] ? expand_files.part.8+0x9a0/0x9a0 [ 871.083397] ? kasan_check_write+0x14/0x20 [ 871.087625] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 871.092547] ? wait_for_completion+0x870/0x870 [ 871.097120] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 871.102300] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 871.108003] do_vfs_ioctl+0x1cf/0x16a0 [ 871.111892] ? ioctl_preallocate+0x2e0/0x2e0 [ 871.116291] ? fget_raw+0x20/0x20 [ 871.119736] ? __sb_end_write+0xac/0xe0 [ 871.123704] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 871.129227] ? fput+0x130/0x1a0 [ 871.132498] ? ksys_write+0x1a6/0x250 [ 871.136294] ? security_file_ioctl+0x94/0xc0 [ 871.140695] ksys_ioctl+0xa9/0xd0 [ 871.144141] __x64_sys_ioctl+0x73/0xb0 [ 871.148025] do_syscall_64+0x1b1/0x800 [ 871.151907] ? syscall_return_slowpath+0x5c0/0x5c0 [ 871.156830] ? syscall_return_slowpath+0x30f/0x5c0 [ 871.161751] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 871.167110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 871.171947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 871.177122] RIP: 0033:0x455a09 [ 871.180296] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.187996] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 2033/05/18 03:37:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:36 executing program 3: r0 = socket(0x9, 0x100000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6f, 0x0) close(r1) 2033/05/18 03:37:36 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 871.195262] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 871.202522] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 871.209782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 871.217043] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000000f 2033/05/18 03:37:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xda04000000000000}, 0x0) 2033/05/18 03:37:36 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x6, 0x200000) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000001c0)=0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r4, 0x0, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x20002, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={[], 0xffffffff, 0x0, 0x4, 0x94, 0x7, r3}) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="cf", 0x1, 0xfffffffffffffffb) [ 871.259525] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:36 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x1000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 871.340240] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:36 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6006f52600083b0000000000000000000000000000000000ff0200000000040000000000000000010000000000089078"], &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20500, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)=0x7378) 2033/05/18 03:37:36 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe0ffffff, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x1c, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic="9c"]}]}, 0x1c}, 0x1}, 0x0) r1 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)='*-.\x00', 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = getpgid(0x0) getpgrp(r3) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000440)=[{&(0x7f0000000140)="00493c04d27d6e020d08a3354247a7542df7baceeb6aa544cf887dfec2adb1a8eaa9b7684ac41a0ccac85757d5b18c1f49edec08aae6d66d1dfe705a9aad15cb21cbed47f96441ea6463bb1c3bfead8e86a549562ce328deea890fce65f2df695482f35a4e109f32c4730581d1e4d81ffbb05937dc57fcda687396ef85315b71c1122173daa2f2bc7135370b4e3a00c678dc5bcb4c82262e0c97e8dbe87cb498cc57918cb67bdde7ba42b2d6b922e97f9a7e5b1a030097e193e3964060f3f9693dea5f51f4dd6648", 0xc8}, {&(0x7f0000000240)="af94fd7b00093f9b897b0588b213ee92c9dcfe48c1be55364f1fdb8f913e9eea92214fca92b762324709fdfd59547e530ea8288ea90d421489e98f3f8ad523fc7b9599a68412d1d5b0027d0eb43966a6118ef076d7652ce5aee18125", 0x5c}, {&(0x7f00000002c0)="62994180bab39a4bb22af0b3c0ffc93b0036d8c673f6a6e824260104e5e1974aa1f69c6d1c18d4da60cc09b9acfa01e5ed0e6ff4f41ee8bcb728f54862668ac7fe65a22c0950989c92c77b39ef0e98ebfc2c507300725a2e55df21fe199e54bf2d4a8f1dd01e3c4ead35b203025d03dbb1853dddde7b7892c574ed6ecc48dfa456b48b4ef6f78cb32baed009ecc96cd94055543b8ff96600c9c37fbc77de1de0fdaec7fb034a30899d158bd1e623c459b627b173e196e8052d93cadb0b5796f236b1a5125ae30bbd95c9", 0xca}, {&(0x7f00000003c0)="739e6af89cdfa5a8c3df3aceb173c8145e59e7e397bca25b8cfa2acda977d5f99ed05e257bf65860584195323177042668b39f7d58acbe0b8bf40c2dbaf1268739c6825579d6e760f5dc92dba9674d6657676e046a9976f1", 0x58}], 0x4, r2) 2033/05/18 03:37:36 executing program 7: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) getsockopt$ax25_int(r0, 0x101, 0xe, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x4, &(0x7f0000000000), 0x4) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2033/05/18 03:37:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 2033/05/18 03:37:36 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:36 executing program 2 (fault-call:13 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 871.551536] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 871.562490] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfffffdfd}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000080)="f883454930c6fd0a1a62b4538425248d91a31c41e8cbe4ef0c72be9ea52acae6e95d199b7cab684448673e6ca179db8c0aff370fca1a52f427ca2d6682f140d560e1351e081e198cfc314c45d6261f671961b122fb5c1373b88653949e4d2c5ebcf19bbe886673d9e0358fed3200ade15d60e2895f175d3286a2891f8d8e8e0e7bd714275630d35086253a4eb65fcaad5ed54d0c8dcb15f53a7bc72dfd024f856367b808c8c9d7051938812b8a56db584ad4cdbbf309ae1bc68d") 2033/05/18 03:37:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:36 executing program 7: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x1, &(0x7f0000000280)) unlink(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') syz_fuseblk_mount(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:37:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x0, r1}) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000280)=""/4096) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000100)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x80000001}}, 0xe) connect(r0, &(0x7f00000006c0)=@rc={0x1f}, 0x80) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)) 2033/05/18 03:37:36 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xffffffffffffffe0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 871.682401] FAULT_INJECTION: forcing a failure. [ 871.682401] name failslab, interval 1, probability 0, space 0, times 0 [ 871.693733] CPU: 1 PID: 23630 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 871.697662] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 871.701015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.701021] Call Trace: [ 871.701048] dump_stack+0x1b9/0x294 [ 871.701075] ? dump_stack_print_info.cold.2+0x52/0x52 [ 871.701095] ? __save_stack_trace+0x7e/0xd0 [ 871.701122] should_fail.cold.4+0xa/0x1a [ 871.738018] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 871.743139] ? kasan_kmalloc+0xc4/0xe0 [ 871.747036] ? kasan_slab_alloc+0x12/0x20 [ 871.752847] ? kmem_cache_alloc+0x12e/0x760 [ 871.757181] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 871.762032] ? kvm_mmu_load+0x21/0x10e0 [ 871.766023] ? vcpu_enter_guest+0x3a83/0x6060 [ 871.770527] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 871.775555] ? graph_lock+0x170/0x170 [ 871.779366] ? do_syscall_64+0x1b1/0x800 [ 871.783450] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 871.788833] ? find_held_lock+0x36/0x1c0 [ 871.792912] ? __lock_is_held+0xb5/0x140 [ 871.796996] ? check_same_owner+0x320/0x320 [ 871.801331] ? rcu_note_context_switch+0x710/0x710 [ 871.806270] __should_failslab+0x124/0x180 [ 871.810513] should_failslab+0x9/0x14 [ 871.814321] kmem_cache_alloc+0x2af/0x760 [ 871.818745] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 871.823607] mmu_topup_memory_caches+0xf7/0x3a0 [ 871.828281] ? debug_check_no_locks_freed+0x310/0x310 [ 871.833480] kvm_mmu_load+0x21/0x10e0 [ 871.837293] ? kasan_check_write+0x14/0x20 [ 871.841542] vcpu_enter_guest+0x3a83/0x6060 [ 871.845874] ? print_usage_bug+0xc0/0xc0 [ 871.849950] ? kvm_set_msr_common+0x2680/0x2680 [ 871.854622] ? vmx_vcpu_load+0xadd/0xfe0 [ 871.858693] ? __lock_acquire+0x7f5/0x5140 [ 871.862931] ? vmx_vcpu_reset+0x1030/0x1030 [ 871.867255] ? graph_lock+0x170/0x170 [ 871.871057] ? graph_lock+0x170/0x170 [ 871.874868] ? __lock_acquire+0x7f5/0x5140 [ 871.879121] ? debug_check_no_locks_freed+0x310/0x310 [ 871.884327] ? __lock_is_held+0xb5/0x140 [ 871.888403] ? lock_acquire+0x1dc/0x520 [ 871.892388] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 871.897419] ? lock_release+0xa10/0xa10 [ 871.901405] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 871.906689] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 871.911193] ? preempt_notifier_dec+0x20/0x20 [ 871.915708] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 871.920553] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 871.925583] kvm_vcpu_ioctl+0x79d/0x12e0 [ 871.929663] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 871.935385] ? graph_lock+0x170/0x170 [ 871.939196] ? find_held_lock+0x36/0x1c0 [ 871.943271] ? lock_downgrade+0x8e0/0x8e0 [ 871.947429] ? kasan_check_read+0x11/0x20 [ 871.951586] ? rcu_is_watching+0x85/0x140 [ 871.955740] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 871.960946] ? __fget+0x40c/0x650 [ 871.964408] ? match_held_lock+0x841/0x8b0 [ 871.968658] ? expand_files.part.8+0x9a0/0x9a0 [ 871.973251] ? kasan_check_write+0x14/0x20 [ 871.977492] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 871.982433] ? wait_for_completion+0x870/0x870 [ 871.987032] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 871.992225] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 871.997921] do_vfs_ioctl+0x1cf/0x16a0 [ 872.001807] ? ioctl_preallocate+0x2e0/0x2e0 [ 872.006202] ? fget_raw+0x20/0x20 [ 872.009642] ? __sb_end_write+0xac/0xe0 [ 872.014047] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 872.019574] ? fput+0x130/0x1a0 [ 872.022846] ? ksys_write+0x1a6/0x250 [ 872.026919] ? security_file_ioctl+0x94/0xc0 [ 872.031318] ksys_ioctl+0xa9/0xd0 [ 872.034761] __x64_sys_ioctl+0x73/0xb0 [ 872.038636] do_syscall_64+0x1b1/0x800 [ 872.042507] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 872.047336] ? syscall_return_slowpath+0x5c0/0x5c0 [ 872.052252] ? syscall_return_slowpath+0x30f/0x5c0 [ 872.057170] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 872.062544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 872.067383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.072553] RIP: 0033:0x455a09 [ 872.075750] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2033/05/18 03:37:37 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1dd8, 0x8442) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@gettaction={0x20, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x7}}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:37 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xc00e000000000000}, 0x0) 2033/05/18 03:37:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:37 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x3, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:37 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)='\x00', 0xfffffffffffffcd5, 0x2) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0x8, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x2, 0xb8) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1002, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) 2033/05/18 03:37:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000000)="9a0028a800dfd8f22e260f01c9f36d66b9800000c00f326635000800000f30f3ab0f01df66b98f0b00000f32d18d9808262636c19d5e0d00", 0x38}], 0xaaaabaf, 0x0, &(0x7f0000000040)=[@dstype0={0x6}], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2033/05/18 03:37:37 executing program 2 (fault-call:13 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 872.083462] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 872.090737] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 872.098000] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 872.105271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 872.112527] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000010 [ 872.189999] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 872.195079] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:37 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x3, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/112) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1}) 2033/05/18 03:37:37 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x7, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 872.306121] FAULT_INJECTION: forcing a failure. [ 872.306121] name failslab, interval 1, probability 0, space 0, times 0 [ 872.318014] CPU: 1 PID: 23679 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 872.325309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.334675] Call Trace: [ 872.337288] dump_stack+0x1b9/0x294 [ 872.340935] ? dump_stack_print_info.cold.2+0x52/0x52 [ 872.346142] ? perf_trace_lock_acquire+0xe3/0x980 [ 872.351011] should_fail.cold.4+0xa/0x1a 2033/05/18 03:37:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) [ 872.355097] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 872.360217] ? kasan_kmalloc+0xc4/0xe0 [ 872.364121] ? kasan_slab_alloc+0x12/0x20 [ 872.368287] ? kmem_cache_alloc+0x12e/0x760 [ 872.372627] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 872.377486] ? kvm_mmu_load+0x21/0x10e0 [ 872.381475] ? vcpu_enter_guest+0x3a83/0x6060 [ 872.385993] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 872.391024] ? graph_lock+0x170/0x170 [ 872.394840] ? do_syscall_64+0x1b1/0x800 [ 872.398893] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.404252] ? find_held_lock+0x36/0x1c0 [ 872.408306] ? __lock_is_held+0xb5/0x140 [ 872.412373] ? check_same_owner+0x320/0x320 [ 872.416689] ? rcu_note_context_switch+0x710/0x710 [ 872.421616] __should_failslab+0x124/0x180 [ 872.425857] should_failslab+0x9/0x14 [ 872.429647] kmem_cache_alloc+0x2af/0x760 [ 872.433794] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 872.438632] mmu_topup_memory_caches+0xf7/0x3a0 [ 872.443296] ? debug_check_no_locks_freed+0x310/0x310 [ 872.448496] kvm_mmu_load+0x21/0x10e0 [ 872.452294] ? kasan_check_write+0x14/0x20 [ 872.456525] vcpu_enter_guest+0x3a83/0x6060 [ 872.460848] ? kvm_set_msr_common+0x2680/0x2680 [ 872.465512] ? perf_trace_lock+0x900/0x900 [ 872.469745] ? __lock_acquire+0x7f5/0x5140 [ 872.473975] ? vmx_vcpu_reset+0x1030/0x1030 [ 872.478295] ? graph_lock+0x170/0x170 [ 872.482095] ? graph_lock+0x170/0x170 [ 872.485886] ? __lock_acquire+0x7f5/0x5140 [ 872.490236] ? perf_trace_lock_acquire+0xe3/0x980 [ 872.495084] ? __lock_is_held+0xb5/0x140 [ 872.499140] ? lock_acquire+0x1dc/0x520 [ 872.503104] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 872.508114] ? lock_release+0xa10/0xa10 [ 872.512080] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 872.517348] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 872.521835] ? preempt_notifier_dec+0x20/0x20 [ 872.526338] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 872.531193] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 872.536208] kvm_vcpu_ioctl+0x79d/0x12e0 [ 872.540269] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 872.545971] ? graph_lock+0x170/0x170 [ 872.549773] ? find_held_lock+0x36/0x1c0 [ 872.553835] ? lock_downgrade+0x8e0/0x8e0 [ 872.557981] ? kasan_check_read+0x11/0x20 [ 872.562119] ? rcu_is_watching+0x85/0x140 [ 872.566256] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 872.571448] ? __fget+0x40c/0x650 [ 872.574897] ? match_held_lock+0x841/0x8b0 [ 872.579128] ? expand_files.part.8+0x9a0/0x9a0 [ 872.583717] ? kasan_check_write+0x14/0x20 [ 872.587943] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 872.592868] ? wait_for_completion+0x870/0x870 [ 872.597447] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 872.602631] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 872.608331] do_vfs_ioctl+0x1cf/0x16a0 [ 872.612215] ? ioctl_preallocate+0x2e0/0x2e0 [ 872.616615] ? fget_raw+0x20/0x20 [ 872.620064] ? __sb_end_write+0xac/0xe0 [ 872.624038] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 872.629580] ? fput+0x130/0x1a0 [ 872.632852] ? ksys_write+0x1a6/0x250 [ 872.636649] ? security_file_ioctl+0x94/0xc0 [ 872.641056] ksys_ioctl+0xa9/0xd0 [ 872.644501] __x64_sys_ioctl+0x73/0xb0 [ 872.648381] do_syscall_64+0x1b1/0x800 [ 872.652260] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 872.657094] ? syscall_return_slowpath+0x5c0/0x5c0 [ 872.662023] ? syscall_return_slowpath+0x30f/0x5c0 [ 872.666951] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 872.672315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 872.677156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.682334] RIP: 0033:0x455a09 [ 872.685520] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.693218] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 872.700476] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 2033/05/18 03:37:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x86801, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0xffff) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x20000, &(0x7f0000000000)="8630ff908ca0378ce0233bcc5d", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)="abd49f4eeaec5464b4ff1f342913029ffb6153780693d20cf492fd1e187405abae36fdf0c5c7451a998d1af71bcb76b6ca1d45cdac7b3aae685a0bc1429ec04a2a235529a669293576ae619698c448c1272d572d80ddbc252fd0928c41d972f2a8b158f82db278f85e9db8d79879966e41d22015fb6832e6d0e3b16e6b68ac69274dc28bc477b491bbccca107b257423d5d0f72b5f3cd7dc56156d83861ac1a785e53042fa402ac67a8f89455831ae2898cc") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000100)) 2033/05/18 03:37:37 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x6, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 872.707733] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 872.714987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 872.722248] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000011 [ 872.738707] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:38 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="4f66a81b00000000", @ANYPTR=&(0x7f0000001040)=ANY=[@ANYBLOB="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"], @ANYBLOB="0807030000008100660000006f0400006ca0535368"]) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f00000001c0)) 2033/05/18 03:37:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 872.798048] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:38 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:38 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = shmget(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/166) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={"66696cf472720000000000000000000018000000000000000000000000000400"}, &(0x7f0000000180)=0x54) 2033/05/18 03:37:39 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x2000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:39 executing program 2 (fault-call:13 fault-nth:18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xf000}, 0x0) 2033/05/18 03:37:39 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x131080, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7400000, 0x200) r5 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x9, 0x1) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/audio\x00', 0x0, 0x0) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001580)='/dev/urandom\x00', 0x189800, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001700)='/dev/snapshot\x00', 0x200800, 0x0) io_submit(r2, 0x6, &(0x7f0000001780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x3, r1, &(0x7f00000003c0)="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", 0x1000, 0x7f, 0x0, 0x1, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x101, r1, &(0x7f0000000100)="b1adbed6ef3ed5db7d6bc4087970c86b2c58f44883363e7777c6a938d081d97bc01e0689c71d059f932331bb6b5d7631fa130383936da647d991e57372f4f76c1a0aa89d5a60157c553761b4d60871bbb61326c2db44f070101bfa4bc7e0e42ecde2d81de5eec868a8dbf7a6aaf3328643e0024d4f1c74c1704cd1a192a4230450cd8002bb67e6bf7d3408f49bb001155e225af852e4a9ab330d9a5a82ccca72fcf324e57a1a722a4ab9062c24b2bcb2f8", 0xb1, 0x3c4d, 0x0, 0x0, r4}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f00000002c0)="2c6764fc35039afa94c95661d166da4da3a23bd46f228a65dc89ddd718c81f89d50ac9a67e29b7ac85db81b73bc1157436fbba89475d6219f4b7cc0cbbf5175096999f2364b5f51a1e3d083d414094b35a00bf5f7146ab319c1f035b92116468fd419e9360df", 0x66, 0x8bf0, 0x0, 0x0, r5}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0xfff, r0, &(0x7f0000001400)="caca23a3655769e407c361f9355dc52b843e85428bcc898e5710e8f329c98c6a435610dd43fc22d630907525bf650dc93184d6e4ca2aa7889eab3aa741dec742ef4be01fae4eb9b289c38c7bdf4bfea23d9d4e4bb67272a6cdc22db188777fd4b332f201e5fa152815f0b1a9c6a6be989e6ccb64e9dc17d2c53e91c9483f8c64d802fcb1e452061397d4e2afb044d4d258fcf23b785ce881754c5abdcb75902be9c5932b36636f928fb0d47fe2e818e6bcb8148eefcb282eb21d32", 0xbb, 0x9, 0x0, 0x1, r6}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x6, 0x68, r1, &(0x7f0000001540)="b5fb92a785c0345b6715c50f", 0xc, 0x4, 0x0, 0x0, r7}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000001600)="1d6493d4f626974209d6f973d167e8f65b651dc1f9854efead38a3129e2b68f12afbc8d6c88044ab98bf0f1b1799baa6866e21c2f610d123fe059c16215b65bb3225d37e85e61ea09b9ad2e633171994cf442c9b842481b3f5bc4de0d4a54af8a64577a8d4f7c1c6c4b7cd85c206d3d8ec4c150afe60cb26e22cffc5315e50db0ed4630187cbba4bc4af165d0a7f32e50851a4597f133ee00c71679489da7b3066c23a3aa811b28cb9a6ef6c99dde3ce8b94e62ecbfd1296cc8a052b803ce7aa602f04ee5a1b125e8734f07636eee90e2381ae0d759b03d65c79bc5f314610dc1e5187255794e05b0425515c713e52e662c00e6a4a", 0xf5, 0x6d5, 0x0, 0x0, r8}]) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000200)="440f20c03501000000440f22c0460f30363e410f010241f447dd7c65002e360fd7c6b995020000b80e000000ba000000000f300f0097050000000f01d10f35", 0x3f}], 0x1, 0x0, &(0x7f0000000080), 0x10ae) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2033/05/18 03:37:39 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x410480) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0x5}) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc058534b, &(0x7f0000000180)={{}, 'port1\x00'}) 2033/05/18 03:37:39 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:39 executing program 7: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x87, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) getsockopt(r0, 0x1a, 0x1, &(0x7f00000000c0)=""/163, &(0x7f0000000000)=0xa3) 2033/05/18 03:37:39 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 873.940444] validate_nla: 1 callbacks suppressed [ 873.940454] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 873.963263] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 874.025906] *** Guest State *** [ 874.029297] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 874.038207] CR4: actual=0x0000000000006d69, shadow=0x0000000000006d69, gh_mask=ffffffffffffe871 [ 874.046727] FAULT_INJECTION: forcing a failure. [ 874.046727] name failslab, interval 1, probability 0, space 0, times 0 [ 874.047108] CR3 = 0x0000000000002000 [ 874.047120] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 874.047131] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 874.047138] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 874.047156] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 874.058400] CPU: 0 PID: 23749 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 874.058416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.062145] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 874.068586] Call Trace: [ 874.068616] dump_stack+0x1b9/0x294 [ 874.068638] ? dump_stack_print_info.cold.2+0x52/0x52 [ 874.075132] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 874.081069] ? __save_stack_trace+0x7e/0xd0 [ 874.081095] should_fail.cold.4+0xa/0x1a [ 874.087074] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 874.094313] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 874.094333] ? kasan_kmalloc+0xc4/0xe0 [ 874.103706] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 874.110333] ? kasan_slab_alloc+0x12/0x20 [ 874.110345] ? kmem_cache_alloc+0x12e/0x760 [ 874.110364] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 874.112942] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 874.116534] ? kvm_mmu_load+0x21/0x10e0 [ 874.116548] ? vcpu_enter_guest+0x3a83/0x6060 [ 874.116564] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 874.121752] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 874.129684] ? graph_lock+0x170/0x170 [ 874.129698] ? do_syscall_64+0x1b1/0x800 [ 874.129716] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 874.134044] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 874.138063] ? find_held_lock+0x36/0x1c0 [ 874.138082] ? __lock_is_held+0xb5/0x140 [ 874.146047] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 874.151124] ? check_same_owner+0x320/0x320 [ 874.151144] ? rcu_note_context_switch+0x710/0x710 [ 874.155047] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 874.162977] __should_failslab+0x124/0x180 [ 874.162996] should_failslab+0x9/0x14 [ 874.167146] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 874.171432] kmem_cache_alloc+0x2af/0x760 [ 874.171456] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 874.176304] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 874.184234] mmu_topup_memory_caches+0xf7/0x3a0 [ 874.184246] ? debug_check_no_locks_freed+0x310/0x310 [ 874.184264] kvm_mmu_load+0x21/0x10e0 [ 874.188228] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 874.192695] ? kasan_check_write+0x14/0x20 [ 874.192717] vcpu_enter_guest+0x3a83/0x6060 [ 874.197724] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 874.205660] ? print_usage_bug+0xc0/0xc0 [ 874.205684] ? kvm_set_msr_common+0x2680/0x2680 [ 874.209733] Interruptibility = 00000000 ActivityState = 00000000 [ 874.213762] ? vmx_vcpu_load+0xadd/0xfe0 [ 874.213776] ? __lock_acquire+0x7f5/0x5140 [ 874.213791] ? vmx_vcpu_reset+0x1030/0x1030 [ 874.219866] *** Host State *** [ 874.227795] ? graph_lock+0x170/0x170 [ 874.227811] ? graph_lock+0x170/0x170 [ 874.231867] RIP = 0xffffffff811f76d9 RSP = 0xffff8801c1eff390 [ 874.235892] ? __lock_acquire+0x7f5/0x5140 [ 874.235915] ? debug_check_no_locks_freed+0x310/0x310 [ 874.244228] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 874.248534] ? __lock_is_held+0xb5/0x140 [ 874.248553] ? lock_acquire+0x1dc/0x520 [ 874.253474] FSBase=00007f3478c1d700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 874.261418] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 874.261439] ? lock_release+0xa10/0xa10 [ 874.265664] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 874.269431] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 874.269444] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 874.269461] ? preempt_notifier_dec+0x20/0x20 [ 874.277423] CR0=0000000080050033 CR3=00000001baae8000 CR4=00000000001426e0 [ 874.281544] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 874.281560] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 874.286396] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87801380 [ 874.294346] kvm_vcpu_ioctl+0x79d/0x12e0 [ 874.294365] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 874.299040] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 874.304180] ? graph_lock+0x170/0x170 [ 874.304193] ? find_held_lock+0x36/0x1c0 [ 874.304215] ? lock_downgrade+0x8e0/0x8e0 [ 874.307995] *** Control State *** [ 874.314388] ? kasan_check_read+0x11/0x20 [ 874.314405] ? rcu_is_watching+0x85/0x140 [ 874.318628] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 874.322918] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 874.322942] ? __fget+0x40c/0x650 [ 874.330383] EntryControls=0000d1ff ExitControls=0023efff [ 874.334414] ? match_held_lock+0x841/0x8b0 [ 874.334430] ? expand_files.part.8+0x9a0/0x9a0 [ 874.334448] ? kasan_check_write+0x14/0x20 [ 874.339115] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 874.345311] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 874.345332] ? wait_for_completion+0x870/0x870 [ 874.349384] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 874.353590] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 874.353610] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 874.357930] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 874.361095] do_vfs_ioctl+0x1cf/0x16a0 [ 874.361116] ? ioctl_preallocate+0x2e0/0x2e0 [ 874.364920] reason=80000021 qualification=0000000000000000 [ 874.368691] ? fget_raw+0x20/0x20 [ 874.368705] ? __sb_end_write+0xac/0xe0 [ 874.368725] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 874.374692] IDTVectoring: info=00000000 errcode=00000000 [ 874.378891] ? fput+0x130/0x1a0 [ 874.378905] ? ksys_write+0x1a6/0x250 [ 874.378924] ? security_file_ioctl+0x94/0xc0 [ 874.384127] TSC Offset = 0xfffffe288d8e0977 [ 874.390538] ksys_ioctl+0xa9/0xd0 [ 874.390558] __x64_sys_ioctl+0x73/0xb0 [ 874.394609] EPT pointer = 0x0000000180da701e [ 874.398554] do_syscall_64+0x1b1/0x800 [ 874.398565] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 874.398583] ? syscall_return_slowpath+0x5c0/0x5c0 [ 874.646911] ? syscall_return_slowpath+0x30f/0x5c0 [ 874.651843] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 874.657198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 874.662032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 874.667213] RIP: 0033:0x455a09 [ 874.670396] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2033/05/18 03:37:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:39 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xa, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:39 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000)={0x1d}, 0x10) 2033/05/18 03:37:39 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 874.678097] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 874.685351] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 874.692604] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 874.699859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 874.707113] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000012 2033/05/18 03:37:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x1) r1 = semget(0x3, 0x3, 0x106) semop(r1, &(0x7f0000000000)=[{0x0, 0xac61, 0x1000}], 0x1) [ 874.741458] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 2033/05/18 03:37:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:40 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xffffffff00000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 874.862436] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 874.903172] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f00000001c0)=0x80) r4 = dup2(r2, r1) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000280)=""/202) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [0x4b564d02, 0x185, 0x4b564d02, 0x5]}) signalfd4(r3, &(0x7f0000000100)={0x2}, 0x8, 0x800) connect$llc(r3, &(0x7f0000000240)={0x1a, 0x110, 0x6c4, 0x5, 0x6, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000000c0)={0x3, 0xa9}) 2033/05/18 03:37:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xa00, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:41 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}]}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r2, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) 2033/05/18 03:37:41 executing program 2 (fault-call:13 fault-nth:19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xd71a0000}, 0x0) 2033/05/18 03:37:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffd, 0x40102) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000003c0)={0xbf, @loopback=0x7f000001, 0x4e24, 0x0, 'wlc\x00', 0x31, 0x7, 0x51}, 0x2c) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) r3 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xef, 0x400000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000240)) r4 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) setsockopt$inet6_dccp_buf(r3, 0x21, 0x8f, &(0x7f0000000280)="78f852793cbadc7c6d0d3dea9f2010809a3e4d2551d8d2038b953dc16f35ba16cdd91a47ddc714d779d2386bfb1da70129bacb6d179478b21a335e7f92946b95ff2e727f2cf8c8dcec9df60481da669f616e2a465040b4fe2510f6ecf812b5381fe0505f1dc07ddd0de1008108cf889cbec0a0ef23141b9ff831520be796878ce73d4529c0394123328931b29e6c8d86ff1b21176e3035d6f69430a7c9089be155651a3bb9e16e8bde27b400ee885f8b800ef4a2a432de6aa2ce9b6e2f358b5083b39c7a87671bcc6a07fc", 0xcb) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) read(r2, &(0x7f0000000480)=""/193, 0xffffffffffffff01) write$binfmt_elf32(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="6ae9ab3c404c1e83"], 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x4, 0x3, [0x401, 0xd8, 0x1]}, &(0x7f0000000440)=0xe) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000580)={r5, 0x4b, "7d2973d0f071e54211c2fae94b3a0a61c732098d69a245219f78645e5e4859a124f5f2201316255426f058ff0022724b4b118905e65cc2b8b019654d5f54f1160efc5a51f64906a319a7f8"}, &(0x7f0000000600)=0x53) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x3) 2033/05/18 03:37:41 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 875.844053] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 875.859340] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x80000001}}, 0xe) connect(r0, &(0x7f00000006c0)=@rc={0x1f}, 0x80) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffff801, 0x4000) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 875.920226] FAULT_INJECTION: forcing a failure. [ 875.920226] name failslab, interval 1, probability 0, space 0, times 0 [ 875.931620] CPU: 1 PID: 23809 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 875.938905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.948268] Call Trace: [ 875.950874] dump_stack+0x1b9/0x294 [ 875.954523] ? dump_stack_print_info.cold.2+0x52/0x52 [ 875.959729] ? __save_stack_trace+0x7e/0xd0 [ 875.964074] should_fail.cold.4+0xa/0x1a 2033/05/18 03:37:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x200000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 875.968156] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 875.973273] ? kasan_kmalloc+0xc4/0xe0 [ 875.977170] ? kasan_slab_alloc+0x12/0x20 [ 875.981323] ? kmem_cache_alloc+0x12e/0x760 [ 875.985652] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 875.990508] ? kvm_mmu_load+0x21/0x10e0 [ 875.994503] ? vcpu_enter_guest+0x3a83/0x6060 [ 875.999002] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 876.004031] ? graph_lock+0x170/0x170 [ 876.007844] ? do_syscall_64+0x1b1/0x800 [ 876.011919] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 2033/05/18 03:37:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x6c0e}, 0x0) [ 876.017304] ? find_held_lock+0x36/0x1c0 [ 876.021383] ? __lock_is_held+0xb5/0x140 [ 876.025456] ? aa_change_profile+0x1b00/0x2fe0 [ 876.030063] ? check_same_owner+0x320/0x320 [ 876.034402] ? rcu_note_context_switch+0x710/0x710 [ 876.039355] __should_failslab+0x124/0x180 [ 876.043624] should_failslab+0x9/0x14 [ 876.046550] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 876.047434] kmem_cache_alloc+0x2af/0x760 [ 876.047460] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 876.047479] mmu_topup_memory_caches+0xf7/0x3a0 [ 876.047494] ? debug_check_no_locks_freed+0x310/0x310 [ 876.047513] kvm_mmu_load+0x21/0x10e0 [ 876.047531] ? kasan_check_write+0x14/0x20 [ 876.081635] vcpu_enter_guest+0x3a83/0x6060 [ 876.085979] ? print_usage_bug+0xc0/0xc0 [ 876.090059] ? kvm_set_msr_common+0x2680/0x2680 [ 876.094732] ? vmx_vcpu_load+0xadd/0xfe0 [ 876.098807] ? __lock_acquire+0x7f5/0x5140 [ 876.103049] ? vmx_vcpu_reset+0x1030/0x1030 [ 876.107377] ? graph_lock+0x170/0x170 2033/05/18 03:37:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x800000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:41 executing program 7: r0 = socket$inet(0x2, 0x800, 0xfffffffffffffffc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) set_mempolicy(0x0, &(0x7f0000000040)=0x67, 0x13) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x2a3) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x2) recvmsg(r0, &(0x7f0000001c00)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/80, 0x50}], 0x1, &(0x7f0000001b40)=""/150, 0x96}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) [ 876.108624] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 876.111199] ? graph_lock+0x170/0x170 [ 876.111215] ? __lock_acquire+0x7f5/0x5140 [ 876.111235] ? debug_check_no_locks_freed+0x310/0x310 [ 876.111255] ? __lock_is_held+0xb5/0x140 [ 876.111268] ? aa_change_profile+0x12d0/0x2fe0 [ 876.111284] ? lock_acquire+0x1dc/0x520 [ 876.147799] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 876.152835] ? lock_release+0xa10/0xa10 [ 876.156822] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 876.162113] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 876.166619] ? preempt_notifier_dec+0x20/0x20 [ 876.171145] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 876.176004] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 876.181044] kvm_vcpu_ioctl+0x79d/0x12e0 [ 876.185125] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 876.190847] ? graph_lock+0x170/0x170 [ 876.194657] ? find_held_lock+0x36/0x1c0 [ 876.198734] ? lock_downgrade+0x8e0/0x8e0 [ 876.202902] ? kasan_check_read+0x11/0x20 [ 876.207061] ? rcu_is_watching+0x85/0x140 [ 876.211225] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 876.217165] ? __fget+0x40c/0x650 [ 876.220636] ? match_held_lock+0x841/0x8b0 [ 876.224886] ? expand_files.part.8+0x9a0/0x9a0 [ 876.229482] ? kasan_check_write+0x14/0x20 [ 876.233733] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 876.238677] ? wait_for_completion+0x870/0x870 [ 876.243271] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 876.248471] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 876.254194] do_vfs_ioctl+0x1cf/0x16a0 [ 876.258097] ? ioctl_preallocate+0x2e0/0x2e0 [ 876.262523] ? fget_raw+0x20/0x20 [ 876.266001] ? __sb_end_write+0xac/0xe0 [ 876.270000] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 876.275550] ? fput+0x130/0x1a0 [ 876.278840] ? ksys_write+0x1a6/0x250 [ 876.282659] ? security_file_ioctl+0x94/0xc0 [ 876.287084] ksys_ioctl+0xa9/0xd0 [ 876.290557] __x64_sys_ioctl+0x73/0xb0 [ 876.294468] do_syscall_64+0x1b1/0x800 [ 876.298368] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 876.303226] ? syscall_return_slowpath+0x5c0/0x5c0 [ 876.308173] ? syscall_return_slowpath+0x30f/0x5c0 [ 876.313116] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 876.318499] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 876.323365] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 876.328559] RIP: 0033:0x455a09 [ 876.331753] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.339474] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 876.346774] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 876.354052] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 876.361328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 2033/05/18 03:37:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:41 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="bd3d74861a8e20ed60376ccac3741cea5351fda7615868ee09fb2e6ff5053f9a85b8f35193fbc1cc94ce4304409c93cf56cd1321eee5d5", 0x37, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="48000000140019eca54dcbeafd0d8c560a84ffe00600000000000000a2bc5603ca00000f7f81001e362d6f53000101ff0000000309ff5bffff00c7e5edde00000000000000b32b2d", 0x48}], 0x10000000000001bc) 2033/05/18 03:37:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xff00000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 876.368610] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000013 2033/05/18 03:37:41 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x8, 0xfffffffffffffe31) rt_sigaction(0x7, &(0x7f0000000000)={0xffffffffffffff0d, {0xffffffffffffffe1}}, &(0x7f0000d4efe8), 0x8, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_tables_matches\x00') 2033/05/18 03:37:41 executing program 2 (fault-call:13 fault-nth:20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x3093}, 0x0) 2033/05/18 03:37:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000080)={0x80bb, 0xfff, 0x3ff, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4048ae9b, &(0x7f0000000000)) [ 876.434999] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 876.448537] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:41 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@deltfilter={0x3c, 0x2d, 0x117, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0xc, 0x2, @TCA_BASIC_CLASSID={0x8, 0x1}}}]}, 0x3c}, 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10402, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {r2, r3/1000+30000}}, 0x0) 2033/05/18 03:37:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x8000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:41 executing program 7: r0 = gettid() r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r1, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000040)={0x22f, 0x2, 0x1, 0x3}) tkill(r0, 0x1000000000016) 2033/05/18 03:37:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 876.521755] FAULT_INJECTION: forcing a failure. [ 876.521755] name failslab, interval 1, probability 0, space 0, times 0 [ 876.533188] CPU: 1 PID: 23859 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 876.540488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.549851] Call Trace: [ 876.552464] dump_stack+0x1b9/0x294 [ 876.556116] ? dump_stack_print_info.cold.2+0x52/0x52 [ 876.561324] ? __save_stack_trace+0x7e/0xd0 [ 876.565677] should_fail.cold.4+0xa/0x1a [ 876.569768] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 876.574894] ? kasan_kmalloc+0xc4/0xe0 [ 876.578800] ? kasan_slab_alloc+0x12/0x20 [ 876.582983] ? kmem_cache_alloc+0x12e/0x760 [ 876.583392] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 876.587334] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 876.587352] ? kvm_mmu_load+0x21/0x10e0 [ 876.587370] ? vcpu_enter_guest+0x3a83/0x6060 [ 876.587383] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 876.587397] ? graph_lock+0x170/0x170 [ 876.587414] ? do_syscall_64+0x1b1/0x800 2033/05/18 03:37:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000100)={0x2c, 0x401, 0xffffffff7fffffff, 0x800, 0x5, 0x400}) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='6', 0x1}], 0x1, &(0x7f0000000600)=[{0xa0, 0x11f, 0x4, "25f70d81d3d815dc177696bec232d76fad17cb204b07cdf9c37b1e9118c2551e975ba504d746570e4dd7e41c72eb8349a7da9811daf73a2f2f0dbfe84eeee21a8fbe066a6de10fa96f4bcf4e800e8f70f790b025df157c2fa1280d1eaa7020f3fd7245e216c972393f761af0c28ebff100153f9b3cf049a963c97cef76b358cf7f9edd32713656306a46b489"}, {0xa0, 0x112, 0x1ff, "859e5b2ebdf35beb5788a4b0e44b587590e0e00bb278f949dadac38564e1259b05743725dbf6c8263a5b73da59cb1d2cd9e2989b047d4f7956466b80e31bc11e056665a10a76efde14c7ea3b8c0a68cb6c3ff17146080db4b01cf18dd958ec5dc4b5a0d31d55d443617c289a1a559d8e66fbfd13e75b36f372336a6fb656ca99dca1ce441b81c906b05cfa"}, {0x1010, 0x0, 0x1000, "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"}, {0x98, 0x0, 0xfffffffffffffc01, "15bdb701987d325448753596af112c9885d37430319275ed475a88e19295b807015ba44bec58d79cc046aa8c7ddf1d47074469772a6b8bf6566c5e20a405403215e5f01b2c3e9b73ba9dedf1837d3bf715a312bece8d12a48193a549af062cdf73ee095ee0d999eed2fba688ed084aa607e58727dab3385c9639c0de7bca882abf63"}, {0x60, 0x114, 0x401, "a1ac65a90efab1588ffa04f9650384d980aadd256ac4a98524b0dedca2ed1c8b1fa926aeeb156bc0ae0577f13af1dc11765581fa687b11c19d513f5f91bc0261e3d09d7ef4f2684104ca3478f0f281"}, {0x98, 0x11f, 0x8, "23bd7aebef166ce887369d5767ff84360c5374b742ce5250aac6a063e543a58d2adc7663178829a589292847786ad52c5d2fa8ea0327ff092bec68239aaac526e7999e764844b487430868e014a9bdc57d3746e88e3aa578a392f242ca13f41debc277676cacf6af83982c4941645215c4d070c2513575753e0a53c96a41af4666"}, {0xd8, 0x107, 0x4, "05b65aa69f40593a716ef5dbd878231ca7ba5890c50fbe3e8eb6b63adfac5ce301ee1529a94e101d1b12b5606f3bf69c75590c629133f7a89799207586be76ef6d3e76dc661e5d5e7785de1ac58b9ea9cae2bfba1612b6ef91c1a2157cdfd8e9e303efd12e93b18502e4ca9159fc4396b9555fab35cc665910a1c78e9d34a26fcc9aba8bdeff367d1c56bba907a469b3e5815188ee3f1f73f4ce1075b9c192e11d87fe3dafb950161ac6d47f98cc696aa49035df331130dbdf3e8ffe49083acc0e843699"}, {0x1010, 0x10c, 0x8000, "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"}], 0x23c8, 0x20000000}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000012000500000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="bae0f039bf22bce93feecd7dffffff00000008001300", @ANYRES32=0x0], 0x28}, 0x1}, 0x0) [ 876.587428] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 876.587446] ? find_held_lock+0x36/0x1c0 [ 876.630481] ? __lock_is_held+0xb5/0x140 [ 876.634572] ? check_same_owner+0x320/0x320 [ 876.638918] ? rcu_note_context_switch+0x710/0x710 [ 876.643874] __should_failslab+0x124/0x180 [ 876.648124] should_failslab+0x9/0x14 [ 876.651936] kmem_cache_alloc+0x2af/0x760 [ 876.656112] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 876.660979] mmu_topup_memory_caches+0xf7/0x3a0 [ 876.665661] ? debug_check_no_locks_freed+0x310/0x310 2033/05/18 03:37:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xec0}, 0x0) 2033/05/18 03:37:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x1100, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 876.670871] kvm_mmu_load+0x21/0x10e0 [ 876.674690] ? kasan_check_write+0x14/0x20 [ 876.678951] vcpu_enter_guest+0x3a83/0x6060 [ 876.683288] ? print_usage_bug+0xc0/0xc0 [ 876.687365] ? kvm_set_msr_common+0x2680/0x2680 [ 876.692049] ? vmx_vcpu_load+0xadd/0xfe0 [ 876.696127] ? __lock_acquire+0x7f5/0x5140 [ 876.700377] ? vmx_vcpu_reset+0x1030/0x1030 [ 876.704708] ? graph_lock+0x170/0x170 [ 876.708551] ? graph_lock+0x170/0x170 [ 876.712990] ? __lock_acquire+0x7f5/0x5140 [ 876.717249] ? debug_check_no_locks_freed+0x310/0x310 [ 876.722459] ? __lock_is_held+0xb5/0x140 [ 876.726542] ? lock_acquire+0x1dc/0x520 [ 876.730531] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 876.735568] ? lock_release+0xa10/0xa10 [ 876.739557] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 876.744850] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 876.749359] ? preempt_notifier_dec+0x20/0x20 [ 876.753880] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 876.758734] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 876.760216] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 876.763770] kvm_vcpu_ioctl+0x79d/0x12e0 [ 876.763790] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 876.763807] ? graph_lock+0x170/0x170 [ 876.763823] ? find_held_lock+0x36/0x1c0 [ 876.763847] ? lock_downgrade+0x8e0/0x8e0 [ 876.763866] ? kasan_check_read+0x11/0x20 [ 876.763885] ? rcu_is_watching+0x85/0x140 [ 876.784247] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 876.784698] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 876.816676] ? __fget+0x40c/0x650 2033/05/18 03:37:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 876.820150] ? match_held_lock+0x841/0x8b0 [ 876.824404] ? expand_files.part.8+0x9a0/0x9a0 [ 876.829002] ? kasan_check_write+0x14/0x20 [ 876.833253] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 876.838205] ? wait_for_completion+0x870/0x870 [ 876.842806] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 876.848016] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 876.853742] do_vfs_ioctl+0x1cf/0x16a0 [ 876.857644] ? ioctl_preallocate+0x2e0/0x2e0 [ 876.862074] ? fget_raw+0x20/0x20 [ 876.865539] ? __sb_end_write+0xac/0xe0 [ 876.869528] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 876.875078] ? fput+0x130/0x1a0 [ 876.878364] ? ksys_write+0x1a6/0x250 [ 876.882177] ? security_file_ioctl+0x94/0xc0 [ 876.886604] ksys_ioctl+0xa9/0xd0 [ 876.890069] __x64_sys_ioctl+0x73/0xb0 [ 876.893977] do_syscall_64+0x1b1/0x800 [ 876.897880] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 876.902739] ? syscall_return_slowpath+0x5c0/0x5c0 [ 876.907685] ? syscall_return_slowpath+0x30f/0x5c0 [ 876.912635] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 876.918018] ? trace_hardirqs_off_thunk+0x1a/0x1c 2033/05/18 03:37:42 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0) 2033/05/18 03:37:42 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, &(0x7f0000000100)) 2033/05/18 03:37:42 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfc, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 876.922885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 876.928080] RIP: 0033:0x455a09 [ 876.931274] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.938994] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 876.946275] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 876.953558] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 876.960843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 876.968126] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000014 [ 876.979315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 876.987981] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 877.009291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 877.015846] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 877.019156] gfs2: gfs2 mount does not exist 2033/05/18 03:37:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00'}) 2033/05/18 03:37:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:42 executing program 2 (fault-call:13 fault-nth:21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000100)={0x7cde2f8e, 0x3}) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x1}, 0x14}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0xffffffffffffffc5, 0x1, 0x6}) 2033/05/18 03:37:42 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x500000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0) 2033/05/18 03:37:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x2480, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000340)={0x9, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet(0x2, 0x80006, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0xfffffffffffffff9, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x97}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in6={0xa, 0x4e21, 0xfb3, @empty, 0x1}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0x3f}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [0xff, 0xff], @rand_addr=0x5}, 0x5}], 0x9c) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000012000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000003c0)={0xb0003, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000580)={0xa, 0x0, [{0xc0000019, 0x1, 0x7, 0x49, 0x9, 0x1f}, {0x6, 0x8, 0x0, 0x1f, 0x1800000000000000, 0x1f}, {0xa, 0x5, 0x7, 0x1ff, 0x7, 0xc735, 0x8000}, {0x80000019, 0x10000000, 0x7, 0x4, 0x3, 0xfffffffffffffffa, 0x3}, {0xc0000000, 0xfff, 0x4, 0x5, 0x5, 0xfff, 0xf4a7b88}, {0x7, 0x7c87, 0x4, 0x2cd3, 0x0, 0x700, 0x2}, {0xc0000009, 0x55a, 0x3, 0x100, 0x3f, 0x7fffffff, 0x8}, {0xa, 0x8, 0x1, 0x2, 0x1000, 0x80000000, 0x6}, {0xd, 0xfffffffffffffe00, 0x1, 0x80000000, 0xff, 0x8000, 0x9}, {0x7, 0x7, 0x4, 0x6, 0x0, 0xad2, 0x3}]}) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x300) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x58, &(0x7f0000000040)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e20, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x10001}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e22, 0x80, @mcast1={0xff, 0x1, [], 0x1}, 0x80000000}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e24, 0xffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x200}}, [0x81, 0x3ff, 0xe049, 0x2, 0x8, 0x80, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x7fffffff, 0x6e, 0x7fff, 0x8df6, 0xfffffffffffffff9]}, &(0x7f0000000280)=0x100) 2033/05/18 03:37:42 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 877.497310] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 877.501438] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:42 executing program 3: r0 = getpid() r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x3, 0x40) ioctl$sock_ipx_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'sit0\x00', {0x4, 0x3, 0x7f, "53504fad9a0a", 0x3}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8101, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x4) sched_getscheduler(r0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x1) epoll_create1(0x80000) 2033/05/18 03:37:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 877.572491] FAULT_INJECTION: forcing a failure. [ 877.572491] name failslab, interval 1, probability 0, space 0, times 0 [ 877.583849] CPU: 1 PID: 23926 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 877.591140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.600505] Call Trace: [ 877.603117] dump_stack+0x1b9/0x294 [ 877.606771] ? dump_stack_print_info.cold.2+0x52/0x52 [ 877.612628] ? __save_stack_trace+0x7e/0xd0 [ 877.612655] should_fail.cold.4+0xa/0x1a [ 877.612675] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 877.612693] ? kasan_kmalloc+0xc4/0xe0 [ 877.612709] ? kasan_slab_alloc+0x12/0x20 [ 877.612723] ? kmem_cache_alloc+0x12e/0x760 [ 877.612737] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 877.612751] ? kvm_mmu_load+0x21/0x10e0 [ 877.612766] ? vcpu_enter_guest+0x3a83/0x6060 [ 877.612779] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 877.612793] ? graph_lock+0x170/0x170 [ 877.612806] ? do_syscall_64+0x1b1/0x800 [ 877.612819] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 2033/05/18 03:37:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 877.612838] ? find_held_lock+0x36/0x1c0 [ 877.612857] ? __lock_is_held+0xb5/0x140 [ 877.612880] ? check_same_owner+0x320/0x320 [ 877.612898] ? rcu_note_context_switch+0x710/0x710 [ 877.612917] __should_failslab+0x124/0x180 [ 877.612944] should_failslab+0x9/0x14 [ 877.612961] kmem_cache_alloc+0x2af/0x760 [ 877.612983] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 877.613003] mmu_topup_memory_caches+0xf7/0x3a0 [ 877.613017] ? debug_check_no_locks_freed+0x310/0x310 [ 877.613037] kvm_mmu_load+0x21/0x10e0 2033/05/18 03:37:42 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [], 0x70, 0xa0, 0xe8}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0x0, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) 2033/05/18 03:37:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 877.613055] ? kasan_check_write+0x14/0x20 [ 877.613075] vcpu_enter_guest+0x3a83/0x6060 [ 877.613092] ? print_usage_bug+0xc0/0xc0 [ 877.613112] ? kvm_set_msr_common+0x2680/0x2680 [ 877.613146] ? vmx_vcpu_load+0xadd/0xfe0 [ 877.613164] ? __lock_acquire+0x7f5/0x5140 [ 877.613181] ? vmx_vcpu_reset+0x1030/0x1030 [ 877.613194] ? graph_lock+0x170/0x170 [ 877.613210] ? graph_lock+0x170/0x170 [ 877.613225] ? __lock_acquire+0x7f5/0x5140 [ 877.613246] ? debug_check_no_locks_freed+0x310/0x310 [ 877.613272] ? __lock_is_held+0xb5/0x140 [ 877.613292] ? lock_acquire+0x1dc/0x520 [ 877.613308] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 877.613326] ? lock_release+0xa10/0xa10 [ 877.613343] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 877.613360] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 877.613374] ? preempt_notifier_dec+0x20/0x20 [ 877.613399] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 877.613413] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 877.613437] kvm_vcpu_ioctl+0x79d/0x12e0 [ 877.613456] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 877.613471] ? graph_lock+0x170/0x170 [ 877.613487] ? find_held_lock+0x36/0x1c0 [ 877.613511] ? lock_downgrade+0x8e0/0x8e0 [ 877.613532] ? kasan_check_read+0x11/0x20 [ 877.613546] ? rcu_is_watching+0x85/0x140 [ 877.613563] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 877.613587] ? __fget+0x40c/0x650 [ 877.613603] ? match_held_lock+0x841/0x8b0 [ 877.613621] ? expand_files.part.8+0x9a0/0x9a0 [ 877.613637] ? kasan_check_write+0x14/0x20 [ 877.613653] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 877.613672] ? wait_for_completion+0x870/0x870 [ 877.613690] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 877.613712] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 877.613734] do_vfs_ioctl+0x1cf/0x16a0 [ 877.613756] ? ioctl_preallocate+0x2e0/0x2e0 [ 877.613775] ? fget_raw+0x20/0x20 [ 877.613797] ? __sb_end_write+0xac/0xe0 [ 877.613816] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 877.613828] ? fput+0x130/0x1a0 [ 877.613848] ? ksys_write+0x1a6/0x250 [ 877.613874] ? security_file_ioctl+0x94/0xc0 [ 877.613893] ksys_ioctl+0xa9/0xd0 [ 877.613916] __x64_sys_ioctl+0x73/0xb0 [ 877.613940] do_syscall_64+0x1b1/0x800 2033/05/18 03:37:43 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x5000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2f, 0xa100) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000068f50)={{}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600"}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000800)) [ 877.613959] ? finish_task_switch+0x1ca/0x840 [ 877.613982] ? syscall_return_slowpath+0x5c0/0x5c0 [ 877.932965] ? syscall_return_slowpath+0x30f/0x5c0 [ 877.932984] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 877.933000] ? trace_hardirqs_off_thunk+0x1a/0x1c 2033/05/18 03:37:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x6c0e000000000000}, 0x0) 2033/05/18 03:37:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 877.933024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 877.933036] RIP: 0033:0x455a09 [ 877.933043] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.933056] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 877.933063] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 877.933070] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 877.933077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 877.933084] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000015 [ 878.075708] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x40000) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffff, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) 2033/05/18 03:37:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r4 = socket(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x80000001, 0xf9, &(0x7f0000000080)=0x7}) ioctl(r4, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:43 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x8) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r1) 2033/05/18 03:37:43 executing program 2 (fault-call:13 fault-nth:22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:43 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 2033/05/18 03:37:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:43 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe0ff, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:43 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x2, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:43 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80200, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xfffffffffffff000}], 0x1, &(0x7f0000000280)={0x77359400}) tkill(r1, 0x1000000000016) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 878.291427] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 878.325790] FAULT_INJECTION: forcing a failure. [ 878.325790] name failslab, interval 1, probability 0, space 0, times 0 [ 878.337144] CPU: 0 PID: 23982 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 878.344441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.353922] Call Trace: [ 878.356533] dump_stack+0x1b9/0x294 [ 878.360185] ? dump_stack_print_info.cold.2+0x52/0x52 [ 878.365390] ? __save_stack_trace+0x7e/0xd0 [ 878.369743] should_fail.cold.4+0xa/0x1a [ 878.373823] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 878.378940] ? kasan_kmalloc+0xc4/0xe0 [ 878.382840] ? kasan_slab_alloc+0x12/0x20 [ 878.387648] ? kmem_cache_alloc+0x12e/0x760 [ 878.391987] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 878.396843] ? kvm_mmu_load+0x21/0x10e0 [ 878.400833] ? vcpu_enter_guest+0x3a83/0x6060 [ 878.405338] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 878.410370] ? graph_lock+0x170/0x170 [ 878.414193] ? do_syscall_64+0x1b1/0x800 [ 878.418265] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 878.423649] ? find_held_lock+0x36/0x1c0 [ 878.427733] ? __lock_is_held+0xb5/0x140 [ 878.431822] ? check_same_owner+0x320/0x320 [ 878.436157] ? rcu_note_context_switch+0x710/0x710 [ 878.441104] __should_failslab+0x124/0x180 [ 878.445355] should_failslab+0x9/0x14 [ 878.449169] kmem_cache_alloc+0x2af/0x760 [ 878.453335] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 878.458196] mmu_topup_memory_caches+0xf7/0x3a0 [ 878.462878] ? debug_check_no_locks_freed+0x310/0x310 [ 878.468085] kvm_mmu_load+0x21/0x10e0 [ 878.471901] ? kasan_check_write+0x14/0x20 [ 878.476156] vcpu_enter_guest+0x3a83/0x6060 [ 878.480488] ? perf_trace_lock+0xd6/0x900 [ 878.484660] ? print_usage_bug+0xc0/0xc0 [ 878.488743] ? kvm_set_msr_common+0x2680/0x2680 [ 878.493433] ? vmx_vcpu_load+0xadd/0xfe0 [ 878.497509] ? __lock_acquire+0x7f5/0x5140 [ 878.501757] ? vmx_vcpu_reset+0x1030/0x1030 [ 878.506120] ? graph_lock+0x170/0x170 [ 878.509927] ? graph_lock+0x170/0x170 [ 878.513733] ? __lock_acquire+0x7f5/0x5140 [ 878.517983] ? debug_check_no_locks_freed+0x310/0x310 [ 878.523185] ? __lock_is_held+0xb5/0x140 [ 878.527259] ? lock_acquire+0x1dc/0x520 [ 878.531245] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 878.536275] ? lock_release+0xa10/0xa10 [ 878.540263] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 878.545550] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 878.550053] ? preempt_notifier_dec+0x20/0x20 [ 878.554565] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 878.559414] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 878.564468] kvm_vcpu_ioctl+0x79d/0x12e0 [ 878.568546] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 878.574272] ? graph_lock+0x170/0x170 [ 878.578088] ? find_held_lock+0x36/0x1c0 [ 878.582170] ? lock_downgrade+0x8e0/0x8e0 [ 878.586337] ? rcu_is_watching+0x85/0x140 [ 878.590498] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 878.595708] ? __fget+0x40c/0x650 [ 878.599180] ? match_held_lock+0x841/0x8b0 [ 878.603426] ? expand_files.part.8+0x9a0/0x9a0 [ 878.607997] ? kasan_check_write+0x14/0x20 [ 878.612313] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 878.617248] ? wait_for_completion+0x870/0x870 [ 878.621821] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 878.627002] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 878.632711] do_vfs_ioctl+0x1cf/0x16a0 [ 878.636592] ? ioctl_preallocate+0x2e0/0x2e0 [ 878.640997] ? fget_raw+0x20/0x20 [ 878.644446] ? __sb_end_write+0xac/0xe0 [ 878.648422] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 878.653944] ? fput+0x130/0x1a0 [ 878.657218] ? ksys_write+0x1a6/0x250 [ 878.661010] ? security_file_ioctl+0x94/0xc0 [ 878.665428] ksys_ioctl+0xa9/0xd0 [ 878.668869] __x64_sys_ioctl+0x73/0xb0 [ 878.672746] do_syscall_64+0x1b1/0x800 [ 878.676626] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 878.681456] ? syscall_return_slowpath+0x5c0/0x5c0 [ 878.686371] ? syscall_return_slowpath+0x30f/0x5c0 [ 878.691300] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 878.696660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 878.701503] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 878.706684] RIP: 0033:0x455a09 [ 878.709855] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.717565] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 878.724832] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 878.732091] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:37:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:43 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xeffdffff00000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:43 executing program 0: io_setup(0x1, &(0x7f0000000000)) socket$unix(0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80) prctl$void(0x3b) 2033/05/18 03:37:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 2033/05/18 03:37:43 executing program 7: memfd_create(&(0x7f0000000200)='\'/\'\x00', 0x1) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x4, &(0x7f00000002c0)="c626262c8523ebd356b26f3ad5a9525c4c72b5d6022d87612cbc7fb88c900f5f5fa65e3bb8ee5d40b35c69c1bb542b2f16a9c1eeaa5102ed6859ad84f4145e36b78cf4b0c297e00e3aba4c32710532b23a6b3b7b") r1 = open(&(0x7f0000011000)='./bus\x00', 0x8000400141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000001c0)={@mcast1={0xff, 0x1, [], 0x1}, r2}, 0x14) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x3, 0x11, r1, 0x0) futex(&(0x7f0000000000), 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000000040), 0x0) 2033/05/18 03:37:43 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:43 executing program 2 (fault-call:13 fault-nth:23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 878.739348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 878.746614] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000016 2033/05/18 03:37:44 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'gre0\x00'}}, 0x1e) 2033/05/18 03:37:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 878.832189] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:44 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe0, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) [ 878.912660] FAULT_INJECTION: forcing a failure. [ 878.912660] name failslab, interval 1, probability 0, space 0, times 0 [ 878.924133] CPU: 0 PID: 24018 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 878.931425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.940798] Call Trace: [ 878.943423] dump_stack+0x1b9/0x294 [ 878.947078] ? dump_stack_print_info.cold.2+0x52/0x52 [ 878.952289] ? __save_stack_trace+0x7e/0xd0 [ 878.954268] validate_nla: 6 callbacks suppressed [ 878.954275] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 878.956630] should_fail.cold.4+0xa/0x1a [ 878.956652] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 878.956672] ? kasan_kmalloc+0xc4/0xe0 [ 878.956686] ? kasan_slab_alloc+0x12/0x20 [ 878.956697] ? kmem_cache_alloc+0x12e/0x760 [ 878.956716] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 878.995072] ? kvm_mmu_load+0x21/0x10e0 [ 878.999068] ? vcpu_enter_guest+0x3a83/0x6060 [ 879.003580] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 879.008617] ? graph_lock+0x170/0x170 2033/05/18 03:37:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:44 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x34000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x390, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x42, 0x201, 'ip6_vti0\x00', 'eql\x00', 'syz_tun\x00', 'ip6_vti0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x70, 0xf0, 0x140}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x5, 0x8, 0x2}}}, @common=@dnat={'dnat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0x10}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz0\x00', 0x1}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x10, 0x0, 'syzkaller1\x00', 'sit0\x00', 'rose0\x00', 'ifb0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0x0, 0xff], 0x100, 0x190, 0x1c0, [@helper={'helper\x00', 0x28, {{0x0, 'amanda\x00'}}}, @statistic={'statistic\x00', 0x18, {{0x0, 0x1, 0x9, 0x9, 0x2, 0x5}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x5, 0x9, 0x1}}}, @common=@ERROR={'ERROR\x00', 0x20, {"17797fa04b847e233e852e4f19608464ceb4f69106f90790f2cada6790e5"}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x408) setsockopt$sock_void(r0, 0x29, 0x1b, 0x0, 0x300) 2033/05/18 03:37:44 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000001700)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="02000000000025b704491c23f7042cd89ef3a90000"], 0x20) [ 879.012529] ? do_syscall_64+0x1b1/0x800 [ 879.016700] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 879.022107] ? find_held_lock+0x36/0x1c0 [ 879.026192] ? __lock_is_held+0xb5/0x140 [ 879.030291] ? check_same_owner+0x320/0x320 [ 879.034641] ? rcu_note_context_switch+0x710/0x710 [ 879.039597] __should_failslab+0x124/0x180 [ 879.043856] should_failslab+0x9/0x14 [ 879.047769] kmem_cache_alloc+0x2af/0x760 [ 879.052027] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 879.056887] mmu_topup_memory_caches+0xf7/0x3a0 [ 879.061571] ? debug_check_no_locks_freed+0x310/0x310 [ 879.066777] kvm_mmu_load+0x21/0x10e0 [ 879.070592] ? kasan_check_write+0x14/0x20 [ 879.074846] vcpu_enter_guest+0x3a83/0x6060 [ 879.079185] ? print_usage_bug+0xc0/0xc0 [ 879.083266] ? kvm_set_msr_common+0x2680/0x2680 [ 879.087979] ? vmx_vcpu_load+0xadd/0xfe0 [ 879.092055] ? __lock_acquire+0x7f5/0x5140 [ 879.096486] ? vmx_vcpu_reset+0x1030/0x1030 [ 879.100824] ? graph_lock+0x170/0x170 [ 879.104638] ? graph_lock+0x170/0x170 2033/05/18 03:37:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x9330}, 0x0) [ 879.106775] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 879.108446] ? __lock_acquire+0x7f5/0x5140 [ 879.108467] ? debug_check_no_locks_freed+0x310/0x310 [ 879.108488] ? __lock_is_held+0xb5/0x140 [ 879.108506] ? lock_acquire+0x1dc/0x520 [ 879.108521] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 879.108537] ? lock_release+0xa10/0xa10 [ 879.108552] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 879.108570] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 879.151961] ? preempt_notifier_dec+0x20/0x20 [ 879.156454] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 879.161283] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 879.166292] kvm_vcpu_ioctl+0x79d/0x12e0 [ 879.170339] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 879.176038] ? graph_lock+0x170/0x170 [ 879.179829] ? find_held_lock+0x36/0x1c0 [ 879.183889] ? lock_downgrade+0x8e0/0x8e0 [ 879.188034] ? kasan_check_read+0x11/0x20 [ 879.192179] ? rcu_is_watching+0x85/0x140 [ 879.196313] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 879.201496] ? __fget+0x40c/0x650 [ 879.204936] ? match_held_lock+0x841/0x8b0 [ 879.209160] ? expand_files.part.8+0x9a0/0x9a0 [ 879.213732] ? kasan_check_write+0x14/0x20 [ 879.217956] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 879.222878] ? wait_for_completion+0x870/0x870 [ 879.227450] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 879.232731] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 879.238428] do_vfs_ioctl+0x1cf/0x16a0 [ 879.242302] ? ioctl_preallocate+0x2e0/0x2e0 [ 879.246697] ? fget_raw+0x20/0x20 [ 879.250140] ? __sb_end_write+0xac/0xe0 [ 879.254107] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 879.259631] ? fput+0x130/0x1a0 [ 879.262895] ? ksys_write+0x1a6/0x250 [ 879.266683] ? security_file_ioctl+0x94/0xc0 [ 879.271081] ksys_ioctl+0xa9/0xd0 [ 879.274526] __x64_sys_ioctl+0x73/0xb0 [ 879.278409] do_syscall_64+0x1b1/0x800 [ 879.282282] ? finish_task_switch+0x1ca/0x840 [ 879.286764] ? syscall_return_slowpath+0x5c0/0x5c0 [ 879.291691] ? syscall_return_slowpath+0x30f/0x5c0 [ 879.296613] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 879.301969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 879.306821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 879.311996] RIP: 0033:0x455a09 [ 879.315172] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.322870] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 879.330125] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 879.337403] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 879.344659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 879.351912] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000017 2033/05/18 03:37:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x5) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0)={0x303, 0x33}, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x8}, &(0x7f00000001c0)=0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x8040ae9f, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}, 0xfffffffffffffffe, 0x7, 0xad, 0x3, 0x51}, &(0x7f00000002c0)=0x98) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80100, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r10, 0x541b, &(0x7f0000000100)) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r9, 0x8, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) [ 879.364780] kernel msg: ebtables bug: please report to author: bad policy [ 879.394718] kernel msg: ebtables bug: please report to author: bad policy [ 879.403822] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:44 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x11, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x46}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 2033/05/18 03:37:44 executing program 2 (fault-call:13 fault-nth:24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:44 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000400)="c626262c8523bf012cf66f") r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') socket$alg(0x26, 0x5, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xe0, r3, 0x208, 0x70bd27, 0x25dfdbfb, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000380)) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-twofish-3way)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="bc55604174d377be30f7072548745f0d0639c74278118a6146d01de8e16b2424b826cbb0e7f28eb8", 0x28) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000003c0)={0xffffffff00000000, 0x1, 0x94e, 0xe9e, 0x8000}, 0xc) 2033/05/18 03:37:44 executing program 3: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) fadvise64(r0, 0x0, 0x0, 0x4) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x8080, 0x0) ioctl$void(r0, 0xc0045878) 2033/05/18 03:37:44 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 879.632784] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 879.652610] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:44 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x100000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 879.732421] FAULT_INJECTION: forcing a failure. [ 879.732421] name failslab, interval 1, probability 0, space 0, times 0 [ 879.743838] CPU: 0 PID: 24078 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 879.751127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.760496] Call Trace: [ 879.763114] dump_stack+0x1b9/0x294 [ 879.766774] ? dump_stack_print_info.cold.2+0x52/0x52 [ 879.771988] ? perf_trace_lock_acquire+0xe3/0x980 [ 879.776857] should_fail.cold.4+0xa/0x1a [ 879.780939] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 879.786066] ? kasan_kmalloc+0xc4/0xe0 [ 879.789968] ? kasan_slab_alloc+0x12/0x20 [ 879.794130] ? kmem_cache_alloc+0x12e/0x760 [ 879.798468] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 879.803320] ? kvm_mmu_load+0x21/0x10e0 [ 879.807293] ? vcpu_enter_guest+0x3a83/0x6060 [ 879.811781] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 879.816790] ? graph_lock+0x170/0x170 [ 879.820588] ? do_syscall_64+0x1b1/0x800 [ 879.824640] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 879.830003] ? find_held_lock+0x36/0x1c0 [ 879.834070] ? __lock_is_held+0xb5/0x140 [ 879.838151] ? check_same_owner+0x320/0x320 [ 879.842479] ? rcu_note_context_switch+0x710/0x710 [ 879.847427] __should_failslab+0x124/0x180 [ 879.851675] should_failslab+0x9/0x14 [ 879.855470] kmem_cache_alloc+0x2af/0x760 [ 879.859634] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 879.864485] mmu_topup_memory_caches+0xf7/0x3a0 [ 879.869146] ? debug_check_no_locks_freed+0x310/0x310 [ 879.874336] kvm_mmu_load+0x21/0x10e0 [ 879.878135] ? kasan_check_write+0x14/0x20 [ 879.882370] vcpu_enter_guest+0x3a83/0x6060 [ 879.886695] ? kvm_set_msr_common+0x2680/0x2680 [ 879.891360] ? perf_trace_lock+0x900/0x900 [ 879.895591] ? __lock_acquire+0x7f5/0x5140 [ 879.899821] ? vmx_vcpu_reset+0x1030/0x1030 [ 879.904131] ? graph_lock+0x170/0x170 [ 879.907935] ? graph_lock+0x170/0x170 [ 879.911725] ? __lock_acquire+0x7f5/0x5140 [ 879.915956] ? perf_trace_lock_acquire+0xe3/0x980 [ 879.920793] ? __lock_is_held+0xb5/0x140 [ 879.924849] ? lock_acquire+0x1dc/0x520 [ 879.928823] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 879.933831] ? lock_release+0xa10/0xa10 [ 879.937795] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 879.943064] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 879.947565] ? preempt_notifier_dec+0x20/0x20 [ 879.952063] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 879.956900] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 879.962537] kvm_vcpu_ioctl+0x79d/0x12e0 [ 879.966591] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 879.972291] ? graph_lock+0x170/0x170 [ 879.976086] ? find_held_lock+0x36/0x1c0 [ 879.980145] ? lock_downgrade+0x8e0/0x8e0 [ 879.984290] ? kasan_check_read+0x11/0x20 [ 879.988439] ? rcu_is_watching+0x85/0x140 [ 879.992582] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 879.997772] ? __fget+0x40c/0x650 [ 880.001220] ? match_held_lock+0x841/0x8b0 [ 880.005447] ? expand_files.part.8+0x9a0/0x9a0 [ 880.010026] ? kasan_check_write+0x14/0x20 [ 880.014257] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 880.019179] ? wait_for_completion+0x870/0x870 [ 880.023765] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 880.028951] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 880.034657] do_vfs_ioctl+0x1cf/0x16a0 [ 880.038542] ? ioctl_preallocate+0x2e0/0x2e0 [ 880.042941] ? fget_raw+0x20/0x20 [ 880.046393] ? __sb_end_write+0xac/0xe0 [ 880.050367] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 880.055894] ? fput+0x130/0x1a0 [ 880.059172] ? ksys_write+0x1a6/0x250 [ 880.062967] ? security_file_ioctl+0x94/0xc0 [ 880.067370] ksys_ioctl+0xa9/0xd0 [ 880.070819] __x64_sys_ioctl+0x73/0xb0 [ 880.074699] do_syscall_64+0x1b1/0x800 [ 880.078578] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 880.083418] ? syscall_return_slowpath+0x5c0/0x5c0 [ 880.088339] ? syscall_return_slowpath+0x30f/0x5c0 [ 880.093268] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 880.098625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 880.103464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 880.110201] RIP: 0033:0x455a09 [ 880.113381] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.121090] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 2033/05/18 03:37:45 executing program 3: unshare(0x400) socket(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f000012b000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x2, 0x0) socket$inet(0x2, 0x803, 0x1) mmap(&(0x7f0000187000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f000009b000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2033/05/18 03:37:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:45 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x10, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000280)="3f666997bb62b1b8c9ffa9c8d78dcc5d84a0e54ad18d3795edf08424da3654228a124bf2cd0eba8771fdde8295a5357dce65d1c0702a145eb03ffc8a17c4fadd4ce5258a655a8e1057ce7c6ed0ee6b7c9af8f39cdfa22dbb1300c864300ced92b94ccf6b3ecf9bbfb997963736a93187b9267453cb86bf6f110941f33d213800ebb3713188515d1402f248f9621966731922e698fd00961c13c43e58c0ad02928f03b97eb78d3aad28e2a77a7261639dc62243258db737e9cda327cc84b96ea4f42d5506bf1852c69b339284d9ab66dd50343c5c", 0xd4, 0x8000, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'eql\x00'}}, 0x80) r1 = socket$inet(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) setfsuid(r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000e6f000)={0xa, 0x2, 0x1000000000000, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) socket$l2tp(0x18, 0x1, 0x1) sendmsg$nl_crypto(r4, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) [ 880.128347] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 880.135610] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 880.142867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 880.150122] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000018 [ 880.199686] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:45 executing program 2 (fault-call:13 fault-nth:25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:45 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = socket(0xa, 0x100000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB='\x00']) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e80)) socket(0x10, 0x4, 0x5) getsockname(r1, &(0x7f0000000380)=@can={0x0, 0x0}, &(0x7f0000000400)=0x80) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@mcast2={0xff, 0x2, [], 0x1}, 0x23, r2}) 2033/05/18 03:37:45 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x14, 0x80800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000440)={@dev, @empty, 0x0}, &(0x7f0000000480)=0xc) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000680)={&(0x7f00000004c0)=@can={0x0, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/78, 0x4e}], 0x1, &(0x7f0000000600)=""/116, 0x74, 0xb}, 0x140) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f00000006c0)={@local, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000840)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000880)={'ifb0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000900)={@broadcast, @remote, 0x0}, &(0x7f0000000940)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'teql0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000009c0)={@remote, 0x0}, &(0x7f0000000a00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000a40)={@dev, 0x0}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000012c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000013c0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001440)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001480)={'bridge0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000002900)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002940)={0x67c, r1, 0x700, 0x70bd25, 0x25dfdbfe, {0x3}, [{{0x8, 0x1, r2}, {0x238, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r4}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x24, 0x4, [{0x13f4, 0x7, 0x3f, 0x79129988}, {0x3, 0x6, 0x6c6fc214, 0x6}, {0x101, 0xffffffff, 0x1, 0xfff}, {0x6979ba0f, 0x87, 0x992, 0x67}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r8}, {0x1a4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xffffffffffffffe0}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x274, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6dcf3175}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r17}}}]}}]}, 0x67c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r18 = socket(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000300)=@hci, &(0x7f0000000380)=0x80) ioctl(r18, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r18, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x20000280, 0x20000368, 0x20000398], 0x0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000276ee025b9515e2100000000000000000000010000000000000000000000000000000000000000000000a34100000000000000000000000800000000000000000000010000000000000000004cf860f700000000000000000000000000ce64bb1fab2d80676e260900000018000000000000000000000000000000000003000000516cf82f0137b53cf9f7b4718f1e9e4582e16786845e55edaa2a8fced1399c"]}, 0x132) [ 880.349321] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 880.369616] kernel msg: ebtables bug: please report to author: Wrong len argument [ 880.432190] kernel msg: ebtables bug: please report to author: Wrong len argument [ 880.474775] FAULT_INJECTION: forcing a failure. [ 880.474775] name failslab, interval 1, probability 0, space 0, times 0 [ 880.486077] CPU: 0 PID: 24124 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 880.493363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.502740] Call Trace: [ 880.505324] dump_stack+0x1b9/0x294 [ 880.508958] ? dump_stack_print_info.cold.2+0x52/0x52 [ 880.514139] ? __save_stack_trace+0x7e/0xd0 [ 880.518540] should_fail.cold.4+0xa/0x1a [ 880.522600] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 880.527697] ? kasan_kmalloc+0xc4/0xe0 [ 880.531572] ? kasan_slab_alloc+0x12/0x20 [ 880.535708] ? kmem_cache_alloc+0x12e/0x760 [ 880.540027] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 880.544868] ? kvm_mmu_load+0x21/0x10e0 [ 880.548837] ? vcpu_enter_guest+0x3a83/0x6060 [ 880.553331] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 880.558342] ? graph_lock+0x170/0x170 [ 880.562135] ? do_syscall_64+0x1b1/0x800 [ 880.566187] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 880.571542] ? find_held_lock+0x36/0x1c0 [ 880.575591] ? __lock_is_held+0xb5/0x140 [ 880.579646] ? check_same_owner+0x320/0x320 [ 880.583952] ? rcu_note_context_switch+0x710/0x710 [ 880.588871] __should_failslab+0x124/0x180 [ 880.593096] should_failslab+0x9/0x14 [ 880.596882] kmem_cache_alloc+0x2af/0x760 [ 880.601033] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 880.605871] mmu_topup_memory_caches+0xf7/0x3a0 [ 880.610545] ? debug_check_no_locks_freed+0x310/0x310 [ 880.615725] kvm_mmu_load+0x21/0x10e0 [ 880.619522] ? kasan_check_write+0x14/0x20 [ 880.623756] vcpu_enter_guest+0x3a83/0x6060 [ 880.628072] ? print_usage_bug+0xc0/0xc0 [ 880.632132] ? kvm_set_msr_common+0x2680/0x2680 [ 880.636785] ? vmx_vcpu_load+0xadd/0xfe0 [ 880.640840] ? __lock_acquire+0x7f5/0x5140 [ 880.645059] ? vmx_vcpu_reset+0x1030/0x1030 [ 880.649370] ? graph_lock+0x170/0x170 [ 880.653155] ? graph_lock+0x170/0x170 [ 880.656936] ? __lock_acquire+0x7f5/0x5140 [ 880.661170] ? debug_check_no_locks_freed+0x310/0x310 [ 880.666360] ? __lock_is_held+0xb5/0x140 [ 880.670408] ? lock_acquire+0x1dc/0x520 [ 880.674370] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 880.679375] ? lock_release+0xa10/0xa10 [ 880.683335] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 880.688599] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 880.693081] ? preempt_notifier_dec+0x20/0x20 [ 880.697567] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 880.702396] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 880.707406] kvm_vcpu_ioctl+0x79d/0x12e0 [ 880.711457] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 880.717161] ? graph_lock+0x170/0x170 [ 880.720949] ? find_held_lock+0x36/0x1c0 [ 880.725003] ? lock_downgrade+0x8e0/0x8e0 [ 880.729157] ? kasan_check_read+0x11/0x20 [ 880.733304] ? rcu_is_watching+0x85/0x140 [ 880.737438] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 880.742632] ? __fget+0x40c/0x650 [ 880.746075] ? match_held_lock+0x841/0x8b0 [ 880.750302] ? expand_files.part.8+0x9a0/0x9a0 [ 880.754871] ? kasan_check_write+0x14/0x20 [ 880.759092] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 880.764011] ? wait_for_completion+0x870/0x870 [ 880.768586] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 880.773765] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 880.779462] do_vfs_ioctl+0x1cf/0x16a0 [ 880.783338] ? ioctl_preallocate+0x2e0/0x2e0 [ 880.787737] ? fget_raw+0x20/0x20 [ 880.791187] ? __sb_end_write+0xac/0xe0 [ 880.795163] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 880.800684] ? fput+0x130/0x1a0 [ 880.803948] ? ksys_write+0x1a6/0x250 [ 880.807738] ? security_file_ioctl+0x94/0xc0 [ 880.812135] ksys_ioctl+0xa9/0xd0 [ 880.815577] __x64_sys_ioctl+0x73/0xb0 [ 880.819887] do_syscall_64+0x1b1/0x800 [ 880.823773] ? syscall_return_slowpath+0x5c0/0x5c0 [ 880.828690] ? syscall_return_slowpath+0x30f/0x5c0 [ 880.834228] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 880.839582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 880.844413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 880.849587] RIP: 0033:0x455a09 [ 880.852761] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.860456] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 880.867709] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 2033/05/18 03:37:46 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe803, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0xf, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:46 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x466, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setstatus(r1, 0x4, 0x2800) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=0x5, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000080)={0x0, 0x8000}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) write(r1, &(0x7f00000002c0)="a5", 0x1) 2033/05/18 03:37:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x800c4, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x80000) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x8000, 0x6, 0x6a9, 0x6b9, 0x0, 0x6de}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) inotify_init() 2033/05/18 03:37:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:46 executing program 2 (fault-call:13 fault-nth:26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x8000a, 0x6) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000001091f031cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 880.874959] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 880.882213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 880.889475] R13: 000000000000027e R14: 00000000006f7c70 R15: 0000000000000019 2033/05/18 03:37:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x25, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 880.958345] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x0, &(0x7f0000346fc8)=ANY=[@ANYRES16=r0], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0xffffffffffffffe8) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket(0x3, 0x80007, 0x3) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x93a178c423c87f8e) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x82080, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) 2033/05/18 03:37:46 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000280), 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 2033/05/18 03:37:46 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xffff000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:46 executing program 3: r0 = syz_open_pts(0xffffffffffffff9c, 0x220000) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7) syz_emit_ethernet(0x104, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "81182e", 0xce, 0x2c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "40dc275df82300496b08045959155aeb06699d682f855d1390fbf49c0104cb9db84569d69de3bf4eaf5b36d692a457326c42733aeee3183ad5600ee5dcc7ecf2daa53d01d6ab29104157b5087e3793e04986539fe9d282eec17685ff377a600a838b988a8fc6d0636a10e652541b4931bf5e34af499b079646807f5ca5253476b9a7d6a442"}, {0x8, 0x88be, 0x1, {{0xfff, 0x1, 0x5, 0x17c7, 0x101, 0x5, 0x0, 0x2}, 0x1, 0x3}}, {0x8, 0x22eb, 0x0, {{0x3ff, 0x2, 0x81, 0x6, 0x20, 0x5, 0x81, 0x8}, 0x2, 0x800000000, 0x9c50dcc, 0x100, 0x7, 0x8, 0x10000, 0x2ac4, 0x5, 0xfffffffffffffffe}}, {0x8, 0x6558, 0x1, "606b5ab245"}}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x0, 0x2, 0xa66]}) [ 881.135868] FAULT_INJECTION: forcing a failure. [ 881.135868] name failslab, interval 1, probability 0, space 0, times 0 [ 881.147240] CPU: 0 PID: 24147 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 881.154526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.163893] Call Trace: [ 881.166503] dump_stack+0x1b9/0x294 [ 881.170152] ? dump_stack_print_info.cold.2+0x52/0x52 [ 881.175379] ? __save_stack_trace+0x7e/0xd0 [ 881.179723] should_fail.cold.4+0xa/0x1a [ 881.183804] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 881.188926] ? kasan_kmalloc+0xc4/0xe0 [ 881.192826] ? kasan_slab_alloc+0x12/0x20 [ 881.196985] ? kmem_cache_alloc+0x12e/0x760 [ 881.201319] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 881.206179] ? kvm_mmu_load+0x21/0x10e0 [ 881.210180] ? vcpu_enter_guest+0x3a83/0x6060 [ 881.214772] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 881.219799] ? graph_lock+0x170/0x170 [ 881.223613] ? do_syscall_64+0x1b1/0x800 [ 881.227685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 881.233164] ? find_held_lock+0x36/0x1c0 [ 881.237241] ? __lock_is_held+0xb5/0x140 [ 881.241327] ? check_same_owner+0x320/0x320 [ 881.245673] ? rcu_note_context_switch+0x710/0x710 [ 881.250621] __should_failslab+0x124/0x180 [ 881.254896] should_failslab+0x9/0x14 [ 881.258705] kmem_cache_alloc+0x2af/0x760 [ 881.262866] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 881.267725] mmu_topup_memory_caches+0xf7/0x3a0 [ 881.272519] ? debug_check_no_locks_freed+0x310/0x310 [ 881.277725] kvm_mmu_load+0x21/0x10e0 [ 881.281548] ? kasan_check_write+0x14/0x20 [ 881.285806] vcpu_enter_guest+0x3a83/0x6060 [ 881.290143] ? print_usage_bug+0xc0/0xc0 [ 881.294226] ? kvm_set_msr_common+0x2680/0x2680 [ 881.298907] ? vmx_vcpu_load+0xadd/0xfe0 [ 881.302982] ? __lock_acquire+0x7f5/0x5140 [ 881.307232] ? vmx_vcpu_reset+0x1030/0x1030 [ 881.311571] ? graph_lock+0x170/0x170 [ 881.315386] ? graph_lock+0x170/0x170 [ 881.319198] ? __lock_acquire+0x7f5/0x5140 [ 881.323450] ? debug_check_no_locks_freed+0x310/0x310 [ 881.328657] ? __lock_is_held+0xb5/0x140 [ 881.332736] ? lock_acquire+0x1dc/0x520 [ 881.336721] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 881.341759] ? lock_release+0xa10/0xa10 [ 881.345739] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 881.351046] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 881.355542] ? preempt_notifier_dec+0x20/0x20 [ 881.360053] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 881.364883] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 881.369902] kvm_vcpu_ioctl+0x79d/0x12e0 [ 881.373953] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 881.379651] ? graph_lock+0x170/0x170 [ 881.383439] ? find_held_lock+0x36/0x1c0 [ 881.387494] ? lock_downgrade+0x8e0/0x8e0 [ 881.391634] ? kasan_check_read+0x11/0x20 [ 881.395769] ? rcu_is_watching+0x85/0x140 [ 881.399910] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 881.405096] ? __fget+0x40c/0x650 [ 881.408539] ? match_held_lock+0x841/0x8b0 [ 881.412766] ? expand_files.part.8+0x9a0/0x9a0 [ 881.417343] ? kasan_check_write+0x14/0x20 [ 881.421567] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 881.426486] ? wait_for_completion+0x870/0x870 [ 881.431061] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 881.436243] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 881.441959] do_vfs_ioctl+0x1cf/0x16a0 [ 881.445865] ? ioctl_preallocate+0x2e0/0x2e0 [ 881.450273] ? fget_raw+0x20/0x20 [ 881.453714] ? __sb_end_write+0xac/0xe0 [ 881.457679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 881.463202] ? fput+0x130/0x1a0 [ 881.466466] ? ksys_write+0x1a6/0x250 [ 881.470254] ? security_file_ioctl+0x94/0xc0 [ 881.474661] ksys_ioctl+0xa9/0xd0 [ 881.478104] __x64_sys_ioctl+0x73/0xb0 [ 881.481988] do_syscall_64+0x1b1/0x800 [ 881.485866] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 881.490696] ? syscall_return_slowpath+0x5c0/0x5c0 [ 881.495616] ? syscall_return_slowpath+0x30f/0x5c0 [ 881.500533] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 881.505885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 881.510720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 881.515897] RIP: 0033:0x455a09 [ 881.519070] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 881.526765] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 2033/05/18 03:37:46 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x2, 0x9, 0x67}, &(0x7f0000000140)=0x10) 2033/05/18 03:37:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0xc0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:46 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:46 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x20000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000340)={0x2, 0x2, 0x0, 0x0, &(0x7f0000000080)=[{}, {}]}) 2033/05/18 03:37:46 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) 2033/05/18 03:37:46 executing program 2 (fault-call:13 fault-nth:27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 881.534030] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 881.541299] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 881.548569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 881.555832] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000001a 2033/05/18 03:37:46 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe000000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 881.615702] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x51, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') exit(0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x14}], 0x1, 0x200000) 2033/05/18 03:37:46 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, r2) r3 = inotify_init1(0x0) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) tkill(r4, 0x12) 2033/05/18 03:37:46 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)=""/4096, 0x1000) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) 2033/05/18 03:37:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x33fe0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:46 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe803000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 881.761110] FAULT_INJECTION: forcing a failure. [ 881.761110] name failslab, interval 1, probability 0, space 0, times 0 [ 881.772494] CPU: 1 PID: 24195 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 881.779865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.789232] Call Trace: [ 881.791851] dump_stack+0x1b9/0x294 [ 881.795510] ? dump_stack_print_info.cold.2+0x52/0x52 [ 881.800727] ? __save_stack_trace+0x7e/0xd0 [ 881.805079] should_fail.cold.4+0xa/0x1a [ 881.809194] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 881.814319] ? kasan_kmalloc+0xc4/0xe0 [ 881.818230] ? kasan_slab_alloc+0x12/0x20 [ 881.822510] ? kmem_cache_alloc+0x12e/0x760 [ 881.826860] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 881.827039] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 881.831707] ? kvm_mmu_load+0x21/0x10e0 [ 881.831728] ? vcpu_enter_guest+0x3a83/0x6060 [ 881.831743] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 881.831762] ? graph_lock+0x170/0x170 2033/05/18 03:37:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x9, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:47 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xff000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 881.859319] ? do_syscall_64+0x1b1/0x800 [ 881.863390] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 881.868768] ? find_held_lock+0x36/0x1c0 [ 881.872847] ? __lock_is_held+0xb5/0x140 [ 881.876929] ? check_same_owner+0x320/0x320 [ 881.881270] ? rcu_note_context_switch+0x710/0x710 [ 881.886216] __should_failslab+0x124/0x180 [ 881.890463] should_failslab+0x9/0x14 [ 881.894276] kmem_cache_alloc+0x2af/0x760 [ 881.898441] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 881.903298] mmu_topup_memory_caches+0xf7/0x3a0 2033/05/18 03:37:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0xfffffdef, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 881.907975] ? debug_check_no_locks_freed+0x310/0x310 [ 881.913185] kvm_mmu_load+0x21/0x10e0 [ 881.916998] ? kasan_check_write+0x14/0x20 [ 881.921247] vcpu_enter_guest+0x3a83/0x6060 [ 881.925576] ? print_usage_bug+0xc0/0xc0 [ 881.929648] ? kvm_set_msr_common+0x2680/0x2680 [ 881.934320] ? vmx_vcpu_load+0xadd/0xfe0 [ 881.938388] ? __lock_acquire+0x7f5/0x5140 [ 881.942633] ? vmx_vcpu_reset+0x1030/0x1030 [ 881.946955] ? graph_lock+0x170/0x170 [ 881.950765] ? graph_lock+0x170/0x170 [ 881.954574] ? __lock_acquire+0x7f5/0x5140 [ 881.958828] ? debug_check_no_locks_freed+0x310/0x310 [ 881.964032] ? __lock_is_held+0xb5/0x140 [ 881.968105] ? lock_acquire+0x1dc/0x520 [ 881.972084] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 881.977108] ? lock_release+0xa10/0xa10 [ 881.981089] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 881.986376] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 881.990881] ? preempt_notifier_dec+0x20/0x20 [ 881.995400] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 882.000253] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 882.005461] kvm_vcpu_ioctl+0x79d/0x12e0 [ 882.009537] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 882.015258] ? graph_lock+0x170/0x170 [ 882.019090] ? find_held_lock+0x36/0x1c0 [ 882.023173] ? lock_downgrade+0x8e0/0x8e0 [ 882.027336] ? kasan_check_read+0x11/0x20 [ 882.031494] ? rcu_is_watching+0x85/0x140 [ 882.035677] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 882.040884] ? __fget+0x40c/0x650 [ 882.044347] ? match_held_lock+0x841/0x8b0 [ 882.048595] ? expand_files.part.8+0x9a0/0x9a0 [ 882.053188] ? kasan_check_write+0x14/0x20 [ 882.057436] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 882.062377] ? wait_for_completion+0x870/0x870 [ 882.066975] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 882.072174] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 882.077895] do_vfs_ioctl+0x1cf/0x16a0 [ 882.081800] ? ioctl_preallocate+0x2e0/0x2e0 [ 882.086227] ? fget_raw+0x20/0x20 [ 882.089692] ? __sb_end_write+0xac/0xe0 [ 882.093681] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 882.099225] ? fput+0x130/0x1a0 [ 882.102514] ? ksys_write+0x1a6/0x250 [ 882.106324] ? security_file_ioctl+0x94/0xc0 [ 882.110742] ksys_ioctl+0xa9/0xd0 [ 882.114211] __x64_sys_ioctl+0x73/0xb0 [ 882.118114] do_syscall_64+0x1b1/0x800 [ 882.122009] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 882.126862] ? syscall_return_slowpath+0x5c0/0x5c0 [ 882.131801] ? syscall_return_slowpath+0x30f/0x5c0 [ 882.136755] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 882.142148] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 882.147007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 882.152200] RIP: 0033:0x455a09 [ 882.155395] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 882.163114] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 882.170391] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 882.177670] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 882.184947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 882.192226] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000001b 2033/05/18 03:37:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:48 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfe80, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x200016e0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000002c0)='logon\x00', 0x0) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) sendto$unix(r1, &(0x7f0000000040)="1de85b89de4d840acdb9ae11fec8ac82b2630a545bcd70c4ddb902ad13", 0x1d, 0x40, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2033/05/18 03:37:48 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:48 executing program 2 (fault-call:13 fault-nth:28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)=""/145) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f0000dc5f98)) 2033/05/18 03:37:48 executing program 7: socketpair(0x12, 0x3, 0x43, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$getown(r1, 0x9) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x10080, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xfc13, 0x4) r4 = syz_open_procfs(r2, &(0x7f0000000080)="00000061b607b368df950792d25172e7cdbe7649af6db44e168c20ef90569847619e745fc289765b6d5c1bade511c1fda603d475c6818177cd5fccfb4e40ebab77e37bdc562ee04396320c842b17e51efd07b3ad99197ec2ee000000000000000000000000000000") fchdir(r4) socket$inet6(0xa, 0x6, 0x3) syz_fuse_mount(&(0x7f00000001c0)='./0ile0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) accept4$ipx(r0, 0x0, &(0x7f0000000140), 0x800) 2033/05/18 03:37:48 executing program 0: r0 = syz_open_dev$random(&(0x7f0000000540)='/dev/random\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x200000000000005e, 0xfffffffffffffffc) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="e50600000000dff609a71d3f449072d3ff00f270f0ce2c75844cf2e8d64f21a5348779d02e40d2fc21c51b55f69b0105ae8dcdfe0b9c19009e7fb40e3ce3f81bc3eb9724ba3ffb112aa666861e29bb31ba3085a4b2c4dbbccb41c06e6c4909346ea2c34c0c3f7d0f42c2243c1e4e9d80"]) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x480, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, r3, 0x1000) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x9) 2033/05/18 03:37:48 executing program 5 (fault-call:5 fault-nth:0): r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 883.139140] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0xa, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:48 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xff01, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 883.218723] FAULT_INJECTION: forcing a failure. [ 883.218723] name failslab, interval 1, probability 0, space 0, times 0 [ 883.230116] CPU: 1 PID: 24264 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #56 [ 883.237402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.246768] Call Trace: [ 883.249390] dump_stack+0x1b9/0x294 [ 883.253045] ? dump_stack_print_info.cold.2+0x52/0x52 [ 883.258267] should_fail.cold.4+0xa/0x1a [ 883.262349] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 883.267475] ? __local_bh_enable_ip+0x161/0x230 [ 883.272165] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 883.277187] ? __dev_queue_xmit+0x120f/0x34c0 [ 883.281701] ? trace_hardirqs_on+0xd/0x10 [ 883.285855] ? __local_bh_enable_ip+0x161/0x230 [ 883.290520] ? find_held_lock+0x36/0x1c0 [ 883.294579] ? dgram_recvmsg+0x500/0x840 [ 883.298639] ? check_same_owner+0x320/0x320 [ 883.302951] ? rcu_note_context_switch+0x710/0x710 [ 883.307874] __should_failslab+0x124/0x180 [ 883.312108] should_failslab+0x9/0x14 [ 883.315895] kmem_cache_alloc_node+0x272/0x780 [ 883.320464] ? print_usage_bug+0xc0/0xc0 [ 883.324513] ? __lock_acquire+0x7f5/0x5140 [ 883.328737] __alloc_skb+0x111/0x780 [ 883.332439] ? skb_scrub_packet+0x580/0x580 [ 883.336748] ? print_usage_bug+0xc0/0xc0 [ 883.340795] ? print_usage_bug+0xc0/0xc0 [ 883.344843] ? debug_check_no_locks_freed+0x310/0x310 [ 883.350022] ? __lock_acquire+0x7f5/0x5140 [ 883.354244] ? __lock_acquire+0x7f5/0x5140 [ 883.358464] ? print_usage_bug+0xc0/0xc0 [ 883.362513] ? print_usage_bug+0xc0/0xc0 [ 883.366559] ? find_held_lock+0x36/0x1c0 [ 883.370612] alloc_skb_with_frags+0x137/0x760 [ 883.375097] ? __lock_acquire+0x7f5/0x5140 [ 883.379321] ? __lock_acquire+0x7f5/0x5140 [ 883.383544] ? __lock_acquire+0x7f5/0x5140 [ 883.387770] ? lock_downgrade+0x8e0/0x8e0 [ 883.391926] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 883.396673] sock_alloc_send_pskb+0x87a/0xae0 [ 883.401160] ? sock_wmalloc+0x1e0/0x1e0 [ 883.405123] ? debug_check_no_locks_freed+0x310/0x310 [ 883.410305] ? find_held_lock+0x36/0x1c0 [ 883.414369] ? lock_downgrade+0x8e0/0x8e0 [ 883.418506] ? graph_lock+0x170/0x170 [ 883.422293] ? print_usage_bug+0xc0/0xc0 [ 883.426429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 883.431962] ? rt6_check_expired+0x119/0x210 [ 883.436358] ? ip6_route_net_init+0x600/0x600 [ 883.440844] sock_alloc_send_skb+0x32/0x40 [ 883.445079] __ip6_append_data.isra.46+0x1f60/0x3760 [ 883.450174] ? lock_downgrade+0x8e0/0x8e0 [ 883.454316] ? ip6_setup_cork+0x1800/0x1800 [ 883.458628] ? ip6_mtu+0x1b3/0x590 [ 883.462199] ? ip6_sk_redirect+0x130/0x130 [ 883.466427] ? kasan_check_read+0x11/0x20 [ 883.470562] ? rt6_check_expired+0x119/0x210 [ 883.474962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 883.480498] ? ip6_setup_cork+0x10b8/0x1800 [ 883.484812] ? ip6_dst_mtu_forward+0x470/0x470 [ 883.489382] ? rt6_insert_exception+0xe40/0xe40 [ 883.494041] ? graph_lock+0x170/0x170 [ 883.497833] ip6_make_skb+0x3c1/0x620 [ 883.501619] ? ip_reply_glue_bits+0xc0/0xc0 [ 883.505929] ? ip_reply_glue_bits+0xc0/0xc0 [ 883.510238] ? ip6_push_pending_frames+0xf0/0xf0 [ 883.514993] ? lock_downgrade+0x8e0/0x8e0 [ 883.519132] ? kasan_check_read+0x11/0x20 [ 883.523266] ? rcu_is_watching+0x85/0x140 [ 883.527401] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 883.532584] ? ipv6_select_ident+0x140/0x140 [ 883.536981] udpv6_sendmsg+0x28cb/0x30f0 [ 883.541033] ? ip_reply_glue_bits+0xc0/0xc0 [ 883.545344] ? udpv6_queue_rcv_skb+0x1520/0x1520 [ 883.550083] ? print_usage_bug+0xc0/0xc0 [ 883.554131] ? find_get_entries_tag+0x10a0/0x10a0 [ 883.558962] ? __lock_acquire+0x7f5/0x5140 [ 883.563203] ? lock_downgrade+0x8e0/0x8e0 [ 883.567349] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 883.572871] ? rw_copy_check_uvector+0x2d3/0x3a0 [ 883.577631] inet_sendmsg+0x19f/0x690 [ 883.581418] ? udpv6_queue_rcv_skb+0x1520/0x1520 [ 883.586161] ? inet_sendmsg+0x19f/0x690 [ 883.590126] ? copy_msghdr_from_user+0x3bc/0x560 [ 883.594868] ? ipip_gro_receive+0x100/0x100 [ 883.599621] ? move_addr_to_kernel.part.18+0x100/0x100 [ 883.605334] ? security_socket_sendmsg+0x94/0xc0 [ 883.610079] ? ipip_gro_receive+0x100/0x100 [ 883.614389] sock_sendmsg+0xd5/0x120 [ 883.618090] ___sys_sendmsg+0x525/0x940 [ 883.622057] ? copy_msghdr_from_user+0x560/0x560 [ 883.626808] ? find_held_lock+0x36/0x1c0 [ 883.630861] ? lock_downgrade+0x8e0/0x8e0 [ 883.635004] ? rcu_note_context_switch+0x710/0x710 [ 883.639945] ? check_same_owner+0x320/0x320 [ 883.644252] ? __might_sleep+0x95/0x190 [ 883.648225] __sys_sendmmsg+0x240/0x6f0 [ 883.652191] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 883.656501] ? __lock_is_held+0xb5/0x140 [ 883.660562] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 883.666087] ? fput+0x130/0x1a0 [ 883.669353] ? ksys_write+0x1a6/0x250 [ 883.673141] ? __ia32_sys_read+0xb0/0xb0 [ 883.677194] __x64_sys_sendmmsg+0x9d/0x100 [ 883.681423] do_syscall_64+0x1b1/0x800 [ 883.685301] ? finish_task_switch+0x1ca/0x840 [ 883.689789] ? syscall_return_slowpath+0x5c0/0x5c0 [ 883.694726] ? syscall_return_slowpath+0x30f/0x5c0 [ 883.699644] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 883.705008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 883.709846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 883.715025] RIP: 0033:0x455a09 2033/05/18 03:37:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000002c0)={0x7fffffff, 0x5, 0x3, 0x0, 0x3, 0x2}) r2 = socket(0xa, 0x1, 0x0) fsync(r2) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) getpeername$packet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000400)=0x14) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000440)=@hci={0x1f, r5, 0x1}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)="5c5437cf368d4dcd6fdb6dd6c985285b6e194073bec366b0dd5d32419ad401ece6cc5ffb071a5424e5533b07be6160e51cdac879ef80ee78b3ea8d72f593607a9db731f20b89d95c88d32d3086b4737621023be212d15f4850d4b345976e26333d616f77f15c0a196a1e8a9c0fd05f405653b71bf8ac2308b1710deaf09199620f0863051979a9ed45b530bc4ce9695741cc7f5f7255a1bf62737e134b323bc95b523632ba74e421d113a6f9e0e6984bf1df7c90ac2a1e307b2465", 0xbb}], 0x1, &(0x7f00000005c0)=[{0x88, 0x1ff, 0xfff, "78ec229d1044bb1cd6a05134bbaed92a734ff56362ddf7f016b10a9c6979aa53d445fe80910850d93330223e1fdb0c0fb357799297323190f680f5c6e58c038836a180bc4c77c103c6f74968521082360132482a527d7a7e5dfceac1206cd2c6c7a48198a0da4fc9fced56931b69d9c434814c076b"}, {0xb8, 0x3a, 0xb3e2, "a6eedb748f609c17122e57b5cc3bd42ae49685ccee1e1a8c0d763d560ee14915b6637041cfd729c52ccc29d135258544b6393f796c1a0a845f0031a94d269c88650baa5b1fae26dfc56b5f21af11fec53bff575918595611224ed8417ef3f53875ba2d1d398792a3686e8da5f9b58da387558172192908fa15bd9819c138fef4c0be12da511ec3e56b5ecd3723c024128738d578e1713aa77897c7540ce7a301744a10c1"}], 0x140, 0x4}, 0x20008000) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="011b010098da60a6244d5600a7c2fdab5fdbe606001ebc466a9966"]) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xce]}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x9, &(0x7f0000000100)="44f17fc5850300012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000140), 0x4) 2033/05/18 03:37:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 883.718198] RSP: 002b:00007fb7c012fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 883.725895] RAX: ffffffffffffffda RBX: 00007fb7c01306d4 RCX: 0000000000455a09 [ 883.733160] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000014 [ 883.740424] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 883.747679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 883.754936] R13: 000000000000057a R14: 00000000006fc410 R15: 0000000000000000 [ 883.851264] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 883.921469] FAULT_INJECTION: forcing a failure. [ 883.921469] name failslab, interval 1, probability 0, space 0, times 0 [ 883.932810] CPU: 1 PID: 24265 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 883.940096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.949462] Call Trace: [ 883.952068] dump_stack+0x1b9/0x294 [ 883.955715] ? dump_stack_print_info.cold.2+0x52/0x52 [ 883.960927] ? __save_stack_trace+0x7e/0xd0 [ 883.965277] should_fail.cold.4+0xa/0x1a [ 883.969358] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 883.974485] ? kasan_kmalloc+0xc4/0xe0 [ 883.978395] ? kasan_slab_alloc+0x12/0x20 [ 883.982558] ? kmem_cache_alloc+0x12e/0x760 [ 883.986895] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 883.991755] ? kvm_mmu_load+0x21/0x10e0 [ 883.995799] ? vcpu_enter_guest+0x3a83/0x6060 [ 884.000313] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 884.005348] ? graph_lock+0x170/0x170 [ 884.009169] ? do_syscall_64+0x1b1/0x800 [ 884.013249] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 884.018637] ? find_held_lock+0x36/0x1c0 [ 884.022717] ? __lock_is_held+0xb5/0x140 [ 884.026810] ? xen_get_runstate_snapshot_cpu_delta+0x520/0x790 [ 884.032817] ? check_same_owner+0x320/0x320 [ 884.037162] ? rcu_note_context_switch+0x710/0x710 [ 884.042111] __should_failslab+0x124/0x180 [ 884.046361] should_failslab+0x9/0x14 [ 884.050188] kmem_cache_alloc+0x2af/0x760 [ 884.054359] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 884.059215] mmu_topup_memory_caches+0xf7/0x3a0 [ 884.063894] ? debug_check_no_locks_freed+0x310/0x310 [ 884.069098] kvm_mmu_load+0x21/0x10e0 [ 884.072908] ? kasan_check_write+0x14/0x20 [ 884.077157] vcpu_enter_guest+0x3a83/0x6060 [ 884.081485] ? print_usage_bug+0xc0/0xc0 [ 884.085560] ? kvm_set_msr_common+0x2680/0x2680 [ 884.090228] ? vmx_vcpu_load+0xadd/0xfe0 [ 884.094323] ? __lock_acquire+0x7f5/0x5140 [ 884.098559] ? vmx_vcpu_reset+0x1030/0x1030 [ 884.102886] ? graph_lock+0x170/0x170 [ 884.106690] ? graph_lock+0x170/0x170 [ 884.110492] ? __lock_acquire+0x7f5/0x5140 [ 884.114736] ? debug_check_no_locks_freed+0x310/0x310 [ 884.119945] ? __lock_is_held+0xb5/0x140 [ 884.124012] ? do_suspend.cold.1+0x13a/0x359 [ 884.128429] ? lock_acquire+0x1dc/0x520 [ 884.132407] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 884.137522] ? lock_release+0xa10/0xa10 [ 884.141500] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 884.146791] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 884.151292] ? preempt_notifier_dec+0x20/0x20 [ 884.155814] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 884.160657] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 884.165687] kvm_vcpu_ioctl+0x79d/0x12e0 [ 884.169765] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 884.175492] ? graph_lock+0x170/0x170 [ 884.179308] ? find_held_lock+0x36/0x1c0 [ 884.183390] ? lock_downgrade+0x8e0/0x8e0 [ 884.187557] ? kasan_check_read+0x11/0x20 [ 884.191712] ? rcu_is_watching+0x85/0x140 [ 884.195868] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 884.201075] ? __fget+0x40c/0x650 [ 884.205670] ? match_held_lock+0x841/0x8b0 [ 884.209924] ? expand_files.part.8+0x9a0/0x9a0 [ 884.214533] ? kasan_check_write+0x14/0x20 [ 884.219778] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 884.224719] ? wait_for_completion+0x870/0x870 [ 884.229309] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 884.234507] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 884.240398] do_vfs_ioctl+0x1cf/0x16a0 [ 884.244297] ? ioctl_preallocate+0x2e0/0x2e0 [ 884.248710] ? fget_raw+0x20/0x20 [ 884.252181] ? __sb_end_write+0xac/0xe0 [ 884.256164] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 884.261706] ? fput+0x130/0x1a0 [ 884.264990] ? ksys_write+0x1a6/0x250 [ 884.268803] ? security_file_ioctl+0x94/0xc0 [ 884.273219] ksys_ioctl+0xa9/0xd0 [ 884.276680] __x64_sys_ioctl+0x73/0xb0 [ 884.280574] do_syscall_64+0x1b1/0x800 [ 884.284465] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 884.289312] ? syscall_return_slowpath+0x5c0/0x5c0 [ 884.294246] ? syscall_return_slowpath+0x30f/0x5c0 [ 884.299800] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 884.305174] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 884.310024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 884.315211] RIP: 0033:0x455a09 [ 884.318397] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.326286] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 884.333560] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 884.340828] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 884.348125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 884.355395] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000001c 2033/05/18 03:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0xec0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:50 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfec0000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:50 executing program 7: unshare(0x2000400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040)}, 0x10) r1 = getpgrp(0xffffffffffffffff) getpriority(0x2, r1) 2033/05/18 03:37:50 executing program 5 (fault-call:5 fault-nth:1): r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:50 executing program 3: r0 = socket$inet6(0xa, 0x7ffff, 0x48) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x541f, 0x6f2fff) syncfs(r0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x20, 0x0) 2033/05/18 03:37:50 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x100) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/198) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x6, {{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x108) flock(r0, 0x7) lseek(r2, 0x4, 0x1) 2033/05/18 03:37:50 executing program 2 (fault-call:13 fault-nth:29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 885.068681] FAULT_INJECTION: forcing a failure. [ 885.068681] name failslab, interval 1, probability 0, space 0, times 0 [ 885.077053] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 885.080107] CPU: 1 PID: 24309 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #56 [ 885.080121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.107085] Call Trace: [ 885.109707] dump_stack+0x1b9/0x294 [ 885.113362] ? dump_stack_print_info.cold.2+0x52/0x52 2033/05/18 03:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:50 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0), &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x2, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000219ff0)={0x77359400}, &(0x7f0000048000), 0x0) accept4(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x80800) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) mmap(&(0x7f0000c5d000/0x1000)=nil, 0x1000, 0x0, 0x3d, r0, 0x0) exit(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) [ 885.118566] ? is_bpf_text_address+0xd7/0x170 [ 885.123080] ? kernel_text_address+0x79/0xf0 [ 885.127507] ? __unwind_start+0x166/0x330 [ 885.131674] should_fail.cold.4+0xa/0x1a [ 885.135760] ? __save_stack_trace+0x7e/0xd0 [ 885.140109] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 885.145235] ? save_stack+0xa9/0xd0 [ 885.148878] ? save_stack+0x43/0xd0 [ 885.152521] ? kasan_kmalloc+0xc4/0xe0 [ 885.156425] ? kasan_slab_alloc+0x12/0x20 [ 885.160586] ? find_held_lock+0x36/0x1c0 [ 885.164677] ? check_same_owner+0x320/0x320 [ 885.169013] ? rcu_note_context_switch+0x710/0x710 [ 885.173956] __should_failslab+0x124/0x180 [ 885.178204] should_failslab+0x9/0x14 [ 885.182018] kmem_cache_alloc_node_trace+0x26f/0x770 [ 885.187141] __kmalloc_node_track_caller+0x33/0x70 [ 885.192086] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 885.196871] __alloc_skb+0x14d/0x780 [ 885.200616] ? skb_scrub_packet+0x580/0x580 [ 885.204954] ? print_usage_bug+0xc0/0xc0 [ 885.209025] ? print_usage_bug+0xc0/0xc0 [ 885.213096] ? debug_check_no_locks_freed+0x310/0x310 [ 885.218284] ? __lock_acquire+0x7f5/0x5140 [ 885.222512] ? __lock_acquire+0x7f5/0x5140 [ 885.226749] ? print_usage_bug+0xc0/0xc0 [ 885.230801] ? print_usage_bug+0xc0/0xc0 [ 885.234852] ? find_held_lock+0x36/0x1c0 [ 885.238903] alloc_skb_with_frags+0x137/0x760 [ 885.243385] ? __lock_acquire+0x7f5/0x5140 [ 885.247617] ? __lock_acquire+0x7f5/0x5140 [ 885.251838] ? __lock_acquire+0x7f5/0x5140 [ 885.256059] ? lock_downgrade+0x8e0/0x8e0 [ 885.260198] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 885.264947] sock_alloc_send_pskb+0x87a/0xae0 [ 885.269436] ? sock_wmalloc+0x1e0/0x1e0 [ 885.273396] ? debug_check_no_locks_freed+0x310/0x310 [ 885.278572] ? find_held_lock+0x36/0x1c0 [ 885.282624] ? lock_downgrade+0x8e0/0x8e0 [ 885.286759] ? graph_lock+0x170/0x170 [ 885.290546] ? print_usage_bug+0xc0/0xc0 [ 885.294596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 885.300131] ? rt6_check_expired+0x119/0x210 [ 885.304536] ? ip6_route_net_init+0x600/0x600 [ 885.309036] sock_alloc_send_skb+0x32/0x40 [ 885.313261] __ip6_append_data.isra.46+0x1f60/0x3760 [ 885.318355] ? lock_downgrade+0x8e0/0x8e0 [ 885.322494] ? ip6_setup_cork+0x1800/0x1800 [ 885.326822] ? ip6_mtu+0x1b3/0x590 [ 885.330350] ? ip6_sk_redirect+0x130/0x130 [ 885.334585] ? kasan_check_read+0x11/0x20 [ 885.338724] ? rt6_check_expired+0x119/0x210 [ 885.343144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 885.348669] ? ip6_setup_cork+0x10b8/0x1800 [ 885.352983] ? ip6_dst_mtu_forward+0x470/0x470 [ 885.357642] ? rt6_insert_exception+0xe40/0xe40 [ 885.362306] ? graph_lock+0x170/0x170 [ 885.366099] ip6_make_skb+0x3c1/0x620 [ 885.369889] ? ip_reply_glue_bits+0xc0/0xc0 [ 885.374212] ? ip_reply_glue_bits+0xc0/0xc0 [ 885.378525] ? ip6_push_pending_frames+0xf0/0xf0 [ 885.383270] ? lock_downgrade+0x8e0/0x8e0 [ 885.387408] ? kasan_check_read+0x11/0x20 [ 885.391545] ? rcu_is_watching+0x85/0x140 [ 885.395679] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 885.400873] ? ipv6_select_ident+0x140/0x140 [ 885.405271] udpv6_sendmsg+0x28cb/0x30f0 [ 885.409320] ? ip_reply_glue_bits+0xc0/0xc0 [ 885.413718] ? udpv6_queue_rcv_skb+0x1520/0x1520 [ 885.418646] ? print_usage_bug+0xc0/0xc0 [ 885.422694] ? find_get_entries_tag+0x10a0/0x10a0 [ 885.427524] ? __lock_acquire+0x7f5/0x5140 [ 885.431754] ? lock_downgrade+0x8e0/0x8e0 [ 885.435893] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 885.441424] ? rw_copy_check_uvector+0x2d3/0x3a0 [ 885.446183] inet_sendmsg+0x19f/0x690 [ 885.449969] ? udpv6_queue_rcv_skb+0x1520/0x1520 [ 885.454825] ? inet_sendmsg+0x19f/0x690 [ 885.458787] ? copy_msghdr_from_user+0x3bc/0x560 [ 885.463540] ? ipip_gro_receive+0x100/0x100 [ 885.467850] ? move_addr_to_kernel.part.18+0x100/0x100 [ 885.473117] ? security_socket_sendmsg+0x94/0xc0 [ 885.477860] ? ipip_gro_receive+0x100/0x100 [ 885.482174] sock_sendmsg+0xd5/0x120 [ 885.485880] ___sys_sendmsg+0x525/0x940 [ 885.489852] ? copy_msghdr_from_user+0x560/0x560 [ 885.494599] ? find_held_lock+0x36/0x1c0 [ 885.498651] ? lock_downgrade+0x8e0/0x8e0 [ 885.502799] ? rcu_note_context_switch+0x710/0x710 [ 885.507732] ? check_same_owner+0x320/0x320 [ 885.512047] ? __might_sleep+0x95/0x190 [ 885.516017] __sys_sendmmsg+0x240/0x6f0 [ 885.519987] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 885.524301] ? __lock_is_held+0xb5/0x140 [ 885.528804] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 885.534333] ? fput+0x130/0x1a0 [ 885.537602] ? ksys_write+0x1a6/0x250 [ 885.541392] ? __ia32_sys_read+0xb0/0xb0 [ 885.545444] __x64_sys_sendmmsg+0x9d/0x100 [ 885.549670] do_syscall_64+0x1b1/0x800 [ 885.553543] ? finish_task_switch+0x1ca/0x840 [ 885.558033] ? syscall_return_slowpath+0x5c0/0x5c0 [ 885.562952] ? syscall_return_slowpath+0x30f/0x5c0 [ 885.567872] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 885.573230] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 885.578101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 885.583275] RIP: 0033:0x455a09 [ 885.586451] RSP: 002b:00007fb7c012fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 885.594156] RAX: ffffffffffffffda RBX: 00007fb7c01306d4 RCX: 0000000000455a09 [ 885.601414] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000014 [ 885.608672] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x60, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:50 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x1c, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 885.615926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 885.623180] R13: 000000000000057a R14: 00000000006fc410 R15: 0000000000000001 [ 885.639719] tty_warn_deprecated_flags: 'syz-executor3' is using deprecated serial flags (with no effect): 00008400 [ 885.683951] tty_warn_deprecated_flags: 'syz-executor3' is using deprecated serial flags (with no effect): 00008400 [ 885.703454] FAULT_INJECTION: forcing a failure. [ 885.703454] name failslab, interval 1, probability 0, space 0, times 0 [ 885.714841] CPU: 1 PID: 24304 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 885.722133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.731495] Call Trace: 2033/05/18 03:37:50 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe00000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 885.734102] dump_stack+0x1b9/0x294 [ 885.737759] ? dump_stack_print_info.cold.2+0x52/0x52 [ 885.742967] ? __save_stack_trace+0x7e/0xd0 [ 885.747317] should_fail.cold.4+0xa/0x1a [ 885.751404] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 885.756523] ? kasan_kmalloc+0xc4/0xe0 [ 885.760425] ? kasan_slab_alloc+0x12/0x20 [ 885.764583] ? kmem_cache_alloc+0x12e/0x760 [ 885.768919] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 885.773813] ? kvm_mmu_load+0x21/0x10e0 [ 885.777820] ? vcpu_enter_guest+0x3a83/0x6060 2033/05/18 03:37:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:50 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x3f, &(0x7f0000000080)=0xffffeffffffffff5, 0xfffffffffffffe96) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf46, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x3fffffe, &(0x7f0000004ff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2033/05/18 03:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x7ffff000, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 885.782332] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 885.787376] ? graph_lock+0x170/0x170 [ 885.791197] ? do_syscall_64+0x1b1/0x800 [ 885.795276] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 885.800663] ? find_held_lock+0x36/0x1c0 [ 885.804754] ? __lock_is_held+0xb5/0x140 [ 885.808846] ? check_same_owner+0x320/0x320 [ 885.813186] ? rcu_note_context_switch+0x710/0x710 [ 885.818133] __should_failslab+0x124/0x180 [ 885.822386] should_failslab+0x9/0x14 [ 885.826201] kmem_cache_alloc+0x2af/0x760 [ 885.830361] ? kvm_clock_read+0x25/0x30 [ 885.833946] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 885.834347] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 885.834365] ? ktime_get_with_offset+0x326/0x4a0 [ 885.834387] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 885.859323] mmu_topup_memory_caches+0xf7/0x3a0 [ 885.864014] kvm_mmu_load+0x21/0x10e0 [ 885.867863] ? vcpu_enter_guest+0x296a/0x6060 [ 885.872383] vcpu_enter_guest+0x3a83/0x6060 [ 885.876735] ? kvm_set_msr_common+0x2680/0x2680 [ 885.881412] ? vmx_vcpu_load+0xadd/0xfe0 [ 885.885491] ? __lock_acquire+0x7f5/0x5140 [ 885.889741] ? vmx_vcpu_reset+0x1030/0x1030 [ 885.894074] ? graph_lock+0x170/0x170 [ 885.897883] ? graph_lock+0x170/0x170 [ 885.901688] ? __lock_acquire+0x7f5/0x5140 [ 885.905942] ? debug_check_no_locks_freed+0x310/0x310 [ 885.911146] ? __lock_is_held+0xb5/0x140 [ 885.915221] ? lock_acquire+0x1dc/0x520 [ 885.919203] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 885.924238] ? lock_release+0xa10/0xa10 [ 885.928226] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 885.933516] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 885.938019] ? preempt_notifier_dec+0x20/0x20 [ 885.942525] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 885.947371] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 885.952405] kvm_vcpu_ioctl+0x79d/0x12e0 [ 885.956482] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 885.962206] ? graph_lock+0x170/0x170 [ 885.966019] ? find_held_lock+0x36/0x1c0 [ 885.970098] ? lock_downgrade+0x8e0/0x8e0 [ 885.974275] ? kasan_check_read+0x11/0x20 [ 885.978417] ? rcu_is_watching+0x85/0x140 [ 885.982569] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 885.987759] ? __fget+0x40c/0x650 [ 885.991220] ? match_held_lock+0x841/0x8b0 [ 885.995449] ? expand_files.part.8+0x9a0/0x9a0 [ 886.000029] ? kasan_check_write+0x14/0x20 [ 886.004259] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 886.009179] ? wait_for_completion+0x870/0x870 [ 886.013762] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 886.018943] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 886.024642] do_vfs_ioctl+0x1cf/0x16a0 [ 886.028522] ? ioctl_preallocate+0x2e0/0x2e0 [ 886.032919] ? fget_raw+0x20/0x20 [ 886.036370] ? __sb_end_write+0xac/0xe0 [ 886.040339] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 886.045864] ? fput+0x130/0x1a0 [ 886.049131] ? ksys_write+0x1a6/0x250 [ 886.052934] ? security_file_ioctl+0x94/0xc0 [ 886.057331] ksys_ioctl+0xa9/0xd0 [ 886.060773] __x64_sys_ioctl+0x73/0xb0 [ 886.064649] do_syscall_64+0x1b1/0x800 [ 886.068529] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 886.073371] ? syscall_return_slowpath+0x5c0/0x5c0 [ 886.078302] ? syscall_return_slowpath+0x30f/0x5c0 [ 886.083237] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 886.088594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 886.093428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 886.098604] RIP: 0033:0x455a09 [ 886.101780] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.109490] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 886.116748] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 886.124003] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 886.131266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 886.138526] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000001d 2033/05/18 03:37:51 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x3f00000000000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:51 executing program 5 (fault-call:5 fault-nth:2): r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:51 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) r2 = geteuid() quotactl(0x0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)="54cef7ea40b8d82b10cd30e2155f775c24fb0f1968d4e733960ba11e7eb32ffa5b92bd6fec73273caea03a4096feb6e5f90bafb2f39be6d5228720c877e26a2b77a1a7e6d59370b0a426329ae5311f7943a0fcc1f20a9c7558f5e4f73f71791f3d32ba6c23a889ab5b9b0efc23c32c53fa0b089b9c1b1a208d1765de079847ce83309c1bf7ab138647b1fe53aa7ccb") setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x4}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') sendfile(r0, r3, &(0x7f000036eff8), 0xff) 2033/05/18 03:37:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0xf, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:51 executing program 2 (fault-call:13 fault-nth:30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:51 executing program 7: r0 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0)={0x2}, 0x10) tkill(r0, 0x1004000000016) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) 2033/05/18 03:37:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="224b49fd1e310f215fea2faa9972c34b", 0x10, 0x1, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64=r0], @ANYRES16=r0, @ANYRES64=r0], 0x3) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x80, &(0x7f0000ae0fc0), 0x0, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) [ 886.443375] FAULT_INJECTION: forcing a failure. [ 886.443375] name failslab, interval 1, probability 0, space 0, times 0 [ 886.455071] CPU: 0 PID: 24360 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #56 [ 886.462373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.471730] Call Trace: [ 886.474327] dump_stack+0x1b9/0x294 [ 886.477957] ? dump_stack_print_info.cold.2+0x52/0x52 [ 886.483148] should_fail.cold.4+0xa/0x1a [ 886.487205] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 886.492296] ? lock_downgrade+0x8e0/0x8e0 [ 886.496429] ? trace_hardirqs_off+0xd/0x10 [ 886.500670] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 886.505770] ? mark_held_locks+0xc9/0x160 [ 886.509912] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 886.514486] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 886.519582] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 886.524585] ? trace_hardirqs_on+0xd/0x10 [ 886.528731] ? mod_timer+0x5eb/0x13b0 [ 886.532527] ? mod_timer_pending+0x1490/0x1490 [ 886.537111] ? refcount_dec_if_one+0x170/0x170 [ 886.541686] __should_failslab+0x124/0x180 [ 886.545914] should_failslab+0x9/0x14 [ 886.549705] kmem_cache_alloc+0x47/0x760 [ 886.553763] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 886.559299] skb_clone+0x1ed/0x4f0 [ 886.562841] ? skb_split+0x11d0/0x11d0 [ 886.566716] ? lock_release+0xa10/0xa10 [ 886.570679] ? __lock_acquire+0x7f5/0x5140 [ 886.574920] neigh_probe+0x59/0x120 [ 886.578537] __neigh_event_send+0x42d/0x1240 [ 886.582939] ? neightbl_fill_parms+0x1190/0x1190 [ 886.587687] ? __local_bh_enable_ip+0x161/0x230 [ 886.592351] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 886.597369] ? ip6t_do_table+0xd6c/0x1cd0 [ 886.601509] neigh_resolve_output+0x6dd/0xad0 [ 886.606009] ? kasan_check_read+0x11/0x20 [ 886.610162] ? rcu_is_watching+0x85/0x140 [ 886.614299] ? __neigh_event_send+0x1240/0x1240 [ 886.618962] ip6_finish_output2+0xc9c/0x2810 [ 886.623363] ? find_held_lock+0x36/0x1c0 [ 886.627413] ? ip6_flush_pending_frames+0xc0/0xc0 [ 886.632245] ? lock_downgrade+0x8e0/0x8e0 [ 886.636384] ? kasan_check_read+0x11/0x20 [ 886.640521] ? rcu_is_watching+0x85/0x140 [ 886.644658] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 886.649849] ? ip6_mtu+0x1b3/0x590 [ 886.653377] ? ip6_sk_redirect+0x130/0x130 [ 886.657610] ? kasan_check_read+0x11/0x20 [ 886.661741] ? rcu_is_watching+0x85/0x140 [ 886.665906] ip6_finish_output+0x5fe/0xbc0 [ 886.670130] ? ip6_finish_output+0x5fe/0xbc0 [ 886.674526] ip6_output+0x227/0x9b0 [ 886.678317] ? ip6_finish_output+0xbc0/0xbc0 [ 886.682719] ? lock_downgrade+0x8e0/0x8e0 [ 886.686858] ? ip6_fragment+0x3910/0x3910 [ 886.691264] ? kasan_check_read+0x11/0x20 [ 886.695403] ? rcu_is_watching+0x85/0x140 [ 886.699548] ip6_local_out+0xc5/0x1b0 [ 886.703345] ip6_send_skb+0xba/0x340 [ 886.707055] udp_v6_send_skb+0x633/0xfb0 [ 886.711112] udpv6_sendmsg+0x2913/0x30f0 [ 886.715160] ? ip_reply_glue_bits+0xc0/0xc0 [ 886.719477] ? udpv6_queue_rcv_skb+0x1520/0x1520 [ 886.724230] ? print_usage_bug+0xc0/0xc0 [ 886.728281] ? find_get_entries_tag+0x10a0/0x10a0 [ 886.733112] ? __lock_acquire+0x7f5/0x5140 [ 886.737342] ? lock_downgrade+0x8e0/0x8e0 [ 886.741481] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 886.747006] ? rw_copy_check_uvector+0x2d3/0x3a0 [ 886.751774] inet_sendmsg+0x19f/0x690 [ 886.755562] ? udpv6_queue_rcv_skb+0x1520/0x1520 [ 886.760306] ? inet_sendmsg+0x19f/0x690 [ 886.764540] ? copy_msghdr_from_user+0x3bc/0x560 [ 886.769297] ? ipip_gro_receive+0x100/0x100 [ 886.773606] ? move_addr_to_kernel.part.18+0x100/0x100 [ 886.778875] ? security_socket_sendmsg+0x94/0xc0 [ 886.783628] ? ipip_gro_receive+0x100/0x100 [ 886.787941] sock_sendmsg+0xd5/0x120 [ 886.791649] ___sys_sendmsg+0x525/0x940 [ 886.795612] ? copy_msghdr_from_user+0x560/0x560 [ 886.800370] ? find_held_lock+0x36/0x1c0 [ 886.804424] ? lock_downgrade+0x8e0/0x8e0 [ 886.808571] ? rcu_note_context_switch+0x710/0x710 [ 886.813500] ? check_same_owner+0x320/0x320 [ 886.817821] ? __might_sleep+0x95/0x190 [ 886.821875] __sys_sendmmsg+0x240/0x6f0 [ 886.825842] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 886.830152] ? __lock_is_held+0xb5/0x140 [ 886.834253] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 886.839777] ? fput+0x130/0x1a0 [ 886.843044] ? ksys_write+0x1a6/0x250 [ 886.846832] ? __ia32_sys_read+0xb0/0xb0 [ 886.850882] __x64_sys_sendmmsg+0x9d/0x100 [ 886.855105] do_syscall_64+0x1b1/0x800 [ 886.858995] ? finish_task_switch+0x1ca/0x840 [ 886.863491] ? syscall_return_slowpath+0x5c0/0x5c0 [ 886.868418] ? syscall_return_slowpath+0x30f/0x5c0 [ 886.873348] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 886.878722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 886.883556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 886.888731] RIP: 0033:0x455a09 [ 886.891903] RSP: 002b:00007fb7c012fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 886.899598] RAX: ffffffffffffffda RBX: 00007fb7c01306d4 RCX: 0000000000455a09 [ 886.906854] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000014 [ 886.914116] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 886.921378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 886.928804] R13: 000000000000057a R14: 00000000006fc410 R15: 0000000000000002 2033/05/18 03:37:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x51, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:52 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x6, 0x545640) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x60, &(0x7f0000000100)={0x0, 'ipddp0\x00'}, 0x18) [ 886.941867] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:52 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x3e8, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)}}}], 0x0, 0x0, &(0x7f0000000280)}) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r1, 0x0) 2033/05/18 03:37:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 887.076167] binder: 24386:24387 got reply transaction with bad transaction stack, transaction 71 has target 24386:0 [ 887.081146] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 887.087122] binder: 24386:24387 transaction failed 29201/-71, size 0-0 line 2778 2033/05/18 03:37:52 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xfe800000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 887.132975] FAULT_INJECTION: forcing a failure. [ 887.132975] name failslab, interval 1, probability 0, space 0, times 0 [ 887.144339] CPU: 1 PID: 24367 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 887.151633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.160999] Call Trace: [ 887.163611] dump_stack+0x1b9/0x294 [ 887.167261] ? dump_stack_print_info.cold.2+0x52/0x52 [ 887.172485] ? __save_stack_trace+0x7e/0xd0 [ 887.176827] should_fail.cold.4+0xa/0x1a [ 887.180896] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 887.186019] ? kasan_kmalloc+0xc4/0xe0 [ 887.189901] ? kasan_slab_alloc+0x12/0x20 [ 887.194042] ? kmem_cache_alloc+0x12e/0x760 [ 887.198442] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 887.203275] ? kvm_mmu_load+0x21/0x10e0 [ 887.207239] ? vcpu_enter_guest+0x3a83/0x6060 [ 887.211728] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 887.216742] ? graph_lock+0x170/0x170 [ 887.220538] ? do_syscall_64+0x1b1/0x800 [ 887.224589] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 887.229948] ? find_held_lock+0x36/0x1c0 [ 887.234020] ? __lock_is_held+0xb5/0x140 [ 887.238100] ? check_same_owner+0x320/0x320 [ 887.242425] ? rcu_note_context_switch+0x710/0x710 [ 887.247362] __should_failslab+0x124/0x180 [ 887.251591] should_failslab+0x9/0x14 [ 887.255384] kmem_cache_alloc+0x2af/0x760 [ 887.259530] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 887.264378] mmu_topup_memory_caches+0xf7/0x3a0 [ 887.269046] ? debug_check_no_locks_freed+0x310/0x310 [ 887.274236] kvm_mmu_load+0x21/0x10e0 [ 887.278041] ? kasan_check_write+0x14/0x20 [ 887.282282] vcpu_enter_guest+0x3a83/0x6060 [ 887.286599] ? perf_trace_lock+0xd6/0x900 [ 887.290733] ? print_usage_bug+0xc0/0xc0 [ 887.294795] ? kvm_set_msr_common+0x2680/0x2680 [ 887.299455] ? vmx_vcpu_load+0xadd/0xfe0 [ 887.303508] ? __lock_acquire+0x7f5/0x5140 [ 887.307738] ? vmx_vcpu_reset+0x1030/0x1030 [ 887.312047] ? graph_lock+0x170/0x170 [ 887.315842] ? graph_lock+0x170/0x170 [ 887.319633] ? __lock_acquire+0x7f5/0x5140 [ 887.323870] ? debug_check_no_locks_freed+0x310/0x310 [ 887.329060] ? __lock_is_held+0xb5/0x140 [ 887.333114] ? lock_acquire+0x1dc/0x520 [ 887.337094] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 887.342192] ? lock_release+0xa10/0xa10 [ 887.346156] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 887.351425] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 887.355919] ? preempt_notifier_dec+0x20/0x20 [ 887.360415] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 887.365250] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 887.370268] kvm_vcpu_ioctl+0x79d/0x12e0 [ 887.374324] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 887.380032] ? graph_lock+0x170/0x170 [ 887.383836] ? find_held_lock+0x36/0x1c0 [ 887.387898] ? lock_downgrade+0x8e0/0x8e0 [ 887.392048] ? rcu_is_watching+0x85/0x140 [ 887.396188] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 887.401378] ? __fget+0x40c/0x650 [ 887.404822] ? match_held_lock+0x841/0x8b0 [ 887.409053] ? expand_files.part.8+0x9a0/0x9a0 [ 887.413636] ? kasan_check_write+0x14/0x20 [ 887.417870] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 887.422796] ? wait_for_completion+0x870/0x870 [ 887.427629] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 887.432811] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 887.438511] do_vfs_ioctl+0x1cf/0x16a0 [ 887.442395] ? ioctl_preallocate+0x2e0/0x2e0 [ 887.446794] ? fget_raw+0x20/0x20 [ 887.450240] ? __sb_end_write+0xac/0xe0 [ 887.454231] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 887.459768] ? fput+0x130/0x1a0 [ 887.463048] ? ksys_write+0x1a6/0x250 [ 887.466850] ? security_file_ioctl+0x94/0xc0 [ 887.471267] ksys_ioctl+0xa9/0xd0 [ 887.474718] __x64_sys_ioctl+0x73/0xb0 [ 887.478780] do_syscall_64+0x1b1/0x800 [ 887.482659] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 887.487512] ? syscall_return_slowpath+0x5c0/0x5c0 [ 887.492433] ? syscall_return_slowpath+0x30f/0x5c0 [ 887.497532] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 887.502899] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 887.507737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 887.512925] RIP: 0033:0x455a09 [ 887.516104] RSP: 002b:00007fb5df88bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.523812] RAX: ffffffffffffffda RBX: 00007fb5df88c6d4 RCX: 0000000000455a09 [ 887.531072] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 887.538342] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 887.545601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 887.552859] R13: 000000000000027e R14: 00000000006f7c70 R15: 000000000000001e 2033/05/18 03:37:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:52 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) [ 887.586589] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 887.619359] binder_alloc: binder_alloc_mmap_handler: 24386 20001000-20004000 already mapped failed -16 [ 887.644587] binder: BINDER_SET_CONTEXT_MGR already set [ 887.656917] binder: 24386:24387 ioctl 40046207 0 returned -16 [ 887.682292] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2033/05/18 03:37:52 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2033/05/18 03:37:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xfffffffffffffffe, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10, 0xf0, 0x3000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x2e, 0x3, 0x0, 0x0, {0x400004}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000100)="5ba87b73656c6676626f786e65743000", 0x10, 0x1) [ 887.683269] binder_alloc: 24386: binder_alloc_buf, no vma [ 887.698441] binder: 24386:24401 transaction failed 29189/-3, size 0-0 line 2971 [ 887.712755] binder: 24386:24410 got reply transaction with no transaction stack [ 887.720351] binder: 24386:24410 transaction failed 29201/-71, size 0-0 line 2763 [ 887.734698] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 887.740543] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 887.751911] openvswitch: netlink: Flow set message rejected, Key attribute missing. 2033/05/18 03:37:53 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0xe8030000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:37:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffff0d000000, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:53 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002540)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002500)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000340)=@join_ip_mcast={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x38) write$rdma_cm(r0, &(0x7f0000000400)=@bind={0x14, 0x0, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"055a23af990b9cf479ff03c620e23006"}}}}, 0xfb84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000080)={r3, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, [0x5, 0x8, 0x8768, 0x7fff, 0x0, 0x100000001, 0x2, 0x2e67, 0x0, 0x0, 0xa00000, 0x7, 0x5, 0x9, 0x3]}, &(0x7f0000000180)=0x100) [ 887.837504] binder: undelivered TRANSACTION_ERROR: 29189 [ 887.843117] binder: undelivered TRANSACTION_ERROR: 29201 [ 887.892079] binder: release 24386:24387 transaction 71 out, still active [ 887.899110] binder: undelivered TRANSACTION_COMPLETE [ 887.904289] binder: undelivered TRANSACTION_ERROR: 29201 [ 887.934494] binder: send failed reply for transaction 71, target dead 2033/05/18 03:37:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xfffffffffeffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:53 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x7000000, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:53 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) socket$can_raw(0x1d, 0x3, 0x1) timerfd_settime(0xffffffffffffffff, 0x4, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f00000001c0), 0x1}, 0x20) signalfd4(r0, &(0x7f0000000040)={0x5}, 0x8, 0x80800) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1848, 0x42001) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x320, 0x70bd2c, 0x25dfdbfc, {0x1}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1121349a01fef43b}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40844}, 0x80) 2033/05/18 03:37:53 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x5b6) 2033/05/18 03:37:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)}}}], 0x0, 0x0, &(0x7f0000000280)}) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r1, 0x0) 2033/05/18 03:37:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0x5452, 0x0) [ 888.073642] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 888.088725] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 888.102463] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 888.114749] binder: 24457:24459 got reply transaction with bad transaction stack, transaction 76 has target 24457:0 [ 888.125507] binder: 24457:24459 transaction failed 29201/-71, size 0-0 line 2778 2033/05/18 03:37:53 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000c40)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x1c00, &(0x7f0000000280)}}, {{&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xff01}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000000200)}}], 0x2, 0x0) 2033/05/18 03:37:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:53 executing program 7: r0 = socket(0x10, 0x2, 0x0) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x3, &(0x7f0000000400)=[{&(0x7f0000000100)="a6221a1a292d2b07619ba68fb07357b273ee1c80c7e5d2cd11cff0b097b367ca9b3dc1aedf0cd6e2018b545dd9d995cd26ae540121214b36c1b724139e3de1cfacd330f7971b768cd12ed65c7c4d7f5dc1d561f83f9e7aaeb08f9e070fd2995fc9cb9280b6c76c90a7dcff7515dc553f1801e1fd1aa83a470c157152ef38f328b299a6c1c9496d9586aa4d8631adea5f2a8a28ea5ccc0abdca46a36f5bb29d91b7630a09b528ce814c318e429e7ec0715a85529403c499ad62e2e6c1bb5d71b700ca3f64473b6807602c088028aa5b2949b040352a72d1bc37a97cc8c5aa902547964633", 0xe4, 0x7fffffff}, {&(0x7f0000000280)="43de0740ca7e5778c2e4f53afa4d936950fc63a79bbe7b8e8adf680b0962e3857666e4671526fd7548fb7662cb0077dd653038c509cb5e934d66446af3a4529face91a68e9ecc5bc56d07c7832b55c492ef01620deaac647d78ec84e3e2097b6389dc505e1134fc40921ba230308809b3bf8f7c5d917a0d70f15c07c00915a183bdc2e8730fcec5e9058aa912773742158856b8a60590b148bb126eb9a6b6713c55f7512e25a5f733b1e4ccdd1f37c2516045953", 0xb4, 0x200}, {&(0x7f0000000340)="e4abbdae87814818807833c4bd6832a87adb0d22ce37c00102a5159efb7daac1885c0234c1cf84e66a9e576fa0a9cca7b6836085eafad87cda9bc244bb628de55d76b839d4d823747960f267b983be19273b93fb13e6074b156003f92f16d1dcb249247015fe275e6b02536a71c6363c60dc674dc012bda4d8a8444c30385636f3fbfb6fc245274f1d40bef8e1cad8312f62a37a33b9fd7e0f0b10c37e805b8735822a7f24f8f2ff23d3a9bb91dddbb3e779", 0xb2, 0xff}], 0x10000, &(0x7f0000000200)='logdev') ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000016c0)={'nouuid,', {[{@logdev={'logdev', 0x3d, './file0'}, 0x2c}]}}) 2033/05/18 03:37:53 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x200000000000000) 2033/05/18 03:37:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x16c, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 2033/05/18 03:37:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x7400, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:53 executing program 3: r0 = request_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)='selinux/eth1vboxnet0securitymd5sum\x00', 0xfffffffffffffff9) add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="40dece78", 0x4, r0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xc56) open_by_handle_at(r2, &(0x7f0000000080)={0x9, 0x1, 'W'}, 0x0) 2033/05/18 03:37:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x200000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000000419d69ab62a9"]) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) [ 888.296102] binder: release 24457:24459 transaction 76 out, still active [ 888.303108] binder: undelivered TRANSACTION_COMPLETE [ 888.308294] binder: undelivered TRANSACTION_ERROR: 29201 [ 888.309645] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 888.320459] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 888.341052] ceph: device name is missing path (no : separator in /dev/loop7) [ 888.354246] FAT-fs (loop3): Unrecognized mount option "cifs.idmap" or missing value [ 888.358907] binder: send failed reply for transaction 76, target dead [ 888.370309] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2033/05/18 03:37:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x5, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:53 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 888.393441] XFS (loop7): Invalid device [./file0], error=-15 [ 888.413085] ================================================================== [ 888.420905] BUG: KASAN: use-after-free in radix_tree_next_chunk+0xf9f/0xfb0 [ 888.428018] Read of size 4 at addr ffff8801ac328a48 by task syz-executor2/24493 [ 888.435469] [ 888.437114] CPU: 1 PID: 24493 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #56 [ 888.444392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.453754] Call Trace: [ 888.456365] dump_stack+0x1b9/0x294 [ 888.460015] ? dump_stack_print_info.cold.2+0x52/0x52 [ 888.465224] ? printk+0x9e/0xba [ 888.468530] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 888.473303] ? kasan_check_write+0x14/0x20 [ 888.477577] print_address_description+0x6c/0x20b [ 888.477870] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 888.482440] ? radix_tree_next_chunk+0xf9f/0xfb0 2033/05/18 03:37:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 888.482499] kasan_report.cold.7+0x242/0x2fe [ 888.482520] __asan_report_load4_noabort+0x14/0x20 [ 888.503862] radix_tree_next_chunk+0xf9f/0xfb0 [ 888.508469] ? debug_check_no_locks_freed+0x310/0x310 [ 888.513685] ? __account_cfs_rq_runtime+0x600/0x600 [ 888.518726] ? attach_entity_load_avg+0x850/0x850 [ 888.524362] ? cgroup_cpu_stat_updated+0xa5/0x410 [ 888.529219] ? idr_preload+0x40/0x40 [ 888.533213] ? debug_check_no_locks_freed+0x310/0x310 [ 888.538419] ? debug_check_no_locks_freed+0x310/0x310 2033/05/18 03:37:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x68, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 888.543623] ? print_usage_bug+0xc0/0xc0 [ 888.547709] ? pick_next_entity+0x390/0x390 [ 888.552304] ? graph_lock+0x170/0x170 [ 888.556114] ? lock_downgrade+0x8e0/0x8e0 [ 888.560279] ? flush_plug_callbacks+0x553/0x7f0 [ 888.564961] ? __lock_acquire+0x7f5/0x5140 [ 888.569213] ? bio_cur_bytes+0x1e0/0x1e0 [ 888.573289] ? print_usage_bug+0xc0/0xc0 [ 888.577363] radix_tree_gang_lookup_tag+0x3d4/0x5f0 [ 888.582399] ? radix_tree_gang_lookup_slot+0x420/0x420 [ 888.587692] ? xfs_perag_get+0x600/0x600 [ 888.591779] ? kasan_check_read+0x11/0x20 2033/05/18 03:37:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x0, 0xffffffff0000000d, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 2033/05/18 03:37:53 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x1100000000000000) [ 888.595938] ? rcu_is_watching+0x85/0x140 [ 888.600102] ? find_held_lock+0x36/0x1c0 [ 888.604174] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 888.609387] xfs_perag_get_tag+0x12d/0x7c0 [ 888.612347] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 888.613643] ? xfs_perag_get+0x600/0x600 [ 888.613664] ? rcu_is_watching+0x85/0x140 [ 888.613680] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 888.613701] ? list_lru_count_one+0x27f/0x440 [ 888.613720] xfs_reclaim_inodes_count+0x82/0xb0 [ 888.643558] xfs_fs_nr_cached_objects+0x37/0x50 [ 888.648247] ? xfs_fs_free_cached_objects+0x80/0x80 [ 888.653286] super_cache_count+0x98/0x280 [ 888.657455] shrink_slab.part.39+0x330/0xf90 [ 888.661892] ? kswapd_cpu_online+0x1e0/0x1e0 [ 888.666327] ? shrink_active_list+0x17f0/0x17f0 [ 888.671019] ? kasan_check_read+0x11/0x20 [ 888.675185] ? rcu_is_watching+0x85/0x140 [ 888.679362] ? rcu_read_unlock+0x35/0x70 [ 888.683480] shrink_slab+0xa1/0xc0 [ 888.687038] shrink_node+0x4f2/0x1740 [ 888.690869] ? shrink_node_memcg+0x1910/0x1910 [ 888.695464] ? kvm_clock_read+0x25/0x30 [ 888.699454] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 888.704484] ? ktime_get+0x2d9/0x430 [ 888.708219] ? do_gettimeofday+0x170/0x170 [ 888.712479] ? lock_downgrade+0x8e0/0x8e0 [ 888.716669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 888.722228] do_try_to_free_pages+0x3c9/0x1240 [ 888.726842] ? shrink_node+0x1740/0x1740 [ 888.730918] ? rcu_is_watching+0x85/0x140 [ 888.735084] ? rcu_pm_notify+0xc0/0xc0 [ 888.739001] try_to_free_mem_cgroup_pages+0x475/0xc50 [ 888.744211] ? try_to_free_pages+0xb30/0xb30 [ 888.748640] ? lock_downgrade+0x8e0/0x8e0 [ 888.752803] ? kasan_check_read+0x11/0x20 [ 888.756969] ? kasan_check_read+0x11/0x20 [ 888.761125] ? do_raw_spin_unlock+0x9e/0x2e0 [ 888.765544] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 888.770140] ? trace_hardirqs_on+0xd/0x10 [ 888.774304] reclaim_high.constprop.67+0x12f/0x1d0 [ 888.779249] ? memcg_event_wake+0x410/0x410 [ 888.783584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 888.789135] ? exit_to_usermode_loop+0x1ef/0x310 [ 888.793910] ? exit_to_usermode_loop+0x87/0x310 [ 888.798596] mem_cgroup_handle_over_high+0x8d/0x130 [ 888.803630] exit_to_usermode_loop+0x274/0x310 [ 888.808239] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 888.813097] ? syscall_return_slowpath+0x5c0/0x5c0 [ 888.818044] ? syscall_return_slowpath+0x30f/0x5c0 [ 888.822997] prepare_exit_to_usermode+0x32e/0x390 [ 888.827857] ? perf_trace_sys_enter+0xaf0/0xaf0 [ 888.832547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 888.837407] ? page_fault+0x8/0x30 [ 888.840967] retint_user+0x8/0x18 [ 888.844426] RIP: 0033:0x40432d [ 888.847617] RSP: 002b:00007fb5df88a0a0 EFLAGS: 00010206 [ 888.852999] RAX: 0000000000404320 RBX: 00007fb5df88c6d4 RCX: 0000000020000280 [ 888.860280] RDX: 0000000020000000 RSI: 0000000000000016 RDI: 0000000000000015 [ 888.867560] RBP: 000000000072bea0 R08: 0000000000000001 R09: 000000000000005d [ 888.874849] R10: 0000000000000015 R11: 0000000020000580 R12: 00000000ffffffff [ 888.882129] R13: 0000000000000721 R14: 00000000006febb8 R15: 0000000000000000 [ 888.889418] [ 888.891051] Allocated by task 24485: [ 888.894781] save_stack+0x43/0xd0 [ 888.898361] kasan_kmalloc+0xc4/0xe0 [ 888.902090] kmem_cache_alloc_trace+0x152/0x780 [ 888.906770] xfs_fs_fill_super+0xda/0x1560 [ 888.911015] mount_bdev+0x30c/0x3e0 [ 888.914656] xfs_fs_mount+0x34/0x40 [ 888.918277] mount_fs+0xae/0x328 [ 888.921649] vfs_kern_mount.part.34+0xd4/0x4d0 [ 888.926235] do_mount+0x564/0x3070 [ 888.929784] ksys_mount+0x12d/0x140 [ 888.933404] __x64_sys_mount+0xbe/0x150 [ 888.937471] do_syscall_64+0x1b1/0x800 [ 888.941367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 888.946550] [ 888.948162] Freed by task 24485: [ 888.951533] save_stack+0x43/0xd0 [ 888.954988] __kasan_slab_free+0x11a/0x170 [ 888.959214] kasan_slab_free+0xe/0x10 [ 888.963000] kfree+0xd9/0x260 [ 888.966099] xfs_fs_fill_super+0x66a/0x1560 [ 888.970405] mount_bdev+0x30c/0x3e0 [ 888.974028] xfs_fs_mount+0x34/0x40 [ 888.977676] mount_fs+0xae/0x328 [ 888.981046] vfs_kern_mount.part.34+0xd4/0x4d0 [ 888.985622] do_mount+0x564/0x3070 [ 888.989161] ksys_mount+0x12d/0x140 [ 888.992793] __x64_sys_mount+0xbe/0x150 [ 888.996778] do_syscall_64+0x1b1/0x800 [ 889.000677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 889.005848] [ 889.007473] The buggy address belongs to the object at ffff8801ac328640 [ 889.007473] which belongs to the cache kmalloc-4096 of size 4096 [ 889.020310] The buggy address is located 1032 bytes inside of [ 889.020310] 4096-byte region [ffff8801ac328640, ffff8801ac329640) [ 889.032369] The buggy address belongs to the page: [ 889.037307] page:ffffea0006b0ca00 count:1 mapcount:0 mapping:ffff8801ac328640 index:0x0 compound_mapcount: 0 [ 889.047294] flags: 0x2fffc0000008100(slab|head) [ 889.051966] raw: 02fffc0000008100 ffff8801ac328640 0000000000000000 0000000100000001 [ 889.059841] raw: ffffea00070b9420 ffffea000617da20 ffff8801da800dc0 0000000000000000 [ 889.067709] page dumped because: kasan: bad access detected [ 889.073436] [ 889.075054] Memory state around the buggy address: [ 889.079972] ffff8801ac328900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 889.087333] ffff8801ac328980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 889.094695] >ffff8801ac328a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 889.102050] ^ [ 889.107778] ffff8801ac328a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 889.115144] ffff8801ac328b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 889.122505] ================================================================== [ 889.129862] Disabling lock debugging due to kernel taint [ 889.135505] Kernel panic - not syncing: panic_on_warn set ... [ 889.135505] [ 889.142889] CPU: 1 PID: 24493 Comm: syz-executor2 Tainted: G B 4.17.0-rc5+ #56 [ 889.151549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.160907] Call Trace: [ 889.163494] dump_stack+0x1b9/0x294 [ 889.167109] ? dump_stack_print_info.cold.2+0x52/0x52 [ 889.172287] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 889.177029] ? radix_tree_next_chunk+0xf50/0xfb0 [ 889.181772] panic+0x22f/0x4de [ 889.184956] ? add_taint.cold.5+0x16/0x16 [ 889.189092] ? do_raw_spin_unlock+0x9e/0x2e0 [ 889.193484] ? do_raw_spin_unlock+0x9e/0x2e0 [ 889.197879] ? radix_tree_next_chunk+0xf9f/0xfb0 [ 889.202646] kasan_end_report+0x47/0x4f [ 889.206621] kasan_report.cold.7+0x76/0x2fe [ 889.210933] __asan_report_load4_noabort+0x14/0x20 [ 889.215858] radix_tree_next_chunk+0xf9f/0xfb0 [ 889.220425] ? debug_check_no_locks_freed+0x310/0x310 [ 889.225604] ? __account_cfs_rq_runtime+0x600/0x600 [ 889.230609] ? attach_entity_load_avg+0x850/0x850 [ 889.235441] ? cgroup_cpu_stat_updated+0xa5/0x410 [ 889.240277] ? idr_preload+0x40/0x40 [ 889.243976] ? debug_check_no_locks_freed+0x310/0x310 [ 889.249156] ? debug_check_no_locks_freed+0x310/0x310 [ 889.254331] ? print_usage_bug+0xc0/0xc0 [ 889.258378] ? pick_next_entity+0x390/0x390 [ 889.262686] ? graph_lock+0x170/0x170 [ 889.266472] ? lock_downgrade+0x8e0/0x8e0 [ 889.270608] ? flush_plug_callbacks+0x553/0x7f0 [ 889.275264] ? __lock_acquire+0x7f5/0x5140 [ 889.279486] ? bio_cur_bytes+0x1e0/0x1e0 [ 889.283542] ? print_usage_bug+0xc0/0xc0 [ 889.287602] radix_tree_gang_lookup_tag+0x3d4/0x5f0 [ 889.292605] ? radix_tree_gang_lookup_slot+0x420/0x420 [ 889.297872] ? xfs_perag_get+0x600/0x600 [ 889.301924] ? kasan_check_read+0x11/0x20 [ 889.306064] ? rcu_is_watching+0x85/0x140 [ 889.310196] ? find_held_lock+0x36/0x1c0 [ 889.314242] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 889.319417] xfs_perag_get_tag+0x12d/0x7c0 [ 889.323651] ? xfs_perag_get+0x600/0x600 [ 889.327697] ? rcu_is_watching+0x85/0x140 [ 889.331829] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 889.337005] ? list_lru_count_one+0x27f/0x440 [ 889.341488] xfs_reclaim_inodes_count+0x82/0xb0 [ 889.346154] xfs_fs_nr_cached_objects+0x37/0x50 [ 889.350816] ? xfs_fs_free_cached_objects+0x80/0x80 [ 889.355820] super_cache_count+0x98/0x280 [ 889.359957] shrink_slab.part.39+0x330/0xf90 [ 889.364366] ? kswapd_cpu_online+0x1e0/0x1e0 [ 889.368768] ? shrink_active_list+0x17f0/0x17f0 [ 889.373424] ? kasan_check_read+0x11/0x20 [ 889.377567] ? rcu_is_watching+0x85/0x140 [ 889.381715] ? rcu_read_unlock+0x35/0x70 [ 889.385764] shrink_slab+0xa1/0xc0 [ 889.389726] shrink_node+0x4f2/0x1740 [ 889.393522] ? shrink_node_memcg+0x1910/0x1910 [ 889.398089] ? kvm_clock_read+0x25/0x30 [ 889.402047] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 889.407070] ? ktime_get+0x2d9/0x430 [ 889.410772] ? do_gettimeofday+0x170/0x170 [ 889.414995] ? lock_downgrade+0x8e0/0x8e0 [ 889.419131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 889.424658] do_try_to_free_pages+0x3c9/0x1240 [ 889.429241] ? shrink_node+0x1740/0x1740 [ 889.433286] ? rcu_is_watching+0x85/0x140 [ 889.437419] ? rcu_pm_notify+0xc0/0xc0 [ 889.441298] try_to_free_mem_cgroup_pages+0x475/0xc50 [ 889.446483] ? try_to_free_pages+0xb30/0xb30 [ 889.450878] ? lock_downgrade+0x8e0/0x8e0 [ 889.455111] ? kasan_check_read+0x11/0x20 [ 889.459272] ? kasan_check_read+0x11/0x20 [ 889.463404] ? do_raw_spin_unlock+0x9e/0x2e0 [ 889.467799] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 889.472369] ? trace_hardirqs_on+0xd/0x10 [ 889.476503] reclaim_high.constprop.67+0x12f/0x1d0 [ 889.481420] ? memcg_event_wake+0x410/0x410 [ 889.485727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 889.491249] ? exit_to_usermode_loop+0x1ef/0x310 [ 889.495990] ? exit_to_usermode_loop+0x87/0x310 [ 889.500663] mem_cgroup_handle_over_high+0x8d/0x130 [ 889.505667] exit_to_usermode_loop+0x274/0x310 [ 889.510235] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 889.515065] ? syscall_return_slowpath+0x5c0/0x5c0 [ 889.519988] ? syscall_return_slowpath+0x30f/0x5c0 [ 889.524914] prepare_exit_to_usermode+0x32e/0x390 [ 889.529742] ? perf_trace_sys_enter+0xaf0/0xaf0 [ 889.534399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 889.539227] ? page_fault+0x8/0x30 [ 889.542750] retint_user+0x8/0x18 [ 889.546186] RIP: 0033:0x40432d [ 889.549358] RSP: 002b:00007fb5df88a0a0 EFLAGS: 00010206 [ 889.554705] RAX: 0000000000404320 RBX: 00007fb5df88c6d4 RCX: 0000000020000280 [ 889.561960] RDX: 0000000020000000 RSI: 0000000000000016 RDI: 0000000000000015 [ 889.569226] RBP: 000000000072bea0 R08: 0000000000000001 R09: 000000000000005d [ 889.576480] R10: 0000000000000015 R11: 0000000020000580 R12: 00000000ffffffff [ 889.583744] R13: 0000000000000721 R14: 00000000006febb8 R15: 0000000000000000 [ 889.591529] Dumping ftrace buffer: [ 889.595066] (ftrace buffer empty) [ 889.598761] Kernel Offset: disabled [ 889.602379] Rebooting in 86400 seconds..