0x900/0x900 [ 418.646237] ? shrink_dcache_sb+0x350/0x350 [ 418.650591] ? tcp_sendpage+0x60/0x60 [ 418.654412] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 418.660283] ? aa_label_sk_perm+0xfc/0xa50 [ 418.664531] ? aa_profile_af_perm+0x410/0x410 [ 418.669038] ? ksys_dup3+0x680/0x680 [ 418.672761] ? lock_acquire+0x1ed/0x520 [ 418.676736] ? tcp_sendmsg+0x21/0x50 [ 418.680459] ? trace_hardirqs_on+0xbd/0x310 [ 418.684789] ? lock_release+0x970/0x970 [ 418.688779] ? lock_sock_nested+0xe2/0x120 [ 418.693043] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 418.698510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.704051] ? check_preemption_disabled+0x48/0x200 [ 418.709071] ? lock_sock_nested+0x9a/0x120 [ 418.713309] ? lock_sock_nested+0x9a/0x120 [ 418.717548] ? __local_bh_enable_ip+0x160/0x260 [ 418.722221] tcp_sendmsg+0x2f/0x50 [ 418.725787] inet_sendmsg+0x19c/0x690 [ 418.729591] ? ipip_gro_receive+0x100/0x100 [ 418.733915] ? apparmor_socket_sendmsg+0x29/0x30 [ 418.738684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.744226] ? security_socket_sendmsg+0x94/0xc0 [ 418.748983] ? ipip_gro_receive+0x100/0x100 [ 418.753312] sock_sendmsg+0xd5/0x120 [ 418.757031] __sys_sendto+0x3d7/0x670 [ 418.760833] ? __ia32_sys_getpeername+0xb0/0xb0 [ 418.765505] ? wait_for_completion+0x8a0/0x8a0 [ 418.770090] ? lock_release+0x970/0x970 [ 418.774065] ? check_preemption_disabled+0x48/0x200 [ 418.779106] ? fsnotify_first_mark+0x350/0x350 [ 418.783708] ? __fsnotify_parent+0xcc/0x420 [ 418.788035] ? fsnotify+0xf10/0xf10 [ 418.791661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.797221] ? __sb_end_write+0xd9/0x110 [ 418.801288] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 418.806827] ? fput+0x130/0x1a0 [ 418.810110] ? ksys_write+0x1ae/0x260 [ 418.813927] ? trace_hardirqs_on+0xbd/0x310 [ 418.818256] ? __ia32_sys_read+0xb0/0xb0 [ 418.822320] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.827699] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 418.833155] __x64_sys_sendto+0xe1/0x1a0 [ 418.837224] do_syscall_64+0x1b9/0x820 [ 418.841111] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 418.846508] ? syscall_return_slowpath+0x5e0/0x5e0 [ 418.851480] ? trace_hardirqs_on_caller+0x310/0x310 [ 418.856524] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 418.861546] ? recalc_sigpending_tsk+0x180/0x180 [ 418.866304] ? kasan_check_write+0x14/0x20 [ 418.870577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.875426] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.880663] RIP: 0033:0x457579 [ 418.883860] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 418.902760] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 418.910469] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 418.917745] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000003 [ 418.925014] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 418.932278] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 418.939547] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 [ 418.956225] IPVS: ftp: loaded support on port[0] = 21 23:19:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) pwrite64(r0, &(0x7f0000000180)="60482b53468d28a76bce9d100177699d3f2fbdc3ebaff8a1cd6ccc7c5aa174f0e2d77f7a2790ed339fb1aa5c80a618ce2b9556309737991f703fa82c7fc40886d0413cb08ba3b636c5c086a7937d59325799c831b0920d574275e6be7d0f7efa23e6014402", 0x65, 0x0) 23:19:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20481, 0x0) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}, 0x100) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 419.019662] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:19:10 executing program 0 (fault-call:8 fault-nth:20): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000240)=""/239, 0xfffffffffffffedf, 0x0, 0x0, 0x0) close(r0) 23:19:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000180)=""/73, &(0x7f0000000240)=0x49) 23:19:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000240)={{0x2f, @broadcast, 0x4e22, 0x1, 'lc\x00', 0x10, 0x2, 0x5a}, {@remote, 0x4e24, 0x10000, 0x80, 0x5, 0x401}}, 0x44) [ 419.273806] FAULT_INJECTION: forcing a failure. [ 419.273806] name failslab, interval 1, probability 0, space 0, times 0 [ 419.317486] CPU: 1 PID: 21045 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 419.326024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.335385] Call Trace: [ 419.337997] dump_stack+0x1d3/0x2c4 [ 419.341651] ? dump_stack_print_info.cold.2+0x52/0x52 [ 419.346864] should_fail.cold.4+0xa/0x17 [ 419.350949] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 419.356066] ? __get_user_pages_fast+0x3f0/0x3f0 [ 419.360833] ? save_stack+0xa9/0xd0 [ 419.364480] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 419.369510] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 419.374098] ? tcp_sendmsg+0x2f/0x50 [ 419.377822] ? inet_sendmsg+0x19c/0x690 [ 419.381815] ? sock_sendmsg+0xd5/0x120 [ 419.385716] ? __sys_sendto+0x3d7/0x670 [ 419.389696] ? __x64_sys_sendto+0xe1/0x1a0 [ 419.393956] ? csum_and_copy_from_iter+0x13d0/0x13d0 [ 419.399075] ? trace_hardirqs_on+0xbd/0x310 [ 419.403451] ? lock_downgrade+0x900/0x900 [ 419.407621] ? lock_downgrade+0x900/0x900 [ 419.411769] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 419.416890] ? fs_reclaim_acquire+0x20/0x20 [ 419.421222] ? lock_downgrade+0x900/0x900 [ 419.425378] ? check_same_owner+0x330/0x330 [ 419.429709] __should_failslab+0x124/0x180 [ 419.433960] should_failslab+0x9/0x14 [ 419.437764] kmem_cache_alloc_node+0x26e/0x730 [ 419.442345] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 419.447282] __alloc_skb+0x114/0x770 [ 419.451004] ? skb_scrub_packet+0x490/0x490 [ 419.455370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.460931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.466501] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 419.471965] ? refcount_add_not_zero_checked+0x330/0x330 [ 419.477421] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 419.482460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.487997] ? __sk_mem_schedule+0xac/0xe0 [ 419.492235] sk_stream_alloc_skb+0x13c/0x960 [ 419.496647] ? tcp_init_transfer+0x470/0x470 [ 419.501070] ? ___pskb_trim+0x1320/0x1320 [ 419.505228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.510769] tcp_sendmsg_locked+0xee4/0x3f90 [ 419.515190] ? lock_downgrade+0x900/0x900 [ 419.519341] ? shrink_dcache_sb+0x350/0x350 [ 419.523672] ? tcp_sendpage+0x60/0x60 [ 419.527472] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 419.533021] ? aa_label_sk_perm+0xfc/0xa50 [ 419.537270] ? aa_profile_af_perm+0x410/0x410 [ 419.541781] ? ksys_dup3+0x680/0x680 [ 419.545499] ? lock_acquire+0x1ed/0x520 [ 419.549475] ? tcp_sendmsg+0x21/0x50 [ 419.553208] ? trace_hardirqs_on+0xbd/0x310 [ 419.557525] ? lock_release+0x970/0x970 [ 419.561499] ? lock_sock_nested+0xe2/0x120 [ 419.565740] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 419.571196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.576736] ? check_preemption_disabled+0x48/0x200 [ 419.581749] ? lock_sock_nested+0x9a/0x120 [ 419.585987] ? lock_sock_nested+0x9a/0x120 [ 419.590230] ? __local_bh_enable_ip+0x160/0x260 [ 419.594903] tcp_sendmsg+0x2f/0x50 [ 419.598458] inet_sendmsg+0x19c/0x690 [ 419.602287] ? ipip_gro_receive+0x100/0x100 [ 419.606636] ? apparmor_socket_sendmsg+0x29/0x30 [ 419.611416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.616965] ? security_socket_sendmsg+0x94/0xc0 [ 419.621723] ? ipip_gro_receive+0x100/0x100 [ 419.626047] sock_sendmsg+0xd5/0x120 [ 419.629763] __sys_sendto+0x3d7/0x670 [ 419.633567] ? __ia32_sys_getpeername+0xb0/0xb0 [ 419.638243] ? wait_for_completion+0x8a0/0x8a0 [ 419.642825] ? lock_release+0x970/0x970 [ 419.646801] ? check_preemption_disabled+0x48/0x200 [ 419.651833] ? fsnotify_first_mark+0x350/0x350 [ 419.656416] ? __fsnotify_parent+0xcc/0x420 [ 419.660748] ? fsnotify+0xf10/0xf10 [ 419.664394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.670471] ? __sb_end_write+0xd9/0x110 [ 419.674540] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 419.680075] ? fput+0x130/0x1a0 [ 419.683356] ? ksys_write+0x1ae/0x260 [ 419.687159] ? trace_hardirqs_on+0xbd/0x310 [ 419.691494] ? __ia32_sys_read+0xb0/0xb0 [ 419.695557] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.700933] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 419.706417] __x64_sys_sendto+0xe1/0x1a0 [ 419.710515] do_syscall_64+0x1b9/0x820 [ 419.714405] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 419.719774] ? syscall_return_slowpath+0x5e0/0x5e0 [ 419.724714] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.729562] ? trace_hardirqs_on_caller+0x310/0x310 [ 419.734580] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 419.739599] ? prepare_exit_to_usermode+0x291/0x3b0 [ 419.744625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.749489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.754697] RIP: 0033:0x457579 [ 419.757892] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 419.776801] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 419.784520] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 419.791792] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 419.799063] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 419.806333] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 419.813602] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 [ 419.833397] minix_free_inode: bit 1 already cleared [ 420.103325] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.109715] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.116727] device bridge_slave_0 entered promiscuous mode [ 420.138487] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.144985] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.151742] device bridge_slave_1 entered promiscuous mode [ 420.173618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 420.196120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 420.255508] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 420.279655] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 420.371707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 420.379481] team0: Port device team_slave_0 added [ 420.399956] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 420.407114] team0: Port device team_slave_1 added [ 420.427546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.450184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.474322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.497972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 420.691408] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.697789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.704424] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.710760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.410230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.480861] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 421.551706] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 421.557872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.565389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.633176] 8021q: adding VLAN 0 to HW filter on device team0 23:19:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0xa0010000}}, 0x20) 23:19:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/226, 0x10000014b}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLINK(r1, &(0x7f0000000240)={0x7, 0x47, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000480)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000004c0)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r3, @in={{0x2, 0x4e23, @multicast1}}, 0xfffffffffffffffc, 0x19a}, 0x90) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x4e, {0x2, 0x4e20}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @loopback}, 0x40, 0x6410, 0x9, 0x3, 0xfffffffffffff801, &(0x7f0000000280)='vlan0\x00', 0x9, 0x6, 0x63}) 23:19:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:13 executing program 2: r0 = socket$inet(0x2, 0x6, 0xbd5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x32450ab7e31262eb) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:13 executing program 0 (fault-call:8 fault-nth:21): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 422.099119] FAULT_INJECTION: forcing a failure. [ 422.099119] name failslab, interval 1, probability 0, space 0, times 0 [ 422.153198] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 422.158762] CPU: 0 PID: 21318 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 422.169363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.178732] Call Trace: [ 422.178756] dump_stack+0x1d3/0x2c4 [ 422.178776] ? dump_stack_print_info.cold.2+0x52/0x52 [ 422.178799] should_fail.cold.4+0xa/0x17 [ 422.194248] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 422.199382] ? __save_stack_trace+0x8d/0xf0 [ 422.203731] ? save_stack+0xa9/0xd0 [ 422.207372] ? save_stack+0x43/0xd0 [ 422.211008] ? kasan_kmalloc+0xc7/0xe0 [ 422.214918] ? kasan_slab_alloc+0x12/0x20 [ 422.219105] ? kmem_cache_alloc_node+0x144/0x730 [ 422.223861] ? __alloc_skb+0x114/0x770 [ 422.227749] ? sk_stream_alloc_skb+0x13c/0x960 [ 422.232332] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 422.236909] ? tcp_sendmsg+0x2f/0x50 [ 422.240643] ? inet_sendmsg+0x19c/0x690 [ 422.244613] ? sock_sendmsg+0xd5/0x120 [ 422.248499] ? __sys_sendto+0x3d7/0x670 [ 422.252477] ? __x64_sys_sendto+0xe1/0x1a0 [ 422.256725] ? do_syscall_64+0x1b9/0x820 [ 422.260791] ? fs_reclaim_acquire+0x20/0x20 [ 422.265114] ? lock_downgrade+0x900/0x900 [ 422.269259] ? lock_downgrade+0x900/0x900 [ 422.273408] ? check_same_owner+0x330/0x330 [ 422.277731] ? lock_downgrade+0x900/0x900 [ 422.281894] __should_failslab+0x124/0x180 [ 422.286142] should_failslab+0x9/0x14 [ 422.289955] kmem_cache_alloc_node_trace+0x270/0x740 [ 422.295070] ? kasan_unpoison_shadow+0x35/0x50 [ 422.299649] ? kasan_kmalloc+0xc7/0xe0 [ 422.303568] __kmalloc_node_track_caller+0x3c/0x70 [ 422.308501] __kmalloc_reserve.isra.39+0x41/0xe0 [ 422.313261] __alloc_skb+0x150/0x770 [ 422.316980] ? skb_scrub_packet+0x490/0x490 [ 422.321304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.326843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.332379] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 422.337843] ? refcount_add_not_zero_checked+0x330/0x330 [ 422.343316] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 422.348336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.353871] ? __sk_mem_schedule+0xac/0xe0 [ 422.358108] sk_stream_alloc_skb+0x13c/0x960 [ 422.362524] ? tcp_init_transfer+0x470/0x470 [ 422.366970] ? ___pskb_trim+0x1320/0x1320 [ 422.371124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.376689] tcp_sendmsg_locked+0xee4/0x3f90 [ 422.381104] ? lock_downgrade+0x900/0x900 [ 422.385256] ? shrink_dcache_sb+0x350/0x350 [ 422.389583] ? tcp_sendpage+0x60/0x60 [ 422.393404] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.398949] ? aa_label_sk_perm+0xfc/0xa50 [ 422.403190] ? aa_profile_af_perm+0x410/0x410 [ 422.407688] ? ksys_dup3+0x680/0x680 [ 422.411417] ? lock_acquire+0x1ed/0x520 [ 422.415460] ? tcp_sendmsg+0x21/0x50 [ 422.419177] ? trace_hardirqs_on+0xbd/0x310 [ 422.423503] ? lock_release+0x970/0x970 [ 422.427476] ? lock_sock_nested+0xe2/0x120 [ 422.431709] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 422.437159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.442696] ? check_preemption_disabled+0x48/0x200 [ 422.447728] ? lock_sock_nested+0x9a/0x120 [ 422.451971] ? lock_sock_nested+0x9a/0x120 [ 422.456208] ? __local_bh_enable_ip+0x160/0x260 [ 422.460877] tcp_sendmsg+0x2f/0x50 [ 422.464428] inet_sendmsg+0x19c/0x690 [ 422.468231] ? ipip_gro_receive+0x100/0x100 [ 422.472567] ? apparmor_socket_sendmsg+0x29/0x30 [ 422.477321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.482871] ? security_socket_sendmsg+0x94/0xc0 [ 422.487624] ? ipip_gro_receive+0x100/0x100 [ 422.491962] sock_sendmsg+0xd5/0x120 [ 422.495676] __sys_sendto+0x3d7/0x670 [ 422.499479] ? __ia32_sys_getpeername+0xb0/0xb0 [ 422.504154] ? wait_for_completion+0x8a0/0x8a0 [ 422.508731] ? lock_release+0x970/0x970 [ 422.512718] ? check_preemption_disabled+0x48/0x200 [ 422.517731] ? fsnotify_first_mark+0x350/0x350 [ 422.522312] ? __fsnotify_parent+0xcc/0x420 [ 422.526652] ? fsnotify+0xf10/0xf10 [ 422.530276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.535820] ? __sb_end_write+0xd9/0x110 [ 422.539895] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.545440] ? fput+0x130/0x1a0 [ 422.548718] ? ksys_write+0x1ae/0x260 [ 422.552518] ? trace_hardirqs_on+0xbd/0x310 [ 422.556835] ? __ia32_sys_read+0xb0/0xb0 [ 422.560902] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.566805] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 422.572268] __x64_sys_sendto+0xe1/0x1a0 [ 422.576331] do_syscall_64+0x1b9/0x820 [ 422.580227] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 422.585592] ? syscall_return_slowpath+0x5e0/0x5e0 [ 422.590540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.595382] ? trace_hardirqs_on_caller+0x310/0x310 [ 422.600401] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 422.605418] ? prepare_exit_to_usermode+0x291/0x3b0 [ 422.610440] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.615292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.620474] RIP: 0033:0x457579 [ 422.623670] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.642565] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 23:19:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x400000000}}, 0x1, 0x7fff}, &(0x7f0000000080)=0x90) getsockname(r1, &(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000340)=0x80) connect$can_bcm(r1, &(0x7f0000000380)={0x1d, r3}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x5, 0x0, 0x4}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x4, 0x5, 0xea0, 0x8, 0x40, 0xfff, 0x62}, &(0x7f0000000200)={0x0, 0x1f, 0x8, 0x100000000, 0x9, 0xe180, 0x0, 0x1}, &(0x7f0000000240)={0x4, 0x9, 0x2, 0x7, 0x0, 0x8000, 0x30000, 0xffffffff}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={0x6}, 0x8}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f00000001c0)={0x2, 0x800000, @multicast2}, 0x3) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cubic\x00', 0x6) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x10, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000480)="b720aed7e19fb004bc4d8b7fb880110510084bd342bb55197e1030ec8d3445b761665c31c2eba36af220f264113e30757d3f8abfe88a7ce0e72f1352376c1f8ee9509dcdb7633abb10e25606ba28e26bc684726971b61a38608e72e89a47f5267d88f8cbbb3f6b6bf867696083d47a79a3a4465d37e35dcd583514327e4e347c64606e29e96b929387cb7024f0793ac94de3404580d7211745705f4942", 0x4b, 0x200007fc, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 0x27a) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) [ 422.650277] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 422.657557] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 422.664831] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 422.672095] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 422.679405] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0xeffdffff}}, 0x20) 23:19:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x100000000, @loopback, 0x401}, @in6={0xa, 0x4e21, 0x7f, @dev={0xfe, 0x80, [], 0x18}, 0x1ff}, @in6={0xa, 0x4e22, 0xad1d931, @empty, 0x8}, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @multicast1}], 0xa0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e24}}) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:14 executing program 0 (fault-call:8 fault-nth:22): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x8001, 0x8000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0xe43, 0x4, 0x60, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}) accept4$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x80800) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x200000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000002c0)) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) poll(&(0x7f0000000340)=[{r0, 0x2000}, {r1, 0xafea28c8d258a69d}], 0x2, 0x9) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000300)={0x4, 0x6, 0x4}) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000180)='erspan0\x00', 0x5}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000480)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xffffffff00000000}}, 0x20) [ 422.944256] FAULT_INJECTION: forcing a failure. [ 422.944256] name failslab, interval 1, probability 0, space 0, times 0 [ 422.963075] minix_free_inode: bit 1 already cleared [ 422.974954] CPU: 1 PID: 21353 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 422.983475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:19:14 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2, 0x11) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{}]}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x42, 0xfffffffffffffe3c) 23:19:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x7, 0x8000) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000240)=""/4, &(0x7f0000000280)=0x4) [ 422.992824] Call Trace: [ 422.995421] dump_stack+0x1d3/0x2c4 [ 422.999088] ? dump_stack_print_info.cold.2+0x52/0x52 [ 423.004329] should_fail.cold.4+0xa/0x17 [ 423.008432] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 423.013560] ? __get_user_pages_fast+0x3f0/0x3f0 [ 423.018325] ? save_stack+0xa9/0xd0 [ 423.021976] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 423.027006] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 423.031589] ? tcp_sendmsg+0x2f/0x50 [ 423.035335] ? inet_sendmsg+0x19c/0x690 [ 423.039312] ? sock_sendmsg+0xd5/0x120 23:19:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x1a0ffffffff}}, 0x20) [ 423.043211] ? __sys_sendto+0x3d7/0x670 [ 423.047207] ? __x64_sys_sendto+0xe1/0x1a0 [ 423.051467] ? csum_and_copy_from_iter+0x13d0/0x13d0 [ 423.056559] ? trace_hardirqs_on+0xbd/0x310 [ 423.060868] ? lock_downgrade+0x900/0x900 [ 423.065005] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 423.070095] ? fs_reclaim_acquire+0x20/0x20 [ 423.074429] ? lock_downgrade+0x900/0x900 [ 423.078576] ? check_same_owner+0x330/0x330 [ 423.082893] __should_failslab+0x124/0x180 [ 423.087113] should_failslab+0x9/0x14 [ 423.090897] kmem_cache_alloc_node+0x26e/0x730 [ 423.095464] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 423.100381] __alloc_skb+0x114/0x770 [ 423.104083] ? skb_scrub_packet+0x490/0x490 [ 423.108406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.113958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.119501] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 423.124959] ? refcount_add_not_zero_checked+0x330/0x330 [ 423.130396] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 423.135396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.140916] ? __sk_mem_schedule+0xac/0xe0 [ 423.145161] sk_stream_alloc_skb+0x13c/0x960 [ 423.149552] ? tcp_init_transfer+0x470/0x470 [ 423.153967] ? ___pskb_trim+0x1320/0x1320 [ 423.158106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.163629] tcp_sendmsg_locked+0xee4/0x3f90 [ 423.168026] ? lock_downgrade+0x900/0x900 [ 423.172157] ? shrink_dcache_sb+0x350/0x350 [ 423.176467] ? tcp_sendpage+0x60/0x60 [ 423.180255] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 423.185789] ? aa_label_sk_perm+0xfc/0xa50 [ 423.190012] ? aa_profile_af_perm+0x410/0x410 [ 423.194492] ? ksys_dup3+0x680/0x680 [ 423.198196] ? lock_acquire+0x1ed/0x520 [ 423.202165] ? tcp_sendmsg+0x21/0x50 [ 423.205869] ? trace_hardirqs_on+0xbd/0x310 [ 423.210171] ? lock_release+0x970/0x970 [ 423.214130] ? lock_sock_nested+0xe2/0x120 [ 423.218350] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 423.223788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.229304] ? check_preemption_disabled+0x48/0x200 [ 423.234301] ? lock_sock_nested+0x9a/0x120 [ 423.238518] ? lock_sock_nested+0x9a/0x120 [ 423.242755] ? __local_bh_enable_ip+0x160/0x260 [ 423.247424] tcp_sendmsg+0x2f/0x50 [ 423.250959] inet_sendmsg+0x19c/0x690 [ 423.254770] ? ipip_gro_receive+0x100/0x100 [ 423.259084] ? apparmor_socket_sendmsg+0x29/0x30 [ 423.263843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.269365] ? security_socket_sendmsg+0x94/0xc0 [ 423.274105] ? ipip_gro_receive+0x100/0x100 [ 423.278411] sock_sendmsg+0xd5/0x120 [ 423.282111] __sys_sendto+0x3d7/0x670 [ 423.285900] ? __ia32_sys_getpeername+0xb0/0xb0 [ 423.290562] ? wait_for_completion+0x8a0/0x8a0 [ 423.295128] ? lock_release+0x970/0x970 [ 423.299086] ? check_preemption_disabled+0x48/0x200 [ 423.304098] ? fsnotify_first_mark+0x350/0x350 [ 423.308667] ? __fsnotify_parent+0xcc/0x420 [ 423.312981] ? fsnotify+0xf10/0xf10 [ 423.316595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.322118] ? __sb_end_write+0xd9/0x110 [ 423.326167] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 423.331702] ? fput+0x130/0x1a0 [ 423.334968] ? ksys_write+0x1ae/0x260 [ 423.338785] ? trace_hardirqs_on+0xbd/0x310 [ 423.343091] ? __ia32_sys_read+0xb0/0xb0 [ 423.347135] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.352505] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 423.357959] __x64_sys_sendto+0xe1/0x1a0 [ 423.362010] do_syscall_64+0x1b9/0x820 [ 423.365892] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 423.371241] ? syscall_return_slowpath+0x5e0/0x5e0 [ 423.376152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.380983] ? trace_hardirqs_on_caller+0x310/0x310 [ 423.386015] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 423.391017] ? prepare_exit_to_usermode+0x291/0x3b0 [ 423.396020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.400861] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.406033] RIP: 0033:0x457579 [ 423.409212] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.428097] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.435790] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 23:19:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x7ffffffd) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x401, 0x101000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000001c0)={0xffffffff}) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1, 0x10002) close(r0) [ 423.443045] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 423.450294] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 423.457545] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 423.464805] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xa0008000}}, 0x20) 23:19:14 executing program 1: prctl$void(0x1000000019) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x30e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x1, 0x0, 0xa1}]}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000240)={0xffffffffffffffff, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e24, @loopback}}}, 0x108) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:14 executing program 0 (fault-call:8 fault-nth:23): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:15 executing program 2: r0 = socket$inet(0x2, 0x6, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000240)=""/136, 0x88, 0x100, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @rand_addr=0x20}, 0x3, 0x0, 0x1}}, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r1, &(0x7f0000000680)=""/239, 0xef, 0x0, 0x0, 0x0) close(r0) 23:19:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, r0, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8000a0}}, 0x20) [ 423.701127] FAULT_INJECTION: forcing a failure. [ 423.701127] name failslab, interval 1, probability 0, space 0, times 0 [ 423.776145] CPU: 0 PID: 21404 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 423.784684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.784691] Call Trace: [ 423.784717] dump_stack+0x1d3/0x2c4 [ 423.784741] ? dump_stack_print_info.cold.2+0x52/0x52 [ 423.784771] should_fail.cold.4+0xa/0x17 [ 423.784792] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 423.784811] ? __save_stack_trace+0x8d/0xf0 [ 423.784842] ? save_stack+0xa9/0xd0 [ 423.822677] ? save_stack+0x43/0xd0 [ 423.826313] ? kasan_kmalloc+0xc7/0xe0 [ 423.830202] ? kasan_slab_alloc+0x12/0x20 [ 423.834349] ? kmem_cache_alloc_node+0x144/0x730 [ 423.839114] ? __alloc_skb+0x114/0x770 [ 423.843003] ? sk_stream_alloc_skb+0x13c/0x960 [ 423.847583] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 423.852161] ? tcp_sendmsg+0x2f/0x50 [ 423.855876] ? inet_sendmsg+0x19c/0x690 [ 423.859849] ? sock_sendmsg+0xd5/0x120 [ 423.863739] ? __sys_sendto+0x3d7/0x670 [ 423.867712] ? __x64_sys_sendto+0xe1/0x1a0 [ 423.871956] ? do_syscall_64+0x1b9/0x820 [ 423.876054] ? fs_reclaim_acquire+0x20/0x20 [ 423.880386] ? lock_downgrade+0x900/0x900 [ 423.884541] ? check_same_owner+0x330/0x330 [ 423.888866] ? lock_downgrade+0x900/0x900 [ 423.893043] __should_failslab+0x124/0x180 [ 423.897310] should_failslab+0x9/0x14 [ 423.901108] kmem_cache_alloc_node_trace+0x270/0x740 [ 423.906214] ? kasan_unpoison_shadow+0x35/0x50 [ 423.910800] ? kasan_kmalloc+0xc7/0xe0 [ 423.914698] __kmalloc_node_track_caller+0x3c/0x70 [ 423.919634] __kmalloc_reserve.isra.39+0x41/0xe0 [ 423.924399] __alloc_skb+0x150/0x770 [ 423.928119] ? skb_scrub_packet+0x490/0x490 [ 423.932445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.937990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.943532] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 423.948991] ? refcount_add_not_zero_checked+0x330/0x330 [ 423.954445] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 423.959464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.965003] ? __sk_mem_schedule+0xac/0xe0 [ 423.969251] sk_stream_alloc_skb+0x13c/0x960 [ 423.973677] ? tcp_init_transfer+0x470/0x470 [ 423.978086] ? ___pskb_trim+0x1320/0x1320 [ 423.982240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.987782] tcp_sendmsg_locked+0xee4/0x3f90 [ 423.992195] ? lock_downgrade+0x900/0x900 [ 423.996344] ? shrink_dcache_sb+0x350/0x350 [ 424.000675] ? tcp_sendpage+0x60/0x60 [ 424.004493] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 424.010043] ? aa_label_sk_perm+0xfc/0xa50 [ 424.014305] ? aa_profile_af_perm+0x410/0x410 [ 424.018799] ? ksys_dup3+0x680/0x680 [ 424.022516] ? lock_acquire+0x1ed/0x520 [ 424.026484] ? tcp_sendmsg+0x21/0x50 [ 424.030203] ? trace_hardirqs_on+0xbd/0x310 [ 424.034525] ? lock_release+0x970/0x970 [ 424.038499] ? lock_sock_nested+0xe2/0x120 [ 424.042733] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 424.048182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.053717] ? check_preemption_disabled+0x48/0x200 [ 424.058735] ? lock_sock_nested+0x9a/0x120 [ 424.062972] ? lock_sock_nested+0x9a/0x120 [ 424.067208] ? __local_bh_enable_ip+0x160/0x260 [ 424.071881] tcp_sendmsg+0x2f/0x50 [ 424.075424] inet_sendmsg+0x19c/0x690 [ 424.079231] ? ipip_gro_receive+0x100/0x100 [ 424.083558] ? apparmor_socket_sendmsg+0x29/0x30 [ 424.088330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.093871] ? security_socket_sendmsg+0x94/0xc0 [ 424.098667] ? ipip_gro_receive+0x100/0x100 [ 424.103000] sock_sendmsg+0xd5/0x120 [ 424.106716] __sys_sendto+0x3d7/0x670 [ 424.110525] ? __ia32_sys_getpeername+0xb0/0xb0 [ 424.115203] ? wait_for_completion+0x8a0/0x8a0 [ 424.119781] ? lock_release+0x970/0x970 [ 424.123752] ? check_preemption_disabled+0x48/0x200 [ 424.128770] ? fsnotify_first_mark+0x350/0x350 [ 424.133349] ? __fsnotify_parent+0xcc/0x420 [ 424.137678] ? fsnotify+0xf10/0xf10 [ 424.141304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.146851] ? __sb_end_write+0xd9/0x110 [ 424.150945] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 424.156480] ? fput+0x130/0x1a0 [ 424.159755] ? ksys_write+0x1ae/0x260 [ 424.163556] ? trace_hardirqs_on+0xbd/0x310 [ 424.167871] ? __ia32_sys_read+0xb0/0xb0 [ 424.171944] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.177336] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 424.182814] __x64_sys_sendto+0xe1/0x1a0 [ 424.186895] do_syscall_64+0x1b9/0x820 [ 424.190786] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 424.196149] ? syscall_return_slowpath+0x5e0/0x5e0 [ 424.201076] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.205919] ? trace_hardirqs_on_caller+0x310/0x310 [ 424.210966] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 424.215984] ? prepare_exit_to_usermode+0x291/0x3b0 [ 424.221002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.225846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.231029] RIP: 0033:0x457579 [ 424.234224] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 424.253123] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 424.260830] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 424.268098] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 424.275361] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 424.282633] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 424.289898] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 [ 424.304690] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 424.316076] minix_free_inode: bit 1 already cleared 23:19:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffff9c, &(0x7f0000000480)="def68fddddca3e8aaf5b7ba7d0b842d34e0c4a10811d9f577ac8e28b35f54ee2a70428485a655b81173842d9e1d6523f8a40e900fe9dd92dd20b2fdbac39b77ce83d11d65f020a237684c378699234baa7041714441fa3dd4b850c42729c869d0b55f586043197ee4bf8d2ee58203972bbe54da2732436cb61fa20056a21316163e9d9ec96fbf3a567e9ea60a5992fb16c48743dd2fb379aef71652e7ef77c3f8236dfd06087", 0xa6, 0x0, &(0x7f0000000300)={0x2, 0x4e24, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000840)="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", 0xfffffe36, 0xfffffffffffffffe, &(0x7f0000000100)={0x2, 0x800000000000004, @remote}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={{0x0, 0x7530}, {r2, r3/1000+30000}}) close(r0) 23:19:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x5, &(0x7f00007a3000/0x3000)=nil, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x1000000}}, 0x20) 23:19:15 executing program 0 (fault-call:8 fault-nth:24): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x80080) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x5, 0x4, 0x8, 0x4889, 0x10, 0xffffffffffffff80}) 23:19:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000240)=""/239, 0x4ca, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000380)=&(0x7f0000000340)) close(r0) 23:19:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xfdef}}, 0x20) 23:19:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x401, 0x440) r2 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f0000000580)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @remote}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000008c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000900)={@dev, 0x0}, &(0x7f0000000940)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000009c0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a40)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000c80)={@multicast1, @broadcast, 0x0}, &(0x7f0000000cc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001540)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001580)={0x11, 0x0, 0x0}, &(0x7f00000015c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001600)={@loopback, 0x0}, &(0x7f0000001640)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000016c0)=0x14) getpeername$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001740)=0x14) recvmsg(r0, &(0x7f0000001840)={&(0x7f0000001780)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001800), 0x0, 0x0, 0x0, 0x1}, 0x41) getsockname$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000018c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001900)={'eql\x00', 0x0}) recvmmsg(r0, &(0x7f0000008f00)=[{{&(0x7f0000001940)=@rc, 0x80, &(0x7f0000002d80)=[{&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/60, 0x3c}, {&(0x7f0000001b00)=""/53, 0x35}, {&(0x7f0000001b40)=""/18, 0x12}, {&(0x7f0000001b80)=""/118, 0x76}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/22, 0x16}, {&(0x7f0000001d00)=""/114, 0x72}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x9, &(0x7f0000002e40)=""/143, 0x8f, 0x10000}, 0x6}, {{&(0x7f0000002f00)=@rc, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/62, 0x3e}, {&(0x7f0000002fc0)=""/108, 0x6c}, {&(0x7f0000003040)=""/86, 0x56}], 0x3, &(0x7f0000003100)=""/183, 0xb7, 0x3ff}, 0xadd}, {{&(0x7f00000031c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004500)=[{&(0x7f0000003240)=""/78, 0x4e}, {&(0x7f00000032c0)=""/118, 0x76}, {&(0x7f0000003340)=""/64, 0x40}, {&(0x7f0000003380)=""/108, 0x6c}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/59, 0x3b}, {&(0x7f0000004440)=""/24, 0x18}, {&(0x7f0000004480)=""/113, 0x71}], 0x8, 0x0, 0x0, 0x5}, 0x7f}, {{&(0x7f0000004580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005600)=[{&(0x7f0000004600)=""/4096, 0x1000}], 0x1, &(0x7f0000005640)=""/42, 0x2a, 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000005680)=""/114, 0x72}, {&(0x7f0000005700)=""/100, 0x64}, {&(0x7f0000005780)=""/29, 0x1d}, {&(0x7f00000057c0)=""/175, 0xaf}, {&(0x7f0000005880)=""/220, 0xdc}], 0x5, &(0x7f0000005a00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006a00)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000007b80)=[{&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000007a80)=""/249, 0xf9}], 0x2, &(0x7f0000007bc0)=""/123, 0x7b, 0x6}, 0x5}, {{0x0, 0x0, &(0x7f0000008dc0)=[{&(0x7f0000007c40)=""/82, 0x52}, {&(0x7f0000007cc0)=""/42, 0x2a}, {&(0x7f0000007d00)=""/21, 0x15}, {&(0x7f0000007d40)=""/4096, 0x1000}, {&(0x7f0000008d40)=""/115, 0x73}], 0x5, &(0x7f0000008e40)=""/182, 0xb6, 0x3f}, 0x1}], 0x7, 0x0, &(0x7f00000090c0)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000091c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000009240)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000009340)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000009380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000093c0)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000009400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000009500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000009540)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000009640)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000009680)={@loopback, @empty, 0x0}, &(0x7f00000096c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000a0c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f000000a080)={&(0x7f000000a100)=ANY=[@ANYBLOB='h\t\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000200000008000100", @ANYRES32=r4, @ANYBLOB="380102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040002000000080007000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000008000100", @ANYRES32=r8, @ANYBLOB="6c01020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000080000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004001b060000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="780102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004005900000008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040002000000080007000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000200000008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="d80102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="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", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="7802020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000300000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000044000400000809002c4f000009000286d345ffffa80009031a8300000004ff0200020000080004807f00000046640049ff030000fbff8102200600000400060008000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000002000008000600", @ANYRES32=r20, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r21, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004007cdf000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003400040081000700ff030000050004fd0600000000000667010000000900020501040000010007000500000007000000010001003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="08000100", @ANYRES32=r25, @ANYBLOB="740002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r26, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400020000002a5970916c80ad7299a39b68b4ed0cd4b81f799b9de24256155d9b9db74345485cea17373a7be3071134717ec957222004f0f25a4d924d242db59ee0524f4fe8622141c58733b9e7dd63f493ddee2c778d6a7fd2816e8e4c6016a6c2101be7cb34f37f657f62dc43d427919dbe54a51ea0d47fcc1623278147d7980cb507a5fa2e43e1c468fdb922156c34899df38ebf268214d42f55e1"], 0x968}, 0x1, 0x0, 0x0, 0x4040080}, 0x40801) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x3f, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x0, 'lc\x00', 0x23, 0x4, 0x77}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4e21, 0x0, 0x7, 0x401, 0x2}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) [ 424.485173] FAULT_INJECTION: forcing a failure. [ 424.485173] name failslab, interval 1, probability 0, space 0, times 0 [ 424.537331] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 424.614615] CPU: 0 PID: 21434 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 424.623189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.632572] Call Trace: [ 424.632601] dump_stack+0x1d3/0x2c4 [ 424.632624] ? dump_stack_print_info.cold.2+0x52/0x52 [ 424.632649] should_fail.cold.4+0xa/0x17 [ 424.632671] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 424.632694] ? __get_user_pages_fast+0x3f0/0x3f0 [ 424.638915] ? save_stack+0xa9/0xd0 [ 424.661632] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 424.666681] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 424.671273] ? tcp_sendmsg+0x2f/0x50 [ 424.674986] ? inet_sendmsg+0x19c/0x690 [ 424.678967] ? sock_sendmsg+0xd5/0x120 [ 424.682871] ? __sys_sendto+0x3d7/0x670 [ 424.686869] ? __x64_sys_sendto+0xe1/0x1a0 [ 424.691132] ? csum_and_copy_from_iter+0x13d0/0x13d0 [ 424.696259] ? trace_hardirqs_on+0xbd/0x310 [ 424.700618] ? lock_downgrade+0x900/0x900 [ 424.704785] ? lock_downgrade+0x900/0x900 [ 424.708971] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 424.714118] ? fs_reclaim_acquire+0x20/0x20 [ 424.718482] ? lock_downgrade+0x900/0x900 [ 424.722654] ? check_same_owner+0x330/0x330 [ 424.726996] __should_failslab+0x124/0x180 [ 424.731236] should_failslab+0x9/0x14 [ 424.735052] kmem_cache_alloc_node+0x26e/0x730 [ 424.739632] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 424.744585] __alloc_skb+0x114/0x770 [ 424.748321] ? skb_scrub_packet+0x490/0x490 [ 424.752667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.758226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.763766] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 424.769236] ? refcount_add_not_zero_checked+0x330/0x330 [ 424.774709] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 424.779746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.785281] ? __sk_mem_schedule+0xac/0xe0 [ 424.789538] sk_stream_alloc_skb+0x13c/0x960 [ 424.793956] ? tcp_init_transfer+0x470/0x470 [ 424.798361] ? ___pskb_trim+0x1320/0x1320 [ 424.802528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.808079] tcp_sendmsg_locked+0xee4/0x3f90 [ 424.812675] ? lock_downgrade+0x900/0x900 [ 424.816816] ? shrink_dcache_sb+0x350/0x350 [ 424.821241] ? tcp_sendpage+0x60/0x60 [ 424.825048] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 424.830617] ? aa_label_sk_perm+0xfc/0xa50 [ 424.834876] ? aa_profile_af_perm+0x410/0x410 [ 424.839375] ? ksys_dup3+0x680/0x680 [ 424.843111] ? lock_acquire+0x1ed/0x520 [ 424.847116] ? tcp_sendmsg+0x21/0x50 [ 424.850858] ? trace_hardirqs_on+0xbd/0x310 [ 424.855179] ? lock_release+0x970/0x970 [ 424.859174] ? lock_sock_nested+0xe2/0x120 [ 424.863408] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 424.868861] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.874434] ? check_preemption_disabled+0x48/0x200 [ 424.879454] ? lock_sock_nested+0x9a/0x120 [ 424.883709] ? lock_sock_nested+0x9a/0x120 [ 424.887972] ? __local_bh_enable_ip+0x160/0x260 [ 424.892642] tcp_sendmsg+0x2f/0x50 [ 424.896181] inet_sendmsg+0x19c/0x690 [ 424.899983] ? ipip_gro_receive+0x100/0x100 [ 424.904314] ? apparmor_socket_sendmsg+0x29/0x30 [ 424.909082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.914631] ? security_socket_sendmsg+0x94/0xc0 [ 424.919413] ? ipip_gro_receive+0x100/0x100 [ 424.923765] sock_sendmsg+0xd5/0x120 [ 424.927504] __sys_sendto+0x3d7/0x670 [ 424.931309] ? __ia32_sys_getpeername+0xb0/0xb0 [ 424.936028] ? wait_for_completion+0x8a0/0x8a0 [ 424.940637] ? lock_release+0x970/0x970 [ 424.944638] ? check_preemption_disabled+0x48/0x200 [ 424.949671] ? fsnotify_first_mark+0x350/0x350 [ 424.954258] ? __fsnotify_parent+0xcc/0x420 [ 424.958578] ? fsnotify+0xf10/0xf10 [ 424.962211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.967775] ? __sb_end_write+0xd9/0x110 [ 424.971837] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 424.977396] ? fput+0x130/0x1a0 [ 424.980673] ? ksys_write+0x1ae/0x260 [ 424.984501] ? trace_hardirqs_on+0xbd/0x310 [ 424.988823] ? __ia32_sys_read+0xb0/0xb0 [ 424.992884] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.998267] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 425.003753] __x64_sys_sendto+0xe1/0x1a0 [ 425.007836] do_syscall_64+0x1b9/0x820 [ 425.011779] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 425.017161] ? syscall_return_slowpath+0x5e0/0x5e0 [ 425.022109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.026964] ? trace_hardirqs_on_caller+0x310/0x310 [ 425.031982] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 425.036999] ? prepare_exit_to_usermode+0x291/0x3b0 [ 425.042040] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.046905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.052145] RIP: 0033:0x457579 [ 425.055349] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 425.074282] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 425.081986] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 425.089249] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 425.096527] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 425.103791] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 23:19:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x70) 23:19:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 425.111055] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x86d, 0x201) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x0, 0x9}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000180)={0x53, 0x9, 0xfbab, {0x1, 0xff}, {0x10000, 0x1}, @const={0x1ff, {0x80, 0x9, 0x6f179c1b, 0x81}}}) flock(r1, 0x9) 23:19:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/udp\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0xa, 0x1, 0x20, 0x4, '\x00', 0x1}) 23:19:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x440000, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000240)) 23:19:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xfffffdef}}, 0x20) 23:19:16 executing program 0 (fault-call:8 fault-nth:25): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:16 executing program 5: r0 = socket$inet6(0xa, 0x80000, 0xff) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfb, 0x101000) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000180)) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 425.193117] minix_free_inode: bit 1 already cleared [ 425.267682] FAULT_INJECTION: forcing a failure. [ 425.267682] name failslab, interval 1, probability 0, space 0, times 0 23:19:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x34000}}, 0x20) [ 425.346021] CPU: 1 PID: 21470 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 425.354556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.363908] Call Trace: [ 425.366518] dump_stack+0x1d3/0x2c4 [ 425.370166] ? dump_stack_print_info.cold.2+0x52/0x52 [ 425.375378] ? should_fail+0x21c/0xd01 [ 425.379275] should_fail.cold.4+0xa/0x17 [ 425.383346] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 425.388468] ? __save_stack_trace+0x8d/0xf0 [ 425.392809] ? save_stack+0xa9/0xd0 23:19:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'bridge_slave_1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r1 = accept4(r0, &(0x7f0000000680)=@ethernet={0x0, @link_local}, &(0x7f0000000700)=0x80, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x802c040}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x64}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0xcc0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x13b6}}, [0x8, 0x0, 0x3f, 0x200, 0x32, 0xe83, 0x5, 0x100000001, 0xd0, 0xa788, 0x4, 0x0, 0x0, 0x0, 0x80]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000004c0)={r4, 0x86, "dfc5800e62fd469ccedc0282315c4ac73bb5a90214735b2a6a9d112c863aba0fca6e7ba5d9f3e94417f6526ef9e0fb4d1a5e08006682253a8e3541278575017a2ecc52cf9706a9e3a9bd21bc5dd4b14ec188152f29c313c4c6cd1dfc84e3baacc29ac38b15ce0506ba4b64539248524af625092e8403f8e57cfdd7e99c7a9cec89df8ac5a3ef"}, &(0x7f0000000580)=0x8e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0xffffffffffffff11) close(r0) [ 425.396453] ? save_stack+0x43/0xd0 [ 425.400086] ? kasan_kmalloc+0xc7/0xe0 [ 425.403988] ? kasan_slab_alloc+0x12/0x20 [ 425.408166] ? kmem_cache_alloc_node+0x144/0x730 [ 425.412942] ? __alloc_skb+0x114/0x770 [ 425.412959] ? sk_stream_alloc_skb+0x13c/0x960 [ 425.412971] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 425.412983] ? tcp_sendmsg+0x2f/0x50 [ 425.413002] ? inet_sendmsg+0x19c/0x690 [ 425.421477] ? sock_sendmsg+0xd5/0x120 [ 425.437591] ? __sys_sendto+0x3d7/0x670 [ 425.441569] ? __x64_sys_sendto+0xe1/0x1a0 23:19:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffdef}}, 0x20) [ 425.445812] ? do_syscall_64+0x1b9/0x820 [ 425.449883] ? fs_reclaim_acquire+0x20/0x20 [ 425.454220] ? lock_downgrade+0x900/0x900 [ 425.458398] ? check_same_owner+0x330/0x330 [ 425.462730] ? lock_downgrade+0x900/0x900 [ 425.466902] __should_failslab+0x124/0x180 [ 425.471163] should_failslab+0x9/0x14 [ 425.474981] kmem_cache_alloc_node_trace+0x270/0x740 [ 425.480109] ? kasan_unpoison_shadow+0x35/0x50 [ 425.484713] ? kasan_kmalloc+0xc7/0xe0 [ 425.488613] __kmalloc_node_track_caller+0x3c/0x70 [ 425.493558] __kmalloc_reserve.isra.39+0x41/0xe0 [ 425.498324] __alloc_skb+0x150/0x770 [ 425.502051] ? skb_scrub_packet+0x490/0x490 [ 425.506379] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.511917] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.517565] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 425.523016] ? refcount_add_not_zero_checked+0x330/0x330 [ 425.528484] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 425.533502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.539037] ? __sk_mem_schedule+0xac/0xe0 [ 425.543275] sk_stream_alloc_skb+0x13c/0x960 [ 425.547683] ? tcp_init_transfer+0x470/0x470 [ 425.552107] ? ___pskb_trim+0x1320/0x1320 [ 425.556266] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.561827] tcp_sendmsg_locked+0xee4/0x3f90 [ 425.566246] ? lock_downgrade+0x900/0x900 [ 425.570391] ? shrink_dcache_sb+0x350/0x350 [ 425.574721] ? tcp_sendpage+0x60/0x60 [ 425.578542] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 425.584080] ? aa_label_sk_perm+0xfc/0xa50 [ 425.588353] ? aa_profile_af_perm+0x410/0x410 [ 425.592856] ? ksys_dup3+0x680/0x680 [ 425.596575] ? lock_acquire+0x1ed/0x520 [ 425.600548] ? tcp_sendmsg+0x21/0x50 [ 425.604271] ? trace_hardirqs_on+0xbd/0x310 [ 425.608592] ? lock_release+0x970/0x970 [ 425.612580] ? lock_sock_nested+0xe2/0x120 [ 425.616818] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 425.622279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.627822] ? check_preemption_disabled+0x48/0x200 [ 425.632837] ? lock_sock_nested+0x9a/0x120 [ 425.637074] ? lock_sock_nested+0x9a/0x120 [ 425.641315] ? __local_bh_enable_ip+0x160/0x260 [ 425.645989] tcp_sendmsg+0x2f/0x50 [ 425.649546] inet_sendmsg+0x19c/0x690 [ 425.653356] ? ipip_gro_receive+0x100/0x100 [ 425.657678] ? apparmor_socket_sendmsg+0x29/0x30 [ 425.662472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.668010] ? security_socket_sendmsg+0x94/0xc0 [ 425.673287] ? ipip_gro_receive+0x100/0x100 [ 425.677612] sock_sendmsg+0xd5/0x120 [ 425.681340] __sys_sendto+0x3d7/0x670 [ 425.685146] ? __ia32_sys_getpeername+0xb0/0xb0 [ 425.689820] ? wait_for_completion+0x8a0/0x8a0 [ 425.694414] ? lock_release+0x970/0x970 [ 425.698430] ? check_preemption_disabled+0x48/0x200 [ 425.703459] ? fsnotify_first_mark+0x350/0x350 [ 425.708040] ? __fsnotify_parent+0xcc/0x420 [ 425.712364] ? fsnotify+0xf10/0xf10 [ 425.715996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.721545] ? __sb_end_write+0xd9/0x110 [ 425.725619] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 425.731154] ? fput+0x130/0x1a0 [ 425.734432] ? ksys_write+0x1ae/0x260 [ 425.738244] ? trace_hardirqs_on+0xbd/0x310 [ 425.742564] ? __ia32_sys_read+0xb0/0xb0 [ 425.746624] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.751994] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 425.757456] __x64_sys_sendto+0xe1/0x1a0 [ 425.761524] do_syscall_64+0x1b9/0x820 [ 425.765410] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 425.770778] ? syscall_return_slowpath+0x5e0/0x5e0 [ 425.775709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.780561] ? trace_hardirqs_on_caller+0x310/0x310 [ 425.785577] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 425.790603] ? prepare_exit_to_usermode+0x291/0x3b0 [ 425.795621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.800480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.805665] RIP: 0033:0x457579 [ 425.808858] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 425.827769] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 425.835482] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 23:19:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x100000001, 0x101400) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0x1f, 0x202, 0xec15, 0x8, 0x9, 0x7f, 0x1, 0x0}, &(0x7f0000000240)=0x20) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000300)={0xa31, 0x73}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={r2, 0x2}, &(0x7f00000002c0)=0x8) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xef, 0x0, 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000340)) close(r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480)={0x5, 0xfffffffffffffff8, 0x0, 0x3, 0x10000}, 0x14) [ 425.842747] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 425.850016] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 425.857301] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 425.864566] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x20040, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000680)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000580)=0xe8) recvfrom$packet(r1, &(0x7f0000000480)=""/220, 0xdc, 0x10000, &(0x7f0000000780)={0x11, 0x7, r2, 0x1, 0x3, 0x6, @local}, 0x14) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @rand_addr=0x9}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x20000, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) [ 425.914187] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:19:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x200000000000000}}, 0x20) 23:19:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x82) ioctl$TIOCNXCL(r1, 0x540d) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:17 executing program 0 (fault-call:8 fault-nth:26): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) accept(r0, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000300)=0x80) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240)={0xffff, 0x3, 0x6, 0xcbc3, 0x5}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) [ 426.137863] FAULT_INJECTION: forcing a failure. [ 426.137863] name failslab, interval 1, probability 0, space 0, times 0 [ 426.149309] CPU: 0 PID: 21526 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 426.157821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.167171] Call Trace: [ 426.169766] dump_stack+0x1d3/0x2c4 [ 426.173417] ? dump_stack_print_info.cold.2+0x52/0x52 [ 426.178630] should_fail.cold.4+0xa/0x17 [ 426.182692] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 426.187792] ? __get_user_pages_fast+0x3f0/0x3f0 [ 426.192549] ? save_stack+0xa9/0xd0 [ 426.196181] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 426.201199] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 426.205811] ? tcp_sendmsg+0x2f/0x50 [ 426.209522] ? inet_sendmsg+0x19c/0x690 [ 426.213496] ? sock_sendmsg+0xd5/0x120 [ 426.217378] ? __sys_sendto+0x3d7/0x670 [ 426.221359] ? __x64_sys_sendto+0xe1/0x1a0 [ 426.225597] ? csum_and_copy_from_iter+0x13d0/0x13d0 [ 426.230699] ? trace_hardirqs_on+0xbd/0x310 [ 426.235017] ? lock_downgrade+0x900/0x900 [ 426.239163] ? lock_downgrade+0x900/0x900 [ 426.243314] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 426.248429] ? fs_reclaim_acquire+0x20/0x20 [ 426.252757] ? lock_downgrade+0x900/0x900 [ 426.256943] ? check_same_owner+0x330/0x330 [ 426.261301] __should_failslab+0x124/0x180 [ 426.265551] should_failslab+0x9/0x14 [ 426.269349] kmem_cache_alloc_node+0x26e/0x730 [ 426.273944] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 426.278879] __alloc_skb+0x114/0x770 [ 426.282596] ? skb_scrub_packet+0x490/0x490 [ 426.286934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.292480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.298031] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 426.303484] ? refcount_add_not_zero_checked+0x330/0x330 [ 426.308951] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 426.314013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.319562] ? __sk_mem_schedule+0xac/0xe0 [ 426.323810] sk_stream_alloc_skb+0x13c/0x960 [ 426.328217] ? tcp_init_transfer+0x470/0x470 [ 426.332626] ? ___pskb_trim+0x1320/0x1320 [ 426.336792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.342335] tcp_sendmsg_locked+0xee4/0x3f90 [ 426.346751] ? lock_downgrade+0x900/0x900 [ 426.350899] ? shrink_dcache_sb+0x350/0x350 [ 426.355236] ? tcp_sendpage+0x60/0x60 [ 426.359039] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 426.364574] ? aa_label_sk_perm+0xfc/0xa50 [ 426.368811] ? aa_profile_af_perm+0x410/0x410 [ 426.373329] ? ksys_dup3+0x680/0x680 [ 426.377060] ? lock_acquire+0x1ed/0x520 [ 426.381040] ? tcp_sendmsg+0x21/0x50 [ 426.384785] ? trace_hardirqs_on+0xbd/0x310 [ 426.389124] ? lock_release+0x970/0x970 [ 426.393110] ? lock_sock_nested+0xe2/0x120 [ 426.397359] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 426.402822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.408362] ? check_preemption_disabled+0x48/0x200 [ 426.413389] ? lock_sock_nested+0x9a/0x120 [ 426.417642] ? lock_sock_nested+0x9a/0x120 [ 426.421877] ? __local_bh_enable_ip+0x160/0x260 [ 426.426563] tcp_sendmsg+0x2f/0x50 [ 426.430105] inet_sendmsg+0x19c/0x690 [ 426.433908] ? ipip_gro_receive+0x100/0x100 [ 426.438248] ? apparmor_socket_sendmsg+0x29/0x30 [ 426.443010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.448550] ? security_socket_sendmsg+0x94/0xc0 [ 426.453319] ? ipip_gro_receive+0x100/0x100 [ 426.457645] sock_sendmsg+0xd5/0x120 [ 426.461388] __sys_sendto+0x3d7/0x670 [ 426.465192] ? __ia32_sys_getpeername+0xb0/0xb0 [ 426.469865] ? wait_for_completion+0x8a0/0x8a0 [ 426.474449] ? lock_release+0x970/0x970 [ 426.478422] ? check_preemption_disabled+0x48/0x200 [ 426.483450] ? fsnotify_first_mark+0x350/0x350 [ 426.488047] ? __fsnotify_parent+0xcc/0x420 [ 426.492371] ? fsnotify+0xf10/0xf10 [ 426.496014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.501556] ? __sb_end_write+0xd9/0x110 [ 426.505650] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 426.511183] ? fput+0x130/0x1a0 [ 426.514465] ? ksys_write+0x1ae/0x260 [ 426.518287] ? trace_hardirqs_on+0xbd/0x310 [ 426.522606] ? __ia32_sys_read+0xb0/0xb0 [ 426.526681] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.532046] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 426.537502] __x64_sys_sendto+0xe1/0x1a0 [ 426.541567] do_syscall_64+0x1b9/0x820 [ 426.545457] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 426.550826] ? syscall_return_slowpath+0x5e0/0x5e0 [ 426.555756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.560600] ? trace_hardirqs_on_caller+0x310/0x310 [ 426.566109] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 426.571131] ? prepare_exit_to_usermode+0x291/0x3b0 [ 426.576152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.581008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.586196] RIP: 0033:0x457579 [ 426.589387] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 426.608286] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 426.615995] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 426.623264] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 426.630546] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 23:19:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x100000000000000}}, 0x20) 23:19:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x40000003f, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f0000000040)="e92a3d9810ec43fa2f5ae35fc6aeec1dd4f3f00286fabf1af1126841330a307f1b513b1ace55433fb5", 0x29) r2 = fcntl$dupfd(r1, 0x0, r1) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0xa4f}, 0x2) ioctl$TIOCSCTTY(r2, 0x540e, 0xffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @dev}, &(0x7f00000001c0)=0xc) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 426.637839] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 426.645115] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 [ 426.658168] minix_free_inode: bit 1 already cleared 23:19:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000001c0)={0x8, 0x20000000000000}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/ip_mr_vif\x00') sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x3) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000280)={0xbad3, 0x9, 0x7ff, 0x3}, 0x10) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:18 executing program 0 (fault-call:8 fault-nth:27): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000002c0)=""/171, 0xab}, {&(0x7f0000000480)=""/218, 0xda}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000180)=""/38, 0xffffffffffffffb2}, {&(0x7f0000000780)=""/167, 0xa7}, {&(0x7f0000000c00)=""/39, 0xfffffffffffffddd}, {&(0x7f0000000840)=""/177, 0xb1}, {&(0x7f0000000900)=""/248, 0xf8}], 0x9, &(0x7f0000000ac0)=""/215, 0x71, 0x10001}, 0x7fffffff}], 0x1, 0x40010003, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x18b2, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x5}, &(0x7f0000000c40)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000c80)={r1, 0x3c6}, 0x8) r2 = syz_open_dev$usbmon(&(0x7f0000000cc0)='/dev/usbmon#\x00', 0x20, 0x201) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000d00)={r1, 0x3, 0xbd}, 0x8) 23:19:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, &(0x7f00000002c0)) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000480)=0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x6}, [{0x2, 0x5, r1}], {0x4, 0x4}, [{0x8, 0x4}, {0x8, 0x4, r2}], {0x10, 0x2}, {0x20, 0x4}}, 0x3c, 0x3) r3 = socket(0xb, 0x2, 0x8) getsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f0000000680)=""/169, &(0x7f0000000580)=0xa9) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xeffdffff}}, 0x20) [ 426.947367] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 426.957763] minix_free_inode: bit 1 already cleared [ 426.981639] FAULT_INJECTION: forcing a failure. [ 426.981639] name failslab, interval 1, probability 0, space 0, times 0 [ 426.995842] CPU: 1 PID: 21578 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 427.004346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.013697] Call Trace: [ 427.016290] dump_stack+0x1d3/0x2c4 [ 427.019921] ? dump_stack_print_info.cold.2+0x52/0x52 [ 427.025134] should_fail.cold.4+0xa/0x17 [ 427.029202] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 427.034306] ? __save_stack_trace+0x8d/0xf0 [ 427.038636] ? save_stack+0xa9/0xd0 [ 427.042263] ? save_stack+0x43/0xd0 [ 427.045901] ? kasan_kmalloc+0xc7/0xe0 [ 427.049812] ? kasan_slab_alloc+0x12/0x20 [ 427.053964] ? kmem_cache_alloc_node+0x144/0x730 [ 427.058720] ? __alloc_skb+0x114/0x770 [ 427.062605] ? sk_stream_alloc_skb+0x13c/0x960 [ 427.067191] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 427.071782] ? tcp_sendmsg+0x2f/0x50 [ 427.075496] ? inet_sendmsg+0x19c/0x690 [ 427.079470] ? sock_sendmsg+0xd5/0x120 [ 427.083356] ? __sys_sendto+0x3d7/0x670 [ 427.087328] ? __x64_sys_sendto+0xe1/0x1a0 [ 427.091571] ? do_syscall_64+0x1b9/0x820 [ 427.095644] ? fs_reclaim_acquire+0x20/0x20 [ 427.099972] ? lock_downgrade+0x900/0x900 [ 427.104119] ? lock_downgrade+0x900/0x900 [ 427.108276] ? check_same_owner+0x330/0x330 [ 427.112621] ? lock_downgrade+0x900/0x900 [ 427.116771] __should_failslab+0x124/0x180 [ 427.121011] should_failslab+0x9/0x14 [ 427.124822] kmem_cache_alloc_node_trace+0x270/0x740 [ 427.129949] ? kasan_unpoison_shadow+0x35/0x50 [ 427.134537] ? kasan_kmalloc+0xc7/0xe0 [ 427.138433] __kmalloc_node_track_caller+0x3c/0x70 [ 427.143384] __kmalloc_reserve.isra.39+0x41/0xe0 [ 427.148140] __alloc_skb+0x150/0x770 [ 427.151870] ? skb_scrub_packet+0x490/0x490 [ 427.156196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.161738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.167284] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 427.172737] ? refcount_add_not_zero_checked+0x330/0x330 [ 427.178188] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 427.183225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.188820] ? __sk_mem_schedule+0xac/0xe0 [ 427.193071] sk_stream_alloc_skb+0x13c/0x960 [ 427.197487] ? tcp_init_transfer+0x470/0x470 [ 427.201893] ? ___pskb_trim+0x1320/0x1320 [ 427.206057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.211607] tcp_sendmsg_locked+0xee4/0x3f90 [ 427.216045] ? lock_downgrade+0x900/0x900 [ 427.220194] ? shrink_dcache_sb+0x350/0x350 [ 427.224525] ? tcp_sendpage+0x60/0x60 [ 427.228330] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.233868] ? aa_label_sk_perm+0xfc/0xa50 [ 427.238104] ? aa_profile_af_perm+0x410/0x410 [ 427.242601] ? ksys_dup3+0x680/0x680 [ 427.246319] ? lock_acquire+0x1ed/0x520 [ 427.250307] ? tcp_sendmsg+0x21/0x50 [ 427.254028] ? trace_hardirqs_on+0xbd/0x310 [ 427.258349] ? lock_release+0x970/0x970 [ 427.262320] ? lock_sock_nested+0xe2/0x120 [ 427.266556] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 427.272009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.277559] ? check_preemption_disabled+0x48/0x200 [ 427.282571] ? lock_sock_nested+0x9a/0x120 [ 427.286802] ? lock_sock_nested+0x9a/0x120 [ 427.291039] ? __local_bh_enable_ip+0x160/0x260 [ 427.295717] tcp_sendmsg+0x2f/0x50 [ 427.299261] inet_sendmsg+0x19c/0x690 [ 427.303102] ? ipip_gro_receive+0x100/0x100 [ 427.307427] ? apparmor_socket_sendmsg+0x29/0x30 [ 427.312199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.317755] ? security_socket_sendmsg+0x94/0xc0 [ 427.322509] ? ipip_gro_receive+0x100/0x100 [ 427.326830] sock_sendmsg+0xd5/0x120 [ 427.330545] __sys_sendto+0x3d7/0x670 [ 427.334380] ? __ia32_sys_getpeername+0xb0/0xb0 [ 427.339051] ? wait_for_completion+0x8a0/0x8a0 [ 427.343649] ? lock_release+0x970/0x970 [ 427.347625] ? check_preemption_disabled+0x48/0x200 [ 427.352646] ? fsnotify_first_mark+0x350/0x350 [ 427.357231] ? __fsnotify_parent+0xcc/0x420 [ 427.361556] ? fsnotify+0xf10/0xf10 [ 427.365185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.370728] ? __sb_end_write+0xd9/0x110 [ 427.374793] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.380339] ? fput+0x130/0x1a0 [ 427.383622] ? ksys_write+0x1ae/0x260 [ 427.387428] ? trace_hardirqs_on+0xbd/0x310 [ 427.391750] ? __ia32_sys_read+0xb0/0xb0 [ 427.395826] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.401194] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 427.406647] __x64_sys_sendto+0xe1/0x1a0 [ 427.410716] do_syscall_64+0x1b9/0x820 [ 427.414602] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 427.419970] ? syscall_return_slowpath+0x5e0/0x5e0 [ 427.424902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.429759] ? trace_hardirqs_on_caller+0x310/0x310 [ 427.434792] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 427.439808] ? prepare_exit_to_usermode+0x291/0x3b0 [ 427.444845] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.449701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.454888] RIP: 0033:0x457579 [ 427.458081] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.476980] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 427.484690] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 427.491957] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 427.499223] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 427.506489] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 427.513756] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/90, 0x18) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x7ff, 0x4) 23:19:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x1a0}}, 0x20) 23:19:18 executing program 0 (fault-call:8 fault-nth:28): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x8, 0x800) setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f00000001c0)=0x5, 0x4) 23:19:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x400300}}, 0x20) 23:19:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x8000, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000240)={0x2, r2}) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f, 0x3) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) truncate(&(0x7f0000000340)='./file0\x00', 0x30000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000001c0)=""/44, 0x2c}], 0x3, 0x0) [ 427.648894] FAULT_INJECTION: forcing a failure. [ 427.648894] name failslab, interval 1, probability 0, space 0, times 0 [ 427.732851] CPU: 1 PID: 21590 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 427.741371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.750729] Call Trace: [ 427.753336] dump_stack+0x1d3/0x2c4 [ 427.757004] ? dump_stack_print_info.cold.2+0x52/0x52 [ 427.762223] should_fail.cold.4+0xa/0x17 [ 427.766314] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 427.771420] ? __get_user_pages_fast+0x3f0/0x3f0 [ 427.776194] ? save_stack+0xa9/0xd0 [ 427.779825] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 427.784839] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 427.789417] ? tcp_sendmsg+0x2f/0x50 [ 427.793133] ? inet_sendmsg+0x19c/0x690 [ 427.797105] ? sock_sendmsg+0xd5/0x120 [ 427.801003] ? __sys_sendto+0x3d7/0x670 [ 427.804989] ? __x64_sys_sendto+0xe1/0x1a0 [ 427.809223] ? csum_and_copy_from_iter+0x13d0/0x13d0 [ 427.814325] ? trace_hardirqs_on+0xbd/0x310 [ 427.818645] ? lock_downgrade+0x900/0x900 [ 427.822788] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 427.827896] ? fs_reclaim_acquire+0x20/0x20 [ 427.832229] ? lock_downgrade+0x900/0x900 [ 427.836387] ? check_same_owner+0x330/0x330 [ 427.840716] __should_failslab+0x124/0x180 [ 427.844959] should_failslab+0x9/0x14 [ 427.848757] kmem_cache_alloc_node+0x26e/0x730 [ 427.853338] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 427.858272] __alloc_skb+0x114/0x770 [ 427.861988] ? skb_scrub_packet+0x490/0x490 [ 427.866315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.871856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.877423] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 427.882898] ? refcount_add_not_zero_checked+0x330/0x330 [ 427.888358] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 427.893378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.898908] ? __sk_mem_schedule+0xac/0xe0 [ 427.903154] sk_stream_alloc_skb+0x13c/0x960 [ 427.907560] ? tcp_init_transfer+0x470/0x470 [ 427.911970] ? ___pskb_trim+0x1320/0x1320 [ 427.916134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.921675] tcp_sendmsg_locked+0xee4/0x3f90 [ 427.926119] ? lock_downgrade+0x900/0x900 [ 427.930265] ? shrink_dcache_sb+0x350/0x350 [ 427.934633] ? tcp_sendpage+0x60/0x60 [ 427.938432] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.943975] ? aa_label_sk_perm+0xfc/0xa50 [ 427.948214] ? aa_profile_af_perm+0x410/0x410 [ 427.952706] ? ksys_dup3+0x680/0x680 [ 427.956428] ? lock_acquire+0x1ed/0x520 [ 427.960404] ? tcp_sendmsg+0x21/0x50 [ 427.964124] ? trace_hardirqs_on+0xbd/0x310 [ 427.968445] ? lock_release+0x970/0x970 [ 427.972429] ? lock_sock_nested+0xe2/0x120 [ 427.976685] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 427.982160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.987694] ? check_preemption_disabled+0x48/0x200 [ 427.992707] ? lock_sock_nested+0x9a/0x120 [ 427.996949] ? lock_sock_nested+0x9a/0x120 [ 428.001183] ? __local_bh_enable_ip+0x160/0x260 [ 428.005857] tcp_sendmsg+0x2f/0x50 [ 428.009421] inet_sendmsg+0x19c/0x690 [ 428.013238] ? ipip_gro_receive+0x100/0x100 [ 428.017569] ? apparmor_socket_sendmsg+0x29/0x30 [ 428.022322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.027869] ? security_socket_sendmsg+0x94/0xc0 [ 428.032623] ? ipip_gro_receive+0x100/0x100 [ 428.036955] sock_sendmsg+0xd5/0x120 [ 428.040671] __sys_sendto+0x3d7/0x670 [ 428.044477] ? __ia32_sys_getpeername+0xb0/0xb0 [ 428.049152] ? wait_for_completion+0x8a0/0x8a0 [ 428.053747] ? lock_release+0x970/0x970 [ 428.057729] ? check_preemption_disabled+0x48/0x200 [ 428.062742] ? fsnotify_first_mark+0x350/0x350 [ 428.067335] ? __fsnotify_parent+0xcc/0x420 [ 428.071667] ? fsnotify+0xf10/0xf10 [ 428.075296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.080836] ? __sb_end_write+0xd9/0x110 [ 428.084907] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 428.090459] ? fput+0x130/0x1a0 [ 428.093750] ? ksys_write+0x1ae/0x260 [ 428.097573] ? trace_hardirqs_on+0xbd/0x310 [ 428.101888] ? __ia32_sys_read+0xb0/0xb0 [ 428.105957] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.111329] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 428.116796] __x64_sys_sendto+0xe1/0x1a0 [ 428.120865] do_syscall_64+0x1b9/0x820 [ 428.124749] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 428.130112] ? syscall_return_slowpath+0x5e0/0x5e0 [ 428.135043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.139898] ? trace_hardirqs_on_caller+0x310/0x310 [ 428.144924] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 428.149959] ? prepare_exit_to_usermode+0x291/0x3b0 [ 428.154993] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.159851] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.165036] RIP: 0033:0x457579 23:19:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x1, 0x4) [ 428.168254] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.187148] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 428.194873] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 428.202138] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 428.209401] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 428.216669] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 428.223941] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x2) write$FUSE_STATFS(r1, &(0x7f0000000240)={0x60, 0xfffffffffffffff5, 0x5, {{0x9, 0x14, 0x5, 0xa30, 0x100, 0x7, 0x80000000, 0xffffffffffffcacd}}}, 0x60) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xffffffffa0008000}}, 0x20) [ 428.351842] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 428.408585] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 428.430525] minix_free_inode: bit 1 already cleared [ 428.444105] minix_free_inode: bit 1 already cleared 23:19:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) fdatasync(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x6, @mcast1, 0x101}, {0xa, 0x4e24, 0xff, @local, 0xffff}, 0x4, [0x4, 0x25, 0x0, 0x3, 0xfffffffffffffff7, 0x2, 0x7, 0x8]}, 0x5c) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) r1 = memfd_create(&(0x7f0000000180)='%\x00', 0x5) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x2b, @multicast1, 0x4e23, 0x1, 'nq\x00', 0x20, 0x68c, 0x59}, 0x2c) 23:19:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:19 executing program 0 (fault-call:8 fault-nth:29): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xffffffffa0010000}}, 0x20) 23:19:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x510b, 0x2) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000001c0)={0x0, 0x7, 0x100000000, 0x1, 0x14, 0xfffffffffffff6b0}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:20 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x111900, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r1, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r1) [ 428.634835] FAULT_INJECTION: forcing a failure. [ 428.634835] name failslab, interval 1, probability 0, space 0, times 0 [ 428.648729] CPU: 0 PID: 21650 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 428.657238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.666596] Call Trace: [ 428.666621] dump_stack+0x1d3/0x2c4 [ 428.666644] ? dump_stack_print_info.cold.2+0x52/0x52 [ 428.666671] should_fail.cold.4+0xa/0x17 [ 428.682140] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 428.687262] ? __save_stack_trace+0x8d/0xf0 [ 428.691621] ? save_stack+0xa9/0xd0 [ 428.695270] ? save_stack+0x43/0xd0 [ 428.695284] ? kasan_kmalloc+0xc7/0xe0 [ 428.695298] ? kasan_slab_alloc+0x12/0x20 [ 428.695316] ? kmem_cache_alloc_node+0x144/0x730 [ 428.706985] ? __alloc_skb+0x114/0x770 [ 428.706998] ? sk_stream_alloc_skb+0x13c/0x960 [ 428.707017] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 428.724774] ? tcp_sendmsg+0x2f/0x50 [ 428.728487] ? inet_sendmsg+0x19c/0x690 [ 428.732463] ? sock_sendmsg+0xd5/0x120 [ 428.736370] ? __sys_sendto+0x3d7/0x670 [ 428.740355] ? __x64_sys_sendto+0xe1/0x1a0 [ 428.744620] ? do_syscall_64+0x1b9/0x820 [ 428.748686] ? fs_reclaim_acquire+0x20/0x20 [ 428.753027] ? lock_downgrade+0x900/0x900 [ 428.757206] ? lock_downgrade+0x900/0x900 [ 428.761361] ? check_same_owner+0x330/0x330 [ 428.765705] ? lock_downgrade+0x900/0x900 [ 428.769900] __should_failslab+0x124/0x180 [ 428.774153] should_failslab+0x9/0x14 [ 428.777976] kmem_cache_alloc_node_trace+0x270/0x740 [ 428.783083] ? kasan_unpoison_shadow+0x35/0x50 [ 428.787671] ? kasan_kmalloc+0xc7/0xe0 [ 428.791586] __kmalloc_node_track_caller+0x3c/0x70 [ 428.796523] __kmalloc_reserve.isra.39+0x41/0xe0 [ 428.801305] __alloc_skb+0x150/0x770 [ 428.805051] ? skb_scrub_packet+0x490/0x490 [ 428.809407] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.814960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.820502] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 428.825965] ? refcount_add_not_zero_checked+0x330/0x330 [ 428.831418] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 428.836437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.841990] ? __sk_mem_schedule+0xac/0xe0 [ 428.846247] sk_stream_alloc_skb+0x13c/0x960 [ 428.850657] ? tcp_init_transfer+0x470/0x470 [ 428.855067] ? ___pskb_trim+0x1320/0x1320 [ 428.859222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.864791] tcp_sendmsg_locked+0xee4/0x3f90 [ 428.869228] ? lock_downgrade+0x900/0x900 [ 428.873410] ? shrink_dcache_sb+0x350/0x350 [ 428.877735] ? tcp_sendpage+0x60/0x60 [ 428.881533] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.887095] ? aa_label_sk_perm+0xfc/0xa50 [ 428.891354] ? aa_profile_af_perm+0x410/0x410 [ 428.895870] ? ksys_dup3+0x680/0x680 [ 428.899620] ? lock_acquire+0x1ed/0x520 [ 428.903595] ? tcp_sendmsg+0x21/0x50 [ 428.907337] ? trace_hardirqs_on+0xbd/0x310 [ 428.911657] ? lock_release+0x970/0x970 [ 428.915650] ? lock_sock_nested+0xe2/0x120 [ 428.919884] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 428.925337] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.930914] ? check_preemption_disabled+0x48/0x200 [ 428.935956] ? lock_sock_nested+0x9a/0x120 [ 428.940190] ? lock_sock_nested+0x9a/0x120 [ 428.944450] ? __local_bh_enable_ip+0x160/0x260 [ 428.949141] tcp_sendmsg+0x2f/0x50 [ 428.952732] inet_sendmsg+0x19c/0x690 [ 428.956554] ? ipip_gro_receive+0x100/0x100 [ 428.960881] ? apparmor_socket_sendmsg+0x29/0x30 [ 428.965640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.971179] ? security_socket_sendmsg+0x94/0xc0 [ 428.975944] ? ipip_gro_receive+0x100/0x100 [ 428.980289] sock_sendmsg+0xd5/0x120 [ 428.984031] __sys_sendto+0x3d7/0x670 [ 428.987849] ? __ia32_sys_getpeername+0xb0/0xb0 [ 428.992542] ? wait_for_completion+0x8a0/0x8a0 [ 428.997149] ? lock_release+0x970/0x970 [ 429.001143] ? check_preemption_disabled+0x48/0x200 [ 429.006176] ? fsnotify_first_mark+0x350/0x350 [ 429.010781] ? __fsnotify_parent+0xcc/0x420 [ 429.015105] ? fsnotify+0xf10/0xf10 [ 429.018747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.024326] ? __sb_end_write+0xd9/0x110 [ 429.028430] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.033974] ? fput+0x130/0x1a0 [ 429.037268] ? ksys_write+0x1ae/0x260 [ 429.041077] ? trace_hardirqs_on+0xbd/0x310 [ 429.045421] ? __ia32_sys_read+0xb0/0xb0 [ 429.049484] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.054874] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 429.060409] __x64_sys_sendto+0xe1/0x1a0 [ 429.064503] do_syscall_64+0x1b9/0x820 [ 429.068418] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 429.073814] ? syscall_return_slowpath+0x5e0/0x5e0 [ 429.078769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.083614] ? trace_hardirqs_on_caller+0x310/0x310 [ 429.088631] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 429.093683] ? prepare_exit_to_usermode+0x291/0x3b0 [ 429.098724] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.103587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.108783] RIP: 0033:0x457579 [ 429.111980] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:19:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xeffd}}, 0x20) 23:19:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 429.130877] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.138585] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 429.145848] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 429.153133] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 429.160400] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 429.167686] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x7f) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB="0e00030026cc45fc68d49a3c31d186d2d2995e64a8c2653f341b745b814cee720253443c8b5c6ae118fec0f8fc2f65cfa7bb5f33eecc0d03dc5069f7bdf82660ecc7df94ae90ad603cd5d8888d2ce091ea5ef34194298aa8e5bd8335f267695a120cf03fddf3779d8ce273d3c6a5d401c192bcf4cfb3797b042acbdbd8cffa5955f74523"], 0x12) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0xc405e, r0, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x9}}}, 0x84) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getpgrp(r4) 23:19:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x8000a0ffffffff}}, 0x20) [ 429.307677] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:19:20 executing program 0 (fault-call:8 fault-nth:30): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 429.390794] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 429.407272] minix_free_inode: bit 1 already cleared [ 429.424112] FAULT_INJECTION: forcing a failure. [ 429.424112] name failslab, interval 1, probability 0, space 0, times 0 [ 429.439623] CPU: 1 PID: 21691 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 429.448128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.457489] Call Trace: [ 429.460107] dump_stack+0x1d3/0x2c4 [ 429.463758] ? dump_stack_print_info.cold.2+0x52/0x52 [ 429.468982] should_fail.cold.4+0xa/0x17 [ 429.473061] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 429.478197] ? __get_user_pages_fast+0x3f0/0x3f0 [ 429.482972] ? save_stack+0xa9/0xd0 [ 429.486614] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 429.491639] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 429.496226] ? tcp_sendmsg+0x2f/0x50 [ 429.499953] ? inet_sendmsg+0x19c/0x690 [ 429.503948] ? sock_sendmsg+0xd5/0x120 [ 429.507856] ? __sys_sendto+0x3d7/0x670 [ 429.511841] ? __x64_sys_sendto+0xe1/0x1a0 [ 429.516113] ? csum_and_copy_from_iter+0x13d0/0x13d0 [ 429.521251] ? trace_hardirqs_on+0xbd/0x310 [ 429.525572] ? lock_downgrade+0x900/0x900 [ 429.529753] ? lock_downgrade+0x900/0x900 [ 429.533919] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 429.539051] ? fs_reclaim_acquire+0x20/0x20 [ 429.543372] ? lock_downgrade+0x900/0x900 [ 429.547527] ? check_same_owner+0x330/0x330 [ 429.551879] __should_failslab+0x124/0x180 [ 429.556149] should_failslab+0x9/0x14 [ 429.559967] kmem_cache_alloc_node+0x26e/0x730 [ 429.564551] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 429.569483] __alloc_skb+0x114/0x770 [ 429.573255] ? skb_scrub_packet+0x490/0x490 [ 429.577579] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.583118] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.588663] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 429.594136] ? refcount_add_not_zero_checked+0x330/0x330 [ 429.599626] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 429.604660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.610234] ? __sk_mem_schedule+0xac/0xe0 [ 429.614471] sk_stream_alloc_skb+0x13c/0x960 [ 429.618897] ? tcp_init_transfer+0x470/0x470 [ 429.623334] ? ___pskb_trim+0x1320/0x1320 [ 429.627508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.633066] tcp_sendmsg_locked+0xee4/0x3f90 [ 429.637498] ? lock_downgrade+0x900/0x900 [ 429.641652] ? shrink_dcache_sb+0x350/0x350 [ 429.646017] ? tcp_sendpage+0x60/0x60 [ 429.649821] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.655359] ? aa_label_sk_perm+0xfc/0xa50 [ 429.659603] ? aa_profile_af_perm+0x410/0x410 [ 429.664119] ? ksys_dup3+0x680/0x680 [ 429.667838] ? lock_acquire+0x1ed/0x520 [ 429.672338] ? tcp_sendmsg+0x21/0x50 [ 429.676073] ? trace_hardirqs_on+0xbd/0x310 [ 429.680418] ? lock_release+0x970/0x970 [ 429.684433] ? lock_sock_nested+0xe2/0x120 [ 429.688679] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 429.694169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.699706] ? check_preemption_disabled+0x48/0x200 [ 429.704742] ? lock_sock_nested+0x9a/0x120 [ 429.708994] ? lock_sock_nested+0x9a/0x120 [ 429.713247] ? __local_bh_enable_ip+0x160/0x260 [ 429.717952] tcp_sendmsg+0x2f/0x50 [ 429.721523] inet_sendmsg+0x19c/0x690 [ 429.725324] ? ipip_gro_receive+0x100/0x100 [ 429.729645] ? apparmor_socket_sendmsg+0x29/0x30 [ 429.734450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.740007] ? security_socket_sendmsg+0x94/0xc0 [ 429.744779] ? ipip_gro_receive+0x100/0x100 [ 429.749121] sock_sendmsg+0xd5/0x120 [ 429.752858] __sys_sendto+0x3d7/0x670 [ 429.756697] ? __ia32_sys_getpeername+0xb0/0xb0 [ 429.761405] ? wait_for_completion+0x8a0/0x8a0 [ 429.765987] ? lock_release+0x970/0x970 [ 429.769989] ? check_preemption_disabled+0x48/0x200 [ 429.775009] ? fsnotify_first_mark+0x350/0x350 [ 429.779607] ? __fsnotify_parent+0xcc/0x420 [ 429.783939] ? fsnotify+0xf10/0xf10 [ 429.787595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.793163] ? __sb_end_write+0xd9/0x110 [ 429.797252] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.802812] ? fput+0x130/0x1a0 [ 429.806101] ? ksys_write+0x1ae/0x260 [ 429.809925] ? trace_hardirqs_on+0xbd/0x310 [ 429.814253] ? __ia32_sys_read+0xb0/0xb0 [ 429.818325] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.823702] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 429.829200] __x64_sys_sendto+0xe1/0x1a0 [ 429.833273] do_syscall_64+0x1b9/0x820 [ 429.837164] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 429.842556] ? syscall_return_slowpath+0x5e0/0x5e0 [ 429.847524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.852396] ? trace_hardirqs_on_caller+0x310/0x310 [ 429.857439] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 429.862481] ? prepare_exit_to_usermode+0x291/0x3b0 [ 429.867525] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.872396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.877619] RIP: 0033:0x457579 [ 429.880840] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 429.899736] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.907450] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 429.914731] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 429.922030] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 429.929297] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 23:19:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 429.936565] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x2000000}}, 0x20) 23:19:21 executing program 5: fstat(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r3 = getuid() getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) getresgid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x1}, [{0x2, 0x7, r0}, {0x2, 0x3, r1}, {0x2, 0x1, r2}, {0x2, 0x5, r3}], {0x4, 0x4}, [{0x8, 0x0, r4}, {0x8, 0x0, r5}], {0x10, 0x1}}, 0x54, 0x1) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x2000008912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000600)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x2000000000000000, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x3, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x113, 0x100b}}, 0x20) r3 = msgget(0x2, 0x111) r4 = geteuid() getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sync_file_range(r0, 0x1, 0x2, 0x5) r8 = fcntl$getown(r0, 0x9) r9 = fcntl$getown(r0, 0x9) msgctl$IPC_SET(r3, 0x1, &(0x7f00000007c0)={{0xad6, r4, r5, r6, r7, 0x88, 0xfffffffffffffb32}, 0x1, 0x10000000000000, 0x0, 0x8000, 0x29, 0x8, r8, r9}) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x7, 0x1, {"a567e96b43078fbd69de1a222d732bda"}, 0x0, 0x7f, 0x2}}}, 0x90) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000840)) close(r0) [ 430.023265] minix_free_inode: bit 1 already cleared 23:19:21 executing program 0 (fault-call:8 fault-nth:31): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x2}}, 0x20) 23:19:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)=""/90, 0xffffffffffffff7f) socketpair(0x14, 0x80000, 0xeaf0, &(0x7f0000000040)={0xffffffffffffffff}) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x7, {0x7fff}}, 0x18) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x40030000000000}}, 0x20) 23:19:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x200000000000028e, &(0x7f00006dc000)}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) prctl$setname(0xf, &(0x7f0000000180)='-\x00') sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) getsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0), &(0x7f0000000240)=0x4) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) [ 430.160307] FAULT_INJECTION: forcing a failure. [ 430.160307] name failslab, interval 1, probability 0, space 0, times 0 [ 430.222005] CPU: 0 PID: 21717 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 430.230525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.239882] Call Trace: [ 430.242486] dump_stack+0x1d3/0x2c4 [ 430.246135] ? dump_stack_print_info.cold.2+0x52/0x52 [ 430.251361] should_fail.cold.4+0xa/0x17 [ 430.255437] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 430.260557] ? __save_stack_trace+0x8d/0xf0 [ 430.264907] ? save_stack+0xa9/0xd0 [ 430.268583] ? save_stack+0x43/0xd0 [ 430.272226] ? kasan_kmalloc+0xc7/0xe0 [ 430.276128] ? kasan_slab_alloc+0x12/0x20 [ 430.280286] ? kmem_cache_alloc_node+0x144/0x730 [ 430.285057] ? __alloc_skb+0x114/0x770 [ 430.288969] ? sk_stream_alloc_skb+0x13c/0x960 [ 430.293572] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 430.298158] ? tcp_sendmsg+0x2f/0x50 [ 430.301895] ? inet_sendmsg+0x19c/0x690 [ 430.305898] ? sock_sendmsg+0xd5/0x120 [ 430.309816] ? __sys_sendto+0x3d7/0x670 [ 430.313805] ? __x64_sys_sendto+0xe1/0x1a0 [ 430.318057] ? do_syscall_64+0x1b9/0x820 [ 430.322141] ? fs_reclaim_acquire+0x20/0x20 [ 430.326478] ? lock_downgrade+0x900/0x900 [ 430.330634] ? lock_downgrade+0x900/0x900 [ 430.334798] ? check_same_owner+0x330/0x330 [ 430.339137] ? lock_downgrade+0x900/0x900 [ 430.343316] __should_failslab+0x124/0x180 [ 430.347564] should_failslab+0x9/0x14 [ 430.351371] kmem_cache_alloc_node_trace+0x270/0x740 [ 430.356479] ? kasan_unpoison_shadow+0x35/0x50 [ 430.361069] ? kasan_kmalloc+0xc7/0xe0 [ 430.365008] __kmalloc_node_track_caller+0x3c/0x70 [ 430.369965] __kmalloc_reserve.isra.39+0x41/0xe0 [ 430.374736] __alloc_skb+0x150/0x770 [ 430.378466] ? skb_scrub_packet+0x490/0x490 [ 430.382810] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.382828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.382845] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 430.382866] ? refcount_add_not_zero_checked+0x330/0x330 [ 430.393947] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 430.393969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.415368] ? __sk_mem_schedule+0xac/0xe0 [ 430.419615] sk_stream_alloc_skb+0x13c/0x960 [ 430.424037] ? tcp_init_transfer+0x470/0x470 [ 430.428469] ? ___pskb_trim+0x1320/0x1320 [ 430.432638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.438184] tcp_sendmsg_locked+0xee4/0x3f90 [ 430.438209] ? lock_downgrade+0x900/0x900 [ 430.438224] ? shrink_dcache_sb+0x350/0x350 [ 430.438247] ? tcp_sendpage+0x60/0x60 [ 430.454905] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.460467] ? aa_label_sk_perm+0xfc/0xa50 [ 430.464709] ? aa_profile_af_perm+0x410/0x410 [ 430.469211] ? ksys_dup3+0x680/0x680 [ 430.472953] ? lock_acquire+0x1ed/0x520 [ 430.476951] ? tcp_sendmsg+0x21/0x50 [ 430.480671] ? trace_hardirqs_on+0xbd/0x310 [ 430.485009] ? lock_release+0x970/0x970 [ 430.488995] ? lock_sock_nested+0xe2/0x120 [ 430.493241] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 430.498706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.504241] ? check_preemption_disabled+0x48/0x200 [ 430.509256] ? lock_sock_nested+0x9a/0x120 [ 430.513506] ? lock_sock_nested+0x9a/0x120 [ 430.517746] ? __local_bh_enable_ip+0x160/0x260 [ 430.522465] tcp_sendmsg+0x2f/0x50 [ 430.526022] inet_sendmsg+0x19c/0x690 [ 430.529824] ? ipip_gro_receive+0x100/0x100 [ 430.534147] ? apparmor_socket_sendmsg+0x29/0x30 [ 430.538915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.544472] ? security_socket_sendmsg+0x94/0xc0 [ 430.549225] ? ipip_gro_receive+0x100/0x100 [ 430.553551] sock_sendmsg+0xd5/0x120 [ 430.557267] __sys_sendto+0x3d7/0x670 [ 430.561081] ? __ia32_sys_getpeername+0xb0/0xb0 [ 430.566256] ? wait_for_completion+0x8a0/0x8a0 [ 430.570836] ? lock_release+0x970/0x970 [ 430.574839] ? check_preemption_disabled+0x48/0x200 [ 430.579854] ? fsnotify_first_mark+0x350/0x350 [ 430.584433] ? __fsnotify_parent+0xcc/0x420 [ 430.588774] ? fsnotify+0xf10/0xf10 [ 430.592405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.597966] ? __sb_end_write+0xd9/0x110 [ 430.602031] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 430.607593] ? fput+0x130/0x1a0 [ 430.610882] ? ksys_write+0x1ae/0x260 [ 430.614685] ? trace_hardirqs_on+0xbd/0x310 [ 430.619027] ? __ia32_sys_read+0xb0/0xb0 [ 430.623088] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.628453] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 430.633949] __x64_sys_sendto+0xe1/0x1a0 [ 430.638020] do_syscall_64+0x1b9/0x820 [ 430.641906] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 430.647283] ? syscall_return_slowpath+0x5e0/0x5e0 [ 430.652221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.657065] ? trace_hardirqs_on_caller+0x310/0x310 [ 430.662081] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 430.667103] ? prepare_exit_to_usermode+0x291/0x3b0 [ 430.672138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.676987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.682173] RIP: 0033:0x457579 [ 430.685365] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.704266] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.711973] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 23:19:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000240)=""/120) close(r0) 23:19:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 430.719237] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 430.726505] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 430.733777] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 430.741045] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r2 = accept(r1, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @ipv4={[], [], @rand_addr=0x9}, 0x6}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r3, @in={{0x2, 0x4e23}}, 0x8, 0xfffffffffffffffe}, 0x90) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 430.805770] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 430.817316] minix_free_inode: bit 1 already cleared 23:19:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0xfffffdef}}, 0x20) 23:19:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xa0010000}}, 0x20) 23:19:22 executing program 0 (fault-call:8 fault-nth:32): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x134, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) getgroups(0x3, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0x0]) r2 = getegid() stat(&(0x7f0000000300)='\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, r2, r3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) r4 = dup2(r0, r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000340)={0x3, 0x8001}) truncate(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffce4) r5 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x200001) ioctl$KVM_ASSIGN_PCI_DEVICE(r5, 0x8040ae69, &(0x7f00000001c0)={0x4, 0x7, 0x7, 0x1}) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000240)=[0x100000000, 0x40]) 23:19:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$inet6_tcp_buf(r0, 0x6, 0x2f, &(0x7f00000002c0)="1caa454c945ee338dc90a5889c59e042e086f49d8f1267806ec7e7c35b6284e15dab310ce0d41ac4c48b394be9bcb5e3d6c86f657c5e17f70a20de421d8faee42b707feeb7fbd2603f6f267b930bc0994b27a0557afa38206af100aa327b19cd7314b59a13a0d338b340478cb5eb6e8e486de1aff50d61f1a7", 0x79) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80000001, 0x4000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/185) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 430.941657] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 430.961830] minix_free_inode: bit 1 already cleared 23:19:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000328000/0x2000)=nil, 0x2000, 0xc001, &(0x7f0000000040)=0xbca, 0xfffffffffffffff7, 0x1) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 431.028958] FAULT_INJECTION: forcing a failure. [ 431.028958] name failslab, interval 1, probability 0, space 0, times 0 [ 431.040241] CPU: 0 PID: 21771 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 431.048734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.058095] Call Trace: [ 431.060703] dump_stack+0x1d3/0x2c4 [ 431.064364] ? dump_stack_print_info.cold.2+0x52/0x52 [ 431.069565] ? mark_held_locks+0x130/0x130 [ 431.073815] should_fail.cold.4+0xa/0x17 23:19:22 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r0 = getpid() r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) fallocate(r1, 0x8, 0x80000000, 0x101) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x4}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000000680), 0x1000) [ 431.077892] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 431.083028] ? mark_held_locks+0x130/0x130 [ 431.087279] ? mark_held_locks+0x130/0x130 [ 431.091537] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 431.096476] ? kasan_check_read+0x11/0x20 [ 431.100627] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 431.105910] ? rcu_softirq_qs+0x20/0x20 [ 431.109905] ? unwind_dump+0x190/0x190 [ 431.113836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.119441] ? enqueue_to_backlog+0x544/0xd70 [ 431.123977] ? lock_downgrade+0x900/0x900 23:19:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000180)=""/160, &(0x7f0000000040)=0xa0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200040, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000240)) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r0}) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 431.128137] ? __this_cpu_preempt_check+0x1c/0x1f [ 431.133000] ? trace_hardirqs_on+0xbd/0x310 [ 431.137341] ? netif_rx_internal+0x166/0xa30 [ 431.141763] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.147247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.152805] __should_failslab+0x124/0x180 [ 431.157066] should_failslab+0x9/0x14 [ 431.160880] kmem_cache_alloc+0x47/0x730 [ 431.164964] ? lock_acquire+0x1ed/0x520 [ 431.169000] ? skb_dst.isra.84+0x120/0x120 [ 431.173258] skb_clone+0x1bb/0x500 23:19:22 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0xfe21, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x351, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000540), &(0x7f0000000580)=0x8) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000007c0)="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") write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x4, 0xfa00, {0xffffffffffffffff, 0x5b9176a7}}, 0x380) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00') ioctl$KDDISABIO(r0, 0x4b37) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f00000003c0)}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000600)={0x0, 0x73e, 0xff}) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r1, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0xffffffffffffff7f, @local}, 0x10) getpid() accept4$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14, 0x80000) [ 431.176810] ? lock_release+0x970/0x970 [ 431.180791] ? skb_split+0x11e0/0x11e0 [ 431.184679] ? check_preemption_disabled+0x48/0x200 [ 431.189716] dev_queue_xmit_nit+0x414/0xb30 [ 431.194049] ? kernel_poison_pages+0x15a/0x290 [ 431.194064] ? kasan_unpoison_shadow+0x35/0x50 [ 431.194081] ? default_device_exit+0x2c0/0x2c0 [ 431.194101] ? rb_erase_cached+0xc78/0x3720 [ 431.203271] dev_hard_start_xmit+0x186/0xc90 [ 431.203291] ? dev_direct_xmit+0x6b0/0x6b0 [ 431.220829] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 23:19:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x80000000, 0x228940) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000002c0)={0x2, &(0x7f0000000240)=[{}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000001c0)={r3, 0x3}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x8080b, 0x4) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) mq_unlink(&(0x7f0000000040)="70726f632674727573746564656d315e9400") setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 431.226371] ? netif_skb_features+0x690/0xb70 [ 431.230973] ? validate_xmit_xfrm+0x1ef/0xda0 [ 431.235485] ? lock_acquire+0x1ed/0x520 [ 431.239469] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.245021] ? validate_xmit_skb+0x80c/0xf30 [ 431.249441] ? lock_release+0x970/0x970 [ 431.253426] ? netif_skb_features+0xb70/0xb70 [ 431.257972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.263537] ? check_preemption_disabled+0x48/0x200 [ 431.268559] ? check_preemption_disabled+0x48/0x200 [ 431.273582] __dev_queue_xmit+0x2f39/0x3950 [ 431.277940] ? mark_held_locks+0x130/0x130 [ 431.282200] ? netdev_pick_tx+0x2d0/0x2d0 [ 431.286364] ? attach_entity_load_avg+0x860/0x860 [ 431.291216] ? mark_held_locks+0x130/0x130 [ 431.295566] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 431.301380] ? mark_held_locks+0x130/0x130 [ 431.305627] ? mark_held_locks+0x130/0x130 [ 431.309882] ? lock_downgrade+0x900/0x900 [ 431.314042] ? trace_hardirqs_on+0xbd/0x310 [ 431.318392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.323953] ? _raw_spin_unlock_bh+0x30/0x40 [ 431.328381] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.333841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.339388] ? check_preemption_disabled+0x48/0x200 [ 431.344490] ? tcp_packet.cold.16+0x22d/0x30e [ 431.349002] ? tcp_packet.cold.16+0x22d/0x30e [ 431.353516] ? __local_bh_enable_ip+0x160/0x260 [ 431.358190] ? _raw_spin_unlock_bh+0x30/0x40 [ 431.362612] ? tcp_packet+0x6ad/0x58d2 [ 431.366531] ? update_curr+0x4cf/0xbe0 [ 431.370433] ? lock_downgrade+0x900/0x900 [ 431.374601] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 431.379809] ? ip_finish_output+0x7f8/0xf90 [ 431.384148] ? lock_downgrade+0x900/0x900 [ 431.388345] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 431.393643] ? trace_hardirqs_on+0xbd/0x310 [ 431.397986] ? ip_finish_output+0x7f8/0xf90 [ 431.402320] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.407780] ? check_preemption_disabled+0x48/0x200 [ 431.412847] dev_queue_xmit+0x17/0x20 [ 431.416682] ? dev_queue_xmit+0x17/0x20 [ 431.420671] ip_finish_output2+0x105c/0x1860 [ 431.425091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.430656] ? ip_copy_metadata+0xe10/0xe10 [ 431.434993] ? cgroup_dev_is_valid_access+0x150/0x150 [ 431.440206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.445755] ? ipv4_mtu+0x37d/0x590 [ 431.449388] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 431.449475] ? __do_replace+0xab0/0xab0 [ 431.449525] ip_finish_output+0x7f8/0xf90 [ 431.458955] ? ip_finish_output+0x7f8/0xf90 [ 431.458973] ? ip_fragment.constprop.50+0x240/0x240 [ 431.458993] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.477986] ? nf_nat_ipv4_out+0x2e1/0x340 [ 431.482235] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 431.487433] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 431.492503] ? nf_hook_slow+0x11e/0x1c0 [ 431.496496] ip_output+0x21d/0x8d0 [ 431.496526] ? ip_mc_output+0x15a0/0x15a0 [ 431.496546] ? ip_fragment.constprop.50+0x240/0x240 [ 431.504219] ? sock_alloc_send_skb+0x40/0x40 [ 431.504251] ? lock_release+0x970/0x970 [ 431.504271] ? check_same_owner+0x330/0x330 [ 431.521974] ip_local_out+0xc5/0x1b0 [ 431.525714] __ip_queue_xmit+0x9af/0x1f30 [ 431.529878] ? ip_build_and_send_pkt+0xc80/0xc80 [ 431.534642] ? tcp_schedule_loss_probe+0x530/0x530 [ 431.539586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.545126] ? tcp_established_options+0x366/0x5b0 [ 431.550069] ? tcp_select_initial_window+0x400/0x400 [ 431.555190] ip_queue_xmit+0x56/0x70 [ 431.558918] __tcp_transmit_skb+0x1bc5/0x3b00 [ 431.563453] ? __tcp_select_window+0x9e0/0x9e0 [ 431.568038] ? pvclock_read_flags+0x160/0x160 [ 431.572530] ? tcp_write_xmit+0xf1/0x5710 [ 431.576680] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.582144] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 431.587166] ? tcp_rtx_synack+0x730/0x730 [ 431.591389] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 431.595891] ? lock_downgrade+0x900/0x900 [ 431.600044] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.605500] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.611053] tcp_write_xmit+0x1676/0x5710 [ 431.615239] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 431.619907] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 431.624852] ? ___pskb_trim+0x89d/0x1320 [ 431.628919] ? skb_condense+0x3d0/0x3d0 [ 431.632948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.638506] __tcp_push_pending_frames+0xb2/0x290 [ 431.643347] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 431.648378] tcp_push+0x662/0x900 [ 431.651832] ? __sk_mem_schedule+0xac/0xe0 [ 431.656070] ? tcp_md5_hash_key+0x250/0x250 [ 431.660396] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 431.665420] ? ___pskb_trim+0x1320/0x1320 [ 431.669751] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 431.675292] tcp_sendmsg_locked+0x3296/0x3f90 [ 431.679796] ? lock_downgrade+0x900/0x900 [ 431.683955] ? shrink_dcache_sb+0x350/0x350 [ 431.688285] ? tcp_sendpage+0x60/0x60 [ 431.692085] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.697632] ? aa_label_sk_perm+0xfc/0xa50 [ 431.701868] ? aa_profile_af_perm+0x410/0x410 [ 431.706362] ? ksys_dup3+0x680/0x680 [ 431.710082] ? lock_acquire+0x1ed/0x520 [ 431.714058] ? tcp_sendmsg+0x21/0x50 [ 431.717773] ? trace_hardirqs_on+0xbd/0x310 [ 431.722092] ? lock_release+0x970/0x970 [ 431.726067] ? lock_sock_nested+0xe2/0x120 [ 431.730298] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.735744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.741291] ? check_preemption_disabled+0x48/0x200 [ 431.746312] ? lock_sock_nested+0x9a/0x120 [ 431.750569] ? lock_sock_nested+0x9a/0x120 [ 431.754854] ? __local_bh_enable_ip+0x160/0x260 [ 431.759525] tcp_sendmsg+0x2f/0x50 [ 431.763069] inet_sendmsg+0x19c/0x690 [ 431.766868] ? ipip_gro_receive+0x100/0x100 [ 431.771189] ? apparmor_socket_sendmsg+0x29/0x30 [ 431.775958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.781494] ? security_socket_sendmsg+0x94/0xc0 [ 431.786246] ? ipip_gro_receive+0x100/0x100 [ 431.790573] sock_sendmsg+0xd5/0x120 [ 431.794296] __sys_sendto+0x3d7/0x670 [ 431.798103] ? __ia32_sys_getpeername+0xb0/0xb0 [ 431.802774] ? wait_for_completion+0x8a0/0x8a0 [ 431.807357] ? lock_release+0x970/0x970 [ 431.811327] ? check_preemption_disabled+0x48/0x200 [ 431.816344] ? fsnotify_first_mark+0x350/0x350 [ 431.820925] ? __fsnotify_parent+0xcc/0x420 [ 431.825273] ? fsnotify+0xf10/0xf10 [ 431.828916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.834490] ? __sb_end_write+0xd9/0x110 [ 431.838554] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 431.844090] ? fput+0x130/0x1a0 [ 431.847369] ? ksys_write+0x1ae/0x260 [ 431.851189] ? trace_hardirqs_on+0xbd/0x310 [ 431.855513] ? __ia32_sys_read+0xb0/0xb0 [ 431.859603] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.864988] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.870474] __x64_sys_sendto+0xe1/0x1a0 [ 431.874541] do_syscall_64+0x1b9/0x820 [ 431.878439] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 431.883809] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.888735] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.893580] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.898598] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 431.903635] ? prepare_exit_to_usermode+0x291/0x3b0 [ 431.908650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.913521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.918708] RIP: 0033:0x457579 [ 431.921901] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.940818] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 431.948527] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 431.955792] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 431.963067] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 431.970332] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 431.977617] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x0, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xeffdffff00000000}}, 0x20) 23:19:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r1, &(0x7f0000000040)=""/11, 0xffffff3a) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000100)) ioctl$TCXONC(r2, 0x540a, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) 23:19:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140), 0xc8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) r1 = fcntl$dupfd(r0, 0x7dacb56b9ae5f533, r0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0x9, 0x4) 23:19:23 executing program 0 (fault-call:8 fault-nth:33): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0x5a) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) 23:19:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x40, 0x31, 0x1, 0x8}, {0xffff, 0x2, 0x0, 0xfffffffffffffff8}, {0x1, 0x2, 0x7fffffff, 0x9}, {0x40, 0xfffffffffffffffa, 0xab50, 0x1}, {0xfab5000, 0x0, 0x800, 0x100000000}]}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x2080, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b4ebafc1993260a62949166e9f165f4d12e753ca6d90b65cb10cdbebb420132c561c4892c63d8d822fc7a56bf87e8237d3f39e3f5f1a048c00e00207ef77819d6bc6e6d785032aa550aa1b9e2cd4c9bc63928a188d4f336d63925335630c1013f47388c63c4d37959d68dd2da3225df3829ebd6c726df009f54eceb31ba8164d932bd4e9b2b04c1b744571712da4e89073ccf119fc4fda0351dd0d46d74c81ba3fc0854a00426c78ac4d31230cbf9675eb9eb8896bc483d435c7fcb9e78d6ba6b870feac6dff82a366a2", 0xca) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000280)={0x3, 0x7, 0x7f, 0x88e6}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xeffdffffffffffff}}, 0x20) 23:19:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="a46f0ba1420fbe5cc8e3dbeccb542598e8b2f269c987a4ff9d49497fa3a0a1dc6828216c6a612602c32f3a759f0ecfa24cca34364c1d9f2c1eae343a9e4ebf96b2f5eb3eb47e6fc69f2a10c51f3bb5e23eb5bc6c01b55237e754b2c472df350fa66b2f84de1ffe5ec09e674656db35dc86cbfa2cee0e883c49ebf456d4711d0af1c4783bb46069226f13fed7bad140818eda0f9542345782583d40303076ffe4678c534c55afd5890c2967ae1a55c6cdf3725e2325afecb77309357866b104be0e83c62e2a54a4e59bafb45e48bec7320aa14f9437cb36cfbe2a18c8d6f04f0ff278911f00d6c1dbaf40be890fa53799066f4d2296ec065002", 0xf9}, {&(0x7f0000000180)="127c880cd0121df7763e5c168ce5a89061fccd8e16402667ebe729a8c91ebefe02b0de65498bd04938334b75a50892922d829bc5b72890d5", 0x38}, {&(0x7f0000000480)="d4e12443005550657c27905b35a10242e21ced92e3853014bc740296a35b1ab7dca0332789dcdbcc87f856489adbd665c591c7ead5fb5294f6e5d3f799429b5b953a2ba0b61bd8210dd28d17a2f7a3f9", 0x50}, {&(0x7f0000000680)="1d54fcfdba337891dbd889c648bcecdca3b5336cdd1c6c43fb22c29851a0141e7aceb3603da450600ad68328a373c96c436c3a1a36c8d4e2e9e0c19075d28ff90c601db65c1f5c3b588fea8ee62efd28fee7cbab511a686dad5fa82b3fbe96fb784f5d73592c3d959aef1383747f4721adae9205f3064c2118646f2a17db3ab5fd6a5386c1fa7efeb60688e90a4e2f88358293b3dadad4ee8da7212ba8aff2c9612b77affd0f89554a66bf24d204ff10cc16676249987f9eb6fb7c9cd54e804e24c5a3bcf39a54a9ea270b62019c8a88fec5b9e62ab82b80a4d9b2197680bf7c1ff3", 0xe2}], 0x4, 0x0, 0x0, 0x4000}, 0x80) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) [ 432.166800] FAULT_INJECTION: forcing a failure. [ 432.166800] name failslab, interval 1, probability 0, space 0, times 0 [ 432.178100] CPU: 1 PID: 21819 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 432.186596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.186602] Call Trace: [ 432.186629] dump_stack+0x1d3/0x2c4 [ 432.186659] ? dump_stack_print_info.cold.2+0x52/0x52 [ 432.207427] should_fail.cold.4+0xa/0x17 [ 432.211505] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 432.216662] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.221691] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 432.226464] __should_failslab+0x124/0x180 [ 432.230704] should_failslab+0x9/0x14 [ 432.234504] kmem_cache_alloc_node_trace+0x5a/0x740 [ 432.239538] ? lock_downgrade+0x900/0x900 [ 432.243693] __kmalloc_node_track_caller+0x3c/0x70 [ 432.248636] __kmalloc_reserve.isra.39+0x41/0xe0 [ 432.253395] pskb_expand_head+0x230/0x10f0 [ 432.257653] ? is_bpf_text_address+0xd3/0x170 [ 432.262154] ? kernel_text_address+0x79/0xf0 [ 432.266568] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 432.271074] ? save_stack+0xa9/0xd0 [ 432.274714] ? save_stack+0x43/0xd0 [ 432.278339] ? kasan_kmalloc+0xc7/0xe0 [ 432.282223] ? kasan_slab_alloc+0x12/0x20 [ 432.286381] ? kmem_cache_alloc+0x12e/0x730 [ 432.290709] ? skb_clone+0x1bb/0x500 [ 432.294423] ? dev_queue_xmit_nit+0x414/0xb30 [ 432.298941] ? dev_hard_start_xmit+0x186/0xc90 [ 432.303545] ? __dev_queue_xmit+0x2f39/0x3950 [ 432.308038] ? dev_queue_xmit+0x17/0x20 [ 432.312014] ? ip_finish_output2+0x105c/0x1860 [ 432.316595] ? ip_finish_output+0x7f8/0xf90 [ 432.320922] ? ip_output+0x21d/0x8d0 [ 432.324650] ? ip_local_out+0xc5/0x1b0 [ 432.328535] ? __ip_queue_xmit+0x9af/0x1f30 [ 432.332855] ? ip_queue_xmit+0x56/0x70 [ 432.336754] ? __tcp_transmit_skb+0x1bc5/0x3b00 [ 432.341425] ? tcp_write_xmit+0x1676/0x5710 [ 432.345747] ? __tcp_push_pending_frames+0xb2/0x290 [ 432.350769] skb_copy_ubufs+0xc13/0x1b30 [ 432.354833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.360201] ? memcpy+0x45/0x50 [ 432.363492] ? skb_release_data+0x880/0x880 [ 432.367816] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 432.372315] ? lock_downgrade+0x900/0x900 [ 432.376470] ? trace_hardirqs_on+0xbd/0x310 [ 432.380799] ? pvclock_read_flags+0x160/0x160 [ 432.385309] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 432.389808] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.395334] ? kvm_clock_read+0x18/0x30 [ 432.399315] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.404333] ? ktime_get_with_offset+0x310/0x460 [ 432.409093] ? ktime_get+0x400/0x400 [ 432.412804] ? check_preemption_disabled+0x48/0x200 [ 432.417827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.423367] ? netif_rx_internal+0x1aa/0xa30 [ 432.427778] dev_queue_xmit_nit+0x90a/0xb30 [ 432.432108] ? default_device_exit+0x2c0/0x2c0 [ 432.436697] ? mark_held_locks+0x130/0x130 [ 432.440946] ? update_load_avg+0x387/0x2470 [ 432.445283] dev_hard_start_xmit+0x186/0xc90 [ 432.449694] ? dev_direct_xmit+0x6b0/0x6b0 [ 432.453953] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.459500] ? netif_skb_features+0x690/0xb70 [ 432.464004] ? validate_xmit_xfrm+0x1ef/0xda0 [ 432.468503] ? lock_acquire+0x1ed/0x520 [ 432.472483] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.478022] ? validate_xmit_skb+0x80c/0xf30 [ 432.482434] ? lock_release+0x970/0x970 [ 432.486447] ? netif_skb_features+0xb70/0xb70 [ 432.490955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.496494] ? check_preemption_disabled+0x48/0x200 [ 432.501523] ? check_preemption_disabled+0x48/0x200 [ 432.506545] __dev_queue_xmit+0x2f39/0x3950 [ 432.510874] ? netdev_pick_tx+0x2d0/0x2d0 [ 432.515035] ? rcu_read_unlock_special+0x190/0x1c0 [ 432.520003] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 432.525818] ? mark_held_locks+0x130/0x130 [ 432.530058] ? mark_held_locks+0x130/0x130 [ 432.534310] ? lock_downgrade+0x900/0x900 [ 432.538471] ? trace_hardirqs_on+0xbd/0x310 [ 432.542797] ? _raw_spin_unlock_bh+0x30/0x40 [ 432.547210] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.552663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.558229] ? mark_held_locks+0x130/0x130 [ 432.562626] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 432.567301] ? tcp_packet+0x6ad/0x58d2 [ 432.571219] ? pick_next_task_fair+0xa03/0x1c20 [ 432.575886] ? rcu_qs+0x23/0x110 [ 432.579280] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 432.584479] ? ip_finish_output+0x7f8/0xf90 [ 432.588809] ? lock_downgrade+0x900/0x900 [ 432.592967] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 432.598251] ? trace_hardirqs_on+0xbd/0x310 [ 432.602574] ? ip_finish_output+0x7f8/0xf90 [ 432.606900] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.612369] dev_queue_xmit+0x17/0x20 [ 432.616171] ? dev_queue_xmit+0x17/0x20 [ 432.620149] ip_finish_output2+0x105c/0x1860 [ 432.624559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.630110] ? ip_copy_metadata+0xe10/0xe10 [ 432.634439] ? cgroup_dev_is_valid_access+0x150/0x150 [ 432.639641] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 432.644923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.650477] ? ipv4_mtu+0x37d/0x590 [ 432.654115] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 432.659571] ? __do_replace+0xab0/0xab0 [ 432.663561] ip_finish_output+0x7f8/0xf90 [ 432.667709] ? ip_finish_output+0x7f8/0xf90 [ 432.672577] ? ip_fragment.constprop.50+0x240/0x240 [ 432.677624] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 432.682651] ? nf_nat_ipv4_out+0x2e1/0x340 [ 432.686901] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 432.692115] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.697134] ? nf_hook_slow+0x11e/0x1c0 [ 432.701116] ip_output+0x21d/0x8d0 [ 432.704662] ? ip_mc_output+0x15a0/0x15a0 [ 432.708810] ? ip_fragment.constprop.50+0x240/0x240 [ 432.713836] ? sock_alloc_send_skb+0x40/0x40 [ 432.718248] ? lock_release+0x970/0x970 [ 432.722220] ? check_same_owner+0x330/0x330 [ 432.726546] ip_local_out+0xc5/0x1b0 [ 432.730263] __ip_queue_xmit+0x9af/0x1f30 [ 432.734448] ? ip_build_and_send_pkt+0xc80/0xc80 [ 432.739207] ? tcp_schedule_loss_probe+0x530/0x530 [ 432.744151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.749687] ? tcp_established_options+0x366/0x5b0 [ 432.754614] ? tcp_select_initial_window+0x400/0x400 [ 432.759718] ip_queue_xmit+0x56/0x70 [ 432.763436] __tcp_transmit_skb+0x1bc5/0x3b00 [ 432.767988] ? __tcp_select_window+0x9e0/0x9e0 [ 432.772599] ? pvclock_read_flags+0x160/0x160 [ 432.777090] ? tcp_write_xmit+0xf1/0x5710 [ 432.781262] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.786718] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.791751] ? tcp_rtx_synack+0x730/0x730 [ 432.795910] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 432.800415] ? lock_downgrade+0x900/0x900 [ 432.804572] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.810023] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.815570] tcp_write_xmit+0x1676/0x5710 [ 432.819734] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 432.824426] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 432.829367] ? ___pskb_trim+0x89d/0x1320 [ 432.833438] ? skb_condense+0x3d0/0x3d0 [ 432.837438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.842992] __tcp_push_pending_frames+0xb2/0x290 [ 432.847846] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.852870] tcp_push+0x662/0x900 [ 432.856337] ? __sk_mem_schedule+0xac/0xe0 [ 432.860573] ? tcp_md5_hash_key+0x250/0x250 [ 432.864910] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 432.869947] ? ___pskb_trim+0x1320/0x1320 [ 432.874106] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 432.879668] tcp_sendmsg_locked+0x3296/0x3f90 [ 432.884181] ? lock_downgrade+0x900/0x900 [ 432.888351] ? shrink_dcache_sb+0x350/0x350 [ 432.892676] ? tcp_sendpage+0x60/0x60 [ 432.896496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.902032] ? aa_label_sk_perm+0xfc/0xa50 [ 432.906270] ? aa_profile_af_perm+0x410/0x410 [ 432.910770] ? ksys_dup3+0x680/0x680 [ 432.914492] ? lock_acquire+0x1ed/0x520 [ 432.918490] ? tcp_sendmsg+0x21/0x50 [ 432.922209] ? trace_hardirqs_on+0xbd/0x310 [ 432.926532] ? lock_release+0x970/0x970 [ 432.930507] ? lock_sock_nested+0xe2/0x120 [ 432.934744] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.940208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.945744] ? check_preemption_disabled+0x48/0x200 [ 432.950757] ? lock_sock_nested+0x9a/0x120 [ 432.954996] ? lock_sock_nested+0x9a/0x120 [ 432.959253] ? __local_bh_enable_ip+0x160/0x260 [ 432.963926] tcp_sendmsg+0x2f/0x50 [ 432.967480] inet_sendmsg+0x19c/0x690 [ 432.971310] ? ipip_gro_receive+0x100/0x100 [ 432.975633] ? apparmor_socket_sendmsg+0x29/0x30 [ 432.980399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.985956] ? security_socket_sendmsg+0x94/0xc0 [ 432.990712] ? ipip_gro_receive+0x100/0x100 [ 432.995065] sock_sendmsg+0xd5/0x120 [ 432.998780] __sys_sendto+0x3d7/0x670 [ 433.002587] ? __ia32_sys_getpeername+0xb0/0xb0 [ 433.007271] ? wait_for_completion+0x8a0/0x8a0 [ 433.011850] ? lock_release+0x970/0x970 [ 433.015823] ? check_preemption_disabled+0x48/0x200 [ 433.020842] ? fsnotify_first_mark+0x350/0x350 [ 433.025421] ? __fsnotify_parent+0xcc/0x420 [ 433.029742] ? fsnotify+0xf10/0xf10 [ 433.033374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.038918] ? __sb_end_write+0xd9/0x110 [ 433.042991] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 433.048533] ? fput+0x130/0x1a0 [ 433.051810] ? ksys_write+0x1ae/0x260 [ 433.055611] ? trace_hardirqs_on+0xbd/0x310 [ 433.059940] ? __ia32_sys_read+0xb0/0xb0 [ 433.064024] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.069387] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 433.074844] __x64_sys_sendto+0xe1/0x1a0 [ 433.078943] do_syscall_64+0x1b9/0x820 [ 433.082859] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 433.088226] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.093176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.098025] ? trace_hardirqs_on_caller+0x310/0x310 [ 433.103063] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 433.108080] ? prepare_exit_to_usermode+0x291/0x3b0 [ 433.113108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.117962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.123151] RIP: 0033:0x457579 [ 433.126346] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.145255] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 433.152966] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 433.160232] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 23:19:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/90, 0xffffffa2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x36d) [ 433.167496] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 433.174779] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 433.182073] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xa0010000]}}, 0x20) [ 433.263193] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:19:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x0, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x12}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f00000001c0)="28f353422f5467147962d6e0e3da786fdf76722f799797c621252f5aa7c307695acb70f1151027d3f5e7888f7060e08e2e8b3671e5e4cace9b36deb4c2525ee2a1cd10ddca5f057ff2773655cc2c1072d027ee98903790bd6093b7055a67ea189d4cb5ca66147c49e702a0ac6002d83ba893a0adcf4e7f8c4919eec6d1afa32219deed63f400e1b406bec19afcb964cae0c3634b5e40ed626710310c9eaf0468cdec220dc66863f6c995aef6e08fad88050ba0e0458dca05ff36fd4265c1709c3ff54a24247bf5999c891bc4fffe5c5df23c9a1677da8d38dc50872bda19a4af5f", 0xe1) r2 = fcntl$dupfd(r0, 0x406, r0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000004800), &(0x7f0000004840)=0x14) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000140)=0x3b) utimensat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x2710}}, 0x0) 23:19:24 executing program 0 (fault-call:8 fault-nth:34): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='\b\x00\x00\x00\x00\x00\x00\x00\x00', 0x38a) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xeffdffff]}}, 0x20) 23:19:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x420000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0), 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) [ 433.379098] minix_free_inode: bit 1 already cleared [ 433.496978] FAULT_INJECTION: forcing a failure. [ 433.496978] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 433.508878] CPU: 0 PID: 21862 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 433.517376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.526731] Call Trace: [ 433.529341] dump_stack+0x1d3/0x2c4 [ 433.532996] ? dump_stack_print_info.cold.2+0x52/0x52 [ 433.538203] should_fail.cold.4+0xa/0x17 [ 433.542276] ? save_stack+0x43/0xd0 [ 433.545913] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 433.551040] ? dev_hard_start_xmit+0x186/0xc90 [ 433.555643] ? __dev_queue_xmit+0x2f39/0x3950 [ 433.560155] ? dev_queue_xmit+0x17/0x20 [ 433.560171] ? ip_finish_output2+0x105c/0x1860 [ 433.560185] ? ip_finish_output+0x7f8/0xf90 [ 433.560198] ? ip_output+0x21d/0x8d0 [ 433.560218] ? ip_local_out+0xc5/0x1b0 [ 433.568767] ? __ip_queue_xmit+0x9af/0x1f30 [ 433.568783] ? ip_queue_xmit+0x56/0x70 [ 433.568798] ? tcp_write_xmit+0x1676/0x5710 [ 433.568818] ? __tcp_push_pending_frames+0xb2/0x290 [ 433.598253] ? tcp_push+0x662/0x900 [ 433.598267] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 433.598278] ? tcp_sendmsg+0x2f/0x50 [ 433.598303] ? inet_sendmsg+0x19c/0x690 [ 433.602351] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 433.606600] ? sock_sendmsg+0xd5/0x120 [ 433.606618] ? __x64_sys_sendto+0xe1/0x1a0 [ 433.606635] ? do_syscall_64+0x1b9/0x820 [ 433.606648] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.606671] ? trace_hardirqs_on+0xbd/0x310 [ 433.643864] ? __kmalloc_node_track_caller+0x3c/0x70 [ 433.648989] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 433.654452] ? kasan_unpoison_shadow+0x35/0x50 [ 433.659047] ? kasan_unpoison_shadow+0x35/0x50 [ 433.663651] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 433.668687] ? skb_release_data+0x1c4/0x880 [ 433.673169] ? refcount_add_not_zero_checked+0x330/0x330 [ 433.678654] ? skb_tx_error+0x2f0/0x2f0 [ 433.682649] ? __kmalloc_node_track_caller+0x50/0x70 [ 433.687773] __alloc_pages_nodemask+0x34b/0xdd0 [ 433.692449] ? kasan_check_write+0x14/0x20 [ 433.696693] ? pskb_expand_head+0x6b3/0x10f0 [ 433.701112] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 433.706154] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 433.710671] ? save_stack+0xa9/0xd0 [ 433.714314] ? save_stack+0x43/0xd0 [ 433.717967] ? kasan_kmalloc+0xc7/0xe0 [ 433.721862] ? kasan_slab_alloc+0x12/0x20 [ 433.726018] ? skb_clone+0x1bb/0x500 [ 433.729739] ? dev_queue_xmit_nit+0x414/0xb30 [ 433.734248] ? dev_hard_start_xmit+0x186/0xc90 [ 433.738836] ? __dev_queue_xmit+0x2f39/0x3950 [ 433.743346] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 433.748899] alloc_pages_current+0x10c/0x210 [ 433.753346] skb_copy_ubufs+0x4c2/0x1b30 [ 433.757421] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.762797] ? memcpy+0x45/0x50 [ 433.766096] ? skb_release_data+0x880/0x880 [ 433.770422] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 433.774954] ? lock_downgrade+0x900/0x900 [ 433.779114] ? trace_hardirqs_on+0xbd/0x310 [ 433.783447] ? pvclock_read_flags+0x160/0x160 [ 433.787970] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 433.792484] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 433.797973] ? kvm_clock_read+0x18/0x30 [ 433.801984] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 433.807016] ? ktime_get_with_offset+0x310/0x460 [ 433.811789] ? ktime_get+0x400/0x400 [ 433.815530] ? check_preemption_disabled+0x48/0x200 [ 433.820559] ? rb_next+0x140/0x140 [ 433.824114] ? netif_rx_internal+0x1aa/0xa30 [ 433.828553] dev_queue_xmit_nit+0x90a/0xb30 [ 433.832891] ? default_device_exit+0x2c0/0x2c0 [ 433.837496] ? rb_erase_cached+0xc78/0x3720 [ 433.841828] ? rb_next+0x140/0x140 [ 433.845375] ? rb_next+0x140/0x140 [ 433.848941] dev_hard_start_xmit+0x186/0xc90 [ 433.853369] ? dev_direct_xmit+0x6b0/0x6b0 [ 433.857621] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.863170] ? netif_skb_features+0x690/0xb70 [ 433.867676] ? validate_xmit_xfrm+0x1ef/0xda0 [ 433.872188] ? lock_acquire+0x1ed/0x520 [ 433.876178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.881731] ? validate_xmit_skb+0x80c/0xf30 [ 433.886150] ? lock_release+0x970/0x970 [ 433.890142] ? netif_skb_features+0xb70/0xb70 [ 433.894646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.900197] ? check_preemption_disabled+0x48/0x200 [ 433.905224] ? check_preemption_disabled+0x48/0x200 [ 433.910256] __dev_queue_xmit+0x2f39/0x3950 [ 433.914618] ? mark_held_locks+0x130/0x130 [ 433.918875] ? netdev_pick_tx+0x2d0/0x2d0 [ 433.923044] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 433.928855] ? mark_held_locks+0x130/0x130 [ 433.933104] ? mark_held_locks+0x130/0x130 [ 433.937350] ? lock_downgrade+0x900/0x900 [ 433.941514] ? trace_hardirqs_on+0xbd/0x310 [ 433.945880] ? _raw_spin_unlock_bh+0x30/0x40 [ 433.950301] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 433.955762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.961314] ? mark_held_locks+0x130/0x130 [ 433.965563] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 433.970249] ? tcp_packet+0x6ad/0x58d2 [ 433.974176] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 433.979384] ? ip_finish_output+0x7f8/0xf90 [ 433.983723] ? lock_downgrade+0x900/0x900 [ 433.987882] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 433.993178] ? trace_hardirqs_on+0xbd/0x310 [ 433.997511] ? ip_finish_output+0x7f8/0xf90 [ 434.001846] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 434.007311] dev_queue_xmit+0x17/0x20 [ 434.011119] ? dev_queue_xmit+0x17/0x20 [ 434.015109] ip_finish_output2+0x105c/0x1860 [ 434.019532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.025082] ? ip_copy_metadata+0xe10/0xe10 [ 434.029421] ? cgroup_dev_is_valid_access+0x150/0x150 [ 434.034623] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 434.039926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.045493] ? ipv4_mtu+0x37d/0x590 [ 434.049133] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 434.054597] ? __do_replace+0xab0/0xab0 [ 434.058593] ip_finish_output+0x7f8/0xf90 [ 434.062752] ? ip_finish_output+0x7f8/0xf90 [ 434.067087] ? ip_fragment.constprop.50+0x240/0x240 [ 434.072114] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 434.077142] ? nf_nat_ipv4_out+0x2e1/0x340 [ 434.081386] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 434.086592] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 434.091621] ? nf_hook_slow+0x11e/0x1c0 [ 434.095631] ip_output+0x21d/0x8d0 [ 434.099184] ? ip_mc_output+0x15a0/0x15a0 [ 434.103347] ? ip_fragment.constprop.50+0x240/0x240 [ 434.108375] ? sock_alloc_send_skb+0x40/0x40 [ 434.112801] ? lock_release+0x970/0x970 [ 434.116781] ? check_same_owner+0x330/0x330 [ 434.121116] ip_local_out+0xc5/0x1b0 [ 434.124847] __ip_queue_xmit+0x9af/0x1f30 [ 434.129011] ? ip_build_and_send_pkt+0xc80/0xc80 [ 434.133780] ? tcp_schedule_loss_probe+0x530/0x530 [ 434.138723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.144271] ? tcp_established_options+0x366/0x5b0 [ 434.149214] ? tcp_select_initial_window+0x400/0x400 [ 434.154331] ip_queue_xmit+0x56/0x70 [ 434.158059] __tcp_transmit_skb+0x1bc5/0x3b00 [ 434.162602] ? __tcp_select_window+0x9e0/0x9e0 [ 434.167197] ? pvclock_read_flags+0x160/0x160 [ 434.171702] ? tcp_write_xmit+0xf1/0x5710 [ 434.175862] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 434.181350] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 434.186382] ? tcp_rtx_synack+0x730/0x730 [ 434.190547] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 434.195052] ? lock_downgrade+0x900/0x900 [ 434.199215] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 434.204678] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.210233] tcp_write_xmit+0x1676/0x5710 [ 434.214410] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 434.219089] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 434.224035] ? ___pskb_trim+0x89d/0x1320 [ 434.228113] ? skb_condense+0x3d0/0x3d0 [ 434.232101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.237657] __tcp_push_pending_frames+0xb2/0x290 [ 434.242509] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 434.247537] tcp_push+0x662/0x900 [ 434.250999] ? __sk_mem_schedule+0xac/0xe0 [ 434.255249] ? tcp_md5_hash_key+0x250/0x250 [ 434.259589] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 434.264618] ? ___pskb_trim+0x1320/0x1320 [ 434.268788] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 434.274337] tcp_sendmsg_locked+0x3296/0x3f90 [ 434.278853] ? lock_downgrade+0x900/0x900 [ 434.283016] ? shrink_dcache_sb+0x350/0x350 [ 434.287352] ? tcp_sendpage+0x60/0x60 [ 434.291195] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.296742] ? aa_label_sk_perm+0xfc/0xa50 [ 434.300994] ? aa_profile_af_perm+0x410/0x410 [ 434.305501] ? ksys_dup3+0x680/0x680 [ 434.309230] ? lock_acquire+0x1ed/0x520 [ 434.313212] ? tcp_sendmsg+0x21/0x50 [ 434.316961] ? trace_hardirqs_on+0xbd/0x310 [ 434.321297] ? lock_release+0x970/0x970 [ 434.325283] ? lock_sock_nested+0xe2/0x120 [ 434.329531] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 434.334994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.340542] ? check_preemption_disabled+0x48/0x200 [ 434.345571] ? lock_sock_nested+0x9a/0x120 [ 434.349818] ? lock_sock_nested+0x9a/0x120 [ 434.354069] ? __local_bh_enable_ip+0x160/0x260 [ 434.358754] tcp_sendmsg+0x2f/0x50 [ 434.362313] inet_sendmsg+0x19c/0x690 [ 434.366124] ? ipip_gro_receive+0x100/0x100 [ 434.370458] ? apparmor_socket_sendmsg+0x29/0x30 [ 434.375225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.380773] ? security_socket_sendmsg+0x94/0xc0 [ 434.385538] ? ipip_gro_receive+0x100/0x100 [ 434.389872] sock_sendmsg+0xd5/0x120 [ 434.393600] __sys_sendto+0x3d7/0x670 [ 434.397415] ? __ia32_sys_getpeername+0xb0/0xb0 [ 434.402096] ? wait_for_completion+0x8a0/0x8a0 [ 434.406689] ? lock_release+0x970/0x970 [ 434.410675] ? check_preemption_disabled+0x48/0x200 [ 434.415704] ? fsnotify_first_mark+0x350/0x350 [ 434.420294] ? __fsnotify_parent+0xcc/0x420 [ 434.424625] ? fsnotify+0xf10/0xf10 [ 434.428267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.433826] ? __sb_end_write+0xd9/0x110 [ 434.437904] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 434.443463] ? fput+0x130/0x1a0 [ 434.446755] ? ksys_write+0x1ae/0x260 [ 434.450570] ? trace_hardirqs_on+0xbd/0x310 [ 434.454902] ? __ia32_sys_read+0xb0/0xb0 [ 434.458990] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.464368] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 434.469837] __x64_sys_sendto+0xe1/0x1a0 [ 434.473914] do_syscall_64+0x1b9/0x820 [ 434.477827] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 434.483202] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.488141] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.492997] ? trace_hardirqs_on_caller+0x310/0x310 [ 434.498029] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 434.503056] ? prepare_exit_to_usermode+0x291/0x3b0 [ 434.508085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.512961] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.518160] RIP: 0033:0x457579 [ 434.521369] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 434.540279] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 23:19:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x8000a0]}}, 0x20) 23:19:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xeffdffff]}}, 0x20) 23:19:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x2]}}, 0x20) 23:19:25 executing program 2: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffe) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 23:19:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xffffffffa0010000]}}, 0x20) 23:19:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x100000000000000]}}, 0x20) [ 434.547999] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 434.555273] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 434.563056] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 434.570332] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 434.577605] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getown(r0, 0x9) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'bpq0\x00', {0x2, 0x4e21, @remote}}) 23:19:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x1a0]}}, 0x20) 23:19:26 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB]) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xfffffd1c) openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x404000, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x200803, 0x0) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x100000001, 0x8, 0x2, 0x3}, 0x52, [0x7, 0x3964, 0x5, 0x9, 0x10000, 0x5, 0x8000, 0x100, 0x2, 0x100000000, 0x3, 0x5, 0x1, 0x20, 0x0, 0x7aa0, 0x8001, 0xffffffff, 0x8, 0x40, 0x3ff, 0xfffffffffffffff9, 0xfffffffffffffff8, 0x6, 0x3ff, 0x20, 0x5, 0x6, 0xa0d4, 0x1ff, 0x1ff, 0x9, 0x2, 0x3, 0x3, 0x2, 0x0, 0x4, 0x8, 0x8, 0x8, 0xffffffffffffffff, 0xb49c, 0xeecae66, 0x2, 0xc2fe124, 0x6, 0x4, 0x81, 0x100, 0x414, 0x80000000, 0xfffffffffffeffff, 0x9, 0x4, 0x401, 0x100, 0x400, 0x1000, 0x400, 0x9, 0xffff, 0x5, 0x3ff], [0x0, 0x2, 0x5, 0x2ff, 0x6, 0x1ff, 0x7, 0x2, 0x1, 0x80000000, 0x7, 0x1000, 0x2, 0x4, 0xfffffffffffffff7, 0xffffffffffffffff, 0x7, 0x0, 0x771, 0x8, 0x5, 0x3, 0x4f8, 0xffff, 0x100000000, 0x1, 0x0, 0x6c09, 0x5, 0x100000001, 0x5, 0x8a9, 0x4, 0x20, 0x4, 0x7, 0x40, 0x400, 0x2, 0x7, 0x6, 0x9, 0x3, 0x9, 0x20000, 0x4, 0x9, 0xffff, 0x4, 0x1105, 0x4a78cce9, 0xffff, 0x6, 0x100000001, 0x8, 0x500000000, 0x10000, 0x3, 0x17, 0x401, 0x0, 0xd460, 0x72e7, 0x10001], [0x3, 0x626, 0x1, 0x9, 0x8, 0x2, 0x9, 0x9, 0x401, 0x826, 0x4, 0x5, 0x0, 0x7, 0x6, 0x800, 0x19, 0x200, 0x10001, 0x3, 0xc8d, 0x9, 0x3, 0x3, 0x4, 0x6, 0x80000001, 0x80000000, 0xfffffffffffffffb, 0x9, 0x8, 0x9c9, 0x2, 0x1, 0x4, 0x0, 0x6, 0x3f, 0x45, 0x6, 0x7f, 0x80000000, 0x8, 0x10000, 0x10000, 0x6, 0x1, 0x0, 0x100000000, 0x3, 0x7fffffff, 0x120000000000, 0x1, 0x727c, 0x6, 0x5, 0x0, 0x5, 0x9625, 0x400, 0x3, 0xa16, 0x100000001, 0x5], [0x7fff, 0x5, 0x8001, 0x20, 0xaa, 0x60, 0x8, 0x8b6, 0x5, 0x1, 0x3ff, 0xd5a5, 0x4, 0xfff, 0x6, 0xf9, 0x8e0, 0xb6, 0x79, 0x7, 0x7, 0x80000000, 0x1, 0x40, 0x9b, 0x800, 0x9e, 0x0, 0xfffffffffffffff7, 0x1, 0x3, 0x8e77, 0x1, 0x5, 0x6, 0x9, 0xfffffffffffffffa, 0x524, 0x3, 0x8001, 0x7, 0x1, 0x58077306, 0x800, 0x330, 0x7c3, 0xfff, 0x9, 0x4, 0xdd6, 0x9c98, 0x7, 0x1, 0x3, 0x3, 0x7fff, 0x5, 0x2, 0x9, 0x9, 0x2, 0x4, 0x6, 0x3f]}, 0x45c) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) fcntl$setpipe(r0, 0x407, 0xffffffff80000000) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x1100000000000000}, 0x6) 23:19:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x0, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:26 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x201, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x48}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1bda12642d51006c, 0x2}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r2 = socket(0x6000800000000010, 0x3, 0x0) write(r2, &(0x7f0000000000)="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", 0xfc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x7, @mcast2, 0x81}, @in6={0xa, 0x4e23, 0x1, @remote, 0x1f}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x7, @ipv4, 0x6}], 0x64) 23:19:26 executing program 0 (fault-call:8 fault-nth:35): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x400300]}}, 0x20) [ 434.804581] minix_free_inode: bit 1 already cleared [ 434.806877] netlink: 188 bytes leftover after parsing attributes in process `syz-executor2'. [ 434.844401] FAULT_INJECTION: forcing a failure. 23:19:26 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffffffffffc, @empty, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) syz_emit_ethernet(0x190, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1280c200000086dd60d8652b00740600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="728768315bb73e92e8ae7b6b835000080090780000"], &(0x7f00000002c0)) 23:19:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) close(r0) 23:19:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x2000000]}}, 0x20) [ 434.844401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 434.846629] netlink: 188 bytes leftover after parsing attributes in process `syz-executor2'. [ 434.856301] CPU: 1 PID: 21929 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 434.856311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.856316] Call Trace: [ 434.856340] dump_stack+0x1d3/0x2c4 [ 434.856362] ? dump_stack_print_info.cold.2+0x52/0x52 [ 434.856397] should_fail.cold.4+0xa/0x17 [ 434.898212] ? save_stack+0x43/0xd0 [ 434.901871] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 434.906971] ? dev_hard_start_xmit+0x186/0xc90 [ 434.911539] ? __dev_queue_xmit+0x2f39/0x3950 [ 434.916018] ? dev_queue_xmit+0x17/0x20 [ 434.920003] ? ip_finish_output2+0x105c/0x1860 [ 434.924572] ? ip_finish_output+0x7f8/0xf90 [ 434.928886] ? ip_output+0x21d/0x8d0 [ 434.932590] ? ip_local_out+0xc5/0x1b0 [ 434.936471] ? __ip_queue_xmit+0x9af/0x1f30 [ 434.940789] ? ip_queue_xmit+0x56/0x70 [ 434.944681] ? tcp_write_xmit+0x1676/0x5710 [ 434.949001] ? __tcp_push_pending_frames+0xb2/0x290 [ 434.954006] ? tcp_push+0x662/0x900 [ 434.957622] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 434.962279] ? tcp_sendmsg+0x2f/0x50 [ 434.965990] ? inet_sendmsg+0x19c/0x690 [ 434.969963] ? sock_sendmsg+0xd5/0x120 [ 434.973846] ? __x64_sys_sendto+0xe1/0x1a0 [ 434.978069] ? do_syscall_64+0x1b9/0x820 [ 434.982129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.987507] ? trace_hardirqs_on+0xbd/0x310 [ 434.991820] ? __kmalloc_node_track_caller+0x3c/0x70 [ 434.996914] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 435.002359] ? kasan_unpoison_shadow+0x35/0x50 [ 435.006938] ? kasan_unpoison_shadow+0x35/0x50 [ 435.011539] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 435.016546] ? skb_release_data+0x1c4/0x880 [ 435.020877] ? refcount_add_not_zero_checked+0x330/0x330 [ 435.026339] ? skb_tx_error+0x2f0/0x2f0 [ 435.030321] ? __kmalloc_node_track_caller+0x50/0x70 [ 435.035420] __alloc_pages_nodemask+0x34b/0xdd0 [ 435.040084] ? kasan_check_write+0x14/0x20 [ 435.044307] ? pskb_expand_head+0x6b3/0x10f0 [ 435.048718] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 435.053740] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 435.058227] ? save_stack+0xa9/0xd0 [ 435.061841] ? save_stack+0x43/0xd0 [ 435.065471] ? kasan_kmalloc+0xc7/0xe0 [ 435.069357] ? kasan_slab_alloc+0x12/0x20 [ 435.073491] ? skb_clone+0x1bb/0x500 [ 435.077188] ? dev_queue_xmit_nit+0x414/0xb30 [ 435.081668] ? dev_hard_start_xmit+0x186/0xc90 [ 435.086236] ? __dev_queue_xmit+0x2f39/0x3950 [ 435.090722] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 435.096260] alloc_pages_current+0x10c/0x210 [ 435.100664] skb_copy_ubufs+0x4c2/0x1b30 [ 435.104721] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.110093] ? memcpy+0x45/0x50 [ 435.113364] ? skb_release_data+0x880/0x880 [ 435.117676] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 435.122165] ? lock_downgrade+0x900/0x900 [ 435.126306] ? trace_hardirqs_on+0xbd/0x310 [ 435.130646] ? pvclock_read_flags+0x160/0x160 [ 435.135131] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 435.139622] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 435.145084] ? kvm_clock_read+0x18/0x30 [ 435.149064] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 435.154085] ? ktime_get_with_offset+0x310/0x460 [ 435.158848] ? ktime_get+0x400/0x400 [ 435.162562] ? check_preemption_disabled+0x48/0x200 [ 435.167586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.173139] ? netif_rx_internal+0x1aa/0xa30 [ 435.177557] dev_queue_xmit_nit+0x90a/0xb30 [ 435.181869] ? default_device_exit+0x2c0/0x2c0 [ 435.186443] ? __update_load_avg_se+0xb90/0xb90 [ 435.191114] dev_hard_start_xmit+0x186/0xc90 [ 435.195517] ? dev_direct_xmit+0x6b0/0x6b0 [ 435.199753] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.205282] ? netif_skb_features+0x690/0xb70 [ 435.209771] ? validate_xmit_xfrm+0x1ef/0xda0 [ 435.214259] ? lock_acquire+0x1ed/0x520 [ 435.218228] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.223757] ? validate_xmit_skb+0x80c/0xf30 [ 435.228168] ? lock_release+0x970/0x970 [ 435.232136] ? netif_skb_features+0xb70/0xb70 [ 435.236657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.242204] ? check_preemption_disabled+0x48/0x200 [ 435.247208] ? check_preemption_disabled+0x48/0x200 [ 435.252217] __dev_queue_xmit+0x2f39/0x3950 [ 435.256530] ? mark_held_locks+0x130/0x130 [ 435.260792] ? netdev_pick_tx+0x2d0/0x2d0 [ 435.264944] ? attach_entity_load_avg+0x860/0x860 [ 435.269787] ? attach_entity_load_avg+0x860/0x860 [ 435.274659] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 435.280469] ? mark_held_locks+0x130/0x130 [ 435.284708] ? mark_held_locks+0x130/0x130 [ 435.288956] ? lock_downgrade+0x900/0x900 [ 435.293097] ? trace_hardirqs_on+0xbd/0x310 [ 435.297410] ? _raw_spin_unlock_bh+0x30/0x40 [ 435.301810] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 435.307253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.312787] ? mark_held_locks+0x130/0x130 [ 435.317012] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 435.321673] ? tcp_packet+0x6ad/0x58d2 [ 435.325623] ? __perf_event_task_sched_out+0x337/0x1ab0 [ 435.330997] ? pick_next_task_fair+0xa03/0x1c20 [ 435.335669] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 435.340849] ? ip_finish_output+0x7f8/0xf90 [ 435.345162] ? lock_downgrade+0x900/0x900 [ 435.349302] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 435.354571] ? trace_hardirqs_on+0xbd/0x310 [ 435.358888] ? ip_finish_output+0x7f8/0xf90 [ 435.363214] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 435.368669] dev_queue_xmit+0x17/0x20 [ 435.372486] ? dev_queue_xmit+0x17/0x20 [ 435.376472] ip_finish_output2+0x105c/0x1860 [ 435.380885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.386453] ? ip_copy_metadata+0xe10/0xe10 [ 435.390791] ? cgroup_dev_is_valid_access+0x150/0x150 [ 435.395994] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 435.401269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.406810] ? ipv4_mtu+0x37d/0x590 [ 435.410431] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 435.415901] ? __do_replace+0xab0/0xab0 [ 435.419879] ip_finish_output+0x7f8/0xf90 [ 435.424017] ? ip_finish_output+0x7f8/0xf90 [ 435.428328] ? ip_fragment.constprop.50+0x240/0x240 [ 435.433334] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 435.438340] ? nf_nat_ipv4_out+0x2e1/0x340 [ 435.442592] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 435.447810] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 435.452830] ? nf_hook_slow+0x11e/0x1c0 [ 435.456799] ip_output+0x21d/0x8d0 [ 435.460336] ? ip_mc_output+0x15a0/0x15a0 [ 435.464496] ? ip_fragment.constprop.50+0x240/0x240 [ 435.469519] ? sock_alloc_send_skb+0x40/0x40 [ 435.473919] ? lock_release+0x970/0x970 [ 435.477910] ? check_same_owner+0x330/0x330 [ 435.482263] ip_local_out+0xc5/0x1b0 [ 435.485984] __ip_queue_xmit+0x9af/0x1f30 [ 435.490142] ? ip_build_and_send_pkt+0xc80/0xc80 [ 435.494904] ? tcp_schedule_loss_probe+0x530/0x530 [ 435.499838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.505375] ? tcp_established_options+0x366/0x5b0 [ 435.510312] ? tcp_select_initial_window+0x400/0x400 [ 435.515428] ip_queue_xmit+0x56/0x70 [ 435.519162] __tcp_transmit_skb+0x1bc5/0x3b00 [ 435.523659] ? __tcp_select_window+0x9e0/0x9e0 [ 435.528233] ? pvclock_read_flags+0x160/0x160 [ 435.532711] ? tcp_write_xmit+0xf1/0x5710 [ 435.536861] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 435.542303] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 435.547312] ? tcp_rtx_synack+0x730/0x730 [ 435.551474] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 435.555971] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 435.561409] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.566948] tcp_write_xmit+0x1676/0x5710 [ 435.571095] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 435.575757] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 435.580713] ? ___pskb_trim+0x89d/0x1320 [ 435.584781] ? skb_condense+0x3d0/0x3d0 [ 435.588745] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.594273] __tcp_push_pending_frames+0xb2/0x290 [ 435.599104] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 435.604110] tcp_push+0x662/0x900 [ 435.607552] ? __sk_mem_schedule+0xac/0xe0 [ 435.611777] ? tcp_md5_hash_key+0x250/0x250 [ 435.616102] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 435.621123] ? ___pskb_trim+0x1320/0x1320 [ 435.625266] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 435.630792] tcp_sendmsg_locked+0x3296/0x3f90 [ 435.635280] ? lock_downgrade+0x900/0x900 [ 435.639440] ? shrink_dcache_sb+0x350/0x350 [ 435.643769] ? tcp_sendpage+0x60/0x60 [ 435.647560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.653085] ? aa_label_sk_perm+0xfc/0xa50 23:19:27 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x3, 0x2c) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="80349b260cd07b8d0a53674723df5ee5d2a660405bc06b3ebb563ec8b25f903b6101b50c9a4d1d8c6f74eab8ef0f05745f32bce1eaa4740daf174cae955152536d8d6807f135386478dde689c15a109dbc53979e6843f2cda64a0e6b5386581ba70cf65464c45eb7b95c", 0x35a, 0xfffffefffffffffe, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0xfffffffffffffdd3) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x100000000, 0xbb3, 0xfd60, 0x1, 0x4}, &(0x7f0000000080)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.events\x00', 0x0, 0x0) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0xfffffffffffffffe, 0x30}, &(0x7f0000000100)=0xc) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xc04, 0x404002) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000180), 0x2) [ 435.657323] ? aa_profile_af_perm+0x410/0x410 [ 435.661818] ? ksys_dup3+0x680/0x680 [ 435.665520] ? lock_acquire+0x1ed/0x520 [ 435.669480] ? tcp_sendmsg+0x21/0x50 [ 435.673186] ? trace_hardirqs_on+0xbd/0x310 [ 435.677508] ? lock_release+0x970/0x970 [ 435.681489] ? lock_sock_nested+0xe2/0x120 [ 435.685751] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 435.691213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.696756] ? check_preemption_disabled+0x48/0x200 [ 435.701757] ? lock_sock_nested+0x9a/0x120 [ 435.705980] ? lock_sock_nested+0x9a/0x120 [ 435.710203] ? __local_bh_enable_ip+0x160/0x260 [ 435.714860] tcp_sendmsg+0x2f/0x50 [ 435.718394] inet_sendmsg+0x19c/0x690 [ 435.722179] ? ipip_gro_receive+0x100/0x100 [ 435.726487] ? apparmor_socket_sendmsg+0x29/0x30 [ 435.731231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.736755] ? security_socket_sendmsg+0x94/0xc0 [ 435.741504] ? ipip_gro_receive+0x100/0x100 [ 435.745810] sock_sendmsg+0xd5/0x120 [ 435.749512] __sys_sendto+0x3d7/0x670 [ 435.753310] ? __ia32_sys_getpeername+0xb0/0xb0 [ 435.757980] ? wait_for_completion+0x8a0/0x8a0 [ 435.762559] ? lock_release+0x970/0x970 [ 435.766517] ? check_preemption_disabled+0x48/0x200 [ 435.771540] ? fsnotify_first_mark+0x350/0x350 [ 435.776106] ? __fsnotify_parent+0xcc/0x420 [ 435.780431] ? fsnotify+0xf10/0xf10 [ 435.784058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.789597] ? __sb_end_write+0xd9/0x110 [ 435.793659] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 435.799181] ? fput+0x130/0x1a0 [ 435.802464] ? ksys_write+0x1ae/0x260 [ 435.806263] ? trace_hardirqs_on+0xbd/0x310 [ 435.810575] ? __ia32_sys_read+0xb0/0xb0 [ 435.814635] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.819985] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 435.825434] __x64_sys_sendto+0xe1/0x1a0 [ 435.829511] do_syscall_64+0x1b9/0x820 [ 435.833404] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 435.838752] ? syscall_return_slowpath+0x5e0/0x5e0 [ 435.843692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.848524] ? trace_hardirqs_on_caller+0x310/0x310 [ 435.853527] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 435.858546] ? prepare_exit_to_usermode+0x291/0x3b0 [ 435.863554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.868398] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.873600] RIP: 0033:0x457579 [ 435.876797] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.895685] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 435.903380] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 435.910643] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 435.917915] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 435.925200] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 435.932467] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000002c0)="ef94ff9fe80c81a8afcfc8041510e67d442ce15a2ccea6fde3e77d405ae5e47b2482c473580a92371cc6beef010400003d81ff8145bd9adcbb9ffc4f070600000082edd79b9f8736412cc9c4ad71a1606567788e82321860c2867540f951dcc2409e7e7a62a3bc00000000000000000000000000000000") bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000480)="17c28fb3e7ce73697dc84aac72067be782caa1dbd84cde8c6e39dfbfadffd439109e32e5b1332596289923f099c587e6a0c2b677a5df090301a821c3676518425cd6edec1b0ae23a21a8c9628b06cd88", 0x50, 0xfffffffffffffff8) keyctl$assume_authority(0x10, r2) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x7, 0xf78a, 0x7, 0x6}, 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000340)=@fragment={0xbb, 0x0, 0x651, 0x5, 0x0, 0x4, 0x64}, 0x8) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x18300, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0xf10) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x219) 23:19:27 executing program 0 (fault-call:8 fault-nth:36): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xeffd]}}, 0x20) [ 436.099158] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 436.201479] FAULT_INJECTION: forcing a failure. [ 436.201479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.213392] CPU: 1 PID: 21973 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 436.221884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.231268] Call Trace: [ 436.233871] dump_stack+0x1d3/0x2c4 [ 436.237523] ? dump_stack_print_info.cold.2+0x52/0x52 [ 436.242746] should_fail.cold.4+0xa/0x17 [ 436.246823] ? save_stack+0x43/0xd0 [ 436.250467] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 436.255603] ? dev_hard_start_xmit+0x186/0xc90 [ 436.260192] ? __dev_queue_xmit+0x2f39/0x3950 [ 436.264696] ? dev_queue_xmit+0x17/0x20 [ 436.268678] ? ip_finish_output2+0x105c/0x1860 [ 436.273270] ? ip_finish_output+0x7f8/0xf90 [ 436.277600] ? ip_output+0x21d/0x8d0 [ 436.281336] ? ip_local_out+0xc5/0x1b0 [ 436.285257] ? __ip_queue_xmit+0x9af/0x1f30 [ 436.289590] ? ip_queue_xmit+0x56/0x70 [ 436.289607] ? tcp_write_xmit+0x1676/0x5710 [ 436.289626] ? __tcp_push_pending_frames+0xb2/0x290 [ 436.297824] ? tcp_push+0x662/0x900 [ 436.297837] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 436.297856] ? tcp_sendmsg+0x2f/0x50 [ 436.306491] ? inet_sendmsg+0x19c/0x690 [ 436.306508] ? sock_sendmsg+0xd5/0x120 [ 436.306529] ? __x64_sys_sendto+0xe1/0x1a0 [ 436.314905] ? do_syscall_64+0x1b9/0x820 [ 436.314921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.314958] ? trace_hardirqs_on+0xbd/0x310 [ 436.314975] ? __kmalloc_node_track_caller+0x3c/0x70 [ 436.314996] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 436.322849] ? kasan_unpoison_shadow+0x35/0x50 [ 436.322866] ? kasan_unpoison_shadow+0x35/0x50 [ 436.322884] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 436.322901] ? skb_release_data+0x1c4/0x880 [ 436.322923] ? refcount_add_not_zero_checked+0x330/0x330 [ 436.331224] ? skb_tx_error+0x2f0/0x2f0 [ 436.331244] ? __kmalloc_node_track_caller+0x50/0x70 [ 436.331264] __alloc_pages_nodemask+0x34b/0xdd0 [ 436.389150] ? kasan_check_write+0x14/0x20 [ 436.393399] ? pskb_expand_head+0x6b3/0x10f0 [ 436.397818] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 436.402850] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 436.407370] ? save_stack+0xa9/0xd0 [ 436.411040] ? save_stack+0x43/0xd0 [ 436.414693] ? kasan_kmalloc+0xc7/0xe0 [ 436.418593] ? kasan_slab_alloc+0x12/0x20 [ 436.422756] ? skb_clone+0x1bb/0x500 [ 436.426478] ? dev_queue_xmit_nit+0x414/0xb30 [ 436.430975] ? dev_hard_start_xmit+0x186/0xc90 [ 436.435558] ? __dev_queue_xmit+0x2f39/0x3950 [ 436.440064] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 436.445611] alloc_pages_current+0x10c/0x210 [ 436.450034] skb_copy_ubufs+0x4c2/0x1b30 [ 436.454098] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.459481] ? memcpy+0x45/0x50 [ 436.462783] ? skb_release_data+0x880/0x880 [ 436.467103] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 436.471604] ? lock_downgrade+0x900/0x900 [ 436.475753] ? trace_hardirqs_on+0xbd/0x310 [ 436.480085] ? pvclock_read_flags+0x160/0x160 [ 436.484582] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 436.489101] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 436.494569] ? kvm_clock_read+0x18/0x30 [ 436.498554] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 436.503576] ? ktime_get_with_offset+0x310/0x460 [ 436.508336] ? ktime_get+0x400/0x400 [ 436.512063] ? check_preemption_disabled+0x48/0x200 [ 436.517087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.522634] ? netif_rx_internal+0x1aa/0xa30 [ 436.527064] dev_queue_xmit_nit+0x90a/0xb30 [ 436.531394] ? default_device_exit+0x2c0/0x2c0 [ 436.536008] ? rb_next+0x140/0x140 [ 436.539557] dev_hard_start_xmit+0x186/0xc90 [ 436.543976] ? dev_direct_xmit+0x6b0/0x6b0 [ 436.548221] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.553760] ? netif_skb_features+0x690/0xb70 [ 436.558258] ? validate_xmit_xfrm+0x1ef/0xda0 [ 436.562997] ? lock_acquire+0x1ed/0x520 [ 436.566989] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.572532] ? validate_xmit_skb+0x80c/0xf30 [ 436.576960] ? lock_release+0x970/0x970 [ 436.580950] ? netif_skb_features+0xb70/0xb70 [ 436.585454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.590992] ? check_preemption_disabled+0x48/0x200 [ 436.596006] ? check_preemption_disabled+0x48/0x200 [ 436.601027] __dev_queue_xmit+0x2f39/0x3950 [ 436.605378] ? mark_held_locks+0x130/0x130 [ 436.609616] ? netdev_pick_tx+0x2d0/0x2d0 [ 436.613772] ? netif_skb_features+0x690/0xb70 [ 436.618291] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 436.624122] ? mark_held_locks+0x130/0x130 [ 436.628359] ? mark_held_locks+0x130/0x130 [ 436.632592] ? lock_downgrade+0x900/0x900 [ 436.636752] ? trace_hardirqs_on+0xbd/0x310 [ 436.641079] ? _raw_spin_unlock_bh+0x30/0x40 [ 436.645491] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 436.650953] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.656497] ? mark_held_locks+0x130/0x130 [ 436.660747] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 436.665421] ? tcp_packet+0x6ad/0x58d2 [ 436.669332] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 436.674555] ? ip_finish_output+0x7f8/0xf90 [ 436.678876] ? lock_downgrade+0x900/0x900 [ 436.683036] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 436.688319] ? trace_hardirqs_on+0xbd/0x310 [ 436.692639] ? ip_finish_output+0x7f8/0xf90 [ 436.696973] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 436.702451] dev_queue_xmit+0x17/0x20 [ 436.706263] ? dev_queue_xmit+0x17/0x20 [ 436.710238] ip_finish_output2+0x105c/0x1860 [ 436.714650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.720187] ? ip_copy_metadata+0xe10/0xe10 [ 436.724513] ? cgroup_dev_is_valid_access+0x150/0x150 [ 436.729707] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 436.734987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.740520] ? ipv4_mtu+0x37d/0x590 [ 436.744148] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 436.749603] ? __do_replace+0xab0/0xab0 [ 436.753589] ip_finish_output+0x7f8/0xf90 [ 436.757736] ? ip_finish_output+0x7f8/0xf90 [ 436.762062] ? ip_fragment.constprop.50+0x240/0x240 [ 436.767082] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 436.772100] ? nf_nat_ipv4_out+0x2e1/0x340 [ 436.776337] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 436.781571] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 436.786600] ? nf_hook_slow+0x11e/0x1c0 [ 436.790582] ip_output+0x21d/0x8d0 [ 436.794126] ? ip_mc_output+0x15a0/0x15a0 [ 436.798277] ? ip_fragment.constprop.50+0x240/0x240 [ 436.803298] ? sock_alloc_send_skb+0x40/0x40 [ 436.808231] ? lock_release+0x970/0x970 [ 436.812828] ? check_same_owner+0x330/0x330 [ 436.817844] ip_local_out+0xc5/0x1b0 [ 436.821563] __ip_queue_xmit+0x9af/0x1f30 [ 436.825723] ? ip_build_and_send_pkt+0xc80/0xc80 [ 436.830485] ? tcp_schedule_loss_probe+0x530/0x530 [ 436.835414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.840961] ? tcp_established_options+0x366/0x5b0 [ 436.845894] ? tcp_select_initial_window+0x400/0x400 [ 436.851283] ip_queue_xmit+0x56/0x70 [ 436.855782] __tcp_transmit_skb+0x1bc5/0x3b00 [ 436.861337] ? __tcp_select_window+0x9e0/0x9e0 [ 436.866788] ? pvclock_read_flags+0x160/0x160 [ 436.872235] ? tcp_write_xmit+0xf1/0x5710 [ 436.877255] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 436.882725] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 436.887758] ? tcp_rtx_synack+0x730/0x730 [ 436.891910] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 436.896444] ? lock_downgrade+0x900/0x900 [ 436.900594] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 436.906058] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.911601] tcp_write_xmit+0x1676/0x5710 [ 436.915763] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 436.920433] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 436.925373] ? ___pskb_trim+0x89d/0x1320 [ 436.929475] ? skb_condense+0x3d0/0x3d0 [ 436.933470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.939016] __tcp_push_pending_frames+0xb2/0x290 [ 436.943864] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 436.948881] tcp_push+0x662/0x900 [ 436.952333] ? __sk_mem_schedule+0xac/0xe0 [ 436.956587] ? tcp_md5_hash_key+0x250/0x250 [ 436.960913] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 436.965962] ? ___pskb_trim+0x1320/0x1320 [ 436.970118] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 436.975663] tcp_sendmsg_locked+0x3296/0x3f90 [ 436.980170] ? lock_downgrade+0x900/0x900 [ 436.984319] ? shrink_dcache_sb+0x350/0x350 [ 436.988648] ? tcp_sendpage+0x60/0x60 [ 436.992491] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.998046] ? aa_label_sk_perm+0xfc/0xa50 [ 437.002287] ? aa_profile_af_perm+0x410/0x410 [ 437.006783] ? ksys_dup3+0x680/0x680 [ 437.010527] ? lock_acquire+0x1ed/0x520 [ 437.014511] ? tcp_sendmsg+0x21/0x50 [ 437.018230] ? trace_hardirqs_on+0xbd/0x310 [ 437.022551] ? lock_release+0x970/0x970 [ 437.026534] ? lock_sock_nested+0xe2/0x120 [ 437.030777] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 437.036228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.041775] ? check_preemption_disabled+0x48/0x200 [ 437.046790] ? lock_sock_nested+0x9a/0x120 [ 437.051027] ? lock_sock_nested+0x9a/0x120 [ 437.055280] ? __local_bh_enable_ip+0x160/0x260 [ 437.059972] tcp_sendmsg+0x2f/0x50 [ 437.063517] inet_sendmsg+0x19c/0x690 [ 437.067332] ? ipip_gro_receive+0x100/0x100 [ 437.071667] ? apparmor_socket_sendmsg+0x29/0x30 [ 437.076438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.081987] ? security_socket_sendmsg+0x94/0xc0 [ 437.086753] ? ipip_gro_receive+0x100/0x100 [ 437.091089] sock_sendmsg+0xd5/0x120 [ 437.094806] __sys_sendto+0x3d7/0x670 [ 437.098612] ? __ia32_sys_getpeername+0xb0/0xb0 [ 437.103287] ? wait_for_completion+0x8a0/0x8a0 [ 437.108479] ? lock_release+0x970/0x970 [ 437.113234] ? check_preemption_disabled+0x48/0x200 [ 437.119209] ? fsnotify_first_mark+0x350/0x350 [ 437.124672] ? __fsnotify_parent+0xcc/0x420 [ 437.129168] ? fsnotify+0xf10/0xf10 [ 437.132799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.138342] ? __sb_end_write+0xd9/0x110 [ 437.142436] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 437.147995] ? fput+0x130/0x1a0 [ 437.151795] ? ksys_write+0x1ae/0x260 [ 437.156394] ? trace_hardirqs_on+0xbd/0x310 [ 437.161236] ? __ia32_sys_read+0xb0/0xb0 [ 437.165296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.170674] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 437.176132] __x64_sys_sendto+0xe1/0x1a0 [ 437.180211] do_syscall_64+0x1b9/0x820 [ 437.184106] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 437.189486] ? syscall_return_slowpath+0x5e0/0x5e0 [ 437.194413] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.199259] ? trace_hardirqs_on_caller+0x310/0x310 [ 437.204274] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 437.209295] ? prepare_exit_to_usermode+0x291/0x3b0 [ 437.214314] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.219162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.224347] RIP: 0033:0x457579 [ 437.227541] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 437.246455] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 23:19:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:27 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x7}, 0xffffffffffffff13) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e6e65742f73797a31eb", 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0x18}, 0xfffffffffffffe8b) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000040)}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) 23:19:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xfffffdef]}}, 0x20) 23:19:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) prctl$seccomp(0x16, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x678, 0x80000001, 0x1, 0xa3}]}) close(r0) 23:19:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_tid_address(&(0x7f0000000380)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x402040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r3, 0x3ff, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x0, {"5f604bf751b9d1fb1795a1833fbfe9a2"}, 0x71768c8a, 0xfff, 0x7}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r4 = fcntl$getown(r0, 0x9) prlimit64(r4, 0x4, &(0x7f00000003c0)={0x2, 0xf83}, &(0x7f0000000400)) [ 437.254164] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 437.261690] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 437.268961] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 437.276226] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 437.283493] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0x401, 0x1, 0xff, 0xfacc, 0x4, 0x1, 0x7, 0x400000000000, 0x8, 0x1, 0x0, 0xdaa6, 0x0, 0x5, 0x6]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={r1, 0xffffffffffffffbb}, &(0x7f00000004c0)=0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x4482, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7f, @empty, 0x6}, r3}}, 0x30) close(r0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x400500, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000001c0)) 23:19:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xffffffffa0008000]}}, 0x20) [ 437.314375] minix_free_inode: bit 1 already cleared [ 437.366510] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 23:19:28 executing program 0 (fault-call:8 fault-nth:37): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c003fb38ad2ea713eb0160d4fb033b37243711e002f2905032a2619056df671ea54d0fb2d02dd6d55ceaeca001dfb9b090150c138e9fdddb8681fd1dbd4fae391acb553bf43c20ffe161ee98829f67702287e5c0e2270ce561e989769e4e002b43c1538a5f3532301187bba74b573fd101eb910556fb870748863c1140c265b92c27896bf04c8e3caa27925d1d521b1907da41fc0aa499110e9cc2c21b647d72ec6d0eb5e"]) flock(r0, 0x2) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x20, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}, {@loose='loose'}, {@fscache='fscache'}, {@cache_fscache='cache=fscache'}]}}) [ 437.427195] overlayfs: filesystem on './file0' not supported as upperdir [ 437.443840] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 23:19:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0xffffffffffffffe6) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x1a0ffffffff]}}, 0x20) [ 437.511102] FAULT_INJECTION: forcing a failure. [ 437.511102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.523071] CPU: 0 PID: 22016 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 437.531571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.540915] Call Trace: [ 437.543506] dump_stack+0x1d3/0x2c4 [ 437.547121] ? dump_stack_print_info.cold.2+0x52/0x52 [ 437.552327] should_fail.cold.4+0xa/0x17 [ 437.556379] ? save_stack+0x43/0xd0 [ 437.560001] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 437.565105] ? dev_hard_start_xmit+0x186/0xc90 [ 437.569680] ? __dev_queue_xmit+0x2f39/0x3950 [ 437.574157] ? dev_queue_xmit+0x17/0x20 [ 437.578115] ? ip_finish_output2+0x105c/0x1860 [ 437.582703] ? ip_finish_output+0x7f8/0xf90 [ 437.587018] ? ip_output+0x21d/0x8d0 [ 437.590712] ? ip_local_out+0xc5/0x1b0 [ 437.594585] ? __ip_queue_xmit+0x9af/0x1f30 [ 437.598904] ? ip_queue_xmit+0x56/0x70 [ 437.602804] ? tcp_write_xmit+0x1676/0x5710 [ 437.607110] ? __tcp_push_pending_frames+0xb2/0x290 [ 437.612120] ? tcp_push+0x662/0x900 [ 437.615754] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 437.620442] ? tcp_sendmsg+0x2f/0x50 [ 437.624177] ? inet_sendmsg+0x19c/0x690 [ 437.628154] ? sock_sendmsg+0xd5/0x120 [ 437.632043] ? __x64_sys_sendto+0xe1/0x1a0 [ 437.636262] ? do_syscall_64+0x1b9/0x820 [ 437.640306] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.645661] ? trace_hardirqs_on+0xbd/0x310 [ 437.649979] ? __kmalloc_node_track_caller+0x3c/0x70 [ 437.655080] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 437.660529] ? kasan_unpoison_shadow+0x35/0x50 [ 437.665099] ? kasan_unpoison_shadow+0x35/0x50 [ 437.669855] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 437.674909] ? skb_release_data+0x1c4/0x880 [ 437.679267] ? refcount_add_not_zero_checked+0x330/0x330 [ 437.684702] ? skb_tx_error+0x2f0/0x2f0 [ 437.688672] ? __kmalloc_node_track_caller+0x50/0x70 [ 437.693764] __alloc_pages_nodemask+0x34b/0xdd0 [ 437.698444] ? kasan_check_write+0x14/0x20 [ 437.702677] ? pskb_expand_head+0x6b3/0x10f0 [ 437.707074] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 437.712076] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 437.716588] ? save_stack+0xa9/0xd0 [ 437.720214] ? save_stack+0x43/0xd0 [ 437.723836] ? kasan_kmalloc+0xc7/0xe0 [ 437.727721] ? kasan_slab_alloc+0x12/0x20 [ 437.731863] ? skb_clone+0x1bb/0x500 [ 437.735558] ? dev_queue_xmit_nit+0x414/0xb30 [ 437.740035] ? dev_hard_start_xmit+0x186/0xc90 [ 437.744623] ? __dev_queue_xmit+0x2f39/0x3950 [ 437.749104] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 437.754643] alloc_pages_current+0x10c/0x210 [ 437.759039] skb_copy_ubufs+0x4c2/0x1b30 [ 437.763083] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.768450] ? memcpy+0x45/0x50 [ 437.771738] ? skb_release_data+0x880/0x880 [ 437.776084] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 437.780571] ? lock_downgrade+0x900/0x900 [ 437.784716] ? trace_hardirqs_on+0xbd/0x310 [ 437.789038] ? pvclock_read_flags+0x160/0x160 [ 437.793513] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 437.797990] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 437.803426] ? kvm_clock_read+0x18/0x30 [ 437.807384] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 437.812430] ? ktime_get_with_offset+0x310/0x460 [ 437.817184] ? ktime_get+0x400/0x400 [ 437.820896] ? check_preemption_disabled+0x48/0x200 [ 437.825922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.831463] ? netif_rx_internal+0x1aa/0xa30 [ 437.835857] dev_queue_xmit_nit+0x90a/0xb30 [ 437.840199] ? default_device_exit+0x2c0/0x2c0 [ 437.844776] ? rb_next+0x140/0x140 [ 437.848317] dev_hard_start_xmit+0x186/0xc90 [ 437.852712] ? dev_direct_xmit+0x6b0/0x6b0 [ 437.856956] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 437.862495] ? netif_skb_features+0x690/0xb70 [ 437.866977] ? validate_xmit_xfrm+0x1ef/0xda0 [ 437.871462] ? lock_acquire+0x1ed/0x520 [ 437.875429] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 437.880977] ? validate_xmit_skb+0x80c/0xf30 [ 437.885369] ? lock_release+0x970/0x970 [ 437.889348] ? netif_skb_features+0xb70/0xb70 [ 437.893850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.899376] ? check_preemption_disabled+0x48/0x200 [ 437.904405] ? check_preemption_disabled+0x48/0x200 [ 437.909441] __dev_queue_xmit+0x2f39/0x3950 [ 437.913780] ? mark_held_locks+0x130/0x130 [ 437.918020] ? netdev_pick_tx+0x2d0/0x2d0 [ 437.922164] ? netif_skb_features+0x690/0xb70 [ 437.926681] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 437.932474] ? mark_held_locks+0x130/0x130 [ 437.936739] ? mark_held_locks+0x130/0x130 [ 437.940973] ? lock_downgrade+0x900/0x900 [ 437.945109] ? trace_hardirqs_on+0xbd/0x310 [ 437.949418] ? _raw_spin_unlock_bh+0x30/0x40 [ 437.953829] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 437.959289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.965278] ? mark_held_locks+0x130/0x130 [ 437.969519] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 437.974182] ? tcp_packet+0x6ad/0x58d2 [ 437.978065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.983592] ? select_task_rq_fair+0x3590/0x3590 [ 437.988333] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 437.993511] ? ip_finish_output+0x7f8/0xf90 [ 437.997817] ? lock_downgrade+0x900/0x900 [ 438.001964] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 438.007229] ? trace_hardirqs_on+0xbd/0x310 [ 438.011538] ? ip_finish_output+0x7f8/0xf90 [ 438.015859] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 438.021312] dev_queue_xmit+0x17/0x20 [ 438.025113] ? dev_queue_xmit+0x17/0x20 [ 438.029072] ip_finish_output2+0x105c/0x1860 [ 438.033469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.038996] ? ip_copy_metadata+0xe10/0xe10 [ 438.043307] ? cgroup_dev_is_valid_access+0x150/0x150 [ 438.048484] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 438.053752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.059273] ? ipv4_mtu+0x37d/0x590 [ 438.062894] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 438.068362] ? __do_replace+0xab0/0xab0 [ 438.072327] ip_finish_output+0x7f8/0xf90 [ 438.076474] ? ip_finish_output+0x7f8/0xf90 [ 438.080802] ? ip_fragment.constprop.50+0x240/0x240 [ 438.085803] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 438.090817] ? nf_nat_ipv4_out+0x2e1/0x340 [ 438.095039] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 438.100219] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 438.105222] ? nf_hook_slow+0x11e/0x1c0 [ 438.109186] ip_output+0x21d/0x8d0 [ 438.112713] ? ip_mc_output+0x15a0/0x15a0 [ 438.116846] ? ip_fragment.constprop.50+0x240/0x240 [ 438.121847] ? sock_alloc_send_skb+0x40/0x40 [ 438.126244] ? lock_release+0x970/0x970 [ 438.130205] ? check_same_owner+0x330/0x330 [ 438.134530] ip_local_out+0xc5/0x1b0 [ 438.138251] __ip_queue_xmit+0x9af/0x1f30 [ 438.142415] ? ip_build_and_send_pkt+0xc80/0xc80 [ 438.147180] ? tcp_schedule_loss_probe+0x530/0x530 [ 438.152110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.157634] ? tcp_established_options+0x366/0x5b0 [ 438.162548] ? tcp_select_initial_window+0x400/0x400 [ 438.167653] ip_queue_xmit+0x56/0x70 [ 438.171354] __tcp_transmit_skb+0x1bc5/0x3b00 [ 438.175838] ? __tcp_select_window+0x9e0/0x9e0 [ 438.180413] ? pvclock_read_flags+0x160/0x160 [ 438.184909] ? tcp_write_xmit+0xf1/0x5710 [ 438.189080] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 438.194530] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 438.199546] ? tcp_rtx_synack+0x730/0x730 [ 438.203692] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 438.208191] ? lock_downgrade+0x900/0x900 [ 438.212344] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 438.217797] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.223358] tcp_write_xmit+0x1676/0x5710 [ 438.227522] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 438.232190] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 438.237130] ? ___pskb_trim+0x89d/0x1320 [ 438.241205] ? skb_condense+0x3d0/0x3d0 [ 438.245186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.250735] __tcp_push_pending_frames+0xb2/0x290 [ 438.255576] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 438.260596] tcp_push+0x662/0x900 [ 438.264224] ? __sk_mem_schedule+0xac/0xe0 [ 438.268463] ? tcp_md5_hash_key+0x250/0x250 [ 438.272791] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 438.277835] ? ___pskb_trim+0x1320/0x1320 [ 438.282014] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 438.287556] tcp_sendmsg_locked+0x3296/0x3f90 [ 438.293981] ? lock_downgrade+0x900/0x900 [ 438.298130] ? shrink_dcache_sb+0x350/0x350 [ 438.302456] ? tcp_sendpage+0x60/0x60 [ 438.306261] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.311807] ? aa_label_sk_perm+0xfc/0xa50 [ 438.316053] ? aa_profile_af_perm+0x410/0x410 [ 438.320553] ? ksys_dup3+0x680/0x680 [ 438.324272] ? lock_acquire+0x1ed/0x520 [ 438.328244] ? tcp_sendmsg+0x21/0x50 [ 438.331974] ? trace_hardirqs_on+0xbd/0x310 [ 438.336300] ? lock_release+0x970/0x970 [ 438.340276] ? lock_sock_nested+0xe2/0x120 [ 438.344512] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 438.349982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.355517] ? check_preemption_disabled+0x48/0x200 [ 438.360532] ? lock_sock_nested+0x9a/0x120 [ 438.364767] ? lock_sock_nested+0x9a/0x120 [ 438.369001] ? __local_bh_enable_ip+0x160/0x260 [ 438.373672] tcp_sendmsg+0x2f/0x50 [ 438.377213] inet_sendmsg+0x19c/0x690 [ 438.381016] ? ipip_gro_receive+0x100/0x100 [ 438.385343] ? apparmor_socket_sendmsg+0x29/0x30 [ 438.390109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.395674] ? security_socket_sendmsg+0x94/0xc0 [ 438.400432] ? ipip_gro_receive+0x100/0x100 [ 438.404756] sock_sendmsg+0xd5/0x120 [ 438.408475] __sys_sendto+0x3d7/0x670 [ 438.412280] ? __ia32_sys_getpeername+0xb0/0xb0 [ 438.416973] ? wait_for_completion+0x8a0/0x8a0 [ 438.421555] ? lock_release+0x970/0x970 [ 438.425526] ? check_preemption_disabled+0x48/0x200 [ 438.430542] ? fsnotify_first_mark+0x350/0x350 [ 438.435121] ? __fsnotify_parent+0xcc/0x420 [ 438.439470] ? fsnotify+0xf10/0xf10 [ 438.443100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.448644] ? __sb_end_write+0xd9/0x110 [ 438.452712] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 438.458248] ? fput+0x130/0x1a0 [ 438.461528] ? ksys_write+0x1ae/0x260 [ 438.465335] ? trace_hardirqs_on+0xbd/0x310 [ 438.469671] ? __ia32_sys_read+0xb0/0xb0 [ 438.473733] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.479100] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 438.484556] __x64_sys_sendto+0xe1/0x1a0 [ 438.488619] do_syscall_64+0x1b9/0x820 [ 438.492502] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 438.497867] ? syscall_return_slowpath+0x5e0/0x5e0 [ 438.502797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.507646] ? trace_hardirqs_on_caller+0x310/0x310 [ 438.513019] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 438.518051] ? prepare_exit_to_usermode+0x291/0x3b0 [ 438.523070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.527931] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.533183] RIP: 0033:0x457579 [ 438.536376] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.555274] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 23:19:30 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x400, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000002c0)=""/203) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000004c0)={0x1, {0x0, 0x1c9c380}, 0x8000000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000540)=""/134) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) write$nbd(r2, &(0x7f0000000040)={0x67446698, 0x0, 0x3, 0x4, 0x1, "3c657811439fbfb6774c020fc8c65e4451cd4fc1447c61556efb"}, 0x2a) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) mount$9p_virtio(&(0x7f0000000080)='pagemap\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xa, &(0x7f0000000640)=ANY=[@ANYBLOB="7472610280485f979a6e696f2c616669643d30006666666666666666666666666666c00fb92af06c2c0700000073733d757300d4e74730c2740000000000000e0000000000debc0b3deae7dc36b7ee000000000000006fd2719a1910879c88fd3b473fefd22816e5702aea827bf4ce353b8e75c839cc11d98f3f209a56d422f99c36c5846a724dc04a35ac87b48f3105aef3b9494a586168daaf85618b8162e75a00e66ea14f34507c99a466e0d97d168900220090f482c30da8ab8e7822fa187be5aabb"]) tkill(0x0, 0x14) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000003c0)={{0x9, 0x9, 0x9, 0x0, 0xff, 0x2}, 0x3, 0x20, 0x932, 0x0, 0xfff, "1ad0622b1411fb13122a019d4ceacee0a4fe8384c96fb2b1911b60f01f7ab4d35e4916b466e9e670c8cfcffb0d8db50e755a66e44402b7e6f30cd792260b068e38dce009faafa1c0d256fec6d6c6c301be396f54094a816bcc35371f90602413004b45966ddf9415ae978f9cde9e93003ba1e56a9ac35e1477b748ac0da70c51"}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x171, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) modify_ldt$write2(0x11, &(0x7f0000000080), 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x4d0]}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0) [ 438.563475] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 438.570741] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 438.578013] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 438.585278] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 438.592546] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 [ 438.638619] 9pnet: Insufficient options for proto=fd [ 438.659028] 9pnet: Insufficient options for proto=fd 23:19:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x0, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:30 executing program 0 (fault-call:8 fault-nth:38): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 438.746050] FAULT_INJECTION: forcing a failure. [ 438.746050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.758062] CPU: 0 PID: 22032 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 438.766561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.775920] Call Trace: [ 438.778561] dump_stack+0x1d3/0x2c4 [ 438.782210] ? dump_stack_print_info.cold.2+0x52/0x52 [ 438.787441] should_fail.cold.4+0xa/0x17 [ 438.791516] ? save_stack+0x43/0xd0 [ 438.795176] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 438.800291] ? dev_hard_start_xmit+0x186/0xc90 [ 438.804880] ? __dev_queue_xmit+0x2f39/0x3950 [ 438.809382] ? dev_queue_xmit+0x17/0x20 [ 438.813386] ? ip_finish_output2+0x105c/0x1860 [ 438.817985] ? ip_finish_output+0x7f8/0xf90 [ 438.822312] ? ip_output+0x21d/0x8d0 [ 438.826037] ? ip_local_out+0xc5/0x1b0 [ 438.829944] ? __ip_queue_xmit+0x9af/0x1f30 [ 438.834283] ? ip_queue_xmit+0x56/0x70 [ 438.838183] ? tcp_write_xmit+0x1676/0x5710 [ 438.842515] ? __tcp_push_pending_frames+0xb2/0x290 [ 438.847543] ? tcp_push+0x662/0x900 [ 438.851179] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 438.855853] ? tcp_sendmsg+0x2f/0x50 [ 438.859587] ? inet_sendmsg+0x19c/0x690 [ 438.863583] ? sock_sendmsg+0xd5/0x120 [ 438.867485] ? __x64_sys_sendto+0xe1/0x1a0 [ 438.871729] ? do_syscall_64+0x1b9/0x820 [ 438.875801] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.881185] ? trace_hardirqs_on+0xbd/0x310 [ 438.885522] ? __kmalloc_node_track_caller+0x3c/0x70 [ 438.890664] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 438.896125] ? kasan_unpoison_shadow+0x35/0x50 [ 438.900727] ? kasan_unpoison_shadow+0x35/0x50 [ 438.905320] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 438.910349] ? skb_release_data+0x1c4/0x880 [ 438.915558] ? refcount_add_not_zero_checked+0x330/0x330 [ 438.921020] ? skb_tx_error+0x2f0/0x2f0 [ 438.925011] ? __kmalloc_node_track_caller+0x50/0x70 [ 438.930127] __alloc_pages_nodemask+0x34b/0xdd0 [ 438.934811] ? kasan_check_write+0x14/0x20 [ 438.939059] ? pskb_expand_head+0x6b3/0x10f0 [ 438.943481] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 438.948521] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 438.953051] ? save_stack+0xa9/0xd0 [ 438.956685] ? save_stack+0x43/0xd0 [ 438.960322] ? kasan_kmalloc+0xc7/0xe0 [ 438.964217] ? kasan_slab_alloc+0x12/0x20 [ 438.968389] ? skb_clone+0x1bb/0x500 [ 438.972125] ? dev_queue_xmit_nit+0x414/0xb30 [ 438.976628] ? dev_hard_start_xmit+0x186/0xc90 [ 438.981475] ? __dev_queue_xmit+0x2f39/0x3950 [ 438.986958] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 438.993552] alloc_pages_current+0x10c/0x210 [ 438.998943] skb_copy_ubufs+0x4c2/0x1b30 [ 439.003740] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.010245] ? memcpy+0x45/0x50 [ 439.014256] ? skb_release_data+0x880/0x880 [ 439.019458] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 439.024872] ? lock_downgrade+0x900/0x900 [ 439.029896] ? trace_hardirqs_on+0xbd/0x310 [ 439.035199] ? pvclock_read_flags+0x160/0x160 [ 439.040652] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 439.045175] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 439.050665] ? kvm_clock_read+0x18/0x30 [ 439.054652] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 439.059678] ? ktime_get_with_offset+0x310/0x460 [ 439.064485] ? ktime_get+0x400/0x400 [ 439.068227] dev_queue_xmit_nit+0x90a/0xb30 [ 439.072570] ? default_device_exit+0x2c0/0x2c0 [ 439.077176] ? rb_next+0x140/0x140 [ 439.080736] dev_hard_start_xmit+0x186/0xc90 [ 439.085181] ? dev_direct_xmit+0x6b0/0x6b0 [ 439.089448] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.094997] ? netif_skb_features+0x690/0xb70 [ 439.099506] ? validate_xmit_xfrm+0x1ef/0xda0 [ 439.104038] ? lock_acquire+0x1ed/0x520 [ 439.108026] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.113576] ? validate_xmit_skb+0x80c/0xf30 [ 439.118000] ? lock_release+0x970/0x970 [ 439.121997] ? netif_skb_features+0xb70/0xb70 [ 439.126504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.132049] ? check_preemption_disabled+0x48/0x200 [ 439.137069] ? check_preemption_disabled+0x48/0x200 [ 439.142103] __dev_queue_xmit+0x2f39/0x3950 [ 439.146450] ? mark_held_locks+0x130/0x130 [ 439.150706] ? netdev_pick_tx+0x2d0/0x2d0 [ 439.154866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.160427] ? mark_held_locks+0x130/0x130 [ 439.164975] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 439.171323] ? mark_held_locks+0x130/0x130 [ 439.175569] ? mark_held_locks+0x130/0x130 [ 439.179812] ? lock_downgrade+0x900/0x900 [ 439.184010] ? trace_hardirqs_on+0xbd/0x310 [ 439.188343] ? _raw_spin_unlock_bh+0x30/0x40 [ 439.192773] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 439.198250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.203806] ? mark_held_locks+0x130/0x130 [ 439.208051] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 439.212737] ? tcp_packet+0x6ad/0x58d2 [ 439.216699] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 439.221910] ? ip_finish_output+0x7f8/0xf90 [ 439.226259] ? lock_downgrade+0x900/0x900 [ 439.230417] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 439.235709] ? trace_hardirqs_on+0xbd/0x310 [ 439.240043] ? ip_finish_output+0x7f8/0xf90 [ 439.244391] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 439.249857] dev_queue_xmit+0x17/0x20 [ 439.253669] ? dev_queue_xmit+0x17/0x20 [ 439.257672] ip_finish_output2+0x105c/0x1860 [ 439.262094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.267679] ? ip_copy_metadata+0xe10/0xe10 [ 439.272017] ? cgroup_dev_is_valid_access+0x150/0x150 [ 439.277220] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 439.282513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.288056] ? ipv4_mtu+0x37d/0x590 [ 439.291718] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 439.297702] ? __do_replace+0xab0/0xab0 [ 439.302590] ip_finish_output+0x7f8/0xf90 [ 439.306752] ? ip_finish_output+0x7f8/0xf90 [ 439.311090] ? ip_fragment.constprop.50+0x240/0x240 [ 439.316131] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 439.321160] ? nf_nat_ipv4_out+0x2e1/0x340 [ 439.325409] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 439.330612] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 439.335642] ? nf_hook_slow+0x11e/0x1c0 [ 439.339635] ip_output+0x21d/0x8d0 [ 439.343230] ? ip_mc_output+0x15a0/0x15a0 [ 439.347394] ? ip_fragment.constprop.50+0x240/0x240 [ 439.352422] ? sock_alloc_send_skb+0x40/0x40 [ 439.356853] ? lock_release+0x970/0x970 [ 439.360855] ? check_same_owner+0x330/0x330 [ 439.365191] ip_local_out+0xc5/0x1b0 [ 439.368920] __ip_queue_xmit+0x9af/0x1f30 [ 439.373106] ? ip_build_and_send_pkt+0xc80/0xc80 [ 439.377876] ? tcp_schedule_loss_probe+0x530/0x530 [ 439.382813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.388383] ? tcp_established_options+0x366/0x5b0 [ 439.393327] ? tcp_select_initial_window+0x400/0x400 [ 439.398451] ip_queue_xmit+0x56/0x70 [ 439.402176] __tcp_transmit_skb+0x1bc5/0x3b00 [ 439.406696] ? __tcp_select_window+0x9e0/0x9e0 [ 439.411322] ? pvclock_read_flags+0x160/0x160 [ 439.415843] ? tcp_write_xmit+0xf1/0x5710 [ 439.420005] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 439.425485] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 439.430515] ? tcp_rtx_synack+0x730/0x730 [ 439.434678] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 439.439221] ? lock_downgrade+0x900/0x900 [ 439.443387] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 439.448881] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.454439] tcp_write_xmit+0x1676/0x5710 [ 439.458617] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 439.463306] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 439.468255] ? ___pskb_trim+0x89d/0x1320 [ 439.472337] ? skb_condense+0x3d0/0x3d0 [ 439.476328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.481887] __tcp_push_pending_frames+0xb2/0x290 [ 439.486756] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 439.491785] tcp_push+0x662/0x900 [ 439.495252] ? __sk_mem_schedule+0xac/0xe0 [ 439.499504] ? tcp_md5_hash_key+0x250/0x250 [ 439.503839] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 439.508870] ? ___pskb_trim+0x1320/0x1320 [ 439.513041] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 439.518591] tcp_sendmsg_locked+0x3296/0x3f90 [ 439.523103] ? lock_downgrade+0x900/0x900 [ 439.527257] ? shrink_dcache_sb+0x350/0x350 [ 439.531600] ? tcp_sendpage+0x60/0x60 [ 439.535428] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.540985] ? aa_label_sk_perm+0xfc/0xa50 [ 439.545235] ? aa_profile_af_perm+0x410/0x410 [ 439.549739] ? ksys_dup3+0x680/0x680 [ 439.553486] ? lock_acquire+0x1ed/0x520 [ 439.557470] ? tcp_sendmsg+0x21/0x50 [ 439.561200] ? trace_hardirqs_on+0xbd/0x310 [ 439.565550] ? lock_release+0x970/0x970 [ 439.569544] ? lock_sock_nested+0xe2/0x120 [ 439.573793] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 439.579253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.584796] ? check_preemption_disabled+0x48/0x200 [ 439.589829] ? lock_sock_nested+0x9a/0x120 [ 439.594080] ? lock_sock_nested+0x9a/0x120 [ 439.598324] ? __local_bh_enable_ip+0x160/0x260 [ 439.603009] tcp_sendmsg+0x2f/0x50 [ 439.606559] inet_sendmsg+0x19c/0x690 [ 439.610368] ? ipip_gro_receive+0x100/0x100 [ 439.614716] ? apparmor_socket_sendmsg+0x29/0x30 [ 439.619481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.625028] ? security_socket_sendmsg+0x94/0xc0 [ 439.629791] ? ipip_gro_receive+0x100/0x100 [ 439.634137] sock_sendmsg+0xd5/0x120 [ 439.637863] __sys_sendto+0x3d7/0x670 [ 439.641693] ? __ia32_sys_getpeername+0xb0/0xb0 [ 439.646379] ? wait_for_completion+0x8a0/0x8a0 [ 439.650982] ? lock_release+0x970/0x970 [ 439.654980] ? check_preemption_disabled+0x48/0x200 [ 439.660030] ? fsnotify_first_mark+0x350/0x350 [ 439.664633] ? __fsnotify_parent+0xcc/0x420 [ 439.669115] ? fsnotify+0xf10/0xf10 [ 439.672791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.678356] ? __sb_end_write+0xd9/0x110 [ 439.682426] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 439.687975] ? fput+0x130/0x1a0 [ 439.691271] ? ksys_write+0x1ae/0x260 [ 439.695088] ? trace_hardirqs_on+0xbd/0x310 [ 439.699431] ? __ia32_sys_read+0xb0/0xb0 [ 439.703526] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.708904] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 439.714916] __x64_sys_sendto+0xe1/0x1a0 [ 439.719302] do_syscall_64+0x1b9/0x820 [ 439.723201] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 439.728575] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.733511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.738377] ? trace_hardirqs_on_caller+0x310/0x310 [ 439.743407] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 439.748438] ? prepare_exit_to_usermode+0x291/0x3b0 [ 439.753476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.758340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.763538] RIP: 0033:0x457579 [ 439.766743] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.785661] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 439.793382] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 23:19:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) 23:19:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xeffdffffffffffff]}}, 0x20) [ 439.800656] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 439.807954] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 439.815243] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 439.822546] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:31 executing program 1: mq_open(&(0x7f0000000000)='memory.events\x00', 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) personality(0x510000f) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000100)=""/1, &(0x7f0000000040)=0xfffffffffffffdf6) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000540)={0x7, 0x6, 0x6}) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[]}}, 0x4000000) shutdown(r1, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb21}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x8040, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d16000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x0) socketpair(0x3, 0x6, 0x5e880c4f, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000380)={0x1a, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @link_local}, 0x10) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x1, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18000054307dccd9e7eeca0200000000000000004a0a1c2500611858000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) listen(r5, 0x0) listen(r5, 0x0) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x100, 0xe3) ioctl$TIOCCBRK(r4, 0x5428) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000400)) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x85000040}, 0xc) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) socket$inet(0x2, 0x4000000000000001, 0x0) 23:19:31 executing program 2: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) mprotect(&(0x7f00003b8000/0x3000)=nil, 0x3000, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) 23:19:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xa0008000]}}, 0x20) 23:19:31 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) fsync(r0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x2) [ 440.089799] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:19:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xffffffff00000000]}}, 0x20) 23:19:31 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc4, r2, 0x408, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xa8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0xf012, 0x2, 0x10000, 0x10001}, {0x5b7, 0x8001, 0x8001, 0x100}, {0x5, 0x4, 0x6, 0x1f}, {0xaa4, 0x1, 0x800, 0x3}, {0xf6d5, 0x7fffffff, 0x45, 0x27}, {0x3, 0x35b5ece4, 0x825, 0x1f}, {0x2, 0x7fff, 0x5, 0x4}]}}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) bpf$MAP_CREATE(0x4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) io_setup(0x8, &(0x7f0000000000)) [ 440.134704] minix_free_inode: bit 1 already cleared 23:19:31 executing program 0 (fault-call:8 fault-nth:39): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x0, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:31 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) sysfs$3(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000380)=""/205}}, 0x68) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x1012, r2, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 23:19:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x40030000000000]}}, 0x20) 23:19:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x100}, 0x8) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x2000000000000000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x40000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}}, 0x0) 23:19:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x1000000]}}, 0x20) [ 440.443851] syz-executor1 (22053) used greatest stack depth: 9192 bytes left [ 440.588820] FAULT_INJECTION: forcing a failure. [ 440.588820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.600761] CPU: 1 PID: 22084 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 440.609256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.618622] Call Trace: [ 440.621231] dump_stack+0x1d3/0x2c4 [ 440.624893] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.630133] should_fail.cold.4+0xa/0x17 [ 440.634218] ? save_stack+0x43/0xd0 23:19:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x400040, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x40) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000200)=0x2, 0x4) recvfrom$llc(r1, &(0x7f0000000480)=""/182, 0xb6, 0x2040, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x10001, @mcast1, 0x81}], 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='}eah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10, 0x800) close(r0) [ 440.637858] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.642977] ? dev_hard_start_xmit+0x186/0xc90 [ 440.647590] ? __dev_queue_xmit+0x2f39/0x3950 [ 440.652124] ? dev_queue_xmit+0x17/0x20 [ 440.656110] ? ip_finish_output2+0x105c/0x1860 [ 440.660732] ? ip_finish_output+0x7f8/0xf90 [ 440.665062] ? ip_output+0x21d/0x8d0 [ 440.668785] ? ip_local_out+0xc5/0x1b0 [ 440.672681] ? __ip_queue_xmit+0x9af/0x1f30 [ 440.677011] ? ip_queue_xmit+0x56/0x70 [ 440.680921] ? tcp_write_xmit+0x1676/0x5710 [ 440.685262] ? __tcp_push_pending_frames+0xb2/0x290 [ 440.690288] ? tcp_push+0x662/0x900 [ 440.693945] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 440.698639] ? tcp_sendmsg+0x2f/0x50 [ 440.702368] ? inet_sendmsg+0x19c/0x690 [ 440.706349] ? sock_sendmsg+0xd5/0x120 [ 440.710251] ? __x64_sys_sendto+0xe1/0x1a0 [ 440.714502] ? do_syscall_64+0x1b9/0x820 [ 440.718571] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.723959] ? trace_hardirqs_on+0xbd/0x310 [ 440.728291] ? __kmalloc_node_track_caller+0x3c/0x70 [ 440.733402] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 440.738860] ? kasan_unpoison_shadow+0x35/0x50 [ 440.743486] ? kasan_unpoison_shadow+0x35/0x50 [ 440.748084] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.753123] ? skb_release_data+0x1c4/0x880 [ 440.757500] ? refcount_add_not_zero_checked+0x330/0x330 [ 440.762975] ? skb_tx_error+0x2f0/0x2f0 [ 440.766969] ? __kmalloc_node_track_caller+0x50/0x70 [ 440.772088] __alloc_pages_nodemask+0x34b/0xdd0 [ 440.776766] ? kasan_check_write+0x14/0x20 [ 440.781006] ? pskb_expand_head+0x6b3/0x10f0 23:19:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xfffffffffffffdef]}}, 0x20) [ 440.785435] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 440.785479] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 440.785498] ? save_stack+0xa9/0xd0 [ 440.785516] ? save_stack+0x43/0xd0 [ 440.795228] ? kasan_kmalloc+0xc7/0xe0 [ 440.795244] ? kasan_slab_alloc+0x12/0x20 [ 440.795259] ? skb_clone+0x1bb/0x500 [ 440.795271] ? dev_queue_xmit_nit+0x414/0xb30 [ 440.795284] ? dev_hard_start_xmit+0x186/0xc90 [ 440.795296] ? __dev_queue_xmit+0x2f39/0x3950 [ 440.795317] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 440.816660] alloc_pages_current+0x10c/0x210 [ 440.816679] skb_copy_ubufs+0x4c2/0x1b30 [ 440.816710] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.840191] ? memcpy+0x45/0x50 [ 440.840216] ? skb_release_data+0x880/0x880 [ 440.840229] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 440.840252] ? lock_downgrade+0x900/0x900 [ 440.857249] ? trace_hardirqs_on+0xbd/0x310 [ 440.857273] ? pvclock_read_flags+0x160/0x160 [ 440.857286] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 440.857307] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 440.885232] ? kvm_clock_read+0x18/0x30 23:19:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x34000]}}, 0x20) [ 440.889223] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.889241] ? ktime_get_with_offset+0x310/0x460 [ 440.889261] ? ktime_get+0x400/0x400 [ 440.889275] ? check_preemption_disabled+0x48/0x200 [ 440.889295] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.889310] ? netif_rx_internal+0x1aa/0xa30 [ 440.889329] dev_queue_xmit_nit+0x90a/0xb30 [ 440.917746] ? default_device_exit+0x2c0/0x2c0 [ 440.926639] ? rb_next+0x140/0x140 [ 440.926673] dev_hard_start_xmit+0x186/0xc90 [ 440.926692] ? dev_direct_xmit+0x6b0/0x6b0 [ 440.938851] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.944400] ? netif_skb_features+0x690/0xb70 [ 440.948909] ? validate_xmit_xfrm+0x1ef/0xda0 [ 440.953467] ? lock_acquire+0x1ed/0x520 [ 440.957478] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.963036] ? validate_xmit_skb+0x80c/0xf30 [ 440.967472] ? lock_release+0x970/0x970 [ 440.971472] ? netif_skb_features+0xb70/0xb70 [ 440.975998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.981549] ? check_preemption_disabled+0x48/0x200 [ 440.986596] ? check_preemption_disabled+0x48/0x200 [ 440.991640] __dev_queue_xmit+0x2f39/0x3950 [ 440.995984] ? mark_held_locks+0x130/0x130 [ 441.000235] ? netdev_pick_tx+0x2d0/0x2d0 [ 441.004396] ? netif_skb_features+0x690/0xb70 [ 441.008932] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 441.014801] ? mark_held_locks+0x130/0x130 [ 441.019066] ? mark_held_locks+0x130/0x130 [ 441.023313] ? lock_downgrade+0x900/0x900 [ 441.027498] ? trace_hardirqs_on+0xbd/0x310 [ 441.031864] ? _raw_spin_unlock_bh+0x30/0x40 [ 441.036292] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 441.041762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.047313] ? mark_held_locks+0x130/0x130 [ 441.051561] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 441.056247] ? tcp_packet+0x6ad/0x58d2 [ 441.060180] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 441.065394] ? ip_finish_output+0x7f8/0xf90 [ 441.069730] ? lock_downgrade+0x900/0x900 [ 441.073886] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 441.079183] ? trace_hardirqs_on+0xbd/0x310 [ 441.083517] ? ip_finish_output+0x7f8/0xf90 [ 441.087856] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 441.093329] dev_queue_xmit+0x17/0x20 [ 441.093344] ? dev_queue_xmit+0x17/0x20 [ 441.093360] ip_finish_output2+0x105c/0x1860 [ 441.093378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.093396] ? ip_copy_metadata+0xe10/0xe10 [ 441.093416] ? cgroup_dev_is_valid_access+0x150/0x150 [ 441.093434] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 441.093459] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.093473] ? ipv4_mtu+0x37d/0x590 [ 441.093489] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 441.093506] ? __do_replace+0xab0/0xab0 [ 441.093531] ip_finish_output+0x7f8/0xf90 [ 441.093546] ? ip_finish_output+0x7f8/0xf90 [ 441.093567] ? ip_fragment.constprop.50+0x240/0x240 [ 441.125904] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 441.126064] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 441.126081] ? nf_nat_ipv4_out+0x2e1/0x340 [ 441.126102] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 441.180185] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 441.185214] ? nf_hook_slow+0x11e/0x1c0 23:19:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x200000000000000]}}, 0x20) [ 441.189203] ip_output+0x21d/0x8d0 [ 441.192753] ? ip_mc_output+0x15a0/0x15a0 [ 441.196914] ? ip_fragment.constprop.50+0x240/0x240 [ 441.201970] ? sock_alloc_send_skb+0x40/0x40 [ 441.206458] ? lock_release+0x970/0x970 [ 441.210461] ? check_same_owner+0x330/0x330 [ 441.214792] ip_local_out+0xc5/0x1b0 [ 441.218519] __ip_queue_xmit+0x9af/0x1f30 [ 441.222699] ? ip_build_and_send_pkt+0xc80/0xc80 [ 441.227476] ? tcp_schedule_loss_probe+0x530/0x530 [ 441.232413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.237995] ? tcp_established_options+0x366/0x5b0 [ 441.242951] ? tcp_select_initial_window+0x400/0x400 [ 441.248074] ip_queue_xmit+0x56/0x70 [ 441.251805] __tcp_transmit_skb+0x1bc5/0x3b00 [ 441.254313] minix_free_inode: bit 1 already cleared [ 441.256334] ? __tcp_select_window+0x9e0/0x9e0 [ 441.256350] ? pvclock_read_flags+0x160/0x160 [ 441.256370] ? tcp_write_xmit+0xf1/0x5710 [ 441.274597] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 441.280081] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 441.285103] ? tcp_rtx_synack+0x730/0x730 [ 441.289257] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 441.293759] ? lock_downgrade+0x900/0x900 [ 441.297908] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 441.303367] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.308913] tcp_write_xmit+0x1676/0x5710 [ 441.313089] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 441.317756] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 441.322962] ? ___pskb_trim+0x89d/0x1320 [ 441.327752] ? skb_condense+0x3d0/0x3d0 [ 441.332698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.338243] __tcp_push_pending_frames+0xb2/0x290 [ 441.343095] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 441.348115] tcp_push+0x662/0x900 [ 441.351566] ? __sk_mem_schedule+0xac/0xe0 [ 441.355805] ? tcp_md5_hash_key+0x250/0x250 [ 441.360135] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 441.365157] ? ___pskb_trim+0x1320/0x1320 [ 441.369314] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 441.374855] tcp_sendmsg_locked+0x3296/0x3f90 [ 441.379355] ? lock_downgrade+0x900/0x900 [ 441.383502] ? shrink_dcache_sb+0x350/0x350 [ 441.387826] ? tcp_sendpage+0x60/0x60 [ 441.391626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.397169] ? aa_label_sk_perm+0xfc/0xa50 [ 441.401410] ? aa_profile_af_perm+0x410/0x410 [ 441.406517] ? ksys_dup3+0x680/0x680 [ 441.410583] ? lock_acquire+0x1ed/0x520 [ 441.414559] ? tcp_sendmsg+0x21/0x50 [ 441.418288] ? trace_hardirqs_on+0xbd/0x310 [ 441.422620] ? lock_release+0x970/0x970 [ 441.426603] ? lock_sock_nested+0xe2/0x120 [ 441.430851] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 441.436313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.441861] ? check_preemption_disabled+0x48/0x200 [ 441.446874] ? lock_sock_nested+0x9a/0x120 [ 441.451109] ? lock_sock_nested+0x9a/0x120 [ 441.455346] ? __local_bh_enable_ip+0x160/0x260 [ 441.460016] tcp_sendmsg+0x2f/0x50 [ 441.463554] inet_sendmsg+0x19c/0x690 [ 441.467386] ? ipip_gro_receive+0x100/0x100 [ 441.471724] ? apparmor_socket_sendmsg+0x29/0x30 [ 441.476489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.482031] ? security_socket_sendmsg+0x94/0xc0 [ 441.486789] ? ipip_gro_receive+0x100/0x100 [ 441.491117] sock_sendmsg+0xd5/0x120 [ 441.494866] __sys_sendto+0x3d7/0x670 [ 441.498674] ? __ia32_sys_getpeername+0xb0/0xb0 [ 441.503350] ? wait_for_completion+0x8a0/0x8a0 [ 441.507931] ? lock_release+0x970/0x970 [ 441.511923] ? check_preemption_disabled+0x48/0x200 [ 441.517008] ? fsnotify_first_mark+0x350/0x350 [ 441.521610] ? __fsnotify_parent+0xcc/0x420 [ 441.525954] ? fsnotify+0xf10/0xf10 [ 441.529584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.535129] ? __sb_end_write+0xd9/0x110 [ 441.539198] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 441.544735] ? fput+0x130/0x1a0 [ 441.548011] ? ksys_write+0x1ae/0x260 [ 441.551812] ? trace_hardirqs_on+0xbd/0x310 [ 441.556129] ? __ia32_sys_read+0xb0/0xb0 [ 441.560186] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.565551] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 441.571007] __x64_sys_sendto+0xe1/0x1a0 [ 441.575087] do_syscall_64+0x1b9/0x820 [ 441.578971] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 441.584333] ? syscall_return_slowpath+0x5e0/0x5e0 [ 441.589259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.594114] ? trace_hardirqs_on_caller+0x310/0x310 [ 441.599151] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 441.604193] ? prepare_exit_to_usermode+0x291/0x3b0 [ 441.609214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.614062] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.619247] RIP: 0033:0x457579 [ 441.622445] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.641361] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 441.649069] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 441.656339] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 441.663610] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 441.671349] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 441.678615] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xef, 0x100, 0x0, 0x371) r1 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x5, 0x20080) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x40200, 0x10) dup(r1) close(r0) 23:19:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xeffdffff00000000]}}, 0x20) 23:19:33 executing program 0 (fault-call:8 fault-nth:40): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00\x00\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:19:33 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1ff, 0x100) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000140)=""/2, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="0303000000000000001c"], &(0x7f0000000240)=0xa) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)="84e618c56edd3c093b5eb3b4ff470a5cdf15f3e66323a4", 0x17) ioctl(r0, 0x8912, &(0x7f0000000280)="153f62") clone(0x10020002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="153f2234488dd25d766070") sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="fffc50a440589ff69e9c61583d637e33fb74a623", 0x14, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) signalfd(r2, &(0x7f00000002c0)={0x400}, 0x8) 23:19:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0x0, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f00000002c0)="2e45edd9e23c24584988c8f3b124428091d7cec3dc4158"}, 0x10) r3 = getpid() r4 = getpgrp(0xffffffffffffffff) r5 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x400002) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000240)={r5, r0, 0xee2e}) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) delete_module(&(0x7f0000000180)='yeah\x00', 0xa00) socket$bt_bnep(0x1f, 0x3, 0x4) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x39e3}]}, 0x88}, 0x1, 0x0, 0x0, 0x6b82765f24c0332c}, 0x880) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x8000a0ffffffff]}}, 0x20) [ 441.958524] Option ' ¤' to dns_resolver key: bad/missing value [ 441.976760] FAULT_INJECTION: forcing a failure. [ 441.976760] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.988642] CPU: 1 PID: 22158 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 441.997164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.997170] Call Trace: [ 441.997197] dump_stack+0x1d3/0x2c4 [ 441.997223] ? dump_stack_print_info.cold.2+0x52/0x52 [ 441.997258] should_fail.cold.4+0xa/0x17 [ 442.009244] ? save_stack+0x43/0xd0 [ 442.009265] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 442.009280] ? dev_hard_start_xmit+0x186/0xc90 [ 442.009298] ? __dev_queue_xmit+0x2f39/0x3950 [ 442.022150] ? dev_queue_xmit+0x17/0x20 [ 442.022168] ? ip_finish_output2+0x105c/0x1860 [ 442.022182] ? ip_finish_output+0x7f8/0xf90 [ 442.022200] ? ip_output+0x21d/0x8d0 [ 442.056539] ? ip_local_out+0xc5/0x1b0 [ 442.060447] ? __ip_queue_xmit+0x9af/0x1f30 [ 442.064788] ? ip_queue_xmit+0x56/0x70 [ 442.068675] ? tcp_write_xmit+0x1676/0x5710 [ 442.073007] ? __tcp_push_pending_frames+0xb2/0x290 [ 442.078035] ? tcp_push+0x662/0x900 [ 442.081658] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 442.086328] ? tcp_sendmsg+0x2f/0x50 [ 442.090041] ? inet_sendmsg+0x19c/0x690 [ 442.094018] ? sock_sendmsg+0xd5/0x120 [ 442.097908] ? __x64_sys_sendto+0xe1/0x1a0 [ 442.102152] ? do_syscall_64+0x1b9/0x820 [ 442.106213] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.111582] ? trace_hardirqs_on+0xbd/0x310 [ 442.115902] ? __kmalloc_node_track_caller+0x3c/0x70 [ 442.121462] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 442.128198] ? kasan_unpoison_shadow+0x35/0x50 [ 442.132963] ? kasan_unpoison_shadow+0x35/0x50 [ 442.137549] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 442.142566] ? skb_release_data+0x1c4/0x880 [ 442.146892] ? refcount_add_not_zero_checked+0x330/0x330 [ 442.152341] ? skb_tx_error+0x2f0/0x2f0 [ 442.156320] ? __kmalloc_node_track_caller+0x50/0x70 [ 442.161435] __alloc_pages_nodemask+0x34b/0xdd0 [ 442.166110] ? kasan_check_write+0x14/0x20 [ 442.170345] ? pskb_expand_head+0x6b3/0x10f0 [ 442.174776] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 442.179815] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 442.184322] ? save_stack+0xa9/0xd0 [ 442.187958] ? save_stack+0x43/0xd0 [ 442.191598] ? kasan_kmalloc+0xc7/0xe0 [ 442.195486] ? kasan_slab_alloc+0x12/0x20 [ 442.199636] ? skb_clone+0x1bb/0x500 [ 442.203368] ? dev_queue_xmit_nit+0x414/0xb30 [ 442.207862] ? dev_hard_start_xmit+0x186/0xc90 [ 442.212440] ? __dev_queue_xmit+0x2f39/0x3950 [ 442.216954] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 442.222503] alloc_pages_current+0x10c/0x210 [ 442.226917] skb_copy_ubufs+0x4c2/0x1b30 [ 442.230988] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.236352] ? memcpy+0x45/0x50 [ 442.239656] ? skb_release_data+0x880/0x880 [ 442.243986] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 442.248485] ? lock_downgrade+0x900/0x900 [ 442.252638] ? trace_hardirqs_on+0xbd/0x310 [ 442.256969] ? pvclock_read_flags+0x160/0x160 [ 442.261468] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 442.265986] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 442.271447] ? kvm_clock_read+0x18/0x30 [ 442.275429] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 442.280491] ? ktime_get_with_offset+0x310/0x460 [ 442.285249] ? ktime_get+0x400/0x400 [ 442.288983] dev_queue_xmit_nit+0x90a/0xb30 [ 442.293311] ? default_device_exit+0x2c0/0x2c0 [ 442.297913] ? attach_entity_load_avg+0x860/0x860 [ 442.302772] ? rb_next+0x140/0x140 [ 442.306316] dev_hard_start_xmit+0x186/0xc90 [ 442.310734] ? dev_direct_xmit+0x6b0/0x6b0 [ 442.314976] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.320511] ? netif_skb_features+0x690/0xb70 [ 442.325008] ? validate_xmit_xfrm+0x1ef/0xda0 [ 442.329505] ? lock_acquire+0x1ed/0x520 [ 442.333485] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.339021] ? validate_xmit_skb+0x80c/0xf30 [ 442.343429] ? lock_release+0x970/0x970 [ 442.347411] ? netif_skb_features+0xb70/0xb70 [ 442.351906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.357461] ? check_preemption_disabled+0x48/0x200 [ 442.362819] ? check_preemption_disabled+0x48/0x200 [ 442.367867] __dev_queue_xmit+0x2f39/0x3950 [ 442.372191] ? mark_held_locks+0x130/0x130 [ 442.376435] ? netdev_pick_tx+0x2d0/0x2d0 [ 442.380592] ? mark_held_locks+0x130/0x130 [ 442.384834] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 442.390632] ? mark_held_locks+0x130/0x130 [ 442.394886] ? mark_held_locks+0x130/0x130 [ 442.399127] ? lock_downgrade+0x900/0x900 [ 442.403278] ? trace_hardirqs_on+0xbd/0x310 [ 442.407601] ? _raw_spin_unlock_bh+0x30/0x40 [ 442.412048] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 442.417502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.423053] ? mark_held_locks+0x130/0x130 [ 442.427291] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 442.431973] ? tcp_packet+0x6ad/0x58d2 [ 442.435879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.441445] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 442.446644] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 442.451838] ? ip_finish_output+0x7f8/0xf90 [ 442.456164] ? lock_downgrade+0x900/0x900 [ 442.460317] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 442.465597] ? trace_hardirqs_on+0xbd/0x310 [ 442.469917] ? ip_finish_output+0x7f8/0xf90 [ 442.474253] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 442.479708] dev_queue_xmit+0x17/0x20 [ 442.483518] ? dev_queue_xmit+0x17/0x20 [ 442.487490] ip_finish_output2+0x105c/0x1860 [ 442.491898] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.497471] ? ip_copy_metadata+0xe10/0xe10 [ 442.501811] ? cgroup_dev_is_valid_access+0x150/0x150 [ 442.507038] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 442.512315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.517848] ? ipv4_mtu+0x37d/0x590 [ 442.521478] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 442.526929] ? __do_replace+0xab0/0xab0 [ 442.531357] ip_finish_output+0x7f8/0xf90 [ 442.535503] ? ip_finish_output+0x7f8/0xf90 [ 442.539822] ? ip_fragment.constprop.50+0x240/0x240 [ 442.544861] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 442.549888] ? nf_nat_ipv4_out+0x2e1/0x340 [ 442.554125] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 442.559318] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 442.564482] ? nf_hook_slow+0x11e/0x1c0 [ 442.568472] ip_output+0x21d/0x8d0 [ 442.572017] ? ip_mc_output+0x15a0/0x15a0 [ 442.576166] ? ip_fragment.constprop.50+0x240/0x240 [ 442.581875] ? sock_alloc_send_skb+0x40/0x40 [ 442.586302] ? lock_release+0x970/0x970 [ 442.590286] ? check_same_owner+0x330/0x330 [ 442.594624] ip_local_out+0xc5/0x1b0 [ 442.598343] __ip_queue_xmit+0x9af/0x1f30 [ 442.602496] ? ip_build_and_send_pkt+0xc80/0xc80 [ 442.607605] ? tcp_schedule_loss_probe+0x530/0x530 [ 442.613576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.619634] ? tcp_established_options+0x366/0x5b0 [ 442.624568] ? tcp_select_initial_window+0x400/0x400 [ 442.629676] ip_queue_xmit+0x56/0x70 [ 442.633398] __tcp_transmit_skb+0x1bc5/0x3b00 [ 442.637902] ? __tcp_select_window+0x9e0/0x9e0 [ 442.642491] ? pvclock_read_flags+0x160/0x160 [ 442.646987] ? tcp_write_xmit+0xf1/0x5710 [ 442.651140] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 442.656597] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 442.661933] ? tcp_rtx_synack+0x730/0x730 [ 442.666112] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 442.670613] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 442.676064] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.681644] tcp_write_xmit+0x1676/0x5710 [ 442.685813] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 442.690484] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 442.695429] ? ___pskb_trim+0x89d/0x1320 [ 442.699500] ? skb_condense+0x3d0/0x3d0 [ 442.703489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.709037] __tcp_push_pending_frames+0xb2/0x290 [ 442.713878] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 442.718896] tcp_push+0x662/0x900 [ 442.722361] ? __sk_mem_schedule+0xac/0xe0 [ 442.726599] ? tcp_md5_hash_key+0x250/0x250 [ 442.730965] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 442.735990] ? ___pskb_trim+0x1320/0x1320 [ 442.740148] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 442.745689] tcp_sendmsg_locked+0x3296/0x3f90 [ 442.750239] ? lock_downgrade+0x900/0x900 [ 442.754390] ? shrink_dcache_sb+0x350/0x350 [ 442.758716] ? tcp_sendpage+0x60/0x60 [ 442.762519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.768061] ? aa_label_sk_perm+0xfc/0xa50 [ 442.772298] ? aa_profile_af_perm+0x410/0x410 [ 442.776795] ? ksys_dup3+0x680/0x680 [ 442.780542] ? lock_acquire+0x1ed/0x520 [ 442.784516] ? tcp_sendmsg+0x21/0x50 [ 442.788232] ? trace_hardirqs_on+0xbd/0x310 [ 442.792554] ? lock_release+0x970/0x970 [ 442.796528] ? lock_sock_nested+0xe2/0x120 [ 442.800763] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 442.806221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.811758] ? check_preemption_disabled+0x48/0x200 [ 442.816775] ? lock_sock_nested+0x9a/0x120 [ 442.821010] ? lock_sock_nested+0x9a/0x120 [ 442.825260] ? __local_bh_enable_ip+0x160/0x260 [ 442.830379] tcp_sendmsg+0x2f/0x50 [ 442.834285] inet_sendmsg+0x19c/0x690 [ 442.838085] ? ipip_gro_receive+0x100/0x100 [ 442.842406] ? apparmor_socket_sendmsg+0x29/0x30 [ 442.847167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.852706] ? security_socket_sendmsg+0x94/0xc0 [ 442.857462] ? ipip_gro_receive+0x100/0x100 [ 442.861790] sock_sendmsg+0xd5/0x120 [ 442.865505] __sys_sendto+0x3d7/0x670 [ 442.869319] ? __ia32_sys_getpeername+0xb0/0xb0 [ 442.873996] ? wait_for_completion+0x8a0/0x8a0 [ 442.878589] ? lock_release+0x970/0x970 [ 442.882565] ? check_preemption_disabled+0x48/0x200 [ 442.887580] ? fsnotify_first_mark+0x350/0x350 [ 442.892159] ? __fsnotify_parent+0xcc/0x420 [ 442.896483] ? fsnotify+0xf10/0xf10 [ 442.900111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.905718] ? __sb_end_write+0xd9/0x110 [ 442.909779] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 442.915316] ? fput+0x130/0x1a0 [ 442.918606] ? ksys_write+0x1ae/0x260 [ 442.922411] ? trace_hardirqs_on+0xbd/0x310 [ 442.926735] ? __ia32_sys_read+0xb0/0xb0 [ 442.930795] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.936169] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 442.941641] __x64_sys_sendto+0xe1/0x1a0 [ 442.946642] do_syscall_64+0x1b9/0x820 [ 442.951491] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 442.957131] ? syscall_return_slowpath+0x5e0/0x5e0 [ 442.962059] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.966910] ? trace_hardirqs_on_caller+0x310/0x310 [ 442.971945] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 442.976975] ? prepare_exit_to_usermode+0x291/0x3b0 [ 442.982017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.986863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.992067] RIP: 0033:0x457579 [ 442.995263] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 443.014158] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 443.021880] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 443.029153] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 443.036419] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 443.043699] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 443.050964] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0xa) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x400000, 0x20) close(r0) 23:19:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0xfdef]}}, 0x20) [ 443.125135] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 443.159299] minix_free_inode: bit 1 already cleared 23:19:34 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") listen(r0, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) connect(r2, &(0x7f0000000000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0xfffffe56) listen(r3, 0x0) 23:19:34 executing program 1: r0 = socket$inet(0x2, 0x80000, 0x3) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0xffffffffffffff8c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @local}}, 0x3, 0x80, 0x5, 0x8001, 0x8}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1, 0x9}, &(0x7f0000000300)=0x8) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) ioctl$int_out(r0, 0x2, &(0x7f0000000340)) [ 443.159790] Option ' ¤' to dns_resolver key: bad/missing value 23:19:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x0, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xffffffffa0010000]}}, 0x20) 23:19:34 executing program 0 (fault-call:8 fault-nth:41): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0x0, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000000)={0x2, 0xc0}) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000140)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x2) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@remote, 0x4e20, 0x5, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3f, r3, r5}, {0x1ff, 0x2, 0x1, 0x0, 0x200, 0xffffffff, 0x8, 0x400}, {0x2, 0xffff, 0x4, 0x5566bf95}, 0x12ef11f6, 0x6e6bb2, 0x3, 0x0, 0x1, 0x2}, {{@in6=@ipv4={[], [], @local}, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x7, 0x1, 0x100000001, 0x9, 0x3ff, 0x5}}, 0xe8) 23:19:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x40030000000000]}}, 0x20) [ 443.394541] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 443.468914] FAULT_INJECTION: forcing a failure. [ 443.468914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.480840] CPU: 0 PID: 22221 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 443.489343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.498720] Call Trace: [ 443.498746] dump_stack+0x1d3/0x2c4 [ 443.498768] ? dump_stack_print_info.cold.2+0x52/0x52 [ 443.498795] should_fail.cold.4+0xa/0x17 [ 443.514234] ? save_stack+0x43/0xd0 [ 443.517870] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 443.522978] ? dev_hard_start_xmit+0x186/0xc90 [ 443.522993] ? __dev_queue_xmit+0x2f39/0x3950 [ 443.523006] ? dev_queue_xmit+0x17/0x20 [ 443.523021] ? ip_finish_output2+0x105c/0x1860 [ 443.523047] ? ip_finish_output+0x7f8/0xf90 [ 443.523072] ? ip_output+0x21d/0x8d0 [ 443.523085] ? ip_local_out+0xc5/0x1b0 [ 443.523117] ? __ip_queue_xmit+0x9af/0x1f30 [ 443.556930] ? ip_queue_xmit+0x56/0x70 [ 443.560871] ? tcp_write_xmit+0x1676/0x5710 [ 443.560885] ? __tcp_push_pending_frames+0xb2/0x290 [ 443.560904] ? tcp_push+0x662/0x900 [ 443.570254] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 443.570266] ? tcp_sendmsg+0x2f/0x50 [ 443.570283] ? inet_sendmsg+0x19c/0x690 [ 443.586227] ? sock_sendmsg+0xd5/0x120 [ 443.590140] ? __x64_sys_sendto+0xe1/0x1a0 [ 443.594390] ? do_syscall_64+0x1b9/0x820 [ 443.598449] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.604256] ? trace_hardirqs_on+0xbd/0x310 [ 443.608579] ? __kmalloc_node_track_caller+0x3c/0x70 [ 443.613697] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 443.619156] ? kasan_unpoison_shadow+0x35/0x50 [ 443.623734] ? kasan_unpoison_shadow+0x35/0x50 [ 443.628315] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 443.633331] ? skb_release_data+0x1c4/0x880 [ 443.637655] ? refcount_add_not_zero_checked+0x330/0x330 [ 443.643102] ? skb_tx_error+0x2f0/0x2f0 [ 443.647084] ? __kmalloc_node_track_caller+0x50/0x70 [ 443.652209] __alloc_pages_nodemask+0x34b/0xdd0 [ 443.656878] ? kasan_check_write+0x14/0x20 [ 443.661115] ? pskb_expand_head+0x6b3/0x10f0 [ 443.665520] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 443.670642] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 443.675157] ? save_stack+0xa9/0xd0 [ 443.678782] ? save_stack+0x43/0xd0 [ 443.682402] ? kasan_kmalloc+0xc7/0xe0 [ 443.686291] ? kasan_slab_alloc+0x12/0x20 [ 443.690437] ? skb_clone+0x1bb/0x500 [ 443.694147] ? dev_queue_xmit_nit+0x414/0xb30 [ 443.698637] ? dev_hard_start_xmit+0x186/0xc90 [ 443.703215] ? __dev_queue_xmit+0x2f39/0x3950 [ 443.707711] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 443.713251] alloc_pages_current+0x10c/0x210 [ 443.717666] skb_copy_ubufs+0x4c2/0x1b30 [ 443.721727] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.727091] ? memcpy+0x45/0x50 [ 443.730386] ? skb_release_data+0x880/0x880 [ 443.734706] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 443.739200] ? lock_downgrade+0x900/0x900 [ 443.743352] ? trace_hardirqs_on+0xbd/0x310 [ 443.747675] ? pvclock_read_flags+0x160/0x160 [ 443.752168] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 443.756664] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 443.762148] ? kvm_clock_read+0x18/0x30 [ 443.766128] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 443.771155] ? ktime_get_with_offset+0x310/0x460 [ 443.775917] ? ktime_get+0x400/0x400 [ 443.779644] ? check_preemption_disabled+0x48/0x200 [ 443.784665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.790201] ? netif_rx_internal+0x1aa/0xa30 [ 443.794616] dev_queue_xmit_nit+0x70e/0xb30 [ 443.798956] ? default_device_exit+0x2c0/0x2c0 [ 443.803890] ? rb_next+0x140/0x140 [ 443.807789] dev_hard_start_xmit+0x186/0xc90 [ 443.812200] ? dev_direct_xmit+0x6b0/0x6b0 [ 443.816440] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.821983] ? netif_skb_features+0x690/0xb70 [ 443.826479] ? validate_xmit_xfrm+0x1ef/0xda0 [ 443.831011] ? lock_acquire+0x1ed/0x520 [ 443.834990] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.840542] ? validate_xmit_skb+0x80c/0xf30 [ 443.844972] ? lock_release+0x970/0x970 [ 443.848962] ? netif_skb_features+0xb70/0xb70 [ 443.853461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.859001] ? check_preemption_disabled+0x48/0x200 [ 443.864016] ? check_preemption_disabled+0x48/0x200 [ 443.869035] __dev_queue_xmit+0x2f39/0x3950 [ 443.873361] ? mark_held_locks+0x130/0x130 [ 443.877599] ? netdev_pick_tx+0x2d0/0x2d0 [ 443.881756] ? netif_skb_features+0x690/0xb70 [ 443.886263] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 443.892081] ? mark_held_locks+0x130/0x130 [ 443.896328] ? mark_held_locks+0x130/0x130 [ 443.900566] ? lock_downgrade+0x900/0x900 [ 443.904729] ? trace_hardirqs_on+0xbd/0x310 [ 443.909054] ? _raw_spin_unlock_bh+0x30/0x40 [ 443.913470] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 443.918923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.924490] ? mark_held_locks+0x130/0x130 [ 443.928735] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 443.933408] ? tcp_packet+0x6ad/0x58d2 [ 443.937318] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 443.942523] ? ip_finish_output+0x7f8/0xf90 [ 443.946847] ? lock_downgrade+0x900/0x900 [ 443.951009] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 443.956305] ? trace_hardirqs_on+0xbd/0x310 [ 443.960646] ? ip_finish_output+0x7f8/0xf90 [ 443.964987] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 443.970466] dev_queue_xmit+0x17/0x20 [ 443.974263] ? dev_queue_xmit+0x17/0x20 [ 443.978266] ip_finish_output2+0x105c/0x1860 [ 443.982684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.988221] ? ip_copy_metadata+0xe10/0xe10 [ 443.992545] ? cgroup_dev_is_valid_access+0x150/0x150 [ 443.997733] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 444.003036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.008573] ? ipv4_mtu+0x37d/0x590 [ 444.012211] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 444.017662] ? __do_replace+0xab0/0xab0 [ 444.021662] ip_finish_output+0x7f8/0xf90 [ 444.025817] ? ip_finish_output+0x7f8/0xf90 [ 444.030140] ? ip_fragment.constprop.50+0x240/0x240 [ 444.035169] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 444.040196] ? nf_nat_ipv4_out+0x2e1/0x340 [ 444.044435] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 444.049628] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.054643] ? nf_hook_slow+0x11e/0x1c0 [ 444.058620] ip_output+0x21d/0x8d0 [ 444.062161] ? ip_mc_output+0x15a0/0x15a0 [ 444.066317] ? ip_fragment.constprop.50+0x240/0x240 [ 444.071331] ? sock_alloc_send_skb+0x40/0x40 [ 444.075744] ? lock_release+0x970/0x970 [ 444.079713] ? check_same_owner+0x330/0x330 [ 444.084036] ip_local_out+0xc5/0x1b0 [ 444.087751] __ip_queue_xmit+0x9af/0x1f30 [ 444.092347] ? ip_build_and_send_pkt+0xc80/0xc80 [ 444.097886] ? tcp_schedule_loss_probe+0x530/0x530 [ 444.103865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.110789] ? tcp_established_options+0x366/0x5b0 [ 444.116766] ? tcp_select_initial_window+0x400/0x400 [ 444.122392] ip_queue_xmit+0x56/0x70 [ 444.126169] __tcp_transmit_skb+0x1bc5/0x3b00 [ 444.130687] ? __tcp_select_window+0x9e0/0x9e0 [ 444.135276] ? pvclock_read_flags+0x160/0x160 [ 444.139787] ? tcp_write_xmit+0xf1/0x5710 [ 444.143945] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 444.149404] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.154436] ? tcp_rtx_synack+0x730/0x730 [ 444.158638] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 444.163140] ? lock_downgrade+0x900/0x900 [ 444.167288] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 444.172751] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.178293] tcp_write_xmit+0x1676/0x5710 [ 444.182461] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 444.187128] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 444.192060] ? ___pskb_trim+0x89d/0x1320 [ 444.196130] ? skb_condense+0x3d0/0x3d0 [ 444.200105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.205650] __tcp_push_pending_frames+0xb2/0x290 [ 444.210492] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.215511] tcp_push+0x662/0x900 [ 444.218973] ? __sk_mem_schedule+0xac/0xe0 [ 444.223235] ? tcp_md5_hash_key+0x250/0x250 [ 444.227563] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 444.232586] ? ___pskb_trim+0x1320/0x1320 [ 444.236739] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 444.242279] tcp_sendmsg_locked+0x3296/0x3f90 [ 444.246785] ? lock_downgrade+0x900/0x900 [ 444.250946] ? shrink_dcache_sb+0x350/0x350 [ 444.255298] ? tcp_sendpage+0x60/0x60 [ 444.259111] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.264660] ? aa_label_sk_perm+0xfc/0xa50 [ 444.268914] ? aa_profile_af_perm+0x410/0x410 [ 444.273423] ? ksys_dup3+0x680/0x680 [ 444.277158] ? lock_acquire+0x1ed/0x520 [ 444.281129] ? tcp_sendmsg+0x21/0x50 [ 444.284847] ? trace_hardirqs_on+0xbd/0x310 [ 444.289173] ? lock_release+0x970/0x970 [ 444.293152] ? lock_sock_nested+0xe2/0x120 [ 444.297391] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 444.302840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.308390] ? check_preemption_disabled+0x48/0x200 [ 444.313408] ? lock_sock_nested+0x9a/0x120 [ 444.317639] ? lock_sock_nested+0x9a/0x120 [ 444.321889] ? __local_bh_enable_ip+0x160/0x260 [ 444.326561] tcp_sendmsg+0x2f/0x50 [ 444.330103] inet_sendmsg+0x19c/0x690 [ 444.333905] ? ipip_gro_receive+0x100/0x100 [ 444.338245] ? apparmor_socket_sendmsg+0x29/0x30 [ 444.343003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.348540] ? security_socket_sendmsg+0x94/0xc0 [ 444.353294] ? ipip_gro_receive+0x100/0x100 [ 444.357616] sock_sendmsg+0xd5/0x120 [ 444.361333] __sys_sendto+0x3d7/0x670 [ 444.365154] ? __ia32_sys_getpeername+0xb0/0xb0 [ 444.369826] ? wait_for_completion+0x8a0/0x8a0 [ 444.374407] ? lock_release+0x970/0x970 [ 444.378412] ? check_preemption_disabled+0x48/0x200 [ 444.383432] ? fsnotify_first_mark+0x350/0x350 [ 444.388017] ? __fsnotify_parent+0xcc/0x420 [ 444.392365] ? fsnotify+0xf10/0xf10 [ 444.396033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.401576] ? __sb_end_write+0xd9/0x110 [ 444.405642] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 444.411175] ? fput+0x130/0x1a0 [ 444.414452] ? ksys_write+0x1ae/0x260 [ 444.418277] ? trace_hardirqs_on+0xbd/0x310 [ 444.422594] ? __ia32_sys_read+0xb0/0xb0 [ 444.426666] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.432036] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 444.437493] __x64_sys_sendto+0xe1/0x1a0 [ 444.441569] do_syscall_64+0x1b9/0x820 [ 444.445457] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 444.450823] ? syscall_return_slowpath+0x5e0/0x5e0 [ 444.455755] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.460595] ? trace_hardirqs_on_caller+0x310/0x310 [ 444.465622] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 444.470637] ? prepare_exit_to_usermode+0x291/0x3b0 [ 444.475658] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.480504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.485698] RIP: 0033:0x457579 [ 444.488890] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.507789] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 444.515496] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 23:19:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x9, 0x4000) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000240)=""/186, &(0x7f00000001c0)=0xba) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xeffdffffffffffff]}}, 0x20) [ 444.522777] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 444.530039] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 444.537314] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 444.544600] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x0, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x100000000000000]}}, 0x20) [ 444.586081] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 444.612036] minix_free_inode: bit 1 already cleared 23:19:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xffffffff00000000]}}, 0x20) 23:19:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$netlink(r2, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000340)={0x13, 0xe9, &(0x7f0000000240)="519439651d7509e27cab9d8ee35831623845a75c777dee727cac09f4f638c80a7fabb33cd3121594f8de50a976158e4dfdb32ec85fa72f1841ed1ae6bec019725ae029fe6e8a08b73680080e203ce11524ec9671d128b541f655a18e436c46bf0ad03d6b17bc30bf60298ecec60e48b7ad4d31b5b46b2b06397eaa17b78f8f58f3c0c132b1d5c1e42e0cfcc68bb004d38b1d932ac9cabb6b69bcbbf49bab137a7a555cc746969546bf7b4ce9bafc78b53441c95d2dc12a70d80e7f9c50559b0a80a9633b0351f613d8791861e7addf9ed66964e2ce3e73e8c2f133780009ed7f0e1be3e6f82d7403f1"}) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:36 executing program 0 (fault-call:8 fault-nth:42): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 444.663681] minix_free_inode: bit 1 already cleared [ 444.710769] FAULT_INJECTION: forcing a failure. [ 444.710769] name failslab, interval 1, probability 0, space 0, times 0 [ 444.722056] CPU: 0 PID: 22252 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 444.730555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.739921] Call Trace: [ 444.742570] dump_stack+0x1d3/0x2c4 [ 444.746220] ? dump_stack_print_info.cold.2+0x52/0x52 [ 444.751449] ? __this_cpu_preempt_check+0x1c/0x1f [ 444.756302] should_fail.cold.4+0xa/0x17 [ 444.760364] ? netif_rx_internal+0x166/0xa30 [ 444.764777] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 444.769881] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.775450] ? enqueue_to_backlog+0x309/0xd70 [ 444.779961] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 444.784894] ? __netdev_pick_tx+0xd30/0xd30 [ 444.789223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.794758] ? check_preemption_disabled+0x48/0x200 [ 444.799797] ? sock_def_readable+0x2ee/0x710 [ 444.804209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.809760] ? netif_rx_internal+0x1aa/0xa30 [ 444.814168] ? refcount_sub_and_test_checked+0x203/0x310 [ 444.819617] ? do_xdp_generic+0x50/0x50 [ 444.823610] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 444.829067] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 444.834517] ? kasan_check_write+0x14/0x20 [ 444.838758] __should_failslab+0x124/0x180 [ 444.843015] should_failslab+0x9/0x14 [ 444.846819] kmem_cache_alloc+0x47/0x730 [ 444.850887] ? lock_acquire+0x1ed/0x520 [ 444.855186] ? skb_dst.isra.84+0x120/0x120 [ 444.860231] skb_clone+0x1bb/0x500 [ 444.864491] ? lock_release+0x970/0x970 [ 444.869429] ? skb_split+0x11e0/0x11e0 [ 444.874222] ? netif_rx+0xe0/0x430 [ 444.878367] ? dev_forward_skb+0x60/0x60 [ 444.883302] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 444.889792] ? eth_type_trans+0x2ea/0x760 [ 444.893965] ? eth_gro_receive+0x920/0x920 [ 444.898206] dev_queue_xmit_nit+0x414/0xb30 [ 444.902648] ? loopback_xmit+0x32c/0x926 [ 444.906715] ? default_device_exit+0x2c0/0x2c0 [ 444.911298] ? rb_next+0x140/0x140 [ 444.914845] dev_hard_start_xmit+0x186/0xc90 [ 444.919261] ? dev_direct_xmit+0x6b0/0x6b0 [ 444.923518] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.929071] ? netif_skb_features+0x690/0xb70 [ 444.933581] ? validate_xmit_xfrm+0x1ef/0xda0 [ 444.938076] ? lock_acquire+0x1ed/0x520 [ 444.942055] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.947596] ? validate_xmit_skb+0x80c/0xf30 [ 444.952020] ? lock_release+0x970/0x970 [ 444.955997] ? __dev_queue_xmit+0x1a99/0x3950 [ 444.960498] ? netif_skb_features+0xb70/0xb70 [ 444.965000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.970536] ? check_preemption_disabled+0x48/0x200 [ 444.975549] ? check_preemption_disabled+0x48/0x200 [ 444.980581] __dev_queue_xmit+0x2f39/0x3950 [ 444.984902] ? mark_held_locks+0x130/0x130 [ 444.989184] ? netdev_pick_tx+0x2d0/0x2d0 [ 444.993348] ? netif_skb_features+0x690/0xb70 [ 444.997867] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 445.003670] ? mark_held_locks+0x130/0x130 [ 445.007920] ? mark_held_locks+0x130/0x130 [ 445.012184] ? lock_downgrade+0x900/0x900 [ 445.016339] ? trace_hardirqs_on+0xbd/0x310 [ 445.020664] ? _raw_spin_unlock_bh+0x30/0x40 [ 445.025078] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 445.030533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.036092] ? mark_held_locks+0x130/0x130 [ 445.040330] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 445.045006] ? tcp_packet+0x6ad/0x58d2 [ 445.048923] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 445.054137] ? ip_finish_output+0x7f8/0xf90 [ 445.058462] ? lock_downgrade+0x900/0x900 [ 445.062638] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 445.067945] ? trace_hardirqs_on+0xbd/0x310 [ 445.072275] ? ip_finish_output+0x7f8/0xf90 [ 445.076615] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 445.082072] dev_queue_xmit+0x17/0x20 [ 445.085898] ? dev_queue_xmit+0x17/0x20 [ 445.089872] ip_finish_output2+0x105c/0x1860 [ 445.094328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.099868] ? ip_copy_metadata+0xe10/0xe10 [ 445.104211] ? cgroup_dev_is_valid_access+0x150/0x150 [ 445.109404] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 445.114687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.120231] ? ipv4_mtu+0x37d/0x590 [ 445.123868] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 445.129320] ? __do_replace+0xab0/0xab0 [ 445.133304] ip_finish_output+0x7f8/0xf90 [ 445.137453] ? ip_finish_output+0x7f8/0xf90 [ 445.141774] ? ip_fragment.constprop.50+0x240/0x240 [ 445.146789] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 445.151802] ? nf_nat_ipv4_out+0x2e1/0x340 [ 445.156045] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 445.161237] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.166265] ? nf_hook_slow+0x11e/0x1c0 [ 445.170253] ip_output+0x21d/0x8d0 [ 445.173794] ? ip_mc_output+0x15a0/0x15a0 [ 445.177959] ? ip_fragment.constprop.50+0x240/0x240 [ 445.182982] ? sock_alloc_send_skb+0x40/0x40 [ 445.187389] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 445.192510] ip_local_out+0xc5/0x1b0 [ 445.196225] __ip_queue_xmit+0x9af/0x1f30 [ 445.200405] ? ip_build_and_send_pkt+0xc80/0xc80 [ 445.205164] ? tcp_schedule_loss_probe+0x530/0x530 [ 445.210091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.215649] ? tcp_established_options+0x366/0x5b0 [ 445.220575] ? tcp_select_initial_window+0x400/0x400 [ 445.225686] ip_queue_xmit+0x56/0x70 [ 445.229412] __tcp_transmit_skb+0x1bc5/0x3b00 [ 445.233917] ? __tcp_select_window+0x9e0/0x9e0 [ 445.238545] ? pvclock_read_flags+0x160/0x160 [ 445.243051] ? tcp_write_xmit+0xf1/0x5710 [ 445.247207] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 445.252664] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.257690] ? tcp_rtx_synack+0x730/0x730 [ 445.261853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.267389] ? sk_reset_timer+0x36/0x60 [ 445.271364] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 445.276118] ? tcp_rbtree_insert+0x141/0x190 [ 445.280540] ? tcp_rearm_rto+0xdf/0x100 [ 445.284525] ? tcp_event_new_data_sent+0x266/0x3c0 [ 445.289463] tcp_write_xmit+0x1676/0x5710 [ 445.293638] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 445.298305] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 445.303241] ? ___pskb_trim+0x89d/0x1320 [ 445.307313] ? skb_condense+0x3d0/0x3d0 [ 445.311290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.316838] __tcp_push_pending_frames+0xb2/0x290 [ 445.321684] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.326745] tcp_push+0x662/0x900 [ 445.330199] ? __sk_mem_schedule+0xac/0xe0 [ 445.334442] ? tcp_md5_hash_key+0x250/0x250 [ 445.338767] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 445.344570] ? ___pskb_trim+0x1320/0x1320 [ 445.349679] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 445.355833] tcp_sendmsg_locked+0x3296/0x3f90 [ 445.360338] ? lock_downgrade+0x900/0x900 [ 445.364488] ? shrink_dcache_sb+0x350/0x350 [ 445.368820] ? tcp_sendpage+0x60/0x60 [ 445.372659] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.378371] ? aa_label_sk_perm+0xfc/0xa50 [ 445.382613] ? aa_profile_af_perm+0x410/0x410 [ 445.387112] ? ksys_dup3+0x680/0x680 [ 445.390830] ? lock_acquire+0x1ed/0x520 [ 445.394803] ? tcp_sendmsg+0x21/0x50 [ 445.398525] ? trace_hardirqs_on+0xbd/0x310 [ 445.402845] ? lock_release+0x970/0x970 [ 445.406822] ? lock_sock_nested+0xe2/0x120 [ 445.411060] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 445.416513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.422060] ? check_preemption_disabled+0x48/0x200 [ 445.427093] ? lock_sock_nested+0x9a/0x120 [ 445.431328] ? lock_sock_nested+0x9a/0x120 [ 445.435564] ? __local_bh_enable_ip+0x160/0x260 [ 445.440236] tcp_sendmsg+0x2f/0x50 [ 445.443787] inet_sendmsg+0x19c/0x690 [ 445.447592] ? ipip_gro_receive+0x100/0x100 [ 445.451914] ? apparmor_socket_sendmsg+0x29/0x30 [ 445.456688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.462228] ? security_socket_sendmsg+0x94/0xc0 [ 445.466988] ? ipip_gro_receive+0x100/0x100 [ 445.471312] sock_sendmsg+0xd5/0x120 [ 445.475030] __sys_sendto+0x3d7/0x670 [ 445.478836] ? __ia32_sys_getpeername+0xb0/0xb0 [ 445.483511] ? wait_for_completion+0x8a0/0x8a0 [ 445.488097] ? lock_release+0x970/0x970 [ 445.492072] ? check_preemption_disabled+0x48/0x200 [ 445.497092] ? fsnotify_first_mark+0x350/0x350 [ 445.501672] ? __fsnotify_parent+0xcc/0x420 [ 445.505994] ? fsnotify+0xf10/0xf10 [ 445.509623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.515169] ? __sb_end_write+0xd9/0x110 [ 445.519237] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.524778] ? fput+0x130/0x1a0 [ 445.528057] ? ksys_write+0x1ae/0x260 [ 445.531861] ? trace_hardirqs_on+0xbd/0x310 [ 445.536180] ? __ia32_sys_read+0xb0/0xb0 [ 445.540263] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.545638] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 445.551095] __x64_sys_sendto+0xe1/0x1a0 [ 445.555164] do_syscall_64+0x1b9/0x820 [ 445.559051] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 445.564421] ? syscall_return_slowpath+0x5e0/0x5e0 [ 445.569353] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.574202] ? trace_hardirqs_on_caller+0x310/0x310 [ 445.579235] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 445.584258] ? prepare_exit_to_usermode+0x291/0x3b0 [ 445.589283] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.594134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.599318] RIP: 0033:0x457579 [ 445.602514] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.621409] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.630349] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 445.637615] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 445.644884] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 445.652169] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 445.659436] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1c1001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x1, 0xb484}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00010800000000000000000000000000000000000000000800010000000070"], 0x24}}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0x2276, &(0x7f0000979fff)) 23:19:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xa0008000]}}, 0x20) 23:19:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x2000000000001, 0x0) r2 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x11, &(0x7f0000000080)=0x7, 0x2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) bind$inet6(r2, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 23:19:37 executing program 0 (fault-call:8 fault-nth:43): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:37 executing program 2: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001140)={{0x10b, 0xffffffffffffff62, 0x80000000, 0x0, 0x2d0, 0x401, 0x32a, 0x5}, "74628141c97106e5c3640b6dd887cfd4901af3fe8da519201ef12268d3d6a5ead90fcc3e383dcc1d205711f672c91132a7d7ae4768e5b58cd1242475055d2f1e13ac8fcfe47230a1205e5695c7d86f37ee44005d3cef50cfec6b3cdc1670997e2a0b238b36165a88616e70398d503c6e19ab44aa78234b310d34b886cb9808e6bc15ac94843ee4c0b46226bcf615324b966bfd21", [[], [], [], [], [], []]}, 0x6b4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0)=0x10, 0xfffffffffffffd41) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{}]}, 0x10) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000c003000000dca9e0f1422b597d3cedaa413a3a209f83b212537a4911b382847c462b9940accaaa477ee29b060000002d4ac40fbb36a79e6681756f2b62443832437d4afb59af6afef078faba29256e4cdc0d07aa05ec4cdb18507a98500172930516c16c739e236c8d69346ed818e57993b165020aaaed786d13224ebaecf606a0288eea607677e173aa4c9e829f01c1b64f900bc3b17c12d0ab3432ea73057a07fa19c4be17f83468873a4e96cdd5ec5bcc79ad8e86ddc3dc909fa7d498a9abc5a6f2baa1a9299a9505fa7a63853eaa7f"]) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x8, 0x0, 0x47}) r1 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x7, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000940)) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=@known='system.posix_acl_default\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x3}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e23, @multicast2}}) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r3, r4+30000000}, &(0x7f0000000540)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000240), 0x4) getegid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000500)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000580)={@rand_addr, @local, 0x0}, &(0x7f00000005c0)=0xc) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000640)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/109, 0x6d}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000840)=""/167, 0xa7}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x4, &(0x7f0000000a00)=""/2, 0x2, 0x6c3}, 0xf53}], 0x1, 0x100, &(0x7f0000000a80)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000ac0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b00)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@rand_addr, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000d40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) accept4(r1, &(0x7f0000000dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e40)=0x80, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000e80)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000f80)=0xe8) accept4$packet(r0, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002800)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002840)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000002940)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000004040)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000004080)={@local, @loopback, 0x0}, &(0x7f00000040c0)=0xc) accept4$packet(r0, &(0x7f0000004140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004180)=0x14, 0x8e82adf1f6785c86) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000043c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000044c0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004500)={0x0, @multicast2, @multicast1}, &(0x7f0000005580)=0xc) clock_gettime(0x0, &(0x7f00000061c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f00000055c0)=""/231, 0xe7}, {&(0x7f00000056c0)=""/81, 0x51}, {&(0x7f0000005740)=""/109, 0x6d}, {&(0x7f00000057c0)=""/231, 0xe7}, {&(0x7f00000058c0)=""/214, 0xd6}], 0x5, &(0x7f0000005a40)=""/74, 0x4a, 0x7}, 0x3}, {{&(0x7f0000005ac0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005b40)=""/242, 0xf2}, {&(0x7f0000005c40)=""/215, 0xd7}, {&(0x7f0000005d40)=""/221, 0xdd}, {&(0x7f0000005e40)}, {&(0x7f0000005e80)=""/143, 0x8f}, {&(0x7f0000005f40)=""/193, 0xc1}, {&(0x7f0000006040)=""/80, 0x50}], 0x7, 0x0, 0x0, 0xca9}, 0xfff}], 0x2, 0x1, &(0x7f0000006200)={r22, r23+30000000}) accept4$packet(r0, &(0x7f0000006240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006280)=0x14, 0x800) recvmsg(r0, &(0x7f00000068c0)={&(0x7f00000062c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000006800)=[{&(0x7f0000006340)=""/245, 0xf5}, {&(0x7f0000006440)=""/82, 0x52}, {&(0x7f00000064c0)=""/114, 0x72}, {&(0x7f0000006540)=""/210, 0xd2}, {&(0x7f0000006640)=""/104, 0x68}, {&(0x7f00000066c0)=""/77, 0x4d}, {&(0x7f0000006740)=""/192, 0xc0}], 0x7, &(0x7f0000006880)=""/25, 0x19, 0x8}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000006900)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@rand_addr}}, &(0x7f0000006a00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006a40)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000006a80)={0x11, 0x0, 0x0}, &(0x7f0000006ac0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000006c00)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000006d00)=0xe8) getpeername$packet(r0, &(0x7f0000006d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006d80)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000006dc0)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000006ec0)=0xe8) getpeername$packet(r0, &(0x7f0000006f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006f40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000007a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000007a00)={&(0x7f0000006f80)={0xa64, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xaf5e}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x22c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1dc, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0xec, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r18}, {0x1fc, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r21}, {0xec, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x68}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r26}}}]}}, {{0x8, 0x1, r27}, {0x170, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r28}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r29}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r30}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}]}}, {{0x8, 0x1, r32}, {0x80, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0xa64}}, 0x800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000380)={0x7f, @broadcast, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x1, 0x80}, 0x2c) 23:19:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) getsockname(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000300)=0x80) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000240)="362c99467eaafa8f76b71768eb770d63a61023563bbed201c825b0e56f3e59f37d20d0a00ad4b7507cd8a5e0d37f05c0cc4ee4f44e36a632756e49aaa1b44c0ba8cf837c3ff66d4ca21a90c82c77435701e53b8c3731dd9774bb1b8ca6ccd232da5d0cba658a645a2d445ef10dfc44d491c53752f88c3d3cb7272f2906071e67406c88612fe25efc83408aea76d1e0227dddda805073889d1c08687f19b7de4dd796121526e8d675aa346c41de2fa62a", 0xb0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000340)={@broadcast, @local, @loopback}, 0xc) close(r0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x0) [ 445.837224] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:19:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x1000000]}}, 0x20) [ 445.919068] FAULT_INJECTION: forcing a failure. [ 445.919068] name failslab, interval 1, probability 0, space 0, times 0 [ 445.931451] CPU: 1 PID: 22284 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 445.939982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.949340] Call Trace: [ 445.949367] dump_stack+0x1d3/0x2c4 [ 445.949390] ? dump_stack_print_info.cold.2+0x52/0x52 [ 445.949416] should_fail.cold.4+0xa/0x17 [ 445.949439] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.949473] ? unwind_get_return_address+0x61/0xa0 [ 445.974922] ? rb_next+0x140/0x140 [ 445.978487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.984034] ? mark_held_locks+0x130/0x130 [ 445.988277] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.993380] ? dev_hard_start_xmit+0x186/0xc90 [ 445.997967] ? __dev_queue_xmit+0x2f39/0x3950 [ 446.002476] ? dev_queue_xmit+0x17/0x20 [ 446.006887] ? ip_finish_output2+0x105c/0x1860 [ 446.012611] ? ip_finish_output+0x7f8/0xf90 [ 446.017798] ? ip_output+0x21d/0x8d0 [ 446.022293] ? ip_local_out+0xc5/0x1b0 [ 446.026785] ? __ip_queue_xmit+0x9af/0x1f30 [ 446.031892] ? ip_queue_xmit+0x56/0x70 [ 446.035787] ? tcp_write_xmit+0x1676/0x5710 [ 446.040107] ? __tcp_push_pending_frames+0xb2/0x290 [ 446.045123] ? tcp_push+0x662/0x900 [ 446.048746] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 446.053416] ? inet_sendmsg+0x19c/0x690 [ 446.057391] ? sock_sendmsg+0xd5/0x120 [ 446.061284] ? __x64_sys_sendto+0xe1/0x1a0 [ 446.065532] ? mark_held_locks+0x130/0x130 [ 446.069777] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.074795] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 446.079555] __should_failslab+0x124/0x180 [ 446.083794] should_failslab+0x9/0x14 [ 446.087596] kmem_cache_alloc_node_trace+0x5a/0x740 [ 446.092631] ? lock_downgrade+0x900/0x900 [ 446.096789] __kmalloc_node_track_caller+0x3c/0x70 [ 446.101734] __kmalloc_reserve.isra.39+0x41/0xe0 [ 446.106504] pskb_expand_head+0x230/0x10f0 [ 446.110742] ? is_bpf_text_address+0xd3/0x170 [ 446.115243] ? kernel_text_address+0x79/0xf0 [ 446.119676] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 446.124179] ? save_stack+0xa9/0xd0 [ 446.127826] ? save_stack+0x43/0xd0 [ 446.131459] ? kasan_kmalloc+0xc7/0xe0 [ 446.135354] ? kasan_slab_alloc+0x12/0x20 [ 446.139505] ? kmem_cache_alloc+0x12e/0x730 [ 446.143857] ? skb_clone+0x1bb/0x500 [ 446.147581] ? dev_queue_xmit_nit+0x414/0xb30 [ 446.152079] ? dev_hard_start_xmit+0x186/0xc90 [ 446.156660] ? __dev_queue_xmit+0x2f39/0x3950 [ 446.161152] ? dev_queue_xmit+0x17/0x20 [ 446.165130] ? ip_finish_output2+0x105c/0x1860 [ 446.169710] ? ip_finish_output+0x7f8/0xf90 [ 446.174030] ? ip_output+0x21d/0x8d0 [ 446.177742] ? ip_local_out+0xc5/0x1b0 [ 446.181631] ? __ip_queue_xmit+0x9af/0x1f30 [ 446.185963] ? ip_queue_xmit+0x56/0x70 [ 446.189853] ? __tcp_transmit_skb+0x1bc5/0x3b00 [ 446.194521] ? tcp_write_xmit+0x1676/0x5710 [ 446.198844] ? __tcp_push_pending_frames+0xb2/0x290 [ 446.203873] skb_copy_ubufs+0xc13/0x1b30 [ 446.207954] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.213334] ? memcpy+0x45/0x50 [ 446.216624] ? skb_release_data+0x880/0x880 [ 446.220951] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 446.225461] ? lock_downgrade+0x900/0x900 [ 446.229612] ? trace_hardirqs_on+0xbd/0x310 [ 446.233955] ? pvclock_read_flags+0x160/0x160 [ 446.238459] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 446.242973] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 446.248438] ? kvm_clock_read+0x18/0x30 [ 446.252424] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.257475] ? ktime_get_with_offset+0x310/0x460 [ 446.262236] ? ktime_get+0x400/0x400 [ 446.265962] ? netif_rx+0xe0/0x430 [ 446.269507] ? dev_forward_skb+0x60/0x60 [ 446.273576] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 446.279112] ? eth_type_trans+0x2ea/0x760 [ 446.283283] ? eth_gro_receive+0x920/0x920 [ 446.287537] dev_queue_xmit_nit+0x90a/0xb30 [ 446.291864] ? default_device_exit+0x2c0/0x2c0 [ 446.296450] ? rb_next+0x140/0x140 [ 446.300000] ? __account_cfs_rq_runtime+0x790/0x790 [ 446.305023] dev_hard_start_xmit+0x186/0xc90 [ 446.309446] ? dev_direct_xmit+0x6b0/0x6b0 [ 446.313688] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.319241] ? netif_skb_features+0x690/0xb70 [ 446.323774] ? validate_xmit_xfrm+0x1ef/0xda0 [ 446.328277] ? lock_acquire+0x1ed/0x520 [ 446.332258] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.337797] ? validate_xmit_skb+0x80c/0xf30 [ 446.342207] ? lock_release+0x970/0x970 [ 446.346184] ? netif_skb_features+0xb70/0xb70 [ 446.350682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.356221] ? check_preemption_disabled+0x48/0x200 [ 446.361235] ? check_preemption_disabled+0x48/0x200 [ 446.366276] __dev_queue_xmit+0x2f39/0x3950 [ 446.370603] ? perf_sched_cb_inc+0x350/0x350 [ 446.375021] ? netdev_pick_tx+0x2d0/0x2d0 [ 446.379172] ? finish_task_switch+0x180/0x900 [ 446.383669] ? lock_downgrade+0x900/0x900 [ 446.387815] ? finish_task_switch+0x1b5/0x900 [ 446.392330] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 446.398133] ? mark_held_locks+0x130/0x130 [ 446.402374] ? mark_held_locks+0x130/0x130 [ 446.406613] ? lock_downgrade+0x900/0x900 [ 446.410767] ? trace_hardirqs_on+0xbd/0x310 [ 446.415094] ? _raw_spin_unlock_bh+0x30/0x40 [ 446.419506] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 446.424988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.430536] ? mark_held_locks+0x130/0x130 [ 446.434779] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 446.439467] ? tcp_packet+0x6ad/0x58d2 [ 446.443381] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 446.448578] ? ip_finish_output+0x7f8/0xf90 [ 446.452902] ? lock_downgrade+0x900/0x900 [ 446.457052] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 446.462338] ? trace_hardirqs_on+0xbd/0x310 [ 446.466660] ? ip_finish_output+0x7f8/0xf90 [ 446.470985] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 446.476443] dev_queue_xmit+0x17/0x20 [ 446.480247] ? dev_queue_xmit+0x17/0x20 [ 446.484229] ip_finish_output2+0x105c/0x1860 [ 446.488644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.494184] ? ip_copy_metadata+0xe10/0xe10 [ 446.498509] ? cgroup_dev_is_valid_access+0x150/0x150 [ 446.503701] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 446.508983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.514518] ? ipv4_mtu+0x37d/0x590 [ 446.518145] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 446.523602] ? __do_replace+0xab0/0xab0 [ 446.527588] ip_finish_output+0x7f8/0xf90 [ 446.531735] ? ip_finish_output+0x7f8/0xf90 [ 446.536060] ? ip_fragment.constprop.50+0x240/0x240 [ 446.541079] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 446.546097] ? nf_nat_ipv4_out+0x2e1/0x340 [ 446.550333] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 446.555524] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.560540] ? nf_hook_slow+0x11e/0x1c0 [ 446.564617] ip_output+0x21d/0x8d0 [ 446.568160] ? ip_mc_output+0x15a0/0x15a0 [ 446.572313] ? ip_fragment.constprop.50+0x240/0x240 [ 446.577335] ? sock_alloc_send_skb+0x40/0x40 [ 446.581744] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 446.586850] ip_local_out+0xc5/0x1b0 [ 446.590569] __ip_queue_xmit+0x9af/0x1f30 [ 446.594725] ? ip_build_and_send_pkt+0xc80/0xc80 [ 446.599491] ? tcp_schedule_loss_probe+0x530/0x530 [ 446.604423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.610006] ? tcp_established_options+0x366/0x5b0 [ 446.614946] ? tcp_select_initial_window+0x400/0x400 [ 446.620062] ip_queue_xmit+0x56/0x70 [ 446.623781] __tcp_transmit_skb+0x1bc5/0x3b00 [ 446.628287] ? __tcp_select_window+0x9e0/0x9e0 [ 446.632885] ? pvclock_read_flags+0x160/0x160 [ 446.637395] ? tcp_write_xmit+0xf1/0x5710 [ 446.641546] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 446.647002] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.652023] ? tcp_rtx_synack+0x730/0x730 [ 446.656179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.661718] ? sk_reset_timer+0x36/0x60 [ 446.665695] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 446.670904] ? tcp_rbtree_insert+0x141/0x190 [ 446.675314] ? tcp_rearm_rto+0xdf/0x100 [ 446.679473] ? tcp_event_new_data_sent+0x266/0x3c0 [ 446.685548] tcp_write_xmit+0x1676/0x5710 [ 446.690073] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 446.694745] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 446.699679] ? ___pskb_trim+0x89d/0x1320 [ 446.703753] ? skb_condense+0x3d0/0x3d0 [ 446.707739] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.713291] __tcp_push_pending_frames+0xb2/0x290 [ 446.718134] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.723156] tcp_push+0x662/0x900 [ 446.726610] ? __sk_mem_schedule+0xac/0xe0 [ 446.730848] ? tcp_md5_hash_key+0x250/0x250 [ 446.735174] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 446.740195] ? ___pskb_trim+0x1320/0x1320 [ 446.744351] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 446.749899] tcp_sendmsg_locked+0x3296/0x3f90 [ 446.754405] ? lock_downgrade+0x900/0x900 [ 446.758551] ? shrink_dcache_sb+0x350/0x350 [ 446.762891] ? tcp_sendpage+0x60/0x60 [ 446.766693] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.772230] ? aa_label_sk_perm+0xfc/0xa50 [ 446.776478] ? aa_profile_af_perm+0x410/0x410 [ 446.780977] ? ksys_dup3+0x680/0x680 [ 446.784702] ? lock_acquire+0x1ed/0x520 [ 446.788675] ? tcp_sendmsg+0x21/0x50 [ 446.792398] ? trace_hardirqs_on+0xbd/0x310 [ 446.796723] ? lock_release+0x970/0x970 [ 446.800696] ? lock_sock_nested+0xe2/0x120 [ 446.804964] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 446.810423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.816002] ? check_preemption_disabled+0x48/0x200 [ 446.821018] ? lock_sock_nested+0x9a/0x120 [ 446.825260] ? lock_sock_nested+0x9a/0x120 [ 446.829515] ? __local_bh_enable_ip+0x160/0x260 [ 446.834189] tcp_sendmsg+0x2f/0x50 [ 446.837731] inet_sendmsg+0x19c/0x690 [ 446.841536] ? ipip_gro_receive+0x100/0x100 [ 446.845859] ? apparmor_socket_sendmsg+0x29/0x30 [ 446.850618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.856163] ? security_socket_sendmsg+0x94/0xc0 [ 446.860925] ? ipip_gro_receive+0x100/0x100 [ 446.865259] sock_sendmsg+0xd5/0x120 [ 446.868985] __sys_sendto+0x3d7/0x670 [ 446.872794] ? __ia32_sys_getpeername+0xb0/0xb0 [ 446.877474] ? wait_for_completion+0x8a0/0x8a0 [ 446.882063] ? lock_release+0x970/0x970 [ 446.886041] ? check_preemption_disabled+0x48/0x200 [ 446.891058] ? fsnotify_first_mark+0x350/0x350 [ 446.895642] ? __fsnotify_parent+0xcc/0x420 [ 446.899977] ? fsnotify+0xf10/0xf10 [ 446.903609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.909155] ? __sb_end_write+0xd9/0x110 [ 446.913224] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 446.918767] ? fput+0x130/0x1a0 [ 446.922054] ? ksys_write+0x1ae/0x260 [ 446.925859] ? trace_hardirqs_on+0xbd/0x310 [ 446.930178] ? __ia32_sys_read+0xb0/0xb0 [ 446.934256] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.939623] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 446.945079] __x64_sys_sendto+0xe1/0x1a0 [ 446.949149] do_syscall_64+0x1b9/0x820 [ 446.953035] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 446.958400] ? syscall_return_slowpath+0x5e0/0x5e0 [ 446.963329] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.968179] ? trace_hardirqs_on_caller+0x310/0x310 [ 446.973200] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 446.978220] ? prepare_exit_to_usermode+0x291/0x3b0 [ 446.983243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.988094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.993282] RIP: 0033:0x457579 [ 446.996485] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.015386] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 447.023099] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 447.030368] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 447.037635] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 447.044906] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 447.052172] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r1, &(0x7f0000002580), &(0x7f00000014c0)=0x80) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x20000) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)) 23:19:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x0, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x8000a0]}}, 0x20) 23:19:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x4, 0x7, 0x1ff, 0x5, 0x0, 0x9c, 0x2020, 0x4, 0x6, 0x6, 0x5, 0xfff, 0x1, 0x7ff, 0x0, 0x10001, 0x3, 0x1, 0x7, 0x8, 0x5, 0x6, 0x7, 0x10001, 0xfffffffffffffffa, 0x537e, 0x5392, 0x2, 0x4, 0x6, 0x100, 0x17, 0x1, 0x8, 0x6, 0x4, 0x0, 0x9, 0x2, @perf_config_ext={0xc6cf, 0xda1}, 0x21004, 0x1, 0x0, 0x1, 0x9, 0x8d8, 0x2}, 0x0, 0x7, 0xffffffffffffff9c, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2bc, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c906d6b6673ff666174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000100)) gettid() listen(0xffffffffffffffff, 0x0) 23:19:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180), 0x4) recvfrom(r0, &(0x7f0000000240)=""/239, 0xef, 0x0, 0x0, 0x0) close(r0) 23:19:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00000000000000ff00", 0x8000}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0xffffffffffff72b9}) [ 447.203798] minix_free_inode: bit 1 already cleared 23:19:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00') ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='trusted\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20010800}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xffffffffffffffff}]}}}]}, 0x3c}}, 0xfffffffffffffffe) 23:19:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xeffd]}}, 0x20) 23:19:38 executing program 0 (fault-call:8 fault-nth:44): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:38 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x401000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f00000000c0)='\\*(\x00', 0x1) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 23:19:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000680)=""/239, 0x202, 0x12020, 0x0, 0xffffffffffffff0e) close(r0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 23:19:38 executing program 5: unshare(0x24020400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75700000000000db887974a9d4b8049e206606a808fcfe3dd31291f786cee92a2ed9cc0eeb0f6e1b21700557d7d321c616f2a69f975e5d5807683103cf48516fd96063603193e1cc3109ac8eeb3489d6a5d86eea6fc66adc6c92378d49", 0x200002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000), &(0x7f0000000040)=0x4) fchdir(r0) 23:19:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xfffffffffffffdef]}}, 0x20) [ 447.347141] FAULT_INJECTION: forcing a failure. [ 447.347141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 447.359050] CPU: 0 PID: 22331 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 447.367548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.376920] Call Trace: [ 447.379544] dump_stack+0x1d3/0x2c4 [ 447.383183] ? dump_stack_print_info.cold.2+0x52/0x52 [ 447.388369] should_fail.cold.4+0xa/0x17 [ 447.392434] ? save_stack+0x43/0xd0 [ 447.396085] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 447.401186] ? dev_hard_start_xmit+0x186/0xc90 [ 447.405763] ? __dev_queue_xmit+0x2f39/0x3950 [ 447.410252] ? dev_queue_xmit+0x17/0x20 [ 447.414223] ? ip_finish_output2+0x105c/0x1860 [ 447.418797] ? ip_finish_output+0x7f8/0xf90 [ 447.423112] ? ip_output+0x21d/0x8d0 [ 447.426822] ? ip_local_out+0xc5/0x1b0 [ 447.430706] ? __ip_queue_xmit+0x9af/0x1f30 [ 447.435028] ? ip_queue_xmit+0x56/0x70 [ 447.438919] ? tcp_write_xmit+0x1676/0x5710 [ 447.443252] ? __tcp_push_pending_frames+0xb2/0x290 [ 447.448266] ? tcp_push+0x662/0x900 [ 447.451899] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 447.456568] ? tcp_sendmsg+0x2f/0x50 [ 447.460292] ? inet_sendmsg+0x19c/0x690 [ 447.464275] ? sock_sendmsg+0xd5/0x120 [ 447.468166] ? __x64_sys_sendto+0xe1/0x1a0 [ 447.472414] ? do_syscall_64+0x1b9/0x820 [ 447.476498] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.481867] ? mark_held_locks+0x130/0x130 [ 447.486105] ? trace_hardirqs_on+0xbd/0x310 [ 447.490427] ? __kmalloc_node_track_caller+0x3c/0x70 [ 447.495552] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 447.501021] ? kasan_unpoison_shadow+0x35/0x50 [ 447.505605] ? kasan_unpoison_shadow+0x35/0x50 [ 447.510201] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 447.515220] ? skb_release_data+0x1c4/0x880 [ 447.519547] ? refcount_add_not_zero_checked+0x330/0x330 [ 447.524996] ? skb_tx_error+0x2f0/0x2f0 [ 447.528981] ? __kmalloc_node_track_caller+0x50/0x70 [ 447.534094] __alloc_pages_nodemask+0x34b/0xdd0 [ 447.538762] ? kasan_check_write+0x14/0x20 [ 447.542998] ? pskb_expand_head+0x6b3/0x10f0 [ 447.547407] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 447.552427] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 447.556932] ? save_stack+0xa9/0xd0 [ 447.560574] ? save_stack+0x43/0xd0 [ 447.564201] ? kasan_kmalloc+0xc7/0xe0 [ 447.568091] ? kasan_slab_alloc+0x12/0x20 [ 447.572254] ? skb_clone+0x1bb/0x500 [ 447.575982] ? dev_queue_xmit_nit+0x414/0xb30 [ 447.580474] ? dev_hard_start_xmit+0x186/0xc90 [ 447.585064] ? __dev_queue_xmit+0x2f39/0x3950 [ 447.589563] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 447.595104] alloc_pages_current+0x10c/0x210 [ 447.599515] skb_copy_ubufs+0x4c2/0x1b30 [ 447.603575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.608952] ? memcpy+0x45/0x50 [ 447.612268] ? skb_release_data+0x880/0x880 [ 447.616603] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 447.621112] ? lock_downgrade+0x900/0x900 [ 447.625261] ? trace_hardirqs_on+0xbd/0x310 [ 447.629620] ? pvclock_read_flags+0x160/0x160 [ 447.634115] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 447.638613] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 447.644071] ? kvm_clock_read+0x18/0x30 [ 447.648050] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 447.653079] ? ktime_get_with_offset+0x310/0x460 [ 447.657858] ? ktime_get+0x400/0x400 [ 447.661599] ? check_preemption_disabled+0x48/0x200 [ 447.666620] dev_queue_xmit_nit+0x90a/0xb30 [ 447.671126] ? default_device_exit+0x2c0/0x2c0 [ 447.675716] ? update_curr+0x4ec/0xbe0 [ 447.679619] ? __account_cfs_rq_runtime+0x790/0x790 [ 447.684642] dev_hard_start_xmit+0x186/0xc90 [ 447.689055] ? dev_direct_xmit+0x6b0/0x6b0 [ 447.693297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.698838] ? netif_skb_features+0x690/0xb70 [ 447.703336] ? validate_xmit_xfrm+0x1ef/0xda0 [ 447.707832] ? lock_acquire+0x1ed/0x520 [ 447.711807] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.717360] ? validate_xmit_skb+0x80c/0xf30 [ 447.721799] ? lock_release+0x970/0x970 [ 447.725780] ? netif_skb_features+0xb70/0xb70 [ 447.730296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.735863] ? check_preemption_disabled+0x48/0x200 [ 447.740877] ? check_preemption_disabled+0x48/0x200 [ 447.745901] __dev_queue_xmit+0x2f39/0x3950 [ 447.750240] ? perf_sched_cb_inc+0x350/0x350 [ 447.754652] ? netdev_pick_tx+0x2d0/0x2d0 [ 447.758815] ? finish_task_switch+0x180/0x900 [ 447.763317] ? lock_downgrade+0x900/0x900 [ 447.767465] ? finish_task_switch+0x1b5/0x900 [ 447.771983] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 447.777787] ? mark_held_locks+0x130/0x130 [ 447.782026] ? mark_held_locks+0x130/0x130 [ 447.786261] ? lock_downgrade+0x900/0x900 [ 447.790414] ? trace_hardirqs_on+0xbd/0x310 [ 447.794750] ? _raw_spin_unlock_bh+0x30/0x40 [ 447.799164] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 447.804617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.810161] ? mark_held_locks+0x130/0x130 [ 447.814408] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 447.819083] ? tcp_packet+0x6ad/0x58d2 [ 447.823008] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 447.828218] ? ip_finish_output+0x7f8/0xf90 [ 447.832544] ? lock_downgrade+0x900/0x900 [ 447.836700] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 447.841997] ? trace_hardirqs_on+0xbd/0x310 [ 447.846324] ? ip_finish_output+0x7f8/0xf90 [ 447.850646] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 447.856101] dev_queue_xmit+0x17/0x20 [ 447.859900] ? dev_queue_xmit+0x17/0x20 [ 447.863875] ip_finish_output2+0x105c/0x1860 [ 447.868287] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.873828] ? ip_copy_metadata+0xe10/0xe10 [ 447.878156] ? cgroup_dev_is_valid_access+0x150/0x150 [ 447.883349] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 447.888629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.894165] ? ipv4_mtu+0x37d/0x590 [ 447.897792] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 447.903255] ? __do_replace+0xab0/0xab0 [ 447.907252] ip_finish_output+0x7f8/0xf90 [ 447.911402] ? ip_finish_output+0x7f8/0xf90 [ 447.915727] ? ip_fragment.constprop.50+0x240/0x240 [ 447.920740] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 447.925756] ? nf_nat_ipv4_out+0x2e1/0x340 [ 447.930023] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 447.935230] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 447.940248] ? nf_hook_slow+0x11e/0x1c0 [ 447.944226] ip_output+0x21d/0x8d0 [ 447.947774] ? ip_mc_output+0x15a0/0x15a0 [ 447.951971] ? ip_fragment.constprop.50+0x240/0x240 [ 447.956999] ? sock_alloc_send_skb+0x40/0x40 [ 447.961411] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 447.966525] ip_local_out+0xc5/0x1b0 [ 447.970248] __ip_queue_xmit+0x9af/0x1f30 [ 447.974407] ? ip_build_and_send_pkt+0xc80/0xc80 [ 447.979171] ? tcp_schedule_loss_probe+0x530/0x530 [ 447.984118] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.989654] ? tcp_established_options+0x366/0x5b0 [ 447.994598] ? tcp_select_initial_window+0x400/0x400 [ 447.999739] ip_queue_xmit+0x56/0x70 [ 448.003471] __tcp_transmit_skb+0x1bc5/0x3b00 [ 448.007988] ? __tcp_select_window+0x9e0/0x9e0 [ 448.012571] ? pvclock_read_flags+0x160/0x160 [ 448.017065] ? tcp_write_xmit+0xf1/0x5710 [ 448.021217] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.026678] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 448.031696] ? tcp_rtx_synack+0x730/0x730 [ 448.035853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.041390] ? sk_reset_timer+0x36/0x60 [ 448.045366] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 448.050123] ? tcp_rbtree_insert+0x141/0x190 [ 448.054536] ? tcp_rearm_rto+0xdf/0x100 [ 448.058514] ? tcp_event_new_data_sent+0x266/0x3c0 [ 448.063451] tcp_write_xmit+0x1676/0x5710 [ 448.067614] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 448.072280] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 448.077216] ? ___pskb_trim+0x89d/0x1320 [ 448.081289] ? skb_condense+0x3d0/0x3d0 [ 448.085270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.090814] __tcp_push_pending_frames+0xb2/0x290 [ 448.095660] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 448.100679] tcp_push+0x662/0x900 [ 448.104136] ? __sk_mem_schedule+0xac/0xe0 [ 448.108387] ? tcp_md5_hash_key+0x250/0x250 [ 448.112712] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 448.117747] ? ___pskb_trim+0x1320/0x1320 [ 448.121923] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 448.127501] tcp_sendmsg_locked+0x3296/0x3f90 [ 448.132029] ? lock_downgrade+0x900/0x900 [ 448.136182] ? shrink_dcache_sb+0x350/0x350 [ 448.140520] ? tcp_sendpage+0x60/0x60 [ 448.144321] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.149856] ? aa_label_sk_perm+0xfc/0xa50 [ 448.154096] ? aa_profile_af_perm+0x410/0x410 [ 448.158605] ? ksys_dup3+0x680/0x680 [ 448.162321] ? lock_acquire+0x1ed/0x520 [ 448.166289] ? tcp_sendmsg+0x21/0x50 [ 448.170024] ? trace_hardirqs_on+0xbd/0x310 [ 448.174383] ? lock_release+0x970/0x970 [ 448.178369] ? lock_sock_nested+0xe2/0x120 [ 448.182652] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.188103] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.193637] ? check_preemption_disabled+0x48/0x200 [ 448.198671] ? lock_sock_nested+0x9a/0x120 [ 448.202904] ? lock_sock_nested+0x9a/0x120 [ 448.207139] ? __local_bh_enable_ip+0x160/0x260 [ 448.211811] tcp_sendmsg+0x2f/0x50 [ 448.215378] inet_sendmsg+0x19c/0x690 [ 448.219182] ? ipip_gro_receive+0x100/0x100 [ 448.223516] ? apparmor_socket_sendmsg+0x29/0x30 [ 448.228273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.233816] ? security_socket_sendmsg+0x94/0xc0 [ 448.238574] ? ipip_gro_receive+0x100/0x100 [ 448.242901] sock_sendmsg+0xd5/0x120 [ 448.246630] __sys_sendto+0x3d7/0x670 [ 448.250435] ? __ia32_sys_getpeername+0xb0/0xb0 [ 448.255113] ? wait_for_completion+0x8a0/0x8a0 [ 448.259695] ? lock_release+0x970/0x970 [ 448.263669] ? check_preemption_disabled+0x48/0x200 [ 448.268687] ? fsnotify_first_mark+0x350/0x350 [ 448.273269] ? __fsnotify_parent+0xcc/0x420 [ 448.277589] ? fsnotify+0xf10/0xf10 [ 448.281215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.286770] ? __sb_end_write+0xd9/0x110 [ 448.290835] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 448.296369] ? fput+0x130/0x1a0 [ 448.299660] ? ksys_write+0x1ae/0x260 [ 448.303466] ? trace_hardirqs_on+0xbd/0x310 [ 448.307789] ? __ia32_sys_read+0xb0/0xb0 [ 448.311849] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.317214] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.322680] __x64_sys_sendto+0xe1/0x1a0 [ 448.326747] do_syscall_64+0x1b9/0x820 [ 448.330633] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 448.336016] ? syscall_return_slowpath+0x5e0/0x5e0 [ 448.340967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.345815] ? trace_hardirqs_on_caller+0x310/0x310 [ 448.350851] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 448.355872] ? prepare_exit_to_usermode+0x291/0x3b0 [ 448.360903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.365752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.370951] RIP: 0033:0x457579 [ 448.374157] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.393062] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 448.400789] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 448.408057] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 448.415354] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 448.422617] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 448.429899] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x400300]}}, 0x20) 23:19:40 executing program 0 (fault-call:8 fault-nth:45): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 448.669773] FAULT_INJECTION: forcing a failure. [ 448.669773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.681688] CPU: 0 PID: 22365 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 448.690189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.699543] Call Trace: [ 448.702145] dump_stack+0x1d3/0x2c4 [ 448.705786] ? dump_stack_print_info.cold.2+0x52/0x52 [ 448.710991] should_fail.cold.4+0xa/0x17 [ 448.715059] ? save_stack+0x43/0xd0 [ 448.718698] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 448.723810] ? dev_hard_start_xmit+0x186/0xc90 [ 448.728394] ? __dev_queue_xmit+0x2f39/0x3950 [ 448.732892] ? dev_queue_xmit+0x17/0x20 [ 448.736872] ? ip_finish_output2+0x105c/0x1860 [ 448.741458] ? ip_finish_output+0x7f8/0xf90 [ 448.745790] ? ip_output+0x21d/0x8d0 [ 448.749510] ? ip_local_out+0xc5/0x1b0 [ 448.753427] ? __ip_queue_xmit+0x9af/0x1f30 [ 448.757758] ? ip_queue_xmit+0x56/0x70 [ 448.761653] ? tcp_write_xmit+0x1676/0x5710 [ 448.765986] ? __tcp_push_pending_frames+0xb2/0x290 [ 448.771010] ? tcp_push+0x662/0x900 [ 448.774644] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 448.779313] ? tcp_sendmsg+0x2f/0x50 [ 448.783028] ? inet_sendmsg+0x19c/0x690 [ 448.787007] ? sock_sendmsg+0xd5/0x120 [ 448.790905] ? __x64_sys_sendto+0xe1/0x1a0 [ 448.795152] ? do_syscall_64+0x1b9/0x820 [ 448.799220] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.804594] ? mark_held_locks+0x130/0x130 [ 448.808840] ? trace_hardirqs_on+0xbd/0x310 [ 448.813167] ? __kmalloc_node_track_caller+0x3c/0x70 [ 448.818277] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.823736] ? kasan_unpoison_shadow+0x35/0x50 [ 448.828323] ? kasan_unpoison_shadow+0x35/0x50 [ 448.832913] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 448.837981] ? skb_release_data+0x1c4/0x880 [ 448.842312] ? refcount_add_not_zero_checked+0x330/0x330 [ 448.847791] ? skb_tx_error+0x2f0/0x2f0 [ 448.851773] ? __kmalloc_node_track_caller+0x50/0x70 [ 448.856886] __alloc_pages_nodemask+0x34b/0xdd0 [ 448.861557] ? kasan_check_write+0x14/0x20 [ 448.865793] ? pskb_expand_head+0x6b3/0x10f0 [ 448.870208] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 448.875236] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 448.879769] ? save_stack+0xa9/0xd0 [ 448.883417] ? save_stack+0x43/0xd0 [ 448.887045] ? kasan_kmalloc+0xc7/0xe0 [ 448.890978] ? kasan_slab_alloc+0x12/0x20 [ 448.895134] ? skb_clone+0x1bb/0x500 [ 448.898851] ? dev_queue_xmit_nit+0x414/0xb30 [ 448.903347] ? dev_hard_start_xmit+0x186/0xc90 [ 448.907934] ? __dev_queue_xmit+0x2f39/0x3950 [ 448.912449] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 448.918008] alloc_pages_current+0x10c/0x210 [ 448.922427] skb_copy_ubufs+0x4c2/0x1b30 [ 448.926506] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.931885] ? memcpy+0x45/0x50 [ 448.935179] ? skb_release_data+0x880/0x880 [ 448.939526] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 448.944038] ? lock_downgrade+0x900/0x900 [ 448.948195] ? trace_hardirqs_on+0xbd/0x310 [ 448.952550] ? pvclock_read_flags+0x160/0x160 [ 448.957047] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 448.961556] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.967023] ? kvm_clock_read+0x18/0x30 [ 448.971006] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 448.976032] ? ktime_get_with_offset+0x310/0x460 [ 448.980834] ? ktime_get+0x400/0x400 [ 448.984561] ? check_preemption_disabled+0x48/0x200 [ 448.989605] dev_queue_xmit_nit+0x90a/0xb30 [ 448.993961] ? default_device_exit+0x2c0/0x2c0 [ 448.998553] ? update_curr+0x4ec/0xbe0 [ 449.002458] ? __account_cfs_rq_runtime+0x790/0x790 [ 449.007496] dev_hard_start_xmit+0x186/0xc90 [ 449.011915] ? check_preemption_disabled+0x48/0x200 [ 449.016995] ? dev_direct_xmit+0x6b0/0x6b0 [ 449.021244] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.026786] ? netif_skb_features+0x690/0xb70 [ 449.031302] ? validate_xmit_xfrm+0x1ef/0xda0 [ 449.035819] ? lock_acquire+0x1ed/0x520 [ 449.039799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.045358] ? validate_xmit_skb+0x80c/0xf30 [ 449.049772] ? lock_release+0x970/0x970 [ 449.053780] ? netif_skb_features+0xb70/0xb70 [ 449.058281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.063861] ? check_preemption_disabled+0x48/0x200 [ 449.068879] ? check_preemption_disabled+0x48/0x200 [ 449.073919] __dev_queue_xmit+0x2f39/0x3950 [ 449.078275] ? perf_sched_cb_inc+0x350/0x350 [ 449.082711] ? netdev_pick_tx+0x2d0/0x2d0 [ 449.086862] ? finish_task_switch+0x180/0x900 [ 449.091370] ? lock_downgrade+0x900/0x900 [ 449.095554] ? finish_task_switch+0x1b5/0x900 [ 449.100072] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 449.105905] ? mark_held_locks+0x130/0x130 [ 449.110187] ? mark_held_locks+0x130/0x130 [ 449.114426] ? lock_downgrade+0x900/0x900 [ 449.118584] ? trace_hardirqs_on+0xbd/0x310 [ 449.122910] ? _raw_spin_unlock_bh+0x30/0x40 [ 449.127337] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 449.132796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.138356] ? mark_held_locks+0x130/0x130 [ 449.142623] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 449.147301] ? tcp_packet+0x6ad/0x58d2 [ 449.151217] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 449.156418] ? ip_finish_output+0x7f8/0xf90 [ 449.160745] ? lock_downgrade+0x900/0x900 [ 449.164900] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 449.170212] ? trace_hardirqs_on+0xbd/0x310 [ 449.174539] ? ip_finish_output+0x7f8/0xf90 [ 449.178878] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 449.184335] dev_queue_xmit+0x17/0x20 [ 449.188149] ? dev_queue_xmit+0x17/0x20 [ 449.192131] ip_finish_output2+0x105c/0x1860 [ 449.196558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.202109] ? ip_copy_metadata+0xe10/0xe10 [ 449.206453] ? cgroup_dev_is_valid_access+0x150/0x150 [ 449.211669] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 449.216974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.222516] ? ipv4_mtu+0x37d/0x590 [ 449.226146] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 449.231601] ? __do_replace+0xab0/0xab0 [ 449.235590] ip_finish_output+0x7f8/0xf90 [ 449.239740] ? ip_finish_output+0x7f8/0xf90 [ 449.244067] ? ip_fragment.constprop.50+0x240/0x240 [ 449.249100] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 449.254129] ? nf_nat_ipv4_out+0x2e1/0x340 [ 449.258374] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 449.263571] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 449.268595] ? nf_hook_slow+0x11e/0x1c0 [ 449.272583] ip_output+0x21d/0x8d0 [ 449.276133] ? ip_mc_output+0x15a0/0x15a0 [ 449.280292] ? ip_fragment.constprop.50+0x240/0x240 [ 449.285314] ? sock_alloc_send_skb+0x40/0x40 [ 449.289742] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 449.294856] ip_local_out+0xc5/0x1b0 [ 449.298599] __ip_queue_xmit+0x9af/0x1f30 [ 449.302760] ? ip_build_and_send_pkt+0xc80/0xc80 [ 449.307525] ? tcp_schedule_loss_probe+0x530/0x530 [ 449.312462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.318006] ? tcp_established_options+0x366/0x5b0 [ 449.322939] ? tcp_select_initial_window+0x400/0x400 [ 449.328068] ip_queue_xmit+0x56/0x70 [ 449.331791] __tcp_transmit_skb+0x1bc5/0x3b00 [ 449.336306] ? __tcp_select_window+0x9e0/0x9e0 [ 449.340897] ? pvclock_read_flags+0x160/0x160 [ 449.345395] ? tcp_write_xmit+0xf1/0x5710 [ 449.349561] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 449.355024] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 449.360047] ? tcp_rtx_synack+0x730/0x730 [ 449.364209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.369754] ? sk_reset_timer+0x36/0x60 [ 449.373733] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 449.378491] ? tcp_rbtree_insert+0x141/0x190 [ 449.382903] ? tcp_rearm_rto+0xdf/0x100 [ 449.386885] ? tcp_event_new_data_sent+0x266/0x3c0 [ 449.391848] tcp_write_xmit+0x1676/0x5710 [ 449.396045] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 449.400728] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 449.405672] ? ___pskb_trim+0x89d/0x1320 [ 449.409761] ? skb_condense+0x3d0/0x3d0 [ 449.413746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.419310] __tcp_push_pending_frames+0xb2/0x290 [ 449.424160] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 449.429185] tcp_push+0x662/0x900 [ 449.432643] ? __sk_mem_schedule+0xac/0xe0 [ 449.436888] ? tcp_md5_hash_key+0x250/0x250 [ 449.441222] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 449.446250] ? ___pskb_trim+0x1320/0x1320 [ 449.450410] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 449.455968] tcp_sendmsg_locked+0x3296/0x3f90 [ 449.460481] ? lock_downgrade+0x900/0x900 [ 449.464635] ? shrink_dcache_sb+0x350/0x350 [ 449.468982] ? tcp_sendpage+0x60/0x60 [ 449.472796] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.478334] ? aa_label_sk_perm+0xfc/0xa50 [ 449.482594] ? aa_profile_af_perm+0x410/0x410 [ 449.487112] ? ksys_dup3+0x680/0x680 [ 449.490846] ? lock_acquire+0x1ed/0x520 [ 449.494818] ? tcp_sendmsg+0x21/0x50 [ 449.498572] ? trace_hardirqs_on+0xbd/0x310 [ 449.502901] ? lock_release+0x970/0x970 [ 449.506884] ? lock_sock_nested+0xe2/0x120 [ 449.511124] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 449.516588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.522133] ? check_preemption_disabled+0x48/0x200 [ 449.527159] ? lock_sock_nested+0x9a/0x120 [ 449.531463] ? lock_sock_nested+0x9a/0x120 [ 449.535714] ? __local_bh_enable_ip+0x160/0x260 [ 449.540492] tcp_sendmsg+0x2f/0x50 [ 449.544057] inet_sendmsg+0x19c/0x690 [ 449.547910] ? ipip_gro_receive+0x100/0x100 [ 449.552254] ? apparmor_socket_sendmsg+0x29/0x30 [ 449.557019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.562567] ? security_socket_sendmsg+0x94/0xc0 [ 449.567343] ? ipip_gro_receive+0x100/0x100 [ 449.571738] sock_sendmsg+0xd5/0x120 [ 449.575488] __sys_sendto+0x3d7/0x670 [ 449.579301] ? __ia32_sys_getpeername+0xb0/0xb0 [ 449.583990] ? wait_for_completion+0x8a0/0x8a0 [ 449.588573] ? lock_release+0x970/0x970 [ 449.592568] ? check_preemption_disabled+0x48/0x200 [ 449.597676] ? fsnotify_first_mark+0x350/0x350 [ 449.602268] ? __fsnotify_parent+0xcc/0x420 [ 449.606599] ? fsnotify+0xf10/0xf10 [ 449.610263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.615818] ? __sb_end_write+0xd9/0x110 [ 449.619887] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 449.625437] ? fput+0x130/0x1a0 [ 449.628738] ? ksys_write+0x1ae/0x260 [ 449.632542] ? trace_hardirqs_on+0xbd/0x310 [ 449.636865] ? __ia32_sys_read+0xb0/0xb0 [ 449.640928] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.646324] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 449.651795] __x64_sys_sendto+0xe1/0x1a0 [ 449.655867] do_syscall_64+0x1b9/0x820 [ 449.659761] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 449.665135] ? syscall_return_slowpath+0x5e0/0x5e0 [ 449.670227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.675083] ? trace_hardirqs_on_caller+0x310/0x310 [ 449.680109] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 449.685134] ? prepare_exit_to_usermode+0x291/0x3b0 [ 449.690172] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.695025] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.700216] RIP: 0033:0x457579 [ 449.703438] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:19:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x1a0]}}, 0x20) 23:19:41 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001180)={r1, 0xaf, 0x7f, 0x21a, 0x5, 0x7}, &(0x7f00000011c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000000), 0x4) set_mempolicy(0x4003, &(0x7f0000000040)=0xfffffffffffffffd, 0x3f) [ 449.722356] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 449.730077] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 449.737354] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 449.744642] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 449.751926] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 449.759226] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:41 executing program 0 (fault-call:8 fault-nth:46): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 449.819151] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:19:41 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000180)={0x0, 0xffffffffffffff6b}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x20000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffd) sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e9682f6f9213ce5678560ea4a7dadcbb8e74916a6ea7721fb3721a68271993e30ce87dae9e2070c9006d503a92214208528df9bad22b9f", 0x37}, {&(0x7f0000000940)="4809eb4e25b723c14c05943d6a0a2894172d3924216cafe4fc3894cb62460766fe8fd8ac6927f764183f97499bb4f7e7e8f74154e641f304aca3e3421075c9b1f358aaaacb6c95f25123ccad5e19ecbd6ba1c0167e92a8eb3c2b30f7358cb4987951ff261efd0d819e5d827d9d91e05b852c47232ed148f44d2ce56f9a23b572589022ae583440b728cb4c53532f90c95bf9a61aa5b494cb0fe0a87d627ed933495eca126b54c299bcec37cc87f0bb46643da8a1b0bc7eae9e96ca34ef75490af0d0b28431460bd4ba36c63a3947e55da4ea8eb14fde079add19f837f57b7b7f98c438fb6977a5addcc5d8116e1d873a8fb0673b4d9e8f6bc40a883a4043b6b5cd43bbe8e80b68354e22e96711795f9f7d6d351dee28b0ec7e1ed0253cc3528e9e3e0b06588df561a87182c9ec225398b54ef76425fcd27378f2a5107591c66377a541a196cfedff55efe9e9c3179c3a00f33dba5b119d967b2b61155197f8783460849355b5e2f4ac7dfcccc46953d49d01647f11cb0250715e8d1e8206bfea4989a17dcfe1dc8f570344062b6ee7cf15147cbccca59124a32ab0d6568c36830830172e9c005420b079846a49d9e320dbb9cf67d861bba7fd53b7029969dfac0e930b1b2cd3f460f34b8fa95a6104c60bba61213f175ffc67865cff883ce3214a996f0fa8b198eb862de1f74538d34552579a9d8d6a58c2f471f74a9b9cb05dcd3251f520b5201766fd3144c8709db9294df9f42118ce43950de76c177f571d6fba3a8955d890df5c11319f7bb51a61334619e7c2e70187cb1618f4e9a0956e01dc678a4731e54f21171215da76ff169e09c784aae95de7ba271a890af5f1e443ec4263727fd2ea9b1068cc1f7a2c10a66d84a6ff049ade2c40485f12ccd0526475adcea709301a9009a729d37aeea7e28bde88bec3e589323b45557bf41fdb27bfbf48296298e24770d70ff0424aa124c84696c044ec904ce071baf7fd725d71dadfee65e6e25a057fd055947ac565d955b739ed74c8428dd9ba29cd10d45c572d68ba557fcf88c7b4d9b02e18063f1af1b414c43d7da7cb2eab43761f6b1da41d6a06f1500415af2b3e7e3a56e2159a75d402b29f64bead303120b9127a8e89dbd12a3a2ded89795b4820b3fdddfc07fe6b89675c736ef95448271af735b3266b42825f6894de4da428871270da241e6917b528d69ca959a9515359902ccd5a5af1b08f121fab09a38f2c026a956e52780a308b226b50086c36a4907109ca4eb174dd33f5664250af0a3581656485a05bd9d3cb797ca90d351a1cbb99de654c232c7557acc23a791c24096c172f20ce657a1a59c6f9140ea98529a6e8bb7e02a95c9c4ba238980e49ad35234bd20f5fd65af1b9673654b9939e535c53640eee7bd3861ac9042045d1dfe698b4dfe971d4ea345fe7a372b2788a2f3d659c0f6f321f5014195d2e215099f41d593f47d673854367adf70269672dd8e71903f1a9a59100d5a70058093cda8c82bdd98548ebfc10419a29550fd65bd05d961e2795760e143bff48f99cda4c8e60ee3c880bc008cfedb82b885044eec423c2cda856705e386a49ee03a68aed1ac3f64a551a534e13c95e56b4b8f010a7ab5a8704298c0260091c02c762390bb15aabd33c11679937c4357d325968a4f3d516d4656108e62104b0c99ec0204bf492bbb07d6f13a7d75eb4937d6294a52fff5efc720d10c8ec992bb094257676a4a3d2f961ec874f5ba0e58165d857a8bf01f49d36850da501faea82c65d60bd72ce4afa4699cd039249ff53365b8b265bdbb88f07a8301c1397f7caebe28a877b728807c0d8b6c8df9400aaaa0f920a90f28fb6b122b561ea294908fd813abcc252ac7edc4660df7e759ee98d31c466a79c561a31b3b0a552901122f109e8878ae963d53919498bd351b9a71328471ec2adcb0be0a576c7fa20f2cedab48ec2281b06d7681d2b7211d7ce079c34d8aba72c3e84d331ec7e8940b6e7d0100110c3a488568f03951669bc7c8afb1caa6126a88f5ef9a853eaf89f5814cad682efb664b03af2ce79bd0ff8a15922471173a485be880ad761c437ea7d609c21f2c0a79994cc4eeb1841530f057cb9015b1b0616ac9d4813606483510628d115e38d292565793e925ee0707b769390fc777d780bacb0476ac6425b3e0c3acc52809493720ad95e6c234b75da900bd89467b32e642d07096a34521382cd99b8f3bcc82edbc49f15887ca61b515f9dc191208d1815b6bb6d571ae7f94879be2e5f11abff5b7c3f8b059de504393383d4699418c4ef8573456b389aa0ecafe7c864c13b3b1bed13e2542bb92ea817f43741e266aa421ff7800eaf2c48b8d72611d90e642d6406c4ccbe2efdc0236a0cf6a66bd16e5ac3b0eb0611a95269047626d66838c115e5176abab023d8b1cae1640fc4471378325891632db22858e6a500ad352b369acf14a35e26748d954032198d31996c012199f6dbed784a7011ccdef30d0c75b1e9e9aeafac9728b9ce38813ab9d66340f9cbdb467880e520441553b0476c1033bb2a205b119da10fd1899d60f8af93f16e7ce76e340fe5a18b25304e0a0b57005d8ff390ba90f3f9033371109c7bc92279fb24222d7da106d425fa224e925c6310fc543b5bac31f89bb01ab9866c86b8eb84e8bb22b07dfc031f655ef10f8a4df6464bfb33172ea0965af65b6e512ecbd29e3597b615e377b0157672fea4b857c1fc3ee0ed2ea1e7a16558d53fb501847e37777c64818dd1455b15df2df5bbd230fcc93591e5fb0b10189e6ef42ae58d20c6bde081ab43ca7fa595f2d2ed6219509b76bdd63e8af75f83d9d859dc58751fa3468fddb0b5447c10421a9ef43ef558b09c8bf15634c6fb0de8885433b50510e391019aa53780cd990f042a6f3b137bec9a55048778877a665c6524ecf1cfbbc602811f49871e706eab8f219f4927bebd68ffaf881eea1d44278c691122049da5a354f43de1f921d548559dc6a12f9cb78d83039df91899642172a0c69e081358671a7db6ea3d3368039a4e1ade909249f10b07988b0d08dbb3cd121f74b854ffb0804e4799fc3a4f4eb2239d2df26be826b13ed267421572a6960016ba6e122f5458c8e7771ba5d0c569803f117ec30a3d146168bbc1541ac5aaf7f2e44045756801cf31d1aaf2d97d5fa93046d2a0021ae99ab0535bbeb7e777587c308111d1aa26e91ff7621e715ce83d86415e39eb62758d9ed41f5073b7adec0c4f02a543b6ae3543c0393c22e350c115489b1d7a9d41247256026131a8d44b3de86e6c0d4fc7072ce05f2c7b1492915b87c1e45f2529f6addec85089fcdc298da16ac0b4985577f9f930b6fc373499dfc30ced4c554fec1df7b032a30f022b00069afb77fe0503e8be3d2ded1569deb0fa5a3334b479b81fc6bcc7d1c8fb4ae10b4d0d79b8261bec391633392abed96a20d14748906b1041409d30ac5fea2eedc0a7ed8f0b532fe0d83c681094f5295c7acb6b676aaf04f9e013cbbf894bd507f8fd03acc65fc5df65bee0ba79b6ba823fda8791719b19fed26804e934ebb1d7fc1971d59ad0fe7d2804703529e51c11d4f27e4fb297548b0698c776479c9e3f0bc096b067c6f61b6f1a7b6652e4a3a7de7ffe6f794893304fd052db90d87ba7a26961db5b1fed673dd5a7f7247bc1ae573909e2ca2606912440e206536d6fe9d0a6642aef03d9acf15bd993a49ad16882f91a5d3f8aacacc0f43d9e858b684ee5d3ef7e4df0f5249dc44a42a739726714828695cd038d7c6f39a48a523955cf7fb62135b5d4c2403d362b7260ea9a9309ca0b757868af39d6565a5ac594d0fb6ebe77ea9c84a9f23b62737801fdb0cf1d5c5f7b120ef128f871a08a8234bbc7658e23d282e866ef36137bcf5ad865b4988a47f5b7cdf750ec6e9a94878cd62e3a93da3811bfe3b3fb0cb7529b5889deca67019887d9a266bf3d7617cc29fcd680e721d2a87a7fcba6ac698ce0c7dbafbececad3c4c92fb1ddc43440104ad787e824f46671487965da42aacf3a3a09c17a436c7bc4f5cf40c2fb8d8e6e7df7f230690ab309b345fdf342b13eee91f4b0480991c6a07ca1adcc41cf904090a6206a273dd00c75ce6ce6fd1621ef46a1b0e9024d8dc072624b26fff6f316f3775bd5808fd65cd4306edb9cb4b81ce394dc916415465eac81a1088ec0274f8a773bfdca7ea3cbf062a86a8d53928f5f7493075c0acd3a89a1a0a26d06827b2cfdb76918d45d8016f7b066255eb5f360e5b62198c2d74b3a072cabfee444caa4b97102a503001bd3ba306720a8c55360f6f60082db6aa3210023512bb8173dca454986b8f70decb7b97aa2284d0b0cf58676a1eb4e8c82ad735fde726bf3d8b6cfd3adc27b90328aa89470be7faef7cbcd166270b566028a474ccddf2bdebbeb1205dbeb18074cc372f8443331b7748b8ecce4aeb8bc4b5d3e4c96bbb9f8da8dd1ff70deb9f98c969811c747a72275e33885a06997b618a0a51d3c38d8a7f96aed441a4adea9adadd99f21cdf61b6ed8a1cf94df6359fc636554aebea208268ccd6582f58e044a375872fde22164c121f2f9351828be2d779c229da72cd81ef7ad5966f7da57bd30ad3f64ecb0adbced941239f0ada1610e9266e90aafb1ee4930656c42cd78ab0e7a4563d671452e6537c33b0d1b7c68ca0d9187c27b6e59235c65b4776d78ef4c133b86c4a4ba14ed9963a5e5330a1bdde0b2ec42b2d040c8bdeb04c5bed075e89caa725a41c6cb3d6a675df4b7335e2ada95030b52073acdf907aa3da8c725e53e42598532c73744cadc6ddd83a0e0ee293235bb4bfde171610fb305806136cb29e5f8ff4899c0b63c90ce3bb27ec3bb4775d6fc88b86d4c6b21aa95cf08ff9205805fe60813e1022c678786c6a29e7cee9c9baf5c659866cad1389e936c0c426159975ffc919a1a3d166e14bb2e81ece525b3cc7262f568425c2172e93433fbe3831fb4c81c1ebfa8975cb4849bc91f7cd33e5be0c6a033486a92c9c70a75917c6d039ec2cc958325c1c981892b242daf83d424fec1cfa5a1358dbab1e66cca73771eda540bcdcdb763c1be44a80191ecb6a98c471fe712a5037b7942b420128e46d74bf8a631257ede83c79d0a0b7c1548a8579e0c6a85ae6d0d61f5d206185a41b6acd0a66731c4fa8a86a74be92509906e129c6f917d8d509564ea6f579a69cc5b83c658f267e803fa0292020ea92a085764f2204f8f8aea5249cbe4086c50b83356aa7f833a63ce915ffbd29346dfd25f8bc5c3fff3080752a08d1265107533d0cc66d1f02732ae7ff15adfca4b8ef7145058d71e6c1aaef5280d48c519fdac6c5befe8462eeee2c5b82801d4d81920bbf85bc2860b04c2e23a5d3149a3bf9da135764e9e4103dc49f522c46edbe52a2ca6a6e95962e8a8b75886d4637d9fad65f589c0e2c29fd64db578df5d09ec111e4bb372027b271e5b9c1602d8afd051a3593a030c7b24dff4291aa3c2b279785087fce7ef618aeb21513f481885c2781e1a9dcd71a248ea7b28dd5d9d13a9e203321a2acac3967971f8ff9798fd61905412ccb15d2be03335c96e054d374d560f0d540621af53ecc8b9d307ebaa539d63992abe5ebaf6e8df0a7c290ee30254c3865de44d7d420e0b3a2720b7d28938589153fd07c9d075e4d6406e018f43abee1bc947425236e6b4005291aaf33087f75ce9188e5bfce8e9a7a6d0040d8fd4a9f5145c35b250987795c02794d9597907c40b3dc5b3738b49a8ddfcae38405b4dfe9b0fb468133b7bdc612f06", 0x1000}, {&(0x7f0000000380)="8a28374004967857bc728707c048a25379d8587e28241fc04836e9acdb408c0cc5e767d132aa1284d2df38e02154830fad8320db3755e5b7a8bb3490353f207c161354916a1523546cab7d6376c809969c1cdb6c7313d7d5a42d0f4a27118ac7bd583de8f781275838b6a0012885b30b1c9c31b3c4022e5cac787e8f", 0x7c}, {&(0x7f0000000400)="24a107b4852c9f8ed6b465c4de8400f2fcf402a594430d270449d4dd82426924b800932dc5151277cc95b3861046c162f74af401e47a951a65d9cf4698096b5b9e2eb573bcae2a5631e84603603ad4fc87ebea7d38a818464f32b58baf3d54c5c32a537497969981e2f87267546e73acb804cd870a30cdbbc52cd7bb430d", 0x7e}, {&(0x7f0000000540)="27b3cf8b37e717922cd5bc2b7a95c649", 0x10}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="456d7fcabb4c21bef50faf69c09fad1706e4797138be85f461480521aaee", 0x1e}], 0x7, &(0x7f0000000680)=[{0x58, 0x109, 0xfffffffffffffffa, "24d1be1d3a322faccb7fa26c1b694c22bdfcaef353bedaacf27fe0e115756f8c25dcbd2f12e9258b1d0c6c541422a91370cb3f631fa082f44eb878b0f9d65764579f3e2ee8"}], 0x58, 0x4000004}, 0x800) 23:19:41 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="7c02c90600af09c367eb0536742f646547c50024665b8511dde1e02717e93efb98e4f35295c274c92648d0260d986870f2a2d6f43efa6d6dec008f9da4a87019aefcb63adb65d5959e1d3733d5787a9d89f622d3d240ee15709e7c9a12379829d5231afe5aa325c179bd6ab70a7ee3ee56a76b9cd61833c5b55167013b0fbf3b4b0d5b0ca5f9676fb59a698c6092df11ba2630851cda7e7da92222de769c", 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, &(0x7f00000002c0)="d0c483494ba49a00008300000067430f925ef2"}, &(0x7f0000b4afe0)={&(0x7f0000000000), {}, 0x0, &(0x7f0000000000)="c4816decef"}, 0x8, &(0x7f0000000300)) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="05020c00ff7ff800009300be377858387609533bdb13a2ab6def844ae23d84efa8c50b24ace94a8acbff68bbc0ea1af01942884b6fa8050c85a2b23864f7a18d4f4d1f7a834579b1341d00ace580539ba935e986919d3b3439589318c376276cefc3314fbcad88ac0ca5f868af488ac9df689293e898c79716dd6db771e5047521f8b7564a795da4ecbea2343a1d42432dc572cb4564ec66eeb59ec4e4"], 0x9d, 0x2) [ 449.958417] FAULT_INJECTION: forcing a failure. [ 449.958417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.970324] CPU: 1 PID: 22382 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 449.978822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.988185] Call Trace: [ 449.990789] dump_stack+0x1d3/0x2c4 [ 449.994438] ? dump_stack_print_info.cold.2+0x52/0x52 [ 449.999672] should_fail.cold.4+0xa/0x17 [ 450.003741] ? save_stack+0x43/0xd0 [ 450.007383] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.012508] ? dev_hard_start_xmit+0x186/0xc90 [ 450.017112] ? __dev_queue_xmit+0x2f39/0x3950 [ 450.021616] ? dev_queue_xmit+0x17/0x20 [ 450.025623] ? ip_finish_output2+0x105c/0x1860 [ 450.030209] ? ip_finish_output+0x7f8/0xf90 [ 450.034538] ? ip_output+0x21d/0x8d0 [ 450.038260] ? ip_local_out+0xc5/0x1b0 [ 450.042178] ? __ip_queue_xmit+0x9af/0x1f30 [ 450.046504] ? ip_queue_xmit+0x56/0x70 [ 450.046519] ? tcp_write_xmit+0x1676/0x5710 [ 450.046532] ? __tcp_push_pending_frames+0xb2/0x290 [ 450.046545] ? tcp_push+0x662/0x900 [ 450.046562] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 450.068086] ? tcp_sendmsg+0x2f/0x50 [ 450.071824] ? inet_sendmsg+0x19c/0x690 [ 450.075807] ? sock_sendmsg+0xd5/0x120 [ 450.079717] ? __x64_sys_sendto+0xe1/0x1a0 [ 450.083973] ? do_syscall_64+0x1b9/0x820 [ 450.088049] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.093427] ? mark_held_locks+0x130/0x130 [ 450.097681] ? trace_hardirqs_on+0xbd/0x310 [ 450.102033] ? __kmalloc_node_track_caller+0x3c/0x70 [ 450.107160] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.112621] ? kasan_unpoison_shadow+0x35/0x50 [ 450.117228] ? kasan_unpoison_shadow+0x35/0x50 [ 450.121824] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 450.126863] ? skb_release_data+0x1c4/0x880 [ 450.131228] ? refcount_add_not_zero_checked+0x330/0x330 [ 450.136716] ? skb_tx_error+0x2f0/0x2f0 [ 450.140707] ? __kmalloc_node_track_caller+0x50/0x70 [ 450.145826] __alloc_pages_nodemask+0x34b/0xdd0 [ 450.150507] ? kasan_check_write+0x14/0x20 [ 450.154753] ? pskb_expand_head+0x6b3/0x10f0 [ 450.159184] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 450.164218] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 450.168751] ? save_stack+0xa9/0xd0 [ 450.172382] ? save_stack+0x43/0xd0 [ 450.176018] ? kasan_kmalloc+0xc7/0xe0 [ 450.179922] ? kasan_slab_alloc+0x12/0x20 [ 450.184102] ? skb_clone+0x1bb/0x500 [ 450.187825] ? dev_queue_xmit_nit+0x414/0xb30 [ 450.192324] ? dev_hard_start_xmit+0x186/0xc90 [ 450.196910] ? __dev_queue_xmit+0x2f39/0x3950 [ 450.201419] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 450.206974] alloc_pages_current+0x10c/0x210 [ 450.211414] skb_copy_ubufs+0x4c2/0x1b30 [ 450.215535] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.220907] ? memcpy+0x45/0x50 [ 450.224210] ? skb_release_data+0x880/0x880 [ 450.228535] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 450.233041] ? lock_downgrade+0x900/0x900 [ 450.237212] ? trace_hardirqs_on+0xbd/0x310 [ 450.241549] ? pvclock_read_flags+0x160/0x160 [ 450.246050] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 450.250552] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.256027] ? kvm_clock_read+0x18/0x30 [ 450.260022] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 450.265051] ? ktime_get_with_offset+0x310/0x460 [ 450.269818] ? ktime_get+0x400/0x400 [ 450.273547] ? netif_rx+0xe0/0x430 [ 450.277089] ? dev_forward_skb+0x60/0x60 [ 450.281199] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 450.286749] ? eth_type_trans+0x2ea/0x760 [ 450.290904] ? eth_gro_receive+0x920/0x920 [ 450.295158] dev_queue_xmit_nit+0x90a/0xb30 [ 450.299502] ? default_device_exit+0x2c0/0x2c0 [ 450.304090] ? check_preemption_disabled+0x48/0x200 [ 450.309121] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 450.314318] ? update_load_avg+0x387/0x2470 [ 450.318651] dev_hard_start_xmit+0x186/0xc90 [ 450.323073] ? dev_direct_xmit+0x6b0/0x6b0 [ 450.327323] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.332863] ? netif_skb_features+0x690/0xb70 [ 450.337377] ? validate_xmit_xfrm+0x1ef/0xda0 [ 450.341889] ? lock_acquire+0x1ed/0x520 [ 450.345875] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.351419] ? validate_xmit_skb+0x80c/0xf30 [ 450.355841] ? lock_release+0x970/0x970 [ 450.359820] ? __dev_queue_xmit+0x1a99/0x3950 [ 450.364338] ? netif_skb_features+0xb70/0xb70 [ 450.368856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.374402] ? check_preemption_disabled+0x48/0x200 [ 450.379424] ? check_preemption_disabled+0x48/0x200 [ 450.384453] __dev_queue_xmit+0x2f39/0x3950 [ 450.388786] ? attach_entity_load_avg+0x860/0x860 [ 450.393639] ? __switch_to_asm+0x34/0x70 [ 450.397728] ? __switch_to_asm+0x40/0x70 [ 450.401808] ? __switch_to_asm+0x34/0x70 [ 450.405888] ? netdev_pick_tx+0x2d0/0x2d0 [ 450.410054] ? rb_erase+0x3710/0x3710 [ 450.413871] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 450.419690] ? mark_held_locks+0x130/0x130 [ 450.423951] ? mark_held_locks+0x130/0x130 [ 450.428198] ? lock_downgrade+0x900/0x900 [ 450.432355] ? trace_hardirqs_on+0xbd/0x310 [ 450.436702] ? _raw_spin_unlock_bh+0x30/0x40 [ 450.441123] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.446595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.452146] ? mark_held_locks+0x130/0x130 [ 450.456403] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 450.461084] ? tcp_packet+0x6ad/0x58d2 [ 450.465006] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 450.470208] ? ip_finish_output+0x7f8/0xf90 [ 450.474542] ? lock_downgrade+0x900/0x900 [ 450.478694] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 450.483986] ? trace_hardirqs_on+0xbd/0x310 [ 450.488325] ? ip_finish_output+0x7f8/0xf90 [ 450.492667] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.498132] dev_queue_xmit+0x17/0x20 [ 450.501939] ? dev_queue_xmit+0x17/0x20 [ 450.505958] ip_finish_output2+0x105c/0x1860 [ 450.510391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.515977] ? ip_copy_metadata+0xe10/0xe10 [ 450.520321] ? cgroup_dev_is_valid_access+0x150/0x150 [ 450.525523] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 450.530806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.536358] ? ipv4_mtu+0x37d/0x590 [ 450.540003] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 450.545471] ? __do_replace+0xab0/0xab0 [ 450.549469] ip_finish_output+0x7f8/0xf90 [ 450.553638] ? ip_finish_output+0x7f8/0xf90 [ 450.557978] ? ip_fragment.constprop.50+0x240/0x240 [ 450.563159] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 450.568184] ? nf_nat_ipv4_out+0x2e1/0x340 [ 450.572469] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 450.577667] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 450.582701] ? nf_hook_slow+0x11e/0x1c0 [ 450.586683] ip_output+0x21d/0x8d0 [ 450.590233] ? ip_mc_output+0x15a0/0x15a0 [ 450.594392] ? ip_fragment.constprop.50+0x240/0x240 [ 450.599439] ? sock_alloc_send_skb+0x40/0x40 [ 450.603866] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 450.608990] ip_local_out+0xc5/0x1b0 [ 450.612721] __ip_queue_xmit+0x9af/0x1f30 [ 450.616987] ? ip_build_and_send_pkt+0xc80/0xc80 [ 450.621755] ? tcp_schedule_loss_probe+0x530/0x530 [ 450.626693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.632238] ? tcp_established_options+0x366/0x5b0 [ 450.637193] ? tcp_select_initial_window+0x400/0x400 [ 450.642303] ip_queue_xmit+0x56/0x70 [ 450.646025] __tcp_transmit_skb+0x1bc5/0x3b00 [ 450.650561] ? __tcp_select_window+0x9e0/0x9e0 [ 450.655163] ? pvclock_read_flags+0x160/0x160 [ 450.659666] ? tcp_write_xmit+0xf1/0x5710 [ 450.663823] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.669299] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 450.674341] ? tcp_rtx_synack+0x730/0x730 [ 450.678502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.684069] ? sk_reset_timer+0x36/0x60 [ 450.688058] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 450.692827] ? tcp_rbtree_insert+0x141/0x190 [ 450.697247] ? tcp_rearm_rto+0xdf/0x100 [ 450.701231] ? tcp_event_new_data_sent+0x266/0x3c0 [ 450.706174] tcp_write_xmit+0x1676/0x5710 [ 450.710337] ? syscall_return_via_sysret+0xe/0x2e [ 450.715203] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 450.719885] ? __schedule+0x874/0x1ed0 [ 450.723790] ? __sched_text_start+0x8/0x8 [ 450.727965] ? skb_condense+0x3d0/0x3d0 [ 450.731981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.737543] ? retint_kernel+0x2d/0x2d [ 450.741444] __tcp_push_pending_frames+0xb2/0x290 [ 450.746300] ? retint_kernel+0x1b/0x2d [ 450.750199] tcp_push+0x662/0x900 [ 450.753680] ? tcp_md5_hash_key+0x250/0x250 [ 450.758063] ? trace_hardirqs_off+0xaf/0x310 [ 450.762481] ? retint_kernel+0x2d/0x2d [ 450.766399] tcp_sendmsg_locked+0x3296/0x3f90 [ 450.770920] ? lock_downgrade+0x900/0x900 [ 450.775083] ? shrink_dcache_sb+0x350/0x350 [ 450.779419] ? tcp_sendpage+0x60/0x60 [ 450.783256] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.788823] ? aa_label_sk_perm+0xfc/0xa50 [ 450.793073] ? aa_profile_af_perm+0x410/0x410 [ 450.797578] ? ksys_dup3+0x680/0x680 [ 450.801307] ? lock_acquire+0x1ed/0x520 [ 450.805305] ? tcp_sendmsg+0x21/0x50 [ 450.809047] ? trace_hardirqs_on+0xbd/0x310 [ 450.813377] ? lock_release+0x970/0x970 [ 450.817357] ? lock_sock_nested+0xe2/0x120 [ 450.821611] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.827072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.832618] ? check_preemption_disabled+0x48/0x200 [ 450.837647] ? lock_sock_nested+0x9a/0x120 [ 450.841999] ? lock_sock_nested+0x9a/0x120 [ 450.846255] ? __local_bh_enable_ip+0x160/0x260 [ 450.850936] tcp_sendmsg+0x2f/0x50 [ 450.854497] inet_sendmsg+0x19c/0x690 [ 450.858304] ? ipip_gro_receive+0x100/0x100 [ 450.862631] ? apparmor_socket_sendmsg+0x29/0x30 [ 450.867433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.872997] ? security_socket_sendmsg+0x94/0xc0 [ 450.877758] ? ipip_gro_receive+0x100/0x100 [ 450.882091] sock_sendmsg+0xd5/0x120 [ 450.885816] __sys_sendto+0x3d7/0x670 [ 450.889630] ? __ia32_sys_getpeername+0xb0/0xb0 [ 450.894312] ? wait_for_completion+0x8a0/0x8a0 [ 450.898913] ? lock_release+0x970/0x970 [ 450.902904] ? check_preemption_disabled+0x48/0x200 [ 450.907927] ? fsnotify_first_mark+0x350/0x350 [ 450.912524] ? __fsnotify_parent+0xcc/0x420 [ 450.916852] ? fsnotify+0xf10/0xf10 [ 450.920512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.926063] ? __sb_end_write+0xd9/0x110 [ 450.930147] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 450.935688] ? fput+0x130/0x1a0 [ 450.939016] ? ksys_write+0x1ae/0x260 [ 450.942868] ? trace_hardirqs_on+0xbd/0x310 [ 450.947210] ? __ia32_sys_read+0xb0/0xb0 [ 450.951277] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.956649] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.962115] __x64_sys_sendto+0xe1/0x1a0 [ 450.966191] do_syscall_64+0x1b9/0x820 [ 450.970088] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 450.975475] ? syscall_return_slowpath+0x5e0/0x5e0 [ 450.980441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.985299] ? trace_hardirqs_on_caller+0x310/0x310 [ 450.990322] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 450.995376] ? prepare_exit_to_usermode+0x291/0x3b0 [ 451.000418] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.005275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.010477] RIP: 0033:0x457579 [ 451.013684] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.032591] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 451.040305] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 451.047576] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 451.054862] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 23:19:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 451.062137] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 451.069430] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 [ 451.096254] audit: type=1804 audit(1538695182.465:168): pid=22388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir095208667/syzkaller.5SfAkp/497/bus" dev="sda1" ino=16562 res=1 [ 451.164730] minix_free_inode: bit 1 already cleared 23:19:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x2]}}, 0x20) 23:19:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000004, 0xfffffffffffffffd) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 23:19:42 executing program 2: accept4$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad40000001a0000000e6", 0x20) [ 451.255880] audit: type=1804 audit(1538695182.625:169): pid=22387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir095208667/syzkaller.5SfAkp/497/bus" dev="sda1" ino=16562 res=1 23:19:42 executing program 0 (fault-call:8 fault-nth:47): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xeffdffff00000000]}}, 0x20) [ 451.301577] audit: type=1804 audit(1538695182.635:170): pid=22391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir095208667/syzkaller.5SfAkp/497/bus" dev="sda1" ino=16562 res=1 23:19:42 executing program 2: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000380)="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", 0x101, 0x400}], 0x0, &(0x7f0000000540)={[{@delalloc='delalloc'}]}) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8dfb, 0x18040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffff9c}) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0xe, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000021c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@multicast1}}, &(0x7f00000022c0)=0xe8) getgroups(0x1, &(0x7f0000002300)=[0xffffffffffffffff]) r9 = open$dir(&(0x7f0000002340)='./file1\x00', 0x2000, 0x2) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002380)='/dev/autofs\x00', 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0}, &(0x7f0000008600)=0xc) r13 = geteuid() getgroups(0x3, &(0x7f0000008640)=[0x0, 0xee01, 0xffffffffffffffff]) sendmsg$netlink(r0, &(0x7f0000008700)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000100)={0x18, 0x39, 0x1, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x35, @fd=r1}]}, 0x18}, {&(0x7f0000000580)={0x165c, 0x2f, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x104, 0x33, @binary="e08dd4f6f30fe813c34a9f7eb773b8a891bb8ff0eab05272d2a0424d20f4615ba0a76ce5d31c7990700676db523096af4e22f4ce1b4af491b9895684a85fbefacc715e69c39c478ff7d975b6525b89a6149cfca9f284b8ee8437d2ece31bd208799c391b74b9f97049eb9ccfdefcd4eadde351feb75772ffc0e0efb18c00ea397ff4e96bd6c59c91177ea98ac8e2fa09fdcae296e3143f6d314348eed76dd5a36e7a7e1ea7c1914d9c628c7df35fbcec1cee17d69b6071423787b5817785fbf4502da039ebd9ef8dc1fba6468774d63937e2f4743a964849cb9caf0088fa1909595f7c9fd89b987519be77d4150dbbaca4a6074da56cf2e17057e040c9"}, @typed={0xc, 0x78, @str='delalloc'}, @nested={0x124, 0x13, [@generic="3495fd0ed46a7e202f7992acaba93373fbc21ad8acc7efd22cc5524235bc33f396fcd6e9b8aaf953dc7c2fa2be9d0404d0862ef5bd90dc3c778271f3dd4d2cf4ec033d7f85815c4bc339ee9f66db128518a0874ccfe8ca50d243ee7e125a132b0f43e9a68f898d80310e081f267fc42923b863ac46dd662bc5ce021263f42a52d7b9bb7afad2336d109235ffaec173d6744ade9c2eef0514f15763364a027f4f898d672e00774b1653837e11bc9edb205eee71fed92d4d0891e28f54fe2a3d89e4340d75121356d0aceae217e81d90c8e60d5915a77fdbad359236e31b40566e58cf2d5120ae086e2d0e1740f527d8d4bdc5310d6a7c8b3e1b899c087c7ad8", @typed={0x4, 0x61}, @generic="8d986c2edbe71ef6ad5955eb1abf718a763ceabd", @typed={0x8, 0x79, @fd=r2}]}, @typed={0x4, 0x46, @binary}, @generic="39580f45ead15d1508af4ddcfe3df515f354f47e90518c64f7eb41c999efdd2cab73eb5b63e5768dbc7f4a6082e2b923307f31fcee41cab8badc42ba30", @nested={0x150, 0x15, [@typed={0x8, 0x66, @fd=r3}, @generic="0bd71d6bf49c51bfbb78bfd27804fedf74", @typed={0x8, 0x77, @u32=0x4}, @generic="4110d679c0d5f0da1afcb2b6ffdbf551daaab5c5aecc32d0351850a1047fedb151a40cb401c201e8bcf532b9cf130ec55a4afd2e179087", @generic="4de78fe10187336cb63d426754c8ef0532c996504605166cf9ce1690f45cd76309dedc70180fb7b3b568b9980d22ec55a9354bc1bd893ee57a120e25514bb3a4f4e4ede932e2352992b595b555a4c204d99bea4763942bae3c8cc2a6d091aa05bd22477d5d258e8600a027c3c4872712c3ee9189c20af2feb5201797d80d8a9368030b7c35969f5f22f099f2469b3ee9d2004a0d2bb5a697851daea71c7c741f4f19b28c98f1f503c4950dbb265fcd4c4651995462de1b0be906f765ebcabca979088e8b60a52d09508e50d49d190783cb143e1691f20644223a6deb27c793d576ad89324906e310a9638721a2a71a14b57f9109"]}, @nested={0x11e0, 0x3e, [@generic="301a2a6149d95cbacdf3b0e63887f32614dce99269c3c1b5677ff139fdfc7a44dcec21f2f0f883e1eca759db693079b15db71e4ea2ed96d1a8100666f219a7c9e3542fea985525703ae6fa0f10e5b25e6078284e6bd2310f306e1799dbe554a26d192498ab055093ead63468fed9e1a5403e2ab77b7aa0c012b13a0072e58a6f9d5f1b03defdbf360670690ca98e4088f8f278b7211c8749d01c68c1865163e24cb74a640eb6dd70ef0cbd242bc2fc4d56a8a28c45ea8155e69a201e4b0e15e04177800d5206664dec6df2a84a0609fcea48af91245f063fd01b8c58f6493dfc037c3bb78446a59d62fd5c09972705a7fab7ef5d2c12425204ce4e67a09cc53e919ce1b04afc512c1772f9d15eee282212a43a2c92b0aa6c2ec341d00506e8a38c42142ba23f3c828b575a0b35afb37a1fd23dfb9ca5be31ad1f778ef3bad27d314b6870f2aea19894aaf8c35b24d376ddf2198a3595843c00c23110045dcc414062ff5bba220f73778437069e0daeeaf2b31e3b04a4d46723df320bcc07b7bd15594ee16b30e25a5820d426561b1ad5305be959e85810ce5c57bb1db09e722d712ad4ade0b4d21cff25c12bc560ed4e2ab04c76134a429f16bf9d672ae9e443cbb4cd3012468aa918aa2147310efda6690381720c07267ee5c47b7c3bb30915781fde4ff1474fa03216b7cb42c849880a2e31e24f0a6454457e7ad128e640b83493a8e560f1a8500d2b2d1bb3e6ed5f92f37bfcbc33024891023db57bd7f6b6ad734a6835e33efb40cbdc4853d11b26ba1d351a6fc47aa96db31feee1ab5d3cac68d9210c4609455350c692a2a8396387c42a7125cd065819a6356ee77f57039108536264914f5230b1a86998f884e11e2af4681e7cd877f368bd340219518bd613a60e338886c00e7cba9c3b46b9157533a7f0cf01018b6b5f86c63ffee5fe29604581af0ec94ab55667cc0263fdd2a69a79408012c4028a16bf9d1019025b684e48f77c63dd2d754a289c410b8e2582f66c48aab2079d5b52ab932dbb7e9a0685075f6fcc3e2dee4ed1250a7c3b0207f0d7ff6b78901fbd9ad73d1da5aa954054933f982c7a536002a2a69324349760d61feecfe2468fea2e49782ac9c72fd61201cd022381eeb683ab87bc85d3e0ff5d046fc73c220e17cd24d39291ce1ea3f5d5ba611562dca7c9bcb715e75258f39bc605344f980e14a1b8662e67e7cb006875746d76fa1dcb1278935d0fa26aa8cb34e6130ffd7d157182ae70809c1023325597a85bfe63cf4d74f2e4b693715d140f42b4f2ba34df860bae560dc3ea61dda49a9e709a95356322e2eb1275c2f043eb7b16344bc90ce6666c2acea43d35a5f634628f863b86c11c5daabf03f50e878a4d9c50cb010ca856f5a3f8c9a47fd0d7d7788d0d5fbd2f7902af4891aff6efdef0b87f9a9a84aa6c81c37ca9ad2ddc9eb8b43d948f457ec69c9e0af4d4458ccba78adacc9113fe6acc8f7868ff4b2d0631345a8c5f390c757b87276f313357850ed529a166b33200e63bc69a4b00ddacf5b616dc5425ce98669bdb1ad84dd4d725c4c56aa85a219be59d559f86eb9c8126f7dca0a63941bd6b4d1cc679be7b6532a870bf8b1f09c8f36a53c650def2336ac9520b3e49f2bad6808ca7562e594cc55c22046c16ef3c559e41f240d936361c88bd380d85a518ad5790714baf8b4ec968a4c9b33b6bd20961431606ca44a6500c66867b7bb550ff64aeb0c2682a0e14b03a077aa443f61f77fc4ada09b496bdd62311da7ec745913b5d0e3ed826c0a6d97a1878bf43f6b9009447ba0f3b708dfe81ca4ff0ec766ee4c04f5048a61c1ecb783f1fa6041bd7b6a0655c238e83480b680842dc3b9aabd81e9eeaf5b875b0e43cf7e7b2e5a0a33606c276b63ab6f4da13568fb584580b6276c8a23cd8dc186e463699effc0cb50b46715a2de1146f523f18caabfdc72f0ad2ecff5c0b8a50093e6c8bd483bae734144b9c8cc0496855295f760fca9085793e34c5ade361fba6ec60220b6dc54c684eab4a4c0413aedbbfffac36d3a6513df09ae6dc9f3c6a6b21cb4caf3d0c47153e5c71b42500bc3f62c194c6b4fe2f1904aebfd2fe2ab9600ae39bedfe64c17f00bfd3f5bec1b670af9ed6c81935dad60a6da8ee19f74ab09057f06089769c9fff476f1c7cc15e17740f4edce225e1cb755637fefbb787c14a4bd7365758a13d89fe84f53eda7ead52b4c5e1c362c696b99674e3addc2098d66914ea32303ea4a1c21dbacd90ee3df29cb4172be74fecc7b5b865942a6e7475aedb3a21061c880c24f57eda91905602d67c18b599aabf001bb7e6f9899f4a1ed12bc916c957a773d1382d633dbfaa959da5974afe420ea4457ef311ce1e91f69013a910b1cb4c148a34a35ad91811824186f1a3d361288226f81f2429d773456759ced1b944a7dc7786835dc633470cc8058e6ca85a63dcb81bed1957a92cffeee19d8fa86982e0548cb20668f40b6b492c8ea8d4e44d2757ed2c42841ed9741bb5c5046fd31bc94b47de24358008e89edc967937cd2c104af6fb6b452a03e1274bb9aeeb8725e27b217ca44bc4ed47c6c78d8656bd50ed4c67ae04528bb9b4cc5809d7e2d9c2e1939f28796bb243aab0e8dc2fc46c9bb3e09b447b746969566a5bf80de4e7e33382c4f4d62229f03fc59ec8b190ebddd75c6c9c9af85d0995227c81338c4f4b255c3f456a4194075360ad6763c2a275455ec7f0a31422fba27d508b38ee3548d01afcb9aa06a932e8864598011b144214b6c60d7f73475e481c3082fd58dfa799dc53da34947b178b1013569500c41694dcd4910dadcf71b3979d884954dd6faf7944db3681acd38c76feac2e1421a7b6a6016f14010fe06c8e549953f53c32f872a3f140f05fddd82151886c56acc4b5af27e71b8fa1a1d3344d19a3c14d0b8982fe1cfb27858dc576ed00b7dd058bd3a24e1fa65dacced1e3b3c5f147d6be0fc1412570bac33a578b94723fb1b9e4308982b820c41b429b9a117252cb636be323fc1706da8cdd79a4463d1eefb05c3a6a80c0ab5ee3733b16fbf62152ce75db5c52aa7619a6afbd5b043fe4fa2309e19940ed228ada6a71674be098a2664338631994819251149757947c7287dafcfd898090e3197b1ee0c4c0679e1da321670a34a09e10c94a35c434e61ca818dfc351c34c63d3de9ae8b6d92920eda837e7cc0a37cecc58650f592fe8878b6382b52e6d56aa5513a3639f1f0f5efa603632eb495c492c139221f27ff86db41ebe59f191c71a1863a44532ef2242b0fd893c3b3284ad4ed6ad6ad9c2bac2fd2529c4a46f1773a554857ca6147da8215fe6df5f5454889a691818fd715c99d594fe15fcee84a98e9438550c5099e113cd822f7868a7eda0cc04e077318baa20f873b5da1e685d30dd6d05c45df429a51493d85be6240c6f4b2b3902a3824ddea2bbc2420b56fd01d25b7c1665db22bebc059d81c2ba59d4cd841b59447ba4043e1a24d3a79409ebfba87ef24fa261596b0d7fc27d56b20d09bbe47f8d71f78afa7b7dd4a7ce99fb195e6cb24668736bf33e3c02972d8ef7da31fb961d3cebc262ed95afbdad4bf1c8fbe25fe467d6bcd4349db1e8175d5387fc2aa937212a723d75ecf8f9c9cf908b5baf51757d504c5cb79badcbc65c962feeb45889852306c6916610cd40327dc08a4407620b0fa06dd4a2087fa6992078e0fb7a534391cac9168ce1cf6856987ad5a66c97c551d6088c70b9ee2e74096c6d59a695bdef8ed78331575f83368f42a0382e91d44cf72c82f6b4f61a90e2bda2e3f3c515d22e31e735277b8d82b83e1d0fedc895ca239cb17d04687c11c03c2ae61088a48ddba2ed8f1f39e37e7517681f2ccc9747086f213d21ebad6e95c9744cc5306e9212b6a578ff8328b4968044d1df75aec4c500d6d8d07f1de83fabd7ba71f12a629774d5d87df0b9b768624c994676b5df52069b51ae433e409d055f5276db56eeb1b9d2bd1d41cb30d97267c0eb10d63ece94a580219997da98dac020e3389126692c20095efa2f993a3018a58e82aa72cb3dae5e70479c0d8be2cfe373efe997722222030f5f29fcacc4dc7f1b89b13df200fb02d63e1994692a9cc82664047a6f95627d02810846d8aeb2a048c9d76dec1713bf64db0dd20d3cac79fbe954d27121f02666cc69bfe4673a49f7706d36321511478a7b0428ebd0561a814a626b5e22b2ae6b88110ba5f8913737aa6ab85b5dd265f7c727834b79f8e050b776b7407c25fb5b8948de4b02ce39aaba5914a6a58f005f248f9800c2ba477562c38c6681c219e3267d1fba9a27ed204d14e91f9c11569a37498d85ec7da5dec21aba1d6c2a6ff9424c293b458452a2193cb05abe38953a74f4d9399456e64e5d07603949127a27f03293f4f74772664cabfd1aa76922a08b8827746c2baec3ca6d6dd5b9d35d1b1e938dd586c52fc8dac6a66ba6c0d3eb27bd7d83a8ee85b73cb4247b68ecf4fba00da91fc4d9ee3da4b551d727310f49c8dd9f76c7630b2aceecde337e7d248da50e8b939780b4dc06f8f43f46c3f9a60d658a37c563b49c3a02370048a2f317f2d19ca3c177c3b2469b3873eb926b9c9afc1b77135238cdf499f88fdf8f29c57bfeb6c5ebb1267225036de4c272daf275192b9ceee5c2febf8c88458edbb67ceca647d61ed1a80f0a2ce62918fec68160383e5ce5803875c4daf08c0d2b31907eb5bea5ee0caa71750a232a3ea94b5ba6b1e2f2af924a8310ab4f67ff36381863298b597e66355cfc21cd611022e2f945d8723fcbb2b96491af4372ef80e6135943f08ac006722479a9bf73710a81a05a5e309335d93b0b1fc9775f3e64dd15b75796efeb69d9958d7a82b821e90d8e937aa584e0e5bd26cfca1f7ef7308f09796218cf8e6cf18dd440b71ce1dcee6c29b2996e627bf4a4c59e6b176249d359d009114e13457e3e4e78f538fb4b783130863bc73f899e27b6c10bced66994eca5e1d4c929b39b02a561860fa39ef405d34e0bf27265ad0fc6f8758ed4e9d8a65c34fe93d638dd326cf6be9e57d66532801492182d3852f271768b09dbc66a4e936bde37ed1db8e2e07c364e5e7323f9b80101379dce5c61e82d4b9f503a05d4a385fde4c1e93c04dd2552f4f600965ca7fb2a4d14c6dc971f89884e232906097765920c66b8d206797acfdf84461b1d5ce7c8dd0766e5353f34c72c9de003c4ed849a7617877b5448cf233698d39f520a90912b45d2b7379ceeb4ccca9b10fdc0276e9dcc524b0ad2cde5c7e71ad11b92a1d685fa3c30bcfa411670ef3ef80dffb7871f339243ce6a6b0912d83535fb164d8dba3d98fcbaf372f45d25ef47193edaa6ffa12dc742dd089833ffe5b35dca44579b2c34de69ef8394048dc82b99135ee1a3732641b308bb38bb52cd8fe50be66cc3f68bd51735a4f607404aee57041cb75390f0eb998eaaea769b4763054bafe2f18926eaac7cd80c15de88389ef76fc7ece9c341826555120e112a2d7beecf21ebca83e7fc91666ae0d0ad7c8203efd2481fbdd5e7c406b2a04de9ab6641b5c1788d9f2e96e16a06dd0bb6d799d31b8db7e9b2d85b3f625e05d6e93baa75cf774a08610a8c009737236cd0eb027b95ea10917b2fb4586a4fc4eead9556d533663a4f85b7ddba1540d447cd2d2b5e832b978b6d60aa66bab5877b71df536b304abcf96f9d6398e2cb4776b64bed52ad3c7923172e8935752b1546327edb93e45e86e45f54970dfc868f648eef2cbfe214e5081dc2b2aaa79f76e07c34554c", @typed={0xd8, 0x3d, @binary="9a05262660ee1c35800975c923902adcf252b97b1fde3fe3f7dd2e18a15a9978c0e0303408e620780ca524298f0d02e8b0b3d38d0bec0361395197d3087bdbe4e6f7e9d089b0ec62f824a7b653f34f04c2b735e0fd979508008171af475d4f0f8e67b7383fd120ecaf9546810e1317b865502faf8f9ad4532a864614c0888a01ae40dbbedf2f72b438334466e8b1528b2e24022c93fea6e3ffd66e134f3de0b872eef4b60cbb6840cdf3218b30588af5c41b62ea8912276133fd70a2a0de2de652677e35ccd706a6614475c4e533bb18631b15"}, @generic="e4d8824bdb4ecb77e942f5b057303e0202812bd930692664f2c36da935aa82ce96670f2239d9bcf4c0188fb4d989330cd3cc00d6633636725b85abd03b213dad7bd67219052fbc96848801e29ad2baf9853f8524a571f6aaf2cd77a6938dfe4c3ebca541838e1813a2067578df6da16acda7d560934adcc4b49637b487", @generic="1caf5983f9beebf8e957440ca68de4194fe998f16c0b3df147c6abd5cabc84eeb31276d67ff2fde7202d97ed89cda6fe61c13deec7c979159a9813d86d57acae515e7ebc1b41f74e1c335cdca0853083d1ee02bcab55d755f081055c9a5af8c27de1ce6c21b86d9a5e67017bf2fbbea4", @typed={0x14, 0x1a, @str='/dev/sequencer2\x00'}]}, @typed={0x8, 0x5, @uid=r4}, @nested={0x9c, 0x88, [@typed={0x8, 0x18, @ipv4=@rand_addr=0x4}, @typed={0x14, 0x85, @str='/dev/sequencer2\x00'}, @generic="c6ce183da3fc611b2874eaeaf5fa89478f6532c199cf346075659e580b24e4783c7ef23082310696c04de16123c5c2033638bfb319e7f2ad34b94e3611c63d2b9a9c4f974e9c5ddbe7bcf8a69cb9cf4c1d4f16d4dcaafd88c56c24fd46c6c60a0e65d76907a6db09d2a3a467c0b79bff0f0000", @typed={0x8, 0x8a, @ipv4=@rand_addr=0x5}]}]}, 0x165c}, {&(0x7f0000001c00)={0x580, 0x27, 0x20c, 0x70bd2c, 0x25dfdbfc, "", [@generic="e8bd95d92c19af2c7614ee30cc8453c4b7302a829693f8ca6491f995556c04eb7398fa83581e508784f42937b31608980388609a172ace67cbd911cacd87ed399d265952696fb2372ff33cc166ae3269e36d25607330662d2b641e23c26d5dfcb011366103fb0bb8d43b3358f98a31a0be126a70a659c36c40d6d712074f", @generic="26659f77672083e5544d9fa171b69e2b67b0188fe3497046fe9cc02bf9d742cec07be1408c1b37e72a73620cf8d5431ed77f189538cf18b6befe09b3d39ed6be44d042bef163826b6b", @typed={0xc, 0x8d, @str='delalloc'}, @nested={0x3a8, 0xd, [@generic="c0d71dfe885036fba61e9e93f9eb313517ca846823486bcc7de45e671e9e96eb911fa0b76caf23c3dc7fa9e4faed1054b27a19c8e02b2503f606ec17ecb1eab140fed181f75435b82c", @typed={0xac, 0x6d, @binary="32aa7dce449f352185d0496474a40d901de919d023772ee81fbd08f39537815214e65080a451acaa5cc51533e4d569e405130fb11301300026ffa01938533ae2fd524bba7b243cf7d56469b6d4c52aee5b0f4d2e6abc667e47cefda6598fd46b11e1a4f234756372db4639c1d901c8b91e88113cecc9e2dc37d5426b4362ec7045971de1a65bf0417a4a9bd1a53a00f403802dcaa2fd4e643c746c6d0a1fb935e116fd8766e3"}, @generic="e9dad6e744fbb6e9800526cf057262d8d5bced37f7f5906b359a17732740bbee2b47888f11ff877c0ec0013a199a33743bfa499474568bc5b5b376e9cdeae4814e0193ec5e851dbd2fa0e3c1020507ece7bd92552dd5b97be19367097afba0c8a67196136dd9f63f43f300f3b60e6a68d7b034f631422b56a8bb89448f6ae00f853cf0b02a11ad6bc313c7949381792eaf89cd630f58ff77fdde73430c97856d2aea14b233d793004edacfafa55bf00eddfd6c3e346042192a7618087b86340535079acdb3e23edbc318d3e57137c9200daf1c2ffe623be984b63ca10beca44a94d1f27c79c3ef6b5050f11cdab3eaccabeb5a", @typed={0x4, 0x9}, @generic="2bb6936fbe319d029ae2dcb4834927aa87053e975c8a9933f04b246cc69e5cb0188aadb2d8361d876c8241e68a4db4c36f66600f2995c04b2776c039234d061211b98d65b7147d29371ee220cea33d262fafce5567a4ff1f3ca31feb1b28aaf32c07532d4ad441cb178f0d28188f99b4d7a7aedef1411a87afc07dd8147588076e9cc515d2f99705cb7e65c4394edafc9691a32a44da8d97e916bd9b7f9965e09a3b0e61e0d9f7cb32969f9e8042757242", @typed={0x8, 0x1b, @fd=r5}, @typed={0xc, 0x1c, @str='delalloc'}, @generic="0e289dd24e06f6252c43bd24921b938f364194f198e2674ff936c93dd20b12a4eaae0a46b75bc142b70bcc1559d2894e3662bf200efe06b69af6582a07f95724b058854668dbcf1341f4ce5840265f8f606b600706517a13ab6fdd140749fd739e1b5bed9a231dcd3a6913dd322805974f9514a061032d15ee16c9740e9d60c2737f1cd9479b982b7bb19e028ad7c18c17fd16f3c90b512504450ba8914df3fd67e064fe48bdb609dce38bb74ee307bbe13d67b8ad666e50db88e9d9180b88b1835003101ba197af4b7cb54c50a9ba9cdc9082f0284702092e7aaa19c2a26c812373f068e31b5bbb8a323b119b3e49e8e708"]}, @generic="98194d307e10d57d4f2fb8718c38a353771b26e6bc3f2afa17742b2effd8c8e3fc71ba38f3d750a60b4a421803a5a44a9759642d6c79d6d457783d8eff603d1d4a5c0f1d87bb71714ae0674ba2a0f4815017302db3fed3b13bff8d2c4b253828a6b6932c15da3f8f0a476c3f7c9b5f69423bffc9e811e800ac9391449098d5b0898e6e1d2c85ed911cf5b183aa79244b0850f5025db64484645011ed29138b9779389ac55d8d5285d4fe6b131d3bae5054a584164f6a776f2faaa316f28e17d77edb3d765e2572419b97cb2a479d76", @generic="ba77524923fd66129bc33dde68c7301ec0e6695ed61bf3e6e1cc8c5ed757cd462145d1999634"]}, 0x580}], 0x3, &(0x7f0000008680)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r9, r10, r11]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x60, 0x8015}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4100, 0x0) 23:19:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000002c0)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x8, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @multicast1}, 0x102, 0x20000000, 0x9, 0x6, 0x7fffffff, &(0x7f0000000180)='bcsh0\x00', 0x0, 0x8, 0xcc0}) close(r0) 23:19:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xa0010000]}}, 0x20) 23:19:42 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x9, 0x3, &(0x7f00000001c0)=""/203, 0xfffffffffffffffe) r1 = dup(r0) socket$pppoe(0x18, 0x1, 0x0) accept(r1, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80) fstat(r0, &(0x7f00000000c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x5, 0x1, 0x2, 0x7f, 0x57, 0xfe, 0x49443c61, 0x3fe00, 0x7, 0x101ffe, 0x4, 0x2, 0xf8}, {0x800, 0x12, 0x6, 0x4, 0xfffffffffffffc42, 0x6, 0x1ff, 0x100000000000, 0x5, 0x2, 0x5, 0x8, 0x8}, {0xdc9, 0x9, 0x80000000, 0x40, 0x5, 0x9, 0x0, 0x0, 0x9, 0x1080000001, 0x8e21, 0x3ff, 0x9}], 0xffffffffffffff35}) 23:19:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e27, @rand_addr=0x10001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) [ 451.452191] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 451.476882] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 451.487565] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 451.527057] FAULT_INJECTION: forcing a failure. [ 451.527057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.538964] CPU: 1 PID: 22426 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 451.547468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.556817] Call Trace: [ 451.559393] dump_stack+0x1d3/0x2c4 [ 451.563022] ? dump_stack_print_info.cold.2+0x52/0x52 [ 451.568217] should_fail.cold.4+0xa/0x17 [ 451.572267] ? save_stack+0x43/0xd0 [ 451.575889] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 451.581002] ? dev_hard_start_xmit+0x186/0xc90 [ 451.585584] ? __dev_queue_xmit+0x2f39/0x3950 [ 451.590078] ? dev_queue_xmit+0x17/0x20 [ 451.594056] ? ip_finish_output2+0x105c/0x1860 [ 451.598643] ? ip_finish_output+0x7f8/0xf90 [ 451.602971] ? ip_output+0x21d/0x8d0 [ 451.606684] ? ip_local_out+0xc5/0x1b0 [ 451.610577] ? __ip_queue_xmit+0x9af/0x1f30 [ 451.614915] ? ip_queue_xmit+0x56/0x70 [ 451.618831] ? tcp_write_xmit+0x1676/0x5710 [ 451.623155] ? __tcp_push_pending_frames+0xb2/0x290 [ 451.628171] ? tcp_push+0x662/0x900 [ 451.631796] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 451.636470] ? tcp_sendmsg+0x2f/0x50 [ 451.640183] ? inet_sendmsg+0x19c/0x690 [ 451.644161] ? sock_sendmsg+0xd5/0x120 [ 451.648053] ? __x64_sys_sendto+0xe1/0x1a0 [ 451.652299] ? do_syscall_64+0x1b9/0x820 [ 451.656362] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.661748] ? mark_held_locks+0x130/0x130 [ 451.665998] ? trace_hardirqs_on+0xbd/0x310 [ 451.670832] ? __kmalloc_node_track_caller+0x3c/0x70 [ 451.675940] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 451.681412] ? kasan_unpoison_shadow+0x35/0x50 [ 451.686001] ? kasan_unpoison_shadow+0x35/0x50 [ 451.690588] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 451.695607] ? skb_release_data+0x1c4/0x880 [ 451.699935] ? refcount_add_not_zero_checked+0x330/0x330 [ 451.705403] ? skb_tx_error+0x2f0/0x2f0 [ 451.709381] ? __kmalloc_node_track_caller+0x50/0x70 [ 451.714514] __alloc_pages_nodemask+0x34b/0xdd0 [ 451.719183] ? kasan_check_write+0x14/0x20 [ 451.723424] ? pskb_expand_head+0x6b3/0x10f0 [ 451.727838] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 451.732863] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 451.737365] ? save_stack+0xa9/0xd0 [ 451.740993] ? save_stack+0x43/0xd0 [ 451.744623] ? kasan_kmalloc+0xc7/0xe0 [ 451.748508] ? kasan_slab_alloc+0x12/0x20 [ 451.752656] ? skb_clone+0x1bb/0x500 [ 451.756367] ? dev_queue_xmit_nit+0x414/0xb30 [ 451.760861] ? dev_hard_start_xmit+0x186/0xc90 [ 451.765441] ? __dev_queue_xmit+0x2f39/0x3950 [ 451.769958] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 451.775508] alloc_pages_current+0x10c/0x210 [ 451.779921] skb_copy_ubufs+0x4c2/0x1b30 [ 451.783995] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.789360] ? memcpy+0x45/0x50 [ 451.792651] ? skb_release_data+0x880/0x880 [ 451.796984] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 451.801491] ? lock_downgrade+0x900/0x900 [ 451.805640] ? trace_hardirqs_on+0xbd/0x310 [ 451.809974] ? pvclock_read_flags+0x160/0x160 [ 451.814476] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 451.818988] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 451.824446] ? kvm_clock_read+0x18/0x30 [ 451.828436] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 451.833494] ? ktime_get_with_offset+0x310/0x460 [ 451.838264] ? ktime_get+0x400/0x400 [ 451.841997] ? netif_rx+0xe0/0x430 [ 451.845567] ? dev_forward_skb+0x60/0x60 [ 451.849639] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 451.855182] ? eth_type_trans+0x2ea/0x760 [ 451.859344] ? eth_gro_receive+0x920/0x920 [ 451.863586] dev_queue_xmit_nit+0x90a/0xb30 [ 451.867920] ? default_device_exit+0x2c0/0x2c0 [ 451.872531] dev_hard_start_xmit+0x186/0xc90 [ 451.876956] ? dev_direct_xmit+0x6b0/0x6b0 [ 451.881205] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.886748] ? netif_skb_features+0x690/0xb70 [ 451.891250] ? validate_xmit_xfrm+0x1ef/0xda0 [ 451.895751] ? lock_acquire+0x1ed/0x520 [ 451.899730] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.905272] ? validate_xmit_skb+0x80c/0xf30 [ 451.909692] ? lock_release+0x970/0x970 [ 451.913665] ? __dev_queue_xmit+0x1a99/0x3950 [ 451.918164] ? netif_skb_features+0xb70/0xb70 [ 451.922666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.928207] ? check_preemption_disabled+0x48/0x200 [ 451.933221] ? check_preemption_disabled+0x48/0x200 [ 451.938241] __dev_queue_xmit+0x2f39/0x3950 [ 451.942568] ? mark_held_locks+0x130/0x130 [ 451.946810] ? netdev_pick_tx+0x2d0/0x2d0 [ 451.951003] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 451.956809] ? mark_held_locks+0x130/0x130 [ 451.961046] ? mark_held_locks+0x130/0x130 [ 451.965286] ? lock_downgrade+0x900/0x900 [ 451.969442] ? trace_hardirqs_on+0xbd/0x310 [ 451.973777] ? _raw_spin_unlock_bh+0x30/0x40 [ 451.978193] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 451.983649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.989195] ? mark_held_locks+0x130/0x130 [ 451.993444] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 451.998137] ? tcp_packet+0x6ad/0x58d2 [ 452.002047] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 452.007246] ? ip_finish_output+0x7f8/0xf90 [ 452.011575] ? lock_downgrade+0x900/0x900 [ 452.015730] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 452.021017] ? trace_hardirqs_on+0xbd/0x310 [ 452.025346] ? ip_finish_output+0x7f8/0xf90 [ 452.029684] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.035144] dev_queue_xmit+0x17/0x20 [ 452.038956] ? dev_queue_xmit+0x17/0x20 [ 452.042937] ip_finish_output2+0x105c/0x1860 [ 452.047362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.052904] ? ip_copy_metadata+0xe10/0xe10 [ 452.057229] ? cgroup_dev_is_valid_access+0x150/0x150 [ 452.062424] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 452.067722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.073262] ? ipv4_mtu+0x37d/0x590 [ 452.076907] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 452.082357] ? __do_replace+0xab0/0xab0 [ 452.086342] ip_finish_output+0x7f8/0xf90 [ 452.090494] ? ip_finish_output+0x7f8/0xf90 [ 452.094818] ? ip_fragment.constprop.50+0x240/0x240 [ 452.099835] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 452.104867] ? nf_nat_ipv4_out+0x2e1/0x340 [ 452.109106] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 452.114304] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 452.119325] ? nf_hook_slow+0x11e/0x1c0 [ 452.123308] ip_output+0x21d/0x8d0 [ 452.126870] ? ip_mc_output+0x15a0/0x15a0 [ 452.131022] ? ip_fragment.constprop.50+0x240/0x240 [ 452.136041] ? sock_alloc_send_skb+0x40/0x40 [ 452.140468] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 452.145577] ip_local_out+0xc5/0x1b0 [ 452.149294] __ip_queue_xmit+0x9af/0x1f30 [ 452.153451] ? ip_build_and_send_pkt+0xc80/0xc80 [ 452.158217] ? tcp_schedule_loss_probe+0x530/0x530 [ 452.163151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.168693] ? tcp_established_options+0x366/0x5b0 [ 452.173626] ? tcp_select_initial_window+0x400/0x400 [ 452.178735] ip_queue_xmit+0x56/0x70 [ 452.182455] __tcp_transmit_skb+0x1bc5/0x3b00 [ 452.186978] ? __tcp_select_window+0x9e0/0x9e0 [ 452.191564] ? pvclock_read_flags+0x160/0x160 [ 452.196070] ? tcp_write_xmit+0xf1/0x5710 [ 452.200233] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.205696] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 452.210719] ? tcp_rtx_synack+0x730/0x730 [ 452.214878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.220422] ? sk_reset_timer+0x36/0x60 [ 452.224399] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 452.229155] ? tcp_rbtree_insert+0x141/0x190 [ 452.233565] ? tcp_rearm_rto+0xdf/0x100 [ 452.237543] ? tcp_event_new_data_sent+0x266/0x3c0 [ 452.242483] tcp_write_xmit+0x1676/0x5710 [ 452.246648] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 452.251315] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 452.256250] ? ___pskb_trim+0x89d/0x1320 [ 452.260318] ? skb_condense+0x3d0/0x3d0 [ 452.264298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.269843] __tcp_push_pending_frames+0xb2/0x290 [ 452.274687] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 452.279708] tcp_push+0x662/0x900 [ 452.283162] ? __sk_mem_schedule+0xac/0xe0 [ 452.287400] ? tcp_md5_hash_key+0x250/0x250 [ 452.291725] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 452.296746] ? ___pskb_trim+0x1320/0x1320 [ 452.300904] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 452.306445] tcp_sendmsg_locked+0x3296/0x3f90 [ 452.310974] ? lock_downgrade+0x900/0x900 [ 452.315126] ? shrink_dcache_sb+0x350/0x350 [ 452.319467] ? tcp_sendpage+0x60/0x60 [ 452.323273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.328810] ? aa_label_sk_perm+0xfc/0xa50 [ 452.333058] ? aa_profile_af_perm+0x410/0x410 [ 452.337556] ? ksys_dup3+0x680/0x680 [ 452.341278] ? lock_acquire+0x1ed/0x520 [ 452.345251] ? tcp_sendmsg+0x21/0x50 [ 452.348979] ? trace_hardirqs_on+0xbd/0x310 [ 452.353306] ? lock_release+0x970/0x970 [ 452.357293] ? lock_sock_nested+0xe2/0x120 [ 452.361528] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.366986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.372528] ? check_preemption_disabled+0x48/0x200 [ 452.377546] ? lock_sock_nested+0x9a/0x120 [ 452.381788] ? lock_sock_nested+0x9a/0x120 [ 452.386029] ? __local_bh_enable_ip+0x160/0x260 [ 452.390702] tcp_sendmsg+0x2f/0x50 [ 452.394245] inet_sendmsg+0x19c/0x690 [ 452.398049] ? ipip_gro_receive+0x100/0x100 [ 452.402395] ? apparmor_socket_sendmsg+0x29/0x30 [ 452.407178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.412719] ? security_socket_sendmsg+0x94/0xc0 [ 452.417481] ? ipip_gro_receive+0x100/0x100 [ 452.421812] sock_sendmsg+0xd5/0x120 [ 452.425544] __sys_sendto+0x3d7/0x670 [ 452.429349] ? __ia32_sys_getpeername+0xb0/0xb0 [ 452.434024] ? wait_for_completion+0x8a0/0x8a0 [ 452.438609] ? lock_release+0x970/0x970 [ 452.442586] ? check_preemption_disabled+0x48/0x200 [ 452.447611] ? fsnotify_first_mark+0x350/0x350 [ 452.452196] ? __fsnotify_parent+0xcc/0x420 [ 452.456518] ? fsnotify+0xf10/0xf10 [ 452.460149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.465692] ? __sb_end_write+0xd9/0x110 [ 452.469764] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 452.475297] ? fput+0x130/0x1a0 [ 452.478579] ? ksys_write+0x1ae/0x260 [ 452.482383] ? trace_hardirqs_on+0xbd/0x310 [ 452.486723] ? __ia32_sys_read+0xb0/0xb0 [ 452.490790] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.496162] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.501618] __x64_sys_sendto+0xe1/0x1a0 [ 452.505686] do_syscall_64+0x1b9/0x820 [ 452.509578] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 452.514956] ? syscall_return_slowpath+0x5e0/0x5e0 [ 452.519892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.524742] ? trace_hardirqs_on_caller+0x310/0x310 [ 452.529766] ? prepare_exit_to_usermode+0x291/0x3b0 [ 452.534790] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.539637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.544837] RIP: 0033:0x457579 [ 452.548036] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.567075] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 452.574789] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 452.582055] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 452.589325] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 452.596590] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 452.603857] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:44 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100), 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$reiserfs(&(0x7f00000005c0)='reiserfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000000180)={[{@grpjquota='grpjquota', 0x3d}]}) 23:19:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x0, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xfdef]}}, 0x20) 23:19:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='hfs\x00', 0x40, &(0x7f00000003c0)='\x00') ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000540)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r1, r2) ioctl(r0, 0x200000000890c, &(0x7f0000000580)="123f626b62a374aeb234488d0000766170e5b7eada85383a1bdd693b0bae2d551534eddda8c66eaecac67a4c6866d51a33f91258de466d7a01a44070fa65af25613d3ce6ee197fc51d28ff6004f09fbfaa00be338cfe19670fa0f731dee177dfbed0712bb2") r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_newneigh={0x88, 0x1c, 0x220, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, r4, 0x78, 0x88, 0x6}, [@NDA_PORT={0x8, 0x6, 0x4e24}, @NDA_LLADDR={0xc, 0x2, @local}, @NDA_LLADDR={0xc, 0x2, @dev={[], 0x1c}}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, [], 0xd}}, @NDA_PORT={0x8, 0x6, 0x4e21}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={[], [], @rand_addr=0xc2}}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) 23:19:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x34000]}}, 0x20) 23:19:44 executing program 0 (fault-call:8 fault-nth:48): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 452.752885] minix_free_inode: bit 1 already cleared 23:19:44 executing program 5: r0 = semget(0x2, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/42) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x8000000000000003, 0x2, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x8001, 0x202000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000740)=ANY=[], &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x200}, &(0x7f0000000240)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x2055, 0x3, 0x400000bff}, 0x2c) signalfd(r1, &(0x7f00000002c0)={0x6}, 0xffffffffffffff9f) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000007c0)=""/234) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000480)=r3, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r4, &(0x7f0000000600)="033249da95f3814f5c88332077ea0353b6fb5dee30f7ef66cbdbd2595be6a2eb1f5d4dbc9a7b02756b35da3d19b1d65d352945060000004453199685f1bc57c6c7f93b905d946d56430a21e7e84871fcb711f149bc9ba9f8bd5edfc5e7d9447cd29bd09bc06e388be77637127dc30a69cc2b8d7154f7f56b249bfb34c0a28358015771005fc3e67667dd6f96167a2e60d75225965e2319dca90b5f8a0dc8bd9909e6ddced2bfdd12248d57ba2db2f2c0bb0dd5a776217e01cfa084fbbd35e9c864007482d788c22adc44"}, 0x10) r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x9, 0x8}, 0x8) syz_open_dev$sndtimer(&(0x7f0000000440)='/dev/snd/timer\x00', 0x0, 0x40) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xffffffff) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000340)={0x0, r4}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={r3, 0x101}, &(0x7f0000000280)=0xfffffffffffffe91) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x3}, &(0x7f00000001c0)=0x8) 23:19:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2cb0848a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004084}, 0x40000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) [ 452.841861] FAULT_INJECTION: forcing a failure. [ 452.841861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.853783] CPU: 1 PID: 22455 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 452.862278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.871664] Call Trace: [ 452.874269] dump_stack+0x1d3/0x2c4 [ 452.874290] ? dump_stack_print_info.cold.2+0x52/0x52 [ 452.874316] should_fail.cold.4+0xa/0x17 [ 452.874334] ? save_stack+0x43/0xd0 [ 452.874355] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 452.874377] ? dev_hard_start_xmit+0x186/0xc90 [ 452.900570] ? __dev_queue_xmit+0x2f39/0x3950 [ 452.905089] ? dev_queue_xmit+0x17/0x20 [ 452.909064] ? ip_finish_output2+0x105c/0x1860 [ 452.913651] ? ip_finish_output+0x7f8/0xf90 [ 452.917983] ? ip_output+0x21d/0x8d0 [ 452.921695] ? ip_local_out+0xc5/0x1b0 [ 452.925584] ? __ip_queue_xmit+0x9af/0x1f30 [ 452.929903] ? ip_queue_xmit+0x56/0x70 [ 452.933797] ? tcp_write_xmit+0x1676/0x5710 [ 452.938117] ? __tcp_push_pending_frames+0xb2/0x290 [ 452.943136] ? tcp_push+0x662/0x900 [ 452.946781] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 452.951447] ? tcp_sendmsg+0x2f/0x50 [ 452.955167] ? inet_sendmsg+0x19c/0x690 [ 452.959142] ? sock_sendmsg+0xd5/0x120 [ 452.963038] ? __x64_sys_sendto+0xe1/0x1a0 [ 452.967299] ? do_syscall_64+0x1b9/0x820 [ 452.971365] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.976746] ? mark_held_locks+0x130/0x130 [ 452.980997] ? trace_hardirqs_on+0xbd/0x310 [ 452.985323] ? __kmalloc_node_track_caller+0x3c/0x70 [ 452.990450] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.995912] ? kasan_unpoison_shadow+0x35/0x50 [ 453.000507] ? kasan_unpoison_shadow+0x35/0x50 [ 453.005108] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 453.010128] ? skb_release_data+0x1c4/0x880 [ 453.014463] ? refcount_add_not_zero_checked+0x330/0x330 [ 453.019919] ? skb_tx_error+0x2f0/0x2f0 [ 453.023907] ? __kmalloc_node_track_caller+0x50/0x70 [ 453.029018] __alloc_pages_nodemask+0x34b/0xdd0 [ 453.033701] ? kasan_check_write+0x14/0x20 [ 453.037937] ? pskb_expand_head+0x6b3/0x10f0 [ 453.042358] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 453.047382] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 453.051888] ? save_stack+0xa9/0xd0 [ 453.055517] ? save_stack+0x43/0xd0 [ 453.059143] ? kasan_kmalloc+0xc7/0xe0 [ 453.063036] ? kasan_slab_alloc+0x12/0x20 [ 453.067185] ? skb_clone+0x1bb/0x500 [ 453.070897] ? dev_queue_xmit_nit+0x414/0xb30 [ 453.075406] ? dev_hard_start_xmit+0x186/0xc90 [ 453.079993] ? __dev_queue_xmit+0x2f39/0x3950 [ 453.084507] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 453.090047] alloc_pages_current+0x10c/0x210 [ 453.094465] skb_copy_ubufs+0x4c2/0x1b30 [ 453.098536] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.103904] ? memcpy+0x45/0x50 [ 453.107194] ? skb_release_data+0x880/0x880 [ 453.111517] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 453.116022] ? lock_downgrade+0x900/0x900 [ 453.120172] ? trace_hardirqs_on+0xbd/0x310 [ 453.124499] ? pvclock_read_flags+0x160/0x160 [ 453.128998] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 453.133496] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.138973] ? kvm_clock_read+0x18/0x30 [ 453.142977] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 453.148009] ? ktime_get_with_offset+0x310/0x460 [ 453.152793] ? ktime_get+0x400/0x400 [ 453.156525] ? netif_rx+0xe0/0x430 [ 453.160087] ? dev_forward_skb+0x60/0x60 [ 453.164157] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 453.169707] ? eth_type_trans+0x2ea/0x760 [ 453.173853] ? eth_gro_receive+0x920/0x920 [ 453.178093] dev_queue_xmit_nit+0x90a/0xb30 [ 453.182421] ? default_device_exit+0x2c0/0x2c0 [ 453.187041] dev_hard_start_xmit+0x186/0xc90 [ 453.191475] ? dev_direct_xmit+0x6b0/0x6b0 [ 453.195718] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 453.201252] ? netif_skb_features+0x690/0xb70 [ 453.205764] ? validate_xmit_xfrm+0x1ef/0xda0 [ 453.210259] ? lock_acquire+0x1ed/0x520 [ 453.214284] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 453.219822] ? validate_xmit_skb+0x80c/0xf30 [ 453.224226] ? lock_release+0x970/0x970 [ 453.228198] ? __dev_queue_xmit+0x1a99/0x3950 [ 453.232709] ? netif_skb_features+0xb70/0xb70 [ 453.237215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.242754] ? check_preemption_disabled+0x48/0x200 [ 453.247790] ? check_preemption_disabled+0x48/0x200 [ 453.252810] __dev_queue_xmit+0x2f39/0x3950 [ 453.257137] ? mark_held_locks+0x130/0x130 [ 453.261381] ? netdev_pick_tx+0x2d0/0x2d0 [ 453.265549] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 453.271353] ? mark_held_locks+0x130/0x130 [ 453.275601] ? mark_held_locks+0x130/0x130 [ 453.279863] ? lock_downgrade+0x900/0x900 [ 453.284026] ? trace_hardirqs_on+0xbd/0x310 [ 453.288373] ? _raw_spin_unlock_bh+0x30/0x40 [ 453.292795] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.298249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.303800] ? mark_held_locks+0x130/0x130 [ 453.308035] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 453.312708] ? tcp_packet+0x6ad/0x58d2 [ 453.316622] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 453.321815] ? ip_finish_output+0x7f8/0xf90 [ 453.326140] ? lock_downgrade+0x900/0x900 [ 453.330286] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 453.335570] ? trace_hardirqs_on+0xbd/0x310 [ 453.339894] ? ip_finish_output+0x7f8/0xf90 [ 453.344221] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.349692] dev_queue_xmit+0x17/0x20 [ 453.353497] ? dev_queue_xmit+0x17/0x20 [ 453.357477] ip_finish_output2+0x105c/0x1860 [ 453.361888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.367431] ? ip_copy_metadata+0xe10/0xe10 [ 453.371761] ? cgroup_dev_is_valid_access+0x150/0x150 [ 453.376965] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 453.382259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.387812] ? ipv4_mtu+0x37d/0x590 [ 453.391443] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 453.396903] ? __do_replace+0xab0/0xab0 [ 453.400884] ip_finish_output+0x7f8/0xf90 [ 453.405031] ? ip_finish_output+0x7f8/0xf90 [ 453.409355] ? ip_fragment.constprop.50+0x240/0x240 [ 453.414371] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 453.419387] ? nf_nat_ipv4_out+0x2e1/0x340 [ 453.423662] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 453.428878] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 453.433892] ? nf_hook_slow+0x11e/0x1c0 [ 453.437870] ip_output+0x21d/0x8d0 [ 453.441440] ? ip_mc_output+0x15a0/0x15a0 [ 453.445609] ? ip_fragment.constprop.50+0x240/0x240 [ 453.450629] ? sock_alloc_send_skb+0x40/0x40 [ 453.455041] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 453.460152] ip_local_out+0xc5/0x1b0 [ 453.463884] __ip_queue_xmit+0x9af/0x1f30 [ 453.468040] ? ip_build_and_send_pkt+0xc80/0xc80 [ 453.472800] ? tcp_schedule_loss_probe+0x530/0x530 [ 453.477731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.483271] ? tcp_established_options+0x366/0x5b0 [ 453.488201] ? tcp_select_initial_window+0x400/0x400 [ 453.493309] ip_queue_xmit+0x56/0x70 [ 453.497025] __tcp_transmit_skb+0x1bc5/0x3b00 [ 453.501527] ? __tcp_select_window+0x9e0/0x9e0 [ 453.506111] ? pvclock_read_flags+0x160/0x160 [ 453.510605] ? tcp_write_xmit+0xf1/0x5710 [ 453.514761] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.520222] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 453.525245] ? tcp_rtx_synack+0x730/0x730 [ 453.529395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.534957] ? sk_reset_timer+0x36/0x60 [ 453.538958] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 453.543726] ? tcp_rbtree_insert+0x141/0x190 [ 453.548163] ? tcp_rearm_rto+0xdf/0x100 [ 453.552138] ? tcp_event_new_data_sent+0x266/0x3c0 [ 453.557071] tcp_write_xmit+0x1676/0x5710 [ 453.561248] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 453.565931] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 453.570889] ? ___pskb_trim+0x89d/0x1320 [ 453.574979] ? skb_condense+0x3d0/0x3d0 [ 453.578968] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.584517] __tcp_push_pending_frames+0xb2/0x290 [ 453.589360] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 453.594381] tcp_push+0x662/0x900 [ 453.597832] ? __sk_mem_schedule+0xac/0xe0 [ 453.602072] ? tcp_md5_hash_key+0x250/0x250 [ 453.606395] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 453.611414] ? ___pskb_trim+0x1320/0x1320 [ 453.615573] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 453.621111] tcp_sendmsg_locked+0x3296/0x3f90 [ 453.625616] ? lock_downgrade+0x900/0x900 [ 453.629766] ? shrink_dcache_sb+0x350/0x350 [ 453.634095] ? tcp_sendpage+0x60/0x60 [ 453.637901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 453.643441] ? aa_label_sk_perm+0xfc/0xa50 [ 453.647689] ? aa_profile_af_perm+0x410/0x410 [ 453.652187] ? ksys_dup3+0x680/0x680 [ 453.655908] ? lock_acquire+0x1ed/0x520 [ 453.659883] ? tcp_sendmsg+0x21/0x50 [ 453.663604] ? trace_hardirqs_on+0xbd/0x310 [ 453.667928] ? lock_release+0x970/0x970 [ 453.672390] ? lock_sock_nested+0xe2/0x120 [ 453.676635] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.682090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.687635] ? check_preemption_disabled+0x48/0x200 [ 453.692663] ? lock_sock_nested+0x9a/0x120 [ 453.696914] ? lock_sock_nested+0x9a/0x120 [ 453.701162] ? __local_bh_enable_ip+0x160/0x260 [ 453.705837] tcp_sendmsg+0x2f/0x50 [ 453.709383] inet_sendmsg+0x19c/0x690 [ 453.713186] ? ipip_gro_receive+0x100/0x100 [ 453.717511] ? apparmor_socket_sendmsg+0x29/0x30 [ 453.722272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.727815] ? security_socket_sendmsg+0x94/0xc0 [ 453.732571] ? ipip_gro_receive+0x100/0x100 [ 453.736899] sock_sendmsg+0xd5/0x120 [ 453.740617] __sys_sendto+0x3d7/0x670 [ 453.744425] ? __ia32_sys_getpeername+0xb0/0xb0 [ 453.749105] ? wait_for_completion+0x8a0/0x8a0 [ 453.753690] ? lock_release+0x970/0x970 [ 453.757666] ? check_preemption_disabled+0x48/0x200 [ 453.762703] ? fsnotify_first_mark+0x350/0x350 [ 453.767285] ? __fsnotify_parent+0xcc/0x420 [ 453.771607] ? fsnotify+0xf10/0xf10 [ 453.775238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.780790] ? __sb_end_write+0xd9/0x110 [ 453.784876] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 453.790415] ? fput+0x130/0x1a0 [ 453.793715] ? ksys_write+0x1ae/0x260 [ 453.797541] ? trace_hardirqs_on+0xbd/0x310 [ 453.801861] ? __ia32_sys_read+0xb0/0xb0 [ 453.805920] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.811291] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.816747] __x64_sys_sendto+0xe1/0x1a0 [ 453.820815] do_syscall_64+0x1b9/0x820 [ 453.824703] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 453.830106] ? syscall_return_slowpath+0x5e0/0x5e0 [ 453.835087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.839936] ? trace_hardirqs_on_caller+0x310/0x310 [ 453.844973] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 453.849993] ? prepare_exit_to_usermode+0x291/0x3b0 [ 453.855016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.859886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.865088] RIP: 0033:0x457579 [ 453.868298] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 453.887196] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 453.894904] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 453.902181] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 453.909449] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 453.916726] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 453.923994] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xfffffdef]}}, 0x20) [ 453.944659] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue 23:19:45 executing program 0 (fault-call:8 fault-nth:49): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:45 executing program 5: [ 454.006276] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:19:45 executing program 2: [ 454.128778] FAULT_INJECTION: forcing a failure. [ 454.128778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 454.140679] CPU: 1 PID: 22493 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 454.149189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.158556] Call Trace: [ 454.161166] dump_stack+0x1d3/0x2c4 [ 454.164828] ? dump_stack_print_info.cold.2+0x52/0x52 [ 454.170053] should_fail.cold.4+0xa/0x17 [ 454.174126] ? save_stack+0x43/0xd0 23:19:45 executing program 5: [ 454.177765] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 454.182903] ? dev_hard_start_xmit+0x186/0xc90 [ 454.187501] ? __dev_queue_xmit+0x2f39/0x3950 [ 454.192005] ? dev_queue_xmit+0x17/0x20 [ 454.195997] ? ip_finish_output2+0x105c/0x1860 [ 454.200619] ? ip_finish_output+0x7f8/0xf90 [ 454.204985] ? ip_output+0x21d/0x8d0 [ 454.208708] ? ip_local_out+0xc5/0x1b0 [ 454.212605] ? __ip_queue_xmit+0x9af/0x1f30 [ 454.216939] ? ip_queue_xmit+0x56/0x70 [ 454.220851] ? tcp_write_xmit+0x1676/0x5710 23:19:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x0, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:45 executing program 5: 23:19:45 executing program 2: 23:19:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xffffffffa0008000]}}, 0x20) 23:19:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f00006dc000)=[{0x6, 0x4, 0x7ff, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)="79656168001b327cd2a981abd150f4e66f5b19655be8f871a79cf377c943ec8f86068ba57881adfdf0d883e6d520257c48d266ed15e1f5dd4fdb0fc300fcf5ecc8f4cda3927416db33e7bce11724c6d1114467896c23c37bdda4f5b83a52e4be337d27d51d39bb0cff4b3057c2ba6cc5624621070bfc976e5acb3ed071b9ccf9f4f76ee420877964c463dd7b05fa5d44fe8986028488c37317479ecdc9f2307b0636d3b5e7eef1e236b37d8070dfb36ed9ee809b9f9a2d20e27a5e61195cf51d8124", 0xc2) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) [ 454.225185] ? __tcp_push_pending_frames+0xb2/0x290 [ 454.230212] ? tcp_push+0x662/0x900 [ 454.233842] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 454.238545] ? tcp_sendmsg+0x2f/0x50 [ 454.238558] ? inet_sendmsg+0x19c/0x690 [ 454.238589] ? sock_sendmsg+0xd5/0x120 [ 454.246272] ? __x64_sys_sendto+0xe1/0x1a0 [ 454.246289] ? do_syscall_64+0x1b9/0x820 [ 454.246303] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.246329] ? mark_held_locks+0x130/0x130 [ 454.268076] ? trace_hardirqs_on+0xbd/0x310 [ 454.272408] ? __kmalloc_node_track_caller+0x3c/0x70 [ 454.277524] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 454.282981] ? kasan_unpoison_shadow+0x35/0x50 [ 454.282998] ? kasan_unpoison_shadow+0x35/0x50 [ 454.283017] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 454.283033] ? skb_release_data+0x1c4/0x880 [ 454.283055] ? refcount_add_not_zero_checked+0x330/0x330 [ 454.283075] ? skb_tx_error+0x2f0/0x2f0 [ 454.292232] ? __kmalloc_node_track_caller+0x50/0x70 [ 454.292253] __alloc_pages_nodemask+0x34b/0xdd0 [ 454.292268] ? kasan_check_write+0x14/0x20 [ 454.292288] ? pskb_expand_head+0x6b3/0x10f0 [ 454.301632] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 454.301656] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 454.301685] ? save_stack+0xa9/0xd0 [ 454.311115] ? save_stack+0x43/0xd0 [ 454.311130] ? kasan_kmalloc+0xc7/0xe0 [ 454.311144] ? kasan_slab_alloc+0x12/0x20 [ 454.311159] ? skb_clone+0x1bb/0x500 [ 454.311177] ? dev_queue_xmit_nit+0x414/0xb30 [ 454.320933] ? dev_hard_start_xmit+0x186/0xc90 [ 454.320959] ? __dev_queue_xmit+0x2f39/0x3950 [ 454.320980] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 23:19:45 executing program 5: [ 454.320999] alloc_pages_current+0x10c/0x210 [ 454.321019] skb_copy_ubufs+0x4c2/0x1b30 [ 454.329646] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.329665] ? memcpy+0x45/0x50 [ 454.329688] ? skb_release_data+0x880/0x880 [ 454.329705] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 454.339230] ? lock_downgrade+0x900/0x900 [ 454.339247] ? trace_hardirqs_on+0xbd/0x310 [ 454.339267] ? pvclock_read_flags+0x160/0x160 [ 454.339285] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 454.346526] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 454.346557] ? kvm_clock_read+0x18/0x30 23:19:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x200000000000000]}}, 0x20) [ 454.346579] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 454.426156] ? ktime_get_with_offset+0x310/0x460 [ 454.435126] ? ktime_get+0x400/0x400 [ 454.435141] ? netif_rx+0xe0/0x430 [ 454.435155] ? dev_forward_skb+0x60/0x60 [ 454.435172] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 454.435191] ? eth_type_trans+0x2ea/0x760 [ 454.460926] ? eth_gro_receive+0x920/0x920 [ 454.465206] dev_queue_xmit_nit+0x90a/0xb30 [ 454.469541] ? default_device_exit+0x2c0/0x2c0 [ 454.474137] ? __account_cfs_rq_runtime+0x790/0x790 23:19:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x0, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 454.474156] dev_hard_start_xmit+0x186/0xc90 [ 454.474186] ? dev_direct_xmit+0x6b0/0x6b0 [ 454.474204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.474222] ? netif_skb_features+0x690/0xb70 [ 454.497885] ? validate_xmit_xfrm+0x1ef/0xda0 [ 454.502407] ? lock_acquire+0x1ed/0x520 [ 454.506397] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.511976] ? validate_xmit_skb+0x80c/0xf30 [ 454.516400] ? lock_release+0x970/0x970 [ 454.520405] ? netif_skb_features+0xb70/0xb70 [ 454.524913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.530495] ? check_preemption_disabled+0x48/0x200 [ 454.535517] ? check_preemption_disabled+0x48/0x200 [ 454.540551] __dev_queue_xmit+0x2f39/0x3950 [ 454.544885] ? perf_sched_cb_inc+0x350/0x350 [ 454.549305] ? netdev_pick_tx+0x2d0/0x2d0 [ 454.553487] ? finish_task_switch+0x180/0x900 [ 454.557993] ? lock_downgrade+0x900/0x900 [ 454.562327] ? finish_task_switch+0x1b5/0x900 [ 454.566835] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 454.572653] ? mark_held_locks+0x130/0x130 [ 454.576906] ? mark_held_locks+0x130/0x130 [ 454.581175] ? lock_downgrade+0x900/0x900 [ 454.585372] ? trace_hardirqs_on+0xbd/0x310 [ 454.589712] ? _raw_spin_unlock_bh+0x30/0x40 [ 454.594146] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 454.599654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.605205] ? mark_held_locks+0x130/0x130 [ 454.609448] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 454.614141] ? tcp_packet+0x6ad/0x58d2 [ 454.618065] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 454.623270] ? ip_finish_output+0x7f8/0xf90 [ 454.627598] ? lock_downgrade+0x900/0x900 [ 454.631757] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 454.637054] ? trace_hardirqs_on+0xbd/0x310 [ 454.641382] ? ip_finish_output+0x7f8/0xf90 [ 454.645733] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 454.651200] dev_queue_xmit+0x17/0x20 [ 454.655010] ? dev_queue_xmit+0x17/0x20 [ 454.659005] ip_finish_output2+0x105c/0x1860 [ 454.663426] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.663446] ? ip_copy_metadata+0xe10/0xe10 [ 454.663474] ? cgroup_dev_is_valid_access+0x150/0x150 [ 454.663496] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 454.673350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.673364] ? ipv4_mtu+0x37d/0x590 [ 454.673379] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 454.673396] ? __do_replace+0xab0/0xab0 [ 454.673419] ip_finish_output+0x7f8/0xf90 [ 454.706629] ? ip_finish_output+0x7f8/0xf90 [ 454.710983] ? ip_fragment.constprop.50+0x240/0x240 [ 454.716019] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 454.721056] ? nf_nat_ipv4_out+0x2e1/0x340 [ 454.725318] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 454.730524] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 454.735555] ? nf_hook_slow+0x11e/0x1c0 [ 454.739548] ip_output+0x21d/0x8d0 [ 454.743115] ? ip_mc_output+0x15a0/0x15a0 [ 454.747280] ? ip_fragment.constprop.50+0x240/0x240 [ 454.752372] ? sock_alloc_send_skb+0x40/0x40 [ 454.752394] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 454.761897] ip_local_out+0xc5/0x1b0 [ 454.761916] __ip_queue_xmit+0x9af/0x1f30 [ 454.761937] ? ip_build_and_send_pkt+0xc80/0xc80 [ 454.761989] ? tcp_schedule_loss_probe+0x530/0x530 [ 454.779504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.785055] ? tcp_established_options+0x366/0x5b0 [ 454.790020] ? tcp_select_initial_window+0x400/0x400 [ 454.795153] ip_queue_xmit+0x56/0x70 [ 454.798890] __tcp_transmit_skb+0x1bc5/0x3b00 [ 454.803410] ? __tcp_select_window+0x9e0/0x9e0 [ 454.808007] ? pvclock_read_flags+0x160/0x160 [ 454.808022] ? tcp_write_xmit+0xf1/0x5710 [ 454.808041] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 454.808062] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 454.808082] ? tcp_rtx_synack+0x730/0x730 [ 454.813230] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 454.816755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.816771] ? sk_reset_timer+0x36/0x60 [ 454.816785] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 454.816798] ? tcp_rbtree_insert+0x141/0x190 [ 454.816816] ? tcp_rearm_rto+0xdf/0x100 [ 454.824872] minix_free_inode: bit 1 already cleared [ 454.827290] ? tcp_event_new_data_sent+0x266/0x3c0 [ 454.827310] tcp_write_xmit+0x1676/0x5710 [ 454.827344] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 454.880363] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 454.885282] ? ___pskb_trim+0x89d/0x1320 [ 454.889333] ? skb_condense+0x3d0/0x3d0 [ 454.893298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.898826] __tcp_push_pending_frames+0xb2/0x290 [ 454.903693] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 454.908713] tcp_push+0x662/0x900 [ 454.912151] ? __sk_mem_schedule+0xac/0xe0 [ 454.916402] ? tcp_md5_hash_key+0x250/0x250 [ 454.920725] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 454.925787] ? ___pskb_trim+0x1320/0x1320 [ 454.929925] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 454.935483] tcp_sendmsg_locked+0x3296/0x3f90 [ 454.939979] ? lock_downgrade+0x900/0x900 [ 454.944136] ? shrink_dcache_sb+0x350/0x350 [ 454.948447] ? tcp_sendpage+0x60/0x60 [ 454.952247] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.957783] ? aa_label_sk_perm+0xfc/0xa50 [ 454.962016] ? aa_profile_af_perm+0x410/0x410 [ 454.966516] ? ksys_dup3+0x680/0x680 [ 454.970220] ? lock_acquire+0x1ed/0x520 [ 454.974204] ? tcp_sendmsg+0x21/0x50 [ 454.977920] ? trace_hardirqs_on+0xbd/0x310 [ 454.982256] ? lock_release+0x970/0x970 [ 454.986218] ? lock_sock_nested+0xe2/0x120 [ 454.990479] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 454.995997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.001570] ? check_preemption_disabled+0x48/0x200 [ 455.006582] ? lock_sock_nested+0x9a/0x120 [ 455.010802] ? lock_sock_nested+0x9a/0x120 [ 455.015042] ? __local_bh_enable_ip+0x160/0x260 [ 455.019717] tcp_sendmsg+0x2f/0x50 [ 455.023266] inet_sendmsg+0x19c/0x690 [ 455.027057] ? ipip_gro_receive+0x100/0x100 [ 455.031367] ? apparmor_socket_sendmsg+0x29/0x30 [ 455.036114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.041642] ? security_socket_sendmsg+0x94/0xc0 [ 455.046393] ? ipip_gro_receive+0x100/0x100 [ 455.050721] sock_sendmsg+0xd5/0x120 [ 455.054426] __sys_sendto+0x3d7/0x670 [ 455.058219] ? __ia32_sys_getpeername+0xb0/0xb0 [ 455.062899] ? wait_for_completion+0x8a0/0x8a0 [ 455.067493] ? lock_release+0x970/0x970 [ 455.071486] ? check_preemption_disabled+0x48/0x200 [ 455.076494] ? fsnotify_first_mark+0x350/0x350 [ 455.081067] ? __fsnotify_parent+0xcc/0x420 [ 455.085376] ? fsnotify+0xf10/0xf10 [ 455.089002] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.094577] ? __sb_end_write+0xd9/0x110 [ 455.098653] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 455.104178] ? fput+0x130/0x1a0 [ 455.107469] ? ksys_write+0x1ae/0x260 [ 455.111266] ? trace_hardirqs_on+0xbd/0x310 [ 455.115580] ? __ia32_sys_read+0xb0/0xb0 [ 455.119625] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.124981] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 455.130439] __x64_sys_sendto+0xe1/0x1a0 [ 455.134524] do_syscall_64+0x1b9/0x820 [ 455.138396] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 455.143768] ? syscall_return_slowpath+0x5e0/0x5e0 [ 455.148711] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.153560] ? trace_hardirqs_on_caller+0x310/0x310 [ 455.158566] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 455.163588] ? prepare_exit_to_usermode+0x291/0x3b0 [ 455.168595] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.173438] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.178622] RIP: 0033:0x457579 [ 455.181803] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.200693] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 455.208404] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 455.215659] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 455.222912] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 455.230165] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 455.237420] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:46 executing program 0 (fault-call:8 fault-nth:50): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xfffffdef]}}, 0x20) 23:19:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x8000a0ffffffff]}}, 0x20) 23:19:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x3, @remote}, 0x273) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100), 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) [ 455.279627] minix_free_inode: bit 1 already cleared [ 455.335371] FAULT_INJECTION: forcing a failure. [ 455.335371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.347279] CPU: 1 PID: 22535 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 455.355777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.365137] Call Trace: [ 455.367750] dump_stack+0x1d3/0x2c4 [ 455.371403] ? dump_stack_print_info.cold.2+0x52/0x52 [ 455.376623] should_fail.cold.4+0xa/0x17 [ 455.380697] ? save_stack+0x43/0xd0 [ 455.384333] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 455.384349] ? dev_hard_start_xmit+0x186/0xc90 [ 455.384362] ? __dev_queue_xmit+0x2f39/0x3950 [ 455.384374] ? dev_queue_xmit+0x17/0x20 [ 455.384389] ? ip_finish_output2+0x105c/0x1860 [ 455.384408] ? ip_finish_output+0x7f8/0xf90 [ 455.394084] ? ip_output+0x21d/0x8d0 [ 455.394099] ? ip_local_out+0xc5/0x1b0 [ 455.394112] ? __ip_queue_xmit+0x9af/0x1f30 [ 455.394127] ? ip_queue_xmit+0x56/0x70 [ 455.394142] ? tcp_write_xmit+0x1676/0x5710 [ 455.394162] ? __tcp_push_pending_frames+0xb2/0x290 [ 455.407232] ? tcp_push+0x662/0x900 [ 455.407247] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 455.407258] ? tcp_sendmsg+0x2f/0x50 [ 455.407279] ? inet_sendmsg+0x19c/0x690 [ 455.415325] ? sock_sendmsg+0xd5/0x120 [ 455.415343] ? __x64_sys_sendto+0xe1/0x1a0 [ 455.415359] ? do_syscall_64+0x1b9/0x820 [ 455.415373] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.415394] ? mark_held_locks+0x130/0x130 [ 455.415413] ? trace_hardirqs_on+0xbd/0x310 [ 455.415429] ? __kmalloc_node_track_caller+0x3c/0x70 [ 455.415446] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 455.415481] ? kasan_unpoison_shadow+0x35/0x50 [ 455.415513] ? kasan_unpoison_shadow+0x35/0x50 [ 455.484072] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 455.484090] ? skb_release_data+0x1c4/0x880 [ 455.484112] ? refcount_add_not_zero_checked+0x330/0x330 [ 455.484128] ? skb_tx_error+0x2f0/0x2f0 [ 455.484149] ? __kmalloc_node_track_caller+0x50/0x70 [ 455.484170] __alloc_pages_nodemask+0x34b/0xdd0 [ 455.484190] ? kasan_check_write+0x14/0x20 [ 455.508545] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 455.513549] ? pskb_expand_head+0x6b3/0x10f0 [ 455.513569] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 455.513591] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 455.513615] ? save_stack+0xa9/0xd0 [ 455.513630] ? save_stack+0x43/0xd0 [ 455.513643] ? kasan_kmalloc+0xc7/0xe0 [ 455.513658] ? kasan_slab_alloc+0x12/0x20 [ 455.513672] ? skb_clone+0x1bb/0x500 [ 455.513690] ? dev_queue_xmit_nit+0x414/0xb30 [ 455.520130] minix_free_inode: bit 1 already cleared [ 455.522783] ? dev_hard_start_xmit+0x186/0xc90 [ 455.522798] ? __dev_queue_xmit+0x2f39/0x3950 [ 455.522819] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 455.522838] alloc_pages_current+0x10c/0x210 [ 455.522871] skb_copy_ubufs+0x4c2/0x1b30 [ 455.522886] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.522915] ? memcpy+0x45/0x50 [ 455.522937] ? skb_release_data+0x880/0x880 [ 455.617678] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 455.622180] ? lock_downgrade+0x900/0x900 [ 455.626334] ? trace_hardirqs_on+0xbd/0x310 [ 455.630672] ? pvclock_read_flags+0x160/0x160 [ 455.635196] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 455.639692] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 455.645161] ? kvm_clock_read+0x18/0x30 [ 455.649165] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 455.654188] ? ktime_get_with_offset+0x310/0x460 [ 455.658994] ? ktime_get+0x400/0x400 [ 455.662711] ? netif_rx+0xe0/0x430 [ 455.666270] ? dev_forward_skb+0x60/0x60 [ 455.670795] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 455.676349] ? eth_type_trans+0x2ea/0x760 [ 455.680505] ? eth_gro_receive+0x920/0x920 [ 455.684739] dev_queue_xmit_nit+0x90a/0xb30 [ 455.689069] ? default_device_exit+0x2c0/0x2c0 [ 455.693652] ? rb_erase_cached+0xc78/0x3720 [ 455.697989] ? rb_next+0x140/0x140 [ 455.701536] dev_hard_start_xmit+0x186/0xc90 [ 455.705969] ? dev_direct_xmit+0x6b0/0x6b0 [ 455.710222] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 455.715759] ? netif_skb_features+0x690/0xb70 [ 455.720256] ? validate_xmit_xfrm+0x1ef/0xda0 [ 455.724783] ? lock_acquire+0x1ed/0x520 [ 455.728766] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 455.734347] ? validate_xmit_skb+0x80c/0xf30 [ 455.738755] ? lock_release+0x970/0x970 [ 455.742730] ? __dev_queue_xmit+0x1a99/0x3950 [ 455.747230] ? netif_skb_features+0xb70/0xb70 [ 455.751730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.757271] ? check_preemption_disabled+0x48/0x200 [ 455.762303] ? check_preemption_disabled+0x48/0x200 [ 455.767328] __dev_queue_xmit+0x2f39/0x3950 [ 455.771650] ? mark_held_locks+0x130/0x130 [ 455.775892] ? netdev_pick_tx+0x2d0/0x2d0 [ 455.780056] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 455.785868] ? mark_held_locks+0x130/0x130 [ 455.790104] ? mark_held_locks+0x130/0x130 [ 455.794342] ? lock_downgrade+0x900/0x900 [ 455.798495] ? trace_hardirqs_on+0xbd/0x310 [ 455.802820] ? _raw_spin_unlock_bh+0x30/0x40 [ 455.807233] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 455.812686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.818241] ? mark_held_locks+0x130/0x130 [ 455.822480] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 455.827157] ? tcp_packet+0x6ad/0x58d2 [ 455.831069] ? select_task_rq_fair+0x3590/0x3590 [ 455.835831] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 455.841032] ? ip_finish_output+0x7f8/0xf90 [ 455.845359] ? lock_downgrade+0x900/0x900 [ 455.849507] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 455.854795] ? trace_hardirqs_on+0xbd/0x310 [ 455.859118] ? ip_finish_output+0x7f8/0xf90 [ 455.863481] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 455.868936] dev_queue_xmit+0x17/0x20 [ 455.872748] ? dev_queue_xmit+0x17/0x20 [ 455.876722] ip_finish_output2+0x105c/0x1860 [ 455.881132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.886675] ? ip_copy_metadata+0xe10/0xe10 [ 455.891004] ? cgroup_dev_is_valid_access+0x150/0x150 [ 455.896197] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 455.901479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.907017] ? ipv4_mtu+0x37d/0x590 [ 455.910647] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 455.916100] ? __do_replace+0xab0/0xab0 [ 455.920082] ip_finish_output+0x7f8/0xf90 [ 455.924230] ? ip_finish_output+0x7f8/0xf90 [ 455.928553] ? ip_fragment.constprop.50+0x240/0x240 [ 455.933592] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 455.938619] ? nf_nat_ipv4_out+0x2e1/0x340 [ 455.942857] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 455.948062] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 455.953082] ? nf_hook_slow+0x11e/0x1c0 [ 455.957083] ip_output+0x21d/0x8d0 [ 455.960640] ? ip_mc_output+0x15a0/0x15a0 [ 455.964790] ? ip_fragment.constprop.50+0x240/0x240 [ 455.969808] ? sock_alloc_send_skb+0x40/0x40 [ 455.974218] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 455.979327] ip_local_out+0xc5/0x1b0 [ 455.983044] __ip_queue_xmit+0x9af/0x1f30 [ 455.987210] ? ip_build_and_send_pkt+0xc80/0xc80 [ 455.991981] ? tcp_schedule_loss_probe+0x530/0x530 [ 455.996916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.002483] ? tcp_established_options+0x366/0x5b0 [ 456.007432] ? tcp_select_initial_window+0x400/0x400 [ 456.012581] ip_queue_xmit+0x56/0x70 [ 456.016310] __tcp_transmit_skb+0x1bc5/0x3b00 [ 456.020815] ? __tcp_select_window+0x9e0/0x9e0 [ 456.025397] ? pvclock_read_flags+0x160/0x160 [ 456.029896] ? tcp_write_xmit+0xf1/0x5710 [ 456.034049] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 456.039503] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 456.044524] ? tcp_rtx_synack+0x730/0x730 [ 456.048674] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.054218] ? sk_reset_timer+0x36/0x60 [ 456.058204] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 456.062966] ? tcp_rbtree_insert+0x141/0x190 [ 456.067381] ? tcp_rearm_rto+0xdf/0x100 [ 456.071354] ? tcp_event_new_data_sent+0x266/0x3c0 [ 456.076304] tcp_write_xmit+0x1676/0x5710 [ 456.080471] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 456.085140] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 456.090078] ? ___pskb_trim+0x89d/0x1320 [ 456.094149] ? skb_condense+0x3d0/0x3d0 [ 456.098127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.103678] __tcp_push_pending_frames+0xb2/0x290 [ 456.108520] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 456.113556] tcp_push+0x662/0x900 [ 456.117006] ? __sk_mem_schedule+0xac/0xe0 [ 456.121256] ? tcp_md5_hash_key+0x250/0x250 [ 456.125604] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 456.130624] ? ___pskb_trim+0x1320/0x1320 [ 456.134778] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 456.140317] tcp_sendmsg_locked+0x3296/0x3f90 [ 456.144824] ? lock_downgrade+0x900/0x900 [ 456.148992] ? shrink_dcache_sb+0x350/0x350 [ 456.153322] ? tcp_sendpage+0x60/0x60 [ 456.157128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 456.162681] ? aa_label_sk_perm+0xfc/0xa50 [ 456.166956] ? aa_profile_af_perm+0x410/0x410 [ 456.171453] ? ksys_dup3+0x680/0x680 [ 456.175178] ? lock_acquire+0x1ed/0x520 [ 456.179150] ? tcp_sendmsg+0x21/0x50 [ 456.182866] ? trace_hardirqs_on+0xbd/0x310 [ 456.187188] ? lock_release+0x970/0x970 [ 456.191162] ? lock_sock_nested+0xe2/0x120 [ 456.195401] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 456.200853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.206389] ? check_preemption_disabled+0x48/0x200 [ 456.211405] ? lock_sock_nested+0x9a/0x120 [ 456.215640] ? lock_sock_nested+0x9a/0x120 [ 456.219879] ? __local_bh_enable_ip+0x160/0x260 [ 456.224566] tcp_sendmsg+0x2f/0x50 [ 456.228108] inet_sendmsg+0x19c/0x690 [ 456.231912] ? ipip_gro_receive+0x100/0x100 [ 456.236236] ? apparmor_socket_sendmsg+0x29/0x30 [ 456.241020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.246557] ? security_socket_sendmsg+0x94/0xc0 [ 456.251312] ? ipip_gro_receive+0x100/0x100 [ 456.255643] sock_sendmsg+0xd5/0x120 [ 456.259360] __sys_sendto+0x3d7/0x670 [ 456.263167] ? __ia32_sys_getpeername+0xb0/0xb0 [ 456.267838] ? wait_for_completion+0x8a0/0x8a0 [ 456.272423] ? lock_release+0x970/0x970 [ 456.276421] ? check_preemption_disabled+0x48/0x200 [ 456.281447] ? fsnotify_first_mark+0x350/0x350 [ 456.286056] ? __fsnotify_parent+0xcc/0x420 [ 456.290379] ? fsnotify+0xf10/0xf10 [ 456.294010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.299555] ? __sb_end_write+0xd9/0x110 [ 456.303717] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 456.309256] ? fput+0x130/0x1a0 [ 456.312538] ? ksys_write+0x1ae/0x260 [ 456.316342] ? trace_hardirqs_on+0xbd/0x310 [ 456.320673] ? __ia32_sys_read+0xb0/0xb0 [ 456.324749] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.330130] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 456.335583] __x64_sys_sendto+0xe1/0x1a0 [ 456.339664] do_syscall_64+0x1b9/0x820 [ 456.343553] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 456.348919] ? syscall_return_slowpath+0x5e0/0x5e0 [ 456.353856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.358702] ? trace_hardirqs_on_caller+0x310/0x310 [ 456.363722] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 456.368742] ? prepare_exit_to_usermode+0x291/0x3b0 [ 456.373763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.378609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.383795] RIP: 0033:0x457579 [ 456.386989] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 456.405888] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 456.413597] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 456.420866] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 456.428133] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 456.435398] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 456.442666] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x1a0ffffffff]}}, 0x20) 23:19:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x800) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) 23:19:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x0, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:47 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x10e00) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0xc73, 0x7, 0x3, 0x9, 0x69}) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000100)=""/39, &(0x7f0000000140)=0x27) 23:19:48 executing program 0 (fault-call:8 fault-nth:51): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f36e0f20e06635002000000f22e00f30f20f1024660fdb03b894008ed00f20d86635200000000f22d80f35650f01c90f30", 0x31}], 0x241, 0x0, &(0x7f0000000600), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:19:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x2000000]}}, 0x20) 23:19:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) shutdown(r2, 0x0) [ 456.777233] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 456.825017] FAULT_INJECTION: forcing a failure. [ 456.825017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.836936] CPU: 0 PID: 22590 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 456.845472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.846769] minix_free_inode: bit 1 already cleared [ 456.854826] Call Trace: [ 456.854855] dump_stack+0x1d3/0x2c4 [ 456.854877] ? dump_stack_print_info.cold.2+0x52/0x52 [ 456.854904] should_fail.cold.4+0xa/0x17 [ 456.854926] ? save_stack+0x43/0xd0 [ 456.879042] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 456.884155] ? dev_hard_start_xmit+0x186/0xc90 [ 456.888765] ? __dev_queue_xmit+0x2f39/0x3950 [ 456.893263] ? dev_queue_xmit+0x17/0x20 [ 456.897244] ? ip_finish_output2+0x105c/0x1860 [ 456.901828] ? ip_finish_output+0x7f8/0xf90 [ 456.906151] ? ip_output+0x21d/0x8d0 [ 456.909867] ? ip_local_out+0xc5/0x1b0 [ 456.913789] ? __ip_queue_xmit+0x9af/0x1f30 [ 456.918118] ? ip_queue_xmit+0x56/0x70 [ 456.922037] ? tcp_write_xmit+0x1676/0x5710 [ 456.926366] ? __tcp_push_pending_frames+0xb2/0x290 [ 456.931385] ? tcp_push+0x662/0x900 [ 456.935018] ? tcp_sendmsg_locked+0x3296/0x3f90 [ 456.939691] ? tcp_sendmsg+0x2f/0x50 [ 456.943407] ? inet_sendmsg+0x19c/0x690 [ 456.947384] ? sock_sendmsg+0xd5/0x120 [ 456.951275] ? __x64_sys_sendto+0xe1/0x1a0 [ 456.955514] ? do_syscall_64+0x1b9/0x820 [ 456.959580] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.964973] ? mark_held_locks+0x130/0x130 [ 456.969249] ? trace_hardirqs_on+0xbd/0x310 [ 456.973586] ? __kmalloc_node_track_caller+0x3c/0x70 [ 456.978701] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 456.984160] ? kasan_unpoison_shadow+0x35/0x50 [ 456.988748] ? kasan_unpoison_shadow+0x35/0x50 [ 456.993348] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 456.998381] ? skb_release_data+0x1c4/0x880 [ 457.002756] ? refcount_add_not_zero_checked+0x330/0x330 [ 457.008219] ? skb_tx_error+0x2f0/0x2f0 [ 457.012212] ? __kmalloc_node_track_caller+0x50/0x70 [ 457.017339] __alloc_pages_nodemask+0x34b/0xdd0 [ 457.022027] ? kasan_check_write+0x14/0x20 [ 457.026275] ? pskb_expand_head+0x6b3/0x10f0 [ 457.030735] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 457.035774] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 457.040292] ? save_stack+0xa9/0xd0 [ 457.043928] ? save_stack+0x43/0xd0 [ 457.043944] ? kasan_kmalloc+0xc7/0xe0 [ 457.043979] ? kasan_slab_alloc+0x12/0x20 [ 457.043997] ? skb_clone+0x1bb/0x500 [ 457.044010] ? dev_queue_xmit_nit+0x414/0xb30 [ 457.044023] ? dev_hard_start_xmit+0x186/0xc90 [ 457.044036] ? __dev_queue_xmit+0x2f39/0x3950 [ 457.044062] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 457.055048] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 457.055724] alloc_pages_current+0x10c/0x210 [ 457.055744] skb_copy_ubufs+0x4c2/0x1b30 [ 457.055759] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.055787] ? memcpy+0x45/0x50 [ 457.055822] ? skb_release_data+0x880/0x880 [ 457.055842] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 457.064161] minix_free_inode: bit 1 already cleared [ 457.068640] ? lock_downgrade+0x900/0x900 [ 457.068658] ? trace_hardirqs_on+0xbd/0x310 [ 457.068679] ? pvclock_read_flags+0x160/0x160 [ 457.068691] ? dev_queue_xmit_nit+0x6b1/0xb30 [ 457.068712] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 457.107771] ? kvm_clock_read+0x18/0x30 [ 457.117262] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 457.117279] ? ktime_get_with_offset+0x310/0x460 [ 457.117298] ? ktime_get+0x400/0x400 [ 457.157584] ? netif_rx+0xe0/0x430 [ 457.161142] ? dev_forward_skb+0x60/0x60 [ 457.165222] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 457.170767] ? eth_type_trans+0x2ea/0x760 [ 457.174930] ? eth_gro_receive+0x920/0x920 [ 457.179200] dev_queue_xmit_nit+0x90a/0xb30 [ 457.183533] ? default_device_exit+0x2c0/0x2c0 [ 457.183551] ? mark_held_locks+0x130/0x130 [ 457.183571] ? update_load_avg+0x387/0x2470 [ 457.196783] dev_hard_start_xmit+0x186/0xc90 [ 457.201209] ? dev_direct_xmit+0x6b0/0x6b0 [ 457.205458] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 457.211028] ? netif_skb_features+0x690/0xb70 [ 457.215542] ? validate_xmit_xfrm+0x1ef/0xda0 [ 457.220061] ? lock_acquire+0x1ed/0x520 [ 457.224049] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 457.229605] ? validate_xmit_skb+0x80c/0xf30 [ 457.234025] ? lock_release+0x970/0x970 [ 457.238012] ? __dev_queue_xmit+0x1a99/0x3950 [ 457.242526] ? netif_skb_features+0xb70/0xb70 [ 457.247042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.252587] ? check_preemption_disabled+0x48/0x200 [ 457.252601] ? check_preemption_disabled+0x48/0x200 [ 457.252621] __dev_queue_xmit+0x2f39/0x3950 [ 457.252638] ? update_curr+0x4cf/0xbe0 [ 457.252658] ? netdev_pick_tx+0x2d0/0x2d0 23:19:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0xeffdffff]}}, 0x20) 23:19:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x1a0]}}, 0x20) 23:19:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xfdef]}}, 0x20) [ 457.252743] ? cgroup_rstat_updated+0xe6/0x470 [ 457.262698] ? check_preemption_disabled+0x40/0x200 [ 457.262716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.262740] ? cgroup_base_stat_cputime_account_end.isra.5+0x3f/0x50 [ 457.262760] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 457.262780] ? mark_held_locks+0x130/0x130 [ 457.262800] ? mark_held_locks+0x130/0x130 [ 457.310902] ? lock_downgrade+0x900/0x900 [ 457.315051] ? trace_hardirqs_on+0xbd/0x310 [ 457.319378] ? _raw_spin_unlock_bh+0x30/0x40 [ 457.323774] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 457.329216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.334741] ? mark_held_locks+0x130/0x130 [ 457.338977] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 457.343650] ? tcp_packet+0x6ad/0x58d2 [ 457.347560] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 457.352756] ? ip_finish_output+0x7f8/0xf90 [ 457.357067] ? lock_downgrade+0x900/0x900 [ 457.361211] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 457.366504] ? trace_hardirqs_on+0xbd/0x310 [ 457.370841] ? ip_finish_output+0x7f8/0xf90 [ 457.375189] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 457.380629] dev_queue_xmit+0x17/0x20 [ 457.384427] ? dev_queue_xmit+0x17/0x20 [ 457.388435] ip_finish_output2+0x105c/0x1860 [ 457.392833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.398378] ? ip_copy_metadata+0xe10/0xe10 [ 457.402693] ? cgroup_dev_is_valid_access+0x150/0x150 [ 457.407881] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 457.413165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.418690] ? ipv4_mtu+0x37d/0x590 [ 457.422307] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 457.427746] ? __do_replace+0xab0/0xab0 [ 457.431713] ip_finish_output+0x7f8/0xf90 [ 457.435856] ? ip_finish_output+0x7f8/0xf90 [ 457.440185] ? ip_fragment.constprop.50+0x240/0x240 [ 457.445197] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 457.450199] ? nf_nat_ipv4_out+0x2e1/0x340 [ 457.454430] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 457.459640] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 457.464656] ? nf_hook_slow+0x11e/0x1c0 [ 457.468650] ip_output+0x21d/0x8d0 [ 457.472188] ? ip_mc_output+0x15a0/0x15a0 [ 457.476341] ? ip_fragment.constprop.50+0x240/0x240 [ 457.481356] ? sock_alloc_send_skb+0x40/0x40 [ 457.485790] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 457.490898] ip_local_out+0xc5/0x1b0 [ 457.494625] __ip_queue_xmit+0x9af/0x1f30 [ 457.498795] ? ip_build_and_send_pkt+0xc80/0xc80 [ 457.503549] ? tcp_schedule_loss_probe+0x530/0x530 [ 457.508495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.514025] ? tcp_established_options+0x366/0x5b0 [ 457.518943] ? tcp_select_initial_window+0x400/0x400 [ 457.524061] ip_queue_xmit+0x56/0x70 [ 457.527766] __tcp_transmit_skb+0x1bc5/0x3b00 [ 457.532303] ? __tcp_select_window+0x9e0/0x9e0 [ 457.536894] ? pvclock_read_flags+0x160/0x160 [ 457.536909] ? tcp_write_xmit+0xf1/0x5710 [ 457.536932] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 457.545604] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 457.545623] ? tcp_rtx_synack+0x730/0x730 [ 457.545640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.545660] ? sk_reset_timer+0x36/0x60 [ 457.569773] ? tcp_rearm_rto.part.70+0x147/0x2a0 [ 457.574529] ? tcp_rbtree_insert+0x141/0x190 [ 457.578930] ? tcp_rearm_rto+0xdf/0x100 [ 457.582913] ? tcp_event_new_data_sent+0x266/0x3c0 [ 457.587841] tcp_write_xmit+0x1676/0x5710 [ 457.592008] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 457.596681] ? __zerocopy_sg_from_iter+0x8ee/0xb80 [ 457.601614] ? ___pskb_trim+0x89d/0x1320 [ 457.605671] ? skb_condense+0x3d0/0x3d0 [ 457.609650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.615179] __tcp_push_pending_frames+0xb2/0x290 [ 457.620096] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 457.625104] tcp_push+0x662/0x900 [ 457.628563] ? __sk_mem_schedule+0xac/0xe0 [ 457.632808] ? tcp_md5_hash_key+0x250/0x250 [ 457.637130] ? skb_zerocopy_iter_stream+0x4b4/0x7d0 [ 457.642150] ? ___pskb_trim+0x1320/0x1320 [ 457.646309] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 457.651892] tcp_sendmsg_locked+0x3296/0x3f90 [ 457.656397] ? lock_downgrade+0x900/0x900 [ 457.660574] ? shrink_dcache_sb+0x350/0x350 [ 457.664903] ? tcp_sendpage+0x60/0x60 [ 457.668709] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 457.674402] ? aa_label_sk_perm+0xfc/0xa50 [ 457.678642] ? aa_profile_af_perm+0x410/0x410 [ 457.683144] ? ksys_dup3+0x680/0x680 [ 457.686862] ? lock_acquire+0x1ed/0x520 [ 457.690845] ? tcp_sendmsg+0x21/0x50 [ 457.694563] ? trace_hardirqs_on+0xbd/0x310 [ 457.698903] ? lock_release+0x970/0x970 [ 457.702876] ? lock_sock_nested+0xe2/0x120 [ 457.707116] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 457.712580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.718124] ? check_preemption_disabled+0x48/0x200 [ 457.723140] ? lock_sock_nested+0x9a/0x120 [ 457.727372] ? lock_sock_nested+0x9a/0x120 [ 457.731631] ? __local_bh_enable_ip+0x160/0x260 [ 457.736315] tcp_sendmsg+0x2f/0x50 [ 457.739861] inet_sendmsg+0x19c/0x690 [ 457.743665] ? ipip_gro_receive+0x100/0x100 [ 457.747992] ? apparmor_socket_sendmsg+0x29/0x30 [ 457.752761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.758303] ? security_socket_sendmsg+0x94/0xc0 [ 457.763059] ? ipip_gro_receive+0x100/0x100 [ 457.767411] sock_sendmsg+0xd5/0x120 [ 457.771130] __sys_sendto+0x3d7/0x670 [ 457.774939] ? __ia32_sys_getpeername+0xb0/0xb0 [ 457.779629] ? wait_for_completion+0x8a0/0x8a0 [ 457.784214] ? lock_release+0x970/0x970 [ 457.788189] ? check_preemption_disabled+0x48/0x200 [ 457.793206] ? fsnotify_first_mark+0x350/0x350 [ 457.797789] ? __fsnotify_parent+0xcc/0x420 [ 457.802113] ? fsnotify+0xf10/0xf10 [ 457.805753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.811312] ? __sb_end_write+0xd9/0x110 [ 457.815402] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 457.820936] ? fput+0x130/0x1a0 [ 457.824233] ? ksys_write+0x1ae/0x260 [ 457.828037] ? trace_hardirqs_on+0xbd/0x310 [ 457.832357] ? __ia32_sys_read+0xb0/0xb0 [ 457.836419] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.841837] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 457.847309] __x64_sys_sendto+0xe1/0x1a0 [ 457.851376] do_syscall_64+0x1b9/0x820 [ 457.855263] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 457.860627] ? syscall_return_slowpath+0x5e0/0x5e0 [ 457.865566] ? trace_hardirqs_on_caller+0x310/0x310 [ 457.870584] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 457.875602] ? recalc_sigpending_tsk+0x180/0x180 [ 457.880359] ? kasan_check_write+0x14/0x20 [ 457.884621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.889492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.894680] RIP: 0033:0x457579 [ 457.897887] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.916785] RSP: 002b:00007f74bfe2ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 457.924492] RAX: ffffffffffffffda RBX: 00007f74bfe2ac90 RCX: 0000000000457579 [ 457.931759] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 457.939028] RBP: 000000000072bfa0 R08: 0000000000000000 R09: ffffffffffffff61 [ 457.946296] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe2b6d4 [ 457.953563] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffdef]}}, 0x20) 23:19:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x0, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:49 executing program 0 (fault-call:8 fault-nth:52): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:49 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000300)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x28, &(0x7f0000000180)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x6d2, 0x33000000000, 0xffff, 0xfffffffffffffffe, 0x3, 0x3f, 0x0, 0x0, 0x38, 0x1f6, 0xe6e3, 0xe3, 0x20, 0x1, 0x8, 0x6, 0x7}, [{0x7, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}], "a18aadde9140efa220883699b842708507386833d9bdeff60e89991444e8681f491f86", [[], [], [], []]}, 0x47b) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/89, 0x59}]}, &(0x7f00000000c0)="5f39203a1ec61c000f2657a275e0338c73d24faf8117a1bbcec41578adceccee3f", &(0x7f0000000040)=""/44, 0x0, 0x0, 0x0, &(0x7f0000000600)}) 23:19:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x40030000000000]}}, 0x20) 23:19:49 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f0000000000)={&(0x7f0000000640)={0x20, 0x18, 0x309, 0x0, 0x0, {0x1}, [@nested={0xc, 0x6, [@generic="cc01869a93"]}]}, 0x20}}, 0x0) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x6, 0x10000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') geteuid() ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000280)=0x3) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400201}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x220, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4010) [ 458.117146] sd 0:0:1:0: [sg0] tag#1258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 458.127509] sd 0:0:1:0: [sg0] tag#1258 CDB: Persistent reserve out, sa=0x19 [ 458.135408] sd 0:0:1:0: [sg0] tag#1258 CDB[00]: 5f 39 20 3a 1e c6 1c 00 0f 26 57 a2 75 e0 33 8c [ 458.144493] sd 0:0:1:0: [sg0] tag#1258 CDB[10]: 73 d2 4f af 81 17 a1 bb ce c4 15 78 ad ce cc ee [ 458.153607] sd 0:0:1:0: [sg0] tag#1258 CDB[20]: 3f [ 458.181720] FAULT_INJECTION: forcing a failure. [ 458.181720] name failslab, interval 1, probability 0, space 0, times 0 [ 458.203651] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 458.266062] CPU: 0 PID: 22638 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 458.274584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.283969] Call Trace: [ 458.286577] dump_stack+0x1d3/0x2c4 [ 458.290229] ? dump_stack_print_info.cold.2+0x52/0x52 [ 458.295439] ? try_charge+0xb04/0x1690 [ 458.299346] should_fail.cold.4+0xa/0x17 [ 458.303422] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 458.308539] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 458.313572] ? sock_def_readable+0x2c7/0x710 [ 458.318007] ? lock_downgrade+0x900/0x900 [ 458.322166] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 458.327104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.332648] ? sk_reset_timer+0x36/0x60 [ 458.336637] ? tcp_write_xmit+0xf1/0x5710 [ 458.340794] ? lock_downgrade+0x900/0x900 [ 458.344975] ? pvclock_read_flags+0x160/0x160 [ 458.349476] ? tcp_write_xmit+0xf1/0x5710 [ 458.353633] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 458.359101] __should_failslab+0x124/0x180 [ 458.363345] should_failslab+0x9/0x14 [ 458.367150] kmem_cache_alloc_node+0x56/0x730 [ 458.371658] ? tcp_data_queue+0xac4/0x4790 [ 458.375906] __alloc_skb+0x114/0x770 [ 458.379629] ? skb_scrub_packet+0x490/0x490 [ 458.384052] ? f2fs_vm_page_mkwrite+0x1202/0x1f60 [ 458.388909] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 458.393584] ? tcp_select_initial_window+0x3a0/0x400 [ 458.398699] __tcp_send_ack.part.42+0x67/0x5d0 [ 458.403292] tcp_send_ack+0x85/0xa0 [ 458.406927] __tcp_ack_snd_check+0x1cb/0x950 [ 458.411356] ? tcp_queue_rcv+0x800/0x800 [ 458.415428] ? tcp_xmit_recovery.part.63+0x130/0x130 [ 458.420539] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 458.426085] tcp_rcv_established+0xa9d/0x2120 [ 458.430591] ? tcp_data_queue+0x4790/0x4790 [ 458.434917] ? __release_sock+0xcb/0x3a0 [ 458.439012] ? lock_downgrade+0x900/0x900 [ 458.443171] ? trace_hardirqs_on+0xbd/0x310 [ 458.447505] ? _raw_spin_unlock_bh+0x30/0x40 [ 458.451921] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 458.457392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.462938] ? check_preemption_disabled+0x48/0x200 [ 458.467986] ? __release_sock+0xcb/0x3a0 [ 458.472059] tcp_v4_do_rcv+0x635/0x8f0 [ 458.475970] __release_sock+0x12a/0x3a0 [ 458.479979] ? do_raw_spin_lock+0xc1/0x200 [ 458.484227] release_sock+0xad/0x2c0 [ 458.487945] ? lock_sock_nested+0x9a/0x120 [ 458.492201] ? __release_sock+0x3a0/0x3a0 [ 458.496360] ? __local_bh_enable_ip+0x160/0x260 [ 458.501040] tcp_sendmsg+0x3a/0x50 [ 458.504588] inet_sendmsg+0x19c/0x690 [ 458.508401] ? ipip_gro_receive+0x100/0x100 [ 458.512733] ? apparmor_socket_sendmsg+0x29/0x30 [ 458.517498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.523043] ? security_socket_sendmsg+0x94/0xc0 [ 458.527807] ? ipip_gro_receive+0x100/0x100 [ 458.532139] sock_sendmsg+0xd5/0x120 [ 458.535866] __sys_sendto+0x3d7/0x670 [ 458.539679] ? __ia32_sys_getpeername+0xb0/0xb0 [ 458.544357] ? wait_for_completion+0x8a0/0x8a0 [ 458.548957] ? lock_release+0x970/0x970 [ 458.552959] ? check_preemption_disabled+0x48/0x200 [ 458.557996] ? fsnotify_first_mark+0x350/0x350 [ 458.563068] ? __fsnotify_parent+0xcc/0x420 [ 458.567397] ? fsnotify+0xf10/0xf10 [ 458.571037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.576602] ? __sb_end_write+0xd9/0x110 [ 458.580685] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 458.586251] ? fput+0x130/0x1a0 [ 458.589541] ? ksys_write+0x1ae/0x260 [ 458.593371] ? trace_hardirqs_on+0xbd/0x310 [ 458.597701] ? __ia32_sys_read+0xb0/0xb0 [ 458.601769] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.607141] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 458.612611] __x64_sys_sendto+0xe1/0x1a0 [ 458.616698] do_syscall_64+0x1b9/0x820 [ 458.620589] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 458.625976] ? syscall_return_slowpath+0x5e0/0x5e0 [ 458.630919] ? trace_hardirqs_on_caller+0x310/0x310 [ 458.635979] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 458.641006] ? recalc_sigpending_tsk+0x180/0x180 [ 458.645771] ? kasan_check_write+0x14/0x20 [ 458.650019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.654871] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.660065] RIP: 0033:0x457579 [ 458.663268] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.682171] RSP: 002b:00007f74bfe2ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 458.689885] RAX: ffffffffffffffda RBX: 00007f74bfe2ac90 RCX: 0000000000457579 [ 458.697159] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 458.704432] RBP: 000000000072bfa0 R08: 0000000000000000 R09: ffffffffffffff61 23:19:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x8000a0]}}, 0x20) 23:19:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 458.711704] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe2b6d4 [ 458.718987] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 [ 458.751190] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 458.761726] minix_free_inode: bit 1 already cleared 23:19:50 executing program 1: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531de6150defaca6ebcaf1bcb8c36184c8f147bed6ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, "655397eb000000004bbdd330eaaa50c6a17a4cbe4cf9a27f671d171c4a2c50f288493829c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f38b16e1198d", &(0x7f0000000000)=["655397eb000000004bbdd330eaaa50c6a17a4cbe4cf9a27f671d171c4a2c50f288493829c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f38b16e1198d"], 0x40, [], [0x2]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "8984041f02000000e10000000100000009007a7d000000000000047e000081d9"}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x18000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000000c0)={0x80000000, 0x0, 0x1}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x9, 0x1, {0x3, 0x0, 0x9, 0x3, 0x6}}) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x3, 0x1}}, 0x26) inotify_init1(0x800) 23:19:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x3) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0), 0x4) socket$kcm(0x29, 0x2, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f0000000280)='}') ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x4587d696000, 0xfffffffffffff000, 0x7, 0x101}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x218080, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0xe6, 0x2, 0x3, 0x3fe0000000000000, 0x200000000, 0x5, 0x0, 0x5, 0x80000001, 0x17fd000000000000}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000140)=""/107) [ 458.789713] sd 0:0:1:0: [sg0] tag#1270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 458.798617] sd 0:0:1:0: [sg0] tag#1270 CDB: Persistent reserve out, sa=0x19 [ 458.805784] sd 0:0:1:0: [sg0] tag#1270 CDB[00]: 5f 39 20 3a 1e c6 1c 00 0f 26 57 a2 75 e0 33 8c [ 458.814676] sd 0:0:1:0: [sg0] tag#1270 CDB[10]: 73 d2 4f af 81 17 a1 bb ce c4 15 78 ad ce cc ee [ 458.823564] sd 0:0:1:0: [sg0] tag#1270 CDB[20]: 3f [ 458.833151] minix_free_inode: bit 1 already cleared 23:19:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xa0008000]}}, 0x20) 23:19:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) restart_syscall() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000200)=0xb) bind$inet(r1, &(0x7f0000000080)={0x2, 0x84e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = socket(0x50000000010, 0x5, 0x200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='bpf\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="30303030303030303030303030303030303004000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, &(0x7f0000000140), 0x80000002) 23:19:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="e30000002a2dbabefaaab705a61558326cf77d3d92f6740af0d87b8e0be3853ee8bf59610bc790e9", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x14, &(0x7f0000000180)={r1}, &(0x7f00000000c0)=0x8) 23:19:50 executing program 2: socketpair$inet6(0xa, 0x6, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x7ff, @mcast1, 0x9}, 0x1c) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r1, r2, &(0x7f0000000000)=0xa3, 0x80000003) [ 459.077289] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:19:50 executing program 0 (fault-call:8 fault-nth:53): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x2]}}, 0x20) 23:19:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x24, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000080)) 23:19:50 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x2f) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x0) 23:19:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 459.242620] minix_free_inode: bit 1 already cleared 23:19:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xffffffffa0008000]}}, 0x20) [ 459.296546] FAULT_INJECTION: forcing a failure. [ 459.296546] name failslab, interval 1, probability 0, space 0, times 0 23:19:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="043f6234488dd25d766070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount$9p_xen(&(0x7f0000000380)='trusted\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[]) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='ecryptfs\x00', 0x0, &(0x7f0000000180)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 459.398171] CPU: 1 PID: 22706 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 459.406719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.416085] Call Trace: [ 459.418695] dump_stack+0x1d3/0x2c4 [ 459.422344] ? dump_stack_print_info.cold.2+0x52/0x52 [ 459.427557] should_fail.cold.4+0xa/0x17 [ 459.431637] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 459.436762] ? __save_stack_trace+0x8d/0xf0 [ 459.441109] ? save_stack+0xa9/0xd0 [ 459.444747] ? save_stack+0x43/0xd0 [ 459.448383] ? kasan_kmalloc+0xc7/0xe0 [ 459.452285] ? kasan_slab_alloc+0x12/0x20 [ 459.456457] ? kmem_cache_alloc_node+0x144/0x730 [ 459.461225] ? __alloc_skb+0x114/0x770 [ 459.465119] ? __tcp_send_ack.part.42+0x67/0x5d0 [ 459.469877] ? tcp_send_ack+0x85/0xa0 [ 459.473688] ? __tcp_ack_snd_check+0x1cb/0x950 [ 459.478275] ? tcp_rcv_established+0xa9d/0x2120 [ 459.482958] ? tcp_v4_do_rcv+0x635/0x8f0 [ 459.487036] ? __release_sock+0x12a/0x3a0 [ 459.491201] ? release_sock+0xad/0x2c0 [ 459.495092] ? tcp_sendmsg+0x3a/0x50 [ 459.498809] ? inet_sendmsg+0x19c/0x690 [ 459.502804] ? sock_sendmsg+0xd5/0x120 [ 459.506696] ? __sys_sendto+0x3d7/0x670 [ 459.510676] ? __x64_sys_sendto+0xe1/0x1a0 [ 459.514921] ? do_syscall_64+0x1b9/0x820 [ 459.519003] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.524381] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 459.529319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.534861] ? sk_reset_timer+0x36/0x60 [ 459.538862] ? lock_downgrade+0x900/0x900 [ 459.543029] __should_failslab+0x124/0x180 [ 459.547276] should_failslab+0x9/0x14 [ 459.551087] kmem_cache_alloc_node_trace+0x5a/0x740 [ 459.556150] ? kasan_unpoison_shadow+0x35/0x50 [ 459.560736] ? kasan_kmalloc+0xc7/0xe0 [ 459.564634] ? check_preemption_disabled+0x48/0x200 [ 459.569685] __kmalloc_node_track_caller+0x3c/0x70 [ 459.574635] __kmalloc_reserve.isra.39+0x41/0xe0 [ 459.579412] __alloc_skb+0x150/0x770 [ 459.583141] ? skb_scrub_packet+0x490/0x490 [ 459.587587] ? intel_huc_auth+0x1b/0x3e0 [ 459.591664] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 459.596349] ? tcp_select_initial_window+0x3a0/0x400 [ 459.601478] __tcp_send_ack.part.42+0x67/0x5d0 [ 459.606070] tcp_send_ack+0x85/0xa0 [ 459.609705] __tcp_ack_snd_check+0x1cb/0x950 [ 459.614126] ? tcp_queue_rcv+0x800/0x800 [ 459.618207] ? tcp_xmit_recovery.part.63+0x130/0x130 [ 459.623324] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 459.628877] tcp_rcv_established+0xa9d/0x2120 [ 459.633397] ? tcp_data_queue+0x4790/0x4790 [ 459.637727] ? __release_sock+0xcb/0x3a0 [ 459.641801] ? lock_downgrade+0x900/0x900 [ 459.645968] ? trace_hardirqs_on+0xbd/0x310 [ 459.650299] ? _raw_spin_unlock_bh+0x30/0x40 [ 459.654728] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 459.660205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.665747] ? check_preemption_disabled+0x48/0x200 [ 459.671272] ? __release_sock+0xcb/0x3a0 [ 459.675343] tcp_v4_do_rcv+0x635/0x8f0 [ 459.679239] __release_sock+0x12a/0x3a0 [ 459.683224] ? do_raw_spin_lock+0xc1/0x200 [ 459.687489] release_sock+0xad/0x2c0 [ 459.691208] ? lock_sock_nested+0x9a/0x120 [ 459.695485] ? __release_sock+0x3a0/0x3a0 [ 459.699690] ? __local_bh_enable_ip+0x160/0x260 [ 459.704369] tcp_sendmsg+0x3a/0x50 [ 459.707929] inet_sendmsg+0x19c/0x690 [ 459.711757] ? ipip_gro_receive+0x100/0x100 [ 459.716101] ? apparmor_socket_sendmsg+0x29/0x30 [ 459.720874] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.726440] ? security_socket_sendmsg+0x94/0xc0 [ 459.731230] ? ipip_gro_receive+0x100/0x100 [ 459.735574] sock_sendmsg+0xd5/0x120 [ 459.739300] __sys_sendto+0x3d7/0x670 [ 459.743118] ? __ia32_sys_getpeername+0xb0/0xb0 [ 459.747796] ? wait_for_completion+0x8a0/0x8a0 [ 459.752384] ? lock_release+0x970/0x970 [ 459.756375] ? check_preemption_disabled+0x48/0x200 [ 459.761403] ? fsnotify_first_mark+0x350/0x350 [ 459.765995] ? __fsnotify_parent+0xcc/0x420 [ 459.770328] ? fsnotify+0xf10/0xf10 [ 459.773987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.779570] ? __sb_end_write+0xd9/0x110 [ 459.783644] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 459.789184] ? fput+0x130/0x1a0 [ 459.792488] ? ksys_write+0x1ae/0x260 [ 459.796310] ? trace_hardirqs_on+0xbd/0x310 [ 459.800634] ? __ia32_sys_read+0xb0/0xb0 [ 459.804704] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.810083] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 459.815552] __x64_sys_sendto+0xe1/0x1a0 [ 459.819622] do_syscall_64+0x1b9/0x820 [ 459.823517] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 459.828888] ? syscall_return_slowpath+0x5e0/0x5e0 [ 459.833828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.838684] ? trace_hardirqs_on_caller+0x310/0x310 [ 459.843713] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 459.848742] ? prepare_exit_to_usermode+0x291/0x3b0 [ 459.853768] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.858634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.863829] RIP: 0033:0x457579 [ 459.867045] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 459.885947] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 459.893675] RAX: ffffffffffffffda RBX: 00007f74bfe4bc90 RCX: 0000000000457579 [ 459.900956] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 459.908230] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 459.915503] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 459.922778] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 23:19:51 executing program 1: r0 = socket$inet6(0xa, 0x400080006, 0x9) mmap(&(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffdef, 0x0, 0x41033, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="153f6234488dd25d766070") ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000080)={"060000006170b002002000", @ifru_ivalue}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x101, 0x4) [ 459.960608] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 459.976439] minix_free_inode: bit 1 already cleared 23:19:51 executing program 0 (fault-call:8 fault-nth:54): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xffffffffa0010000]}}, 0x20) [ 460.053991] 9pnet_virtio: no channels available for device trusted [ 460.123441] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 460.130308] FAULT_INJECTION: forcing a failure. [ 460.130308] name failslab, interval 1, probability 0, space 0, times 0 [ 460.135431] ecryptfs_parse_options: eCryptfs: unrecognized option [sysfs] [ 460.142439] CPU: 0 PID: 22754 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 460.142450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.142455] Call Trace: [ 460.142481] dump_stack+0x1d3/0x2c4 [ 460.142502] ? dump_stack_print_info.cold.2+0x52/0x52 [ 460.142518] ? sk_free+0x30/0x50 [ 460.142544] should_fail.cold.4+0xa/0x17 [ 460.142565] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 460.142581] ? netif_rx+0xe0/0x430 [ 460.142596] ? dev_forward_skb+0x60/0x60 [ 460.142616] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 460.142638] ? eth_gro_receive+0x920/0x920 [ 460.142657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.142675] ? check_preemption_disabled+0x48/0x200 23:19:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x400300]}}, 0x20) 23:19:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x1000000]}}, 0x20) [ 460.142697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.142717] ? loopback_xmit+0x32c/0x926 [ 460.142738] ? loopback_net_init+0x160/0x160 [ 460.142768] ? rb_next+0x140/0x140 [ 460.166431] minix_free_inode: bit 1 already cleared [ 460.167522] ? rb_erase+0x3710/0x3710 [ 460.167544] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 460.167564] ? dev_hard_start_xmit+0x42c/0xc90 [ 460.173425] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 460.173773] __should_failslab+0x124/0x180 [ 460.191591] Error parsing options; rc = [-22] [ 460.194994] should_failslab+0x9/0x14 [ 460.195010] kmem_cache_alloc+0x47/0x730 [ 460.195028] ? lock_acquire+0x1ed/0x520 [ 460.195049] ? skb_dst.isra.84+0x120/0x120 [ 460.280622] skb_clone+0x1bb/0x500 [ 460.280638] ? lock_release+0x970/0x970 [ 460.280655] ? skb_split+0x11e0/0x11e0 [ 460.304273] ? __dev_queue_xmit+0x1a99/0x3950 [ 460.308781] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 460.314239] ? netif_skb_features+0xb70/0xb70 [ 460.318743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.324288] dev_queue_xmit_nit+0x414/0xb30 [ 460.328616] ? mark_held_locks+0x130/0x130 [ 460.332851] ? default_device_exit+0x2c0/0x2c0 [ 460.337437] ? netdev_pick_tx+0x2d0/0x2d0 [ 460.341587] ? __account_cfs_rq_runtime+0x790/0x790 [ 460.346608] ? mark_held_locks+0x130/0x130 [ 460.350841] ? set_next_entity+0x2dd/0xc40 [ 460.355080] dev_hard_start_xmit+0x186/0xc90 [ 460.359494] ? dev_direct_xmit+0x6b0/0x6b0 [ 460.363732] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 460.369270] ? netif_skb_features+0x690/0xb70 [ 460.373772] ? validate_xmit_xfrm+0x1ef/0xda0 [ 460.378271] ? lock_acquire+0x1ed/0x520 [ 460.382250] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 460.387793] ? validate_xmit_skb+0x80c/0xf30 [ 460.392215] ? lock_release+0x970/0x970 [ 460.396191] ? netif_skb_features+0xb70/0xb70 [ 460.400695] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.406244] ? check_preemption_disabled+0x48/0x200 [ 460.411269] ? check_preemption_disabled+0x48/0x200 [ 460.416294] __dev_queue_xmit+0x2f39/0x3950 [ 460.420624] ? netdev_pick_tx+0x2d0/0x2d0 [ 460.424787] ? mark_held_locks+0x130/0x130 [ 460.429027] ? __nf_conntrack_find_get.part.42+0x10e1/0x1cf0 [ 460.434827] ? mark_held_locks+0x130/0x130 [ 460.439065] ? mark_held_locks+0x130/0x130 [ 460.443301] ? lock_downgrade+0x900/0x900 [ 460.447452] ? trace_hardirqs_on+0xbd/0x310 [ 460.451776] ? _raw_spin_unlock_bh+0x30/0x40 [ 460.456187] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 460.461637] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.467200] ? mark_held_locks+0x130/0x130 [ 460.471438] ? __nf_ct_refresh_acct+0x13c/0x2c0 [ 460.476126] ? tcp_packet+0x6ad/0x58d2 [ 460.480033] ? debug_object_deactivate+0x2eb/0x450 [ 460.484987] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 460.490182] ? ip_finish_output+0x7f8/0xf90 [ 460.494509] ? lock_downgrade+0x900/0x900 [ 460.498657] ? __cgroup_bpf_run_filter_skb+0x795/0xd70 [ 460.503939] ? trace_hardirqs_on+0xbd/0x310 [ 460.508279] ? ip_finish_output+0x7f8/0xf90 [ 460.512607] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 460.518066] dev_queue_xmit+0x17/0x20 [ 460.521864] ? dev_queue_xmit+0x17/0x20 [ 460.525840] ip_finish_output2+0x105c/0x1860 [ 460.530265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.535805] ? ip_copy_metadata+0xe10/0xe10 [ 460.540133] ? cgroup_dev_is_valid_access+0x150/0x150 [ 460.545325] ? nf_ct_deliver_cached_events+0x28b/0x7d0 [ 460.550605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.556141] ? ipv4_mtu+0x37d/0x590 [ 460.559789] ? __build_flow_key.constprop.52+0x5f0/0x5f0 [ 460.565756] ? __do_replace+0xab0/0xab0 [ 460.569744] ip_finish_output+0x7f8/0xf90 [ 460.573893] ? ip_finish_output+0x7f8/0xf90 [ 460.578221] ? ip_fragment.constprop.50+0x240/0x240 [ 460.583243] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 460.588261] ? nf_nat_ipv4_out+0x2e1/0x340 [ 460.592501] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 460.597692] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 460.602731] ? nf_hook_slow+0x11e/0x1c0 [ 460.606714] ip_output+0x21d/0x8d0 [ 460.610259] ? ip_mc_output+0x15a0/0x15a0 [ 460.614416] ? ip_fragment.constprop.50+0x240/0x240 [ 460.619437] ? sock_alloc_send_skb+0x40/0x40 [ 460.623850] ? save_stack+0xa9/0xd0 [ 460.627483] ? save_stack+0x43/0xd0 [ 460.631116] ? kasan_kmalloc+0xc7/0xe0 [ 460.635008] ? __kmalloc_node_track_caller+0x50/0x70 [ 460.640117] ? __kmalloc_reserve.isra.39+0x41/0xe0 [ 460.645054] ip_local_out+0xc5/0x1b0 [ 460.648778] __ip_queue_xmit+0x9af/0x1f30 [ 460.652930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.658496] ? ip_build_and_send_pkt+0xc80/0xc80 [ 460.663262] ? tcp_schedule_loss_probe+0x530/0x530 [ 460.668204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.673773] ? tcp_established_options+0x366/0x5b0 [ 460.678706] ? tcp_select_initial_window+0x400/0x400 [ 460.683818] ip_queue_xmit+0x56/0x70 [ 460.687535] __tcp_transmit_skb+0x1bc5/0x3b00 [ 460.692045] ? __tcp_select_window+0x9e0/0x9e0 [ 460.696651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.702210] ? __alloc_skb+0x4c1/0x770 [ 460.706103] ? skb_scrub_packet+0x490/0x490 [ 460.710539] ? asix_set_netdev_dev_addr.isra.5+0x1dc/0x250 [ 460.716178] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 460.720853] ? tcp_select_initial_window+0x3a0/0x400 [ 460.725981] __tcp_send_ack.part.42+0x3ee/0x5d0 [ 460.730659] tcp_send_ack+0x85/0xa0 [ 460.734288] __tcp_ack_snd_check+0x1cb/0x950 [ 460.738702] ? tcp_queue_rcv+0x800/0x800 [ 460.742770] ? tcp_xmit_recovery.part.63+0x130/0x130 [ 460.747879] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 460.753422] tcp_rcv_established+0xa9d/0x2120 [ 460.757940] ? tcp_data_queue+0x4790/0x4790 [ 460.762287] ? __release_sock+0xcb/0x3a0 [ 460.766357] ? lock_downgrade+0x900/0x900 [ 460.770530] ? trace_hardirqs_on+0xbd/0x310 [ 460.774861] ? _raw_spin_unlock_bh+0x30/0x40 [ 460.779276] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 460.784732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.790290] ? check_preemption_disabled+0x48/0x200 [ 460.795318] ? __release_sock+0xcb/0x3a0 [ 460.799391] tcp_v4_do_rcv+0x635/0x8f0 [ 460.803287] __release_sock+0x12a/0x3a0 [ 460.807277] ? do_raw_spin_lock+0xc1/0x200 [ 460.811523] release_sock+0xad/0x2c0 [ 460.815239] ? lock_sock_nested+0x9a/0x120 [ 460.819479] ? __release_sock+0x3a0/0x3a0 [ 460.823631] ? __local_bh_enable_ip+0x160/0x260 [ 460.828308] tcp_sendmsg+0x3a/0x50 [ 460.831852] inet_sendmsg+0x19c/0x690 [ 460.835657] ? ipip_gro_receive+0x100/0x100 [ 460.839997] ? apparmor_socket_sendmsg+0x29/0x30 [ 460.844760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.850307] ? security_socket_sendmsg+0x94/0xc0 [ 460.855068] ? ipip_gro_receive+0x100/0x100 [ 460.859404] sock_sendmsg+0xd5/0x120 [ 460.863128] __sys_sendto+0x3d7/0x670 [ 460.866941] ? __ia32_sys_getpeername+0xb0/0xb0 [ 460.871633] ? wait_for_completion+0x8a0/0x8a0 [ 460.876222] ? lock_release+0x970/0x970 [ 460.880197] ? check_preemption_disabled+0x48/0x200 [ 460.885219] ? fsnotify_first_mark+0x350/0x350 [ 460.889823] ? __fsnotify_parent+0xcc/0x420 [ 460.894149] ? fsnotify+0xf10/0xf10 [ 460.897782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.903331] ? __sb_end_write+0xd9/0x110 [ 460.907402] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 460.912943] ? fput+0x130/0x1a0 [ 460.916242] ? ksys_write+0x1ae/0x260 [ 460.920058] ? trace_hardirqs_on+0xbd/0x310 [ 460.924380] ? __ia32_sys_read+0xb0/0xb0 [ 460.928443] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.933812] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 460.939280] __x64_sys_sendto+0xe1/0x1a0 [ 460.943351] do_syscall_64+0x1b9/0x820 [ 460.947242] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 460.952610] ? syscall_return_slowpath+0x5e0/0x5e0 [ 460.957547] ? trace_hardirqs_on_caller+0x310/0x310 [ 460.962566] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 460.967585] ? recalc_sigpending_tsk+0x180/0x180 [ 460.972346] ? kasan_check_write+0x14/0x20 [ 460.976592] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.981442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.986636] RIP: 0033:0x457579 [ 460.989837] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.008738] RSP: 002b:00007f74bfe2ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.016447] RAX: ffffffffffffffda RBX: 00007f74bfe2ac90 RCX: 0000000000457579 23:19:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 461.023719] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 461.030995] RBP: 000000000072bfa0 R08: 0000000000000000 R09: ffffffffffffff61 [ 461.038261] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe2b6d4 [ 461.045538] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 0000000000000006 [ 461.059667] 9pnet_virtio: no channels available for device trusted 23:19:52 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2001, 0x0) renameat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r2, &(0x7f000000d000)=@abs={0x1}, 0x2) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x1f, 0xa4}, &(0x7f00000001c0)=0x10) flistxattr(r2, &(0x7f0000000240)=""/55, 0x37) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r3, 0x2, 0x1, [0x6]}, 0xa) [ 461.079153] ecryptfs_parse_options: eCryptfs: unrecognized option [sysfs] [ 461.095232] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 461.107605] Error parsing options; rc = [-22] 23:19:52 executing program 5: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = getpid() r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x801, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000280)) r3 = msgget$private(0x0, 0x200) msgrcv(r3, &(0x7f00000000c0)={0x0, ""/160}, 0xa8, 0x3, 0x800) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x20000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x0, 0x8, 0x7, 0x196, 0xfff, 0x4, 0x7, 0xf573, 0x5, 0x0, 0x3, 0x4}) r5 = dup2(r0, r0) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) sched_setscheduler(r1, 0x400000005, &(0x7f0000000080)) pipe2(&(0x7f0000000200), 0x4000) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) 23:19:52 executing program 0 (fault-call:8 fault-nth:55): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x8000a0ffffffff]}}, 0x20) 23:19:52 executing program 1: r0 = userfaultfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x480, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000300)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x800, 0x0, 0x4, 0x9, 0x0, 0x40, 0x100, 0x7, 0x100000000000, 0x8, 0x80000000, 0x2, 0x2, 0xfff, 0xe365, 0x4, 0x1, 0x400, 0x7fff, 0x9, 0x80000000, 0x94b4, 0x7, 0xffff, 0x1000, 0x0, 0x2a9c, 0x8000, 0x391, 0x29959610, 0x1, 0x0, 0x6, 0x20, 0x5, 0xff, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x10000, 0x1ff, 0x9, 0x6, 0x6, 0x1, 0x8}, r3, 0x6, r4, 0x3) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x26}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) prctl$intptr(0x29, 0x2) r5 = dup2(r4, r2) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000340)={0x7, 0x3, 0x7f, 0x400, '\x00', 0xfff}) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000001000), &(0x7f0000000200)) read(r0, &(0x7f0000000080)=""/100, 0xfffffffffffffe8f) 23:19:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:52 executing program 5: r0 = getpgrp(0xffffffffffffffff) ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/78, 0x4e}) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x401000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_ima(r2, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "d3ae732d6603baf8356fadad6cde174c6586b1d3"}, 0x15, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000280)=0x100, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0x5}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000380)={r5, 0x0, 0x7fff}, 0x8) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r7 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r6, 0x9) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r7, 0x10d, 0xcb, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0xc4801, 0x0) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000000200)=""/98) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x81785501, &(0x7f0000001000)) 23:19:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xeffdffffffffffff]}}, 0x20) 23:19:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xa0010000]}}, 0x20) 23:19:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:52 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x10000000000000) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000940)='/dev/snd/seq\x00', 0x0, 0x214080) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1f, 0x7}, 'port1\x00', 0x41, 0x400, 0x1000, 0x8, 0x3b, 0x130, 0xffffffff, 0x0, 0x2, 0x8}) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000900)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000800)=""/36, 0x24}], 0x6, &(0x7f00000008c0)=""/3, 0x3, 0x84}, 0x0) getsockname$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240), 0x31b, 0x0, &(0x7f0000000280)={0x10001}, 0x8) setsockopt$inet6_dccp_int(r2, 0x21, 0xb, &(0x7f0000001000)=0x1, 0x4) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r3, 0x400, 0x3) rmdir(&(0x7f0000000340)='./file0//ile0\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) geteuid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000980)={{{@in6, @in=@local}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000a80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0xe8) lstat(&(0x7f0000000c00)='./file0//ile0\x00', &(0x7f0000000c40)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000cc0)={{{@in=@loopback, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000dc0)=0xe8) getuid() getresgid(&(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)) getgroups(0x3, &(0x7f0000000ec0)=[0xee00, 0x0, 0x0]) fstat(r1, &(0x7f0000000f00)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:19:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xeffdffff00000000]}}, 0x20) 23:19:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x1a0ffffffff]}}, 0x20) 23:19:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 23:19:53 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x0, 0x3}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000080)=""/19) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) close(r3) 23:19:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}}, 0x20) [ 461.876024] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 462.102666] minix_free_inode: bit 1 already cleared 23:19:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0xe) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/9) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) ioctl$TIOCCONS(r1, 0x541d) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x4}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x84) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x4, 0x2, 0x1, 0x7, 0x0, 0xc, 0x84, 0x2, 0x1ff, 0x1000, 0x1, 0xffffffff, 0xaa68, 0x6, 0xffffffffffffffc0, 0x8, 0x8, 0x4, 0xffffffff, 0x6, 0x2, 0x81, 0xffffffffffffffff, 0x9, 0x100000001, 0x521, 0x73, 0x1, 0x4, 0x40, 0x34b, 0x100000000, 0x9, 0x0, 0x3, 0x2e, 0x0, 0x7fff, 0xf7e7cf6f81120fb4, @perf_config_ext={0x100000001, 0x4}, 0x400, 0x561, 0x10001, 0x0, 0x1000, 0x1, 0xff}, r3, 0xb, r1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/stat\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0xffffffff, 0x9, 0x9, 0xec8, 0x0, 0x9, 0x2002, 0x4, 0xffffffffffffffc1, 0x6258, 0x3, 0xfffffffffffffffb, 0x10001, 0x7, 0xcf48, 0x80000001, 0xbf3, 0x289b, 0xffffffffffffff00, 0x2, 0x200000000000, 0x519, 0x100000000, 0x2, 0x8, 0x81, 0xfff, 0x297c0d0e, 0x6, 0x2, 0x1, 0x9, 0x1a01, 0x9, 0x3, 0xfffffffffffffffb, 0x0, 0x3ff, 0x4, @perf_config_ext={0x6e650a77, 0x2}, 0x0, 0x954e, 0x8497, 0x0, 0x7, 0x6, 0x8001}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001200)={r0, &(0x7f00000003c0)='"', &(0x7f0000001240)=""/4096}, 0x18) 23:19:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xffffffff00000000]}}, 0x20) 23:19:53 executing program 5: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888476164656400", 0xffffffffffffff41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x0, 0x4}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='-vboxnet1lo.\\.(\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x6, 0x4) close(r0) socketpair(0x1b, 0x80005, 0x9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000480)) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) recvmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r5 = socket$kcm(0xa, 0x0, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000780)={r1, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0xa, 0x200, 0x2, 0x1fc0000000, 0x1, r2, 0x5814}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r1, 0x10, &(0x7f0000000640)={&(0x7f0000000540)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r1, 0x10, &(0x7f00000006c0)={&(0x7f00000004c0)=""/69, 0x45, r6}}, 0x10) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={r1, r7, 0x2, 0x2}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) r8 = semget$private(0x0, 0x3, 0x1) semctl$IPC_RMID(r8, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x9295, 0x12) write$cgroup_int(r2, &(0x7f00000007c0)=0xeffc, 0x12) 23:19:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) r2 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) 23:19:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 23:19:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 23:19:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x2000000]}}, 0x20) 23:19:53 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000340)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x8500, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r3) unshare(0x40000000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8936, &(0x7f0000000040)={'tunl0\x00', @ifru_ivalue=0x7fffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000003c0)=""/153) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x0, 0x2000}, 0x4) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x5) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in6=@loopback, 0x4e21, 0x9, 0x4e20, 0x101, 0xa, 0x80, 0x20, 0x3a, r7, r8}, {0x7, 0x1f, 0x4, 0xbf3, 0x8001, 0x0, 0x0, 0xd168}, {0x958, 0x7cbec3df, 0x2, 0x14}, 0x1, 0x6e6bb8, 0x3, 0x0, 0x3, 0x2}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}, 0x4d3, 0x3c}, 0x2, @in=@rand_addr=0x3ff, 0x3500, 0x5, 0x3, 0x1000, 0x8, 0xffff, 0xad}}, 0xe8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x40000, 0x0) 23:19:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xfffffdef]}}, 0x20) [ 462.376367] IPVS: ftp: loaded support on port[0] = 21 23:19:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x34000]}}, 0x20) [ 462.541229] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 462.570292] minix_free_inode: bit 1 already cleared 23:19:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="8dd25d7660700000db00006fc5357b5801687b71ce") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x21011, r1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0xfffffffffffffff9}, 0x5) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4b, @empty, 0xfffffffffffffff8}, 0x1c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400041, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0xa00, 0x0) 23:19:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x200000000000000]}}, 0x20) 23:19:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xeffdffff]}}, 0x20) 23:19:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x5, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 462.885175] IPVS: ftp: loaded support on port[0] = 21 23:19:54 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msgget$private(0x0, 0x30) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10800, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000140)={0x25, ""/37}) r3 = semget(0x0, 0x3, 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x58, 0xffffffff, 0x8c, 0x401, 0x6, 0x81]) mkdir(&(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 23:19:54 executing program 3 (fault-call:9 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:54 executing program 5: r0 = socket(0x15, 0x80005, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x40402) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r2, 0xe}}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 23:19:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) r2 = socket$kcm(0x11, 0x5, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x1fb76a0b, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r6 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x80, 0x2403) accept$alg(r6, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0xeffd]}}, 0x20) 23:19:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000340)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x8500, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r3) unshare(0x40000000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8936, &(0x7f0000000040)={'tunl0\x00', @ifru_ivalue=0x7fffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000003c0)=""/153) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x0, 0x2000}, 0x4) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x5) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in6=@loopback, 0x4e21, 0x9, 0x4e20, 0x101, 0xa, 0x80, 0x20, 0x3a, r7, r8}, {0x7, 0x1f, 0x4, 0xbf3, 0x8001, 0x0, 0x0, 0xd168}, {0x958, 0x7cbec3df, 0x2, 0x14}, 0x1, 0x6e6bb8, 0x3, 0x0, 0x3, 0x2}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}, 0x4d3, 0x3c}, 0x2, @in=@rand_addr=0x3ff, 0x3500, 0x5, 0x3, 0x1000, 0x8, 0xffff, 0xad}}, 0xe8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x40000, 0x0) [ 463.286510] device bridge_slave_1 left promiscuous mode [ 463.295364] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.343717] device bridge_slave_0 left promiscuous mode [ 463.368409] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.380053] FAULT_INJECTION: forcing a failure. [ 463.380053] name failslab, interval 1, probability 0, space 0, times 0 [ 463.382838] IPVS: ftp: loaded support on port[0] = 21 [ 463.404275] CPU: 0 PID: 22962 Comm: syz-executor3 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 463.412793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.422144] Call Trace: [ 463.424767] dump_stack+0x1d3/0x2c4 [ 463.428403] ? dump_stack_print_info.cold.2+0x52/0x52 [ 463.433597] ? should_fail.cold.4+0x5/0x17 [ 463.437838] should_fail.cold.4+0xa/0x17 [ 463.441902] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 463.447015] ? __f_unlock_pos+0x19/0x20 [ 463.450998] ? lock_downgrade+0x900/0x900 [ 463.455151] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 463.460759] ? proc_fail_nth_write+0x9e/0x210 [ 463.465271] ? proc_cwd_link+0x1d0/0x1d0 [ 463.469333] ? trace_hardirqs_on_caller+0xc0/0x310 [ 463.474259] ? retint_kernel+0x2d/0x2d [ 463.478145] ? trace_hardirqs_on_caller+0xc0/0x310 [ 463.483077] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 463.487833] ? trace_hardirqs_off+0x310/0x310 [ 463.492332] ? fs_reclaim_acquire+0x20/0x20 [ 463.496654] ? lock_downgrade+0x900/0x900 [ 463.500807] ? check_same_owner+0x330/0x330 [ 463.505138] __should_failslab+0x124/0x180 [ 463.509376] should_failslab+0x9/0x14 [ 463.513206] __kmalloc+0x2e0/0x770 [ 463.516759] ? strncpy_from_user+0x510/0x510 [ 463.521191] ? fput+0x130/0x1a0 [ 463.524478] ? __x64_sys_memfd_create+0x142/0x4f0 [ 463.529323] __x64_sys_memfd_create+0x142/0x4f0 [ 463.534002] ? memfd_fcntl+0x18b0/0x18b0 [ 463.538098] do_syscall_64+0x1b9/0x820 [ 463.542010] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 463.547376] ? syscall_return_slowpath+0x5e0/0x5e0 [ 463.552303] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.557158] ? trace_hardirqs_on_caller+0x310/0x310 [ 463.562707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.568243] ? prepare_exit_to_usermode+0x291/0x3b0 [ 463.573277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.578125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 463.583306] RIP: 0033:0x457579 [ 463.586500] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 463.605396] RSP: 002b:00007f31ee5e3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 463.613103] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 0000000000457579 [ 463.620383] RDX: 0000000020000258 RSI: 0000000000000000 RDI: 00000000004bc7c9 [ 463.627649] RBP: 000000000072bf00 R08: 0000000020000258 R09: 00000000fbad8001 [ 463.634912] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f31ee5e46d4 23:19:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xa0008000]}}, 0x20) [ 463.642175] R13: 00000000004c4ac9 R14: 00000000004d7e30 R15: 0000000000000006 23:19:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}}, 0x20) 23:19:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xeffd]}}, 0x20) 23:19:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x34000]}}, 0x20) 23:19:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xeffdffffffffffff]}}, 0x20) 23:19:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f62") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x20) r2 = dup(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000000)={r3, r4}) bind$bt_sco(r2, &(0x7f0000000200)={0x1f, {0x93, 0x1, 0xcd, 0x7, 0x2, 0x33}}, 0x8) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r6+30000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, {}, {0xffff}, {0x0, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000040)=""/70, &(0x7f00000000c0)=0x46) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="4ff1425003c2cadd0e8300006d"]}) 23:19:55 executing program 3 (fault-call:9 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x40030000000000]}}, 0x20) [ 464.238935] FAULT_INJECTION: forcing a failure. [ 464.238935] name failslab, interval 1, probability 0, space 0, times 0 [ 464.250721] CPU: 1 PID: 23011 Comm: syz-executor3 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 464.259219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.268570] Call Trace: [ 464.271172] dump_stack+0x1d3/0x2c4 [ 464.274817] ? dump_stack_print_info.cold.2+0x52/0x52 [ 464.280035] should_fail.cold.4+0xa/0x17 [ 464.284119] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 464.289232] ? retint_kernel+0x2d/0x2d [ 464.293132] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 464.298155] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 464.302925] ? is_bpf_text_address+0xac/0x170 [ 464.307442] ? lock_downgrade+0x900/0x900 [ 464.311605] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 464.316531] ? kasan_check_read+0x11/0x20 [ 464.320667] ? fs_reclaim_acquire+0x20/0x20 [ 464.324990] ? lock_downgrade+0x900/0x900 [ 464.329128] ? expand_files.part.8+0x571/0x9a0 [ 464.333701] ? check_same_owner+0x330/0x330 [ 464.338018] ? iterate_fd+0x4b0/0x4b0 [ 464.341819] ? __save_stack_trace+0x8d/0xf0 [ 464.346127] __should_failslab+0x124/0x180 [ 464.350364] should_failslab+0x9/0x14 [ 464.354162] kmem_cache_alloc+0x2be/0x730 [ 464.358297] ? trace_hardirqs_on_caller+0xc0/0x310 [ 464.363213] ? shmem_destroy_callback+0xc0/0xc0 [ 464.367868] shmem_alloc_inode+0x1b/0x40 [ 464.371914] alloc_inode+0x63/0x190 [ 464.375526] new_inode_pseudo+0x71/0x1a0 [ 464.379569] ? prune_icache_sb+0x1c0/0x1c0 [ 464.383804] ? _raw_spin_unlock+0x2c/0x50 [ 464.387942] new_inode+0x1c/0x40 [ 464.391303] shmem_get_inode+0xf1/0x920 [ 464.395265] ? trace_hardirqs_on_caller+0xc0/0x310 [ 464.400181] ? shmem_encode_fh+0x340/0x340 [ 464.404417] ? lock_downgrade+0x900/0x900 [ 464.408571] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 464.413320] __shmem_file_setup.part.47+0x83/0x2a0 [ 464.418237] shmem_file_setup+0x65/0x90 [ 464.422199] __x64_sys_memfd_create+0x2af/0x4f0 [ 464.426866] ? memfd_fcntl+0x18b0/0x18b0 [ 464.430934] do_syscall_64+0x1b9/0x820 [ 464.434816] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 464.440165] ? syscall_return_slowpath+0x5e0/0x5e0 [ 464.445087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 464.449917] ? trace_hardirqs_on_caller+0x310/0x310 [ 464.454920] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 464.459922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.465457] ? prepare_exit_to_usermode+0x291/0x3b0 [ 464.470473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 464.475346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.480538] RIP: 0033:0x457579 [ 464.483718] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 464.502602] RSP: 002b:00007f31ee5e3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 464.510295] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 0000000000457579 [ 464.517548] RDX: 0000000020000258 RSI: 0000000000000000 RDI: 00000000004bc7c9 [ 464.524801] RBP: 000000000072bf00 R08: 0000000020000258 R09: 00000000fbad8001 [ 464.532056] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f31ee5e46d4 [ 464.539313] R13: 00000000004c4ac9 R14: 00000000004d7e30 R15: 0000000000000006 [ 465.323985] team0 (unregistering): Port device team_slave_1 removed [ 465.333083] team0 (unregistering): Port device team_slave_0 removed [ 465.341554] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 465.385179] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 465.449812] bond0 (unregistering): Released all slaves 23:19:56 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x40000, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x1f) r2 = socket$kcm(0x11, 0x2, 0x300) bind$inet(r0, &(0x7f0000942000)={0x2, 0x40000004e20, @multicast1}, 0x10) write(r2, &(0x7f00000005c0)="1c13c0a2db147602b3f1c974cf8e4c30247898df95c93c328b57ada0e41e3460bf823f35cd0a93039f7f26315dd9c6105ec684b2f860e38280b142e26cdc38da93313ce8f2253c19bb98c68dab51e7c51ab4e36263a7d5cbe6ce6b1907f86d7c2048af11529f9de256fecb03f4d35f72dd895237660fcae2d5a22fbd8f28410b8b1e241a26b71765a7b1a81ab402c81ae3313f020d49087b23da44674ea124c518e8f8698ed4ec41cb57c1bd31f8ab79da85f5655c35201d0e9a94b8077186e2553b6873430b68b8a1ba303c59a19a8b2839a47e6d05c7788718", 0xda) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000400)={0x2, 0x800004e1f, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@rand_addr, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) lsetxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000000)='system_u:object_r:mqueue_spool_t:s0\x00', 0x24, 0x3) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}}, 0x20) 23:19:56 executing program 5: clock_gettime(0x2, &(0x7f0000000100)) r0 = inotify_init() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup(r1) ioctl$VT_WAITACTIVE(r0, 0x5607) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000000c0)={@empty, @loopback}, 0x8) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000c00)=ANY=[@ANYBLOB="0000000000000000000000000000000000001f0000004cd4e7598e569330bcd0aa83663bbc47cb017376f5045d0024fe5a9cc522aa0bf70053bec21067d404c95efbd5a12750c54c3d6c84b6c071279bb07e4004a55db512caae5c536bf8699bcc03821e9bbb0fbd59f123cac17149d10af301a99bdc5bf2f04e83e7bf07c5d0f23584008c7b23a9b541d04c2a0940caf45c5a1d76d05f6ebe38aadf92ac7e2080a821c84151d1f410f883b7d0039693a69f34b9f59194110fe10645d07067946d74f0972d5ced82322294832548861fe0b9e215c693a969c7fac25a99a44a601b96d4a148cd0dd1c0e305d29081e14dccf906ad92d4d15d917d1e839c3a885278bfc7590fa8f3669090e1a46bbe9f777abe1a926aee983c5bb7a94e62247a7f767e3faf8540e20bd17be750423925c7813dd2341c121d3164ffeee5c2b40a2ebbb0ab3a66624d992ca152c1c94c2d9a3a00000000000000000000009829d13fe2f75dea6f8811bd0b3f912c61460ab1e200663725515ba68b34aace323a730735769fd58ff137227f07d1cea490b4750d7f9bebb678af669eccd1854f6eb06439779c9691034afe7587d5e94baa1d1d1b86766652b57037eb126c2a74c6ab88d440022c1ccf5e52b2b90a5acbb6445dbb8fcc75f7ab9040b82e3d81290e15edea8b52bd4e27426450b58813a759f3be9982cd884b506852dabe8ad46ff14c8db80a79ffbdad8c64eebacfe161a5"], &(0x7f0000000480)=0x1) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) flistxattr(r2, &(0x7f00000008c0)=""/249, 0xf9) keyctl$setperm(0x5, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000240)) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001a003b0e000000050000180000bb5200", @ANYRES32=0x0, @ANYBLOB="430200000000000008000a00060000001800120008000100767469000c00020008000400e0000002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_bond\x00'}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x81, "07a1c0294c9e28d901f73e2b76ef50aba1de22ff1c23b927f09c788a2d78e486a2167f54f857bd31418c41c22b51832aac657a62218bc24b2d262feb24b4f027a193c19c31d7792e489c0781166893ddd427bb4c064c77314d4eb9dc1ea74e2169a80aa0324b30a32d54a9d800c63f89747b2ee782423feb8bfd4c0b38297624fa"}, &(0x7f0000000380)=0x89) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e22, @multicast1}}, 0x4, 0x10001}, &(0x7f00000004c0)=0x90) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000640)=0xc) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) 23:19:57 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000340)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x8500, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)=r3) unshare(0x40000000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8936, &(0x7f0000000040)={'tunl0\x00', @ifru_ivalue=0x7fffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000003c0)=""/153) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x0, 0x2000}, 0x4) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x5) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in6=@loopback, 0x4e21, 0x9, 0x4e20, 0x101, 0xa, 0x80, 0x20, 0x3a, r7, r8}, {0x7, 0x1f, 0x4, 0xbf3, 0x8001, 0x0, 0x0, 0xd168}, {0x958, 0x7cbec3df, 0x2, 0x14}, 0x1, 0x6e6bb8, 0x3, 0x0, 0x3, 0x2}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}, 0x4d3, 0x3c}, 0x2, @in=@rand_addr=0x3ff, 0x3500, 0x5, 0x3, 0x1000, 0x8, 0xffff, 0xad}}, 0xe8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x40000, 0x0) 23:19:57 executing program 3 (fault-call:9 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f62") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x20) r2 = dup(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000000)={r3, r4}) bind$bt_sco(r2, &(0x7f0000000200)={0x1f, {0x93, 0x1, 0xcd, 0x7, 0x2, 0x33}}, 0x8) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r6+30000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, {}, {0xffff}, {0x0, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000040)=""/70, &(0x7f00000000c0)=0x46) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="4ff1425003c2cadd0e8300006d"]}) 23:19:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x400300]}}, 0x20) 23:19:57 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x18) 23:19:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r2, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r2, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 466.447131] FAULT_INJECTION: forcing a failure. [ 466.447131] name failslab, interval 1, probability 0, space 0, times 0 [ 466.471245] CPU: 1 PID: 23031 Comm: syz-executor3 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 466.479770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.489125] Call Trace: [ 466.491709] dump_stack+0x1d3/0x2c4 [ 466.495329] ? dump_stack_print_info.cold.2+0x52/0x52 [ 466.500511] should_fail.cold.4+0xa/0x17 [ 466.504584] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 466.509689] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.514435] ? trace_hardirqs_off+0x310/0x310 [ 466.518921] ? __save_stack_trace+0x8d/0xf0 [ 466.523236] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.527997] ? retint_kernel+0x2d/0x2d [ 466.531886] ? __lockdep_init_map+0x105/0x590 [ 466.536397] ? lockdep_init_map+0x9/0x10 [ 466.540496] ? fs_reclaim_acquire+0x20/0x20 [ 466.544809] ? lock_downgrade+0x900/0x900 [ 466.548968] ? check_same_owner+0x330/0x330 [ 466.553277] ? retint_kernel+0x2d/0x2d [ 466.557173] __should_failslab+0x124/0x180 [ 466.561408] should_failslab+0x9/0x14 [ 466.565358] kmem_cache_alloc+0x2be/0x730 [ 466.569524] ? mpol_shared_policy_init+0x235/0x650 [ 466.574444] ? trace_hardirqs_off+0x310/0x310 [ 466.578931] ? current_time+0x72/0x1b0 [ 466.582815] __d_alloc+0xc8/0xb90 [ 466.586271] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 466.591276] ? retint_kernel+0x2d/0x2d [ 466.595157] ? __lockdep_init_map+0x1a/0x590 [ 466.599551] ? __lockdep_init_map+0x105/0x590 [ 466.604054] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 466.609592] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 466.615118] d_alloc_pseudo+0x1d/0x30 [ 466.618909] alloc_file_pseudo+0x158/0x3f0 [ 466.623146] ? alloc_file+0x4d0/0x4d0 [ 466.626939] ? usercopy_warn+0x110/0x110 [ 466.631037] ? kasan_check_write+0x14/0x20 [ 466.635266] __shmem_file_setup.part.47+0x110/0x2a0 [ 466.640289] shmem_file_setup+0x65/0x90 [ 466.644252] __x64_sys_memfd_create+0x2af/0x4f0 [ 466.648907] ? memfd_fcntl+0x18b0/0x18b0 [ 466.652972] do_syscall_64+0x1b9/0x820 [ 466.656846] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 466.662196] ? syscall_return_slowpath+0x5e0/0x5e0 [ 466.667131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 466.671984] ? trace_hardirqs_on_caller+0x310/0x310 [ 466.677012] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 466.682019] ? prepare_exit_to_usermode+0x291/0x3b0 [ 466.687044] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 466.691877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 466.697050] RIP: 0033:0x457579 [ 466.700228] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 466.719112] RSP: 002b:00007f31ee5e3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 466.726807] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 0000000000457579 [ 466.734061] RDX: 0000000020000258 RSI: 0000000000000000 RDI: 00000000004bc7c9 [ 466.741320] RBP: 000000000072bf00 R08: 0000000020000258 R09: 00000000fbad8001 23:19:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}}, 0x20) [ 466.748573] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f31ee5e46d4 [ 466.755823] R13: 00000000004c4ac9 R14: 00000000004d7e30 R15: 0000000000000006 [ 466.842442] IPVS: ftp: loaded support on port[0] = 21 23:19:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffd) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000280)={{0xffffff80}}) 23:19:58 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400), 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000240)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x3) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast2, @in6=@ipv4={[], [], @remote}}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) lstat(&(0x7f0000000580)='./file1\x00', &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, r4, 0x0, 0x5, &(0x7f0000000640)='em0-\x00', 0xffffffffffffffff}, 0x30) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000d00)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@ipv4={[], [], @broadcast}, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000e40)=0xe8) getresgid(&(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001300)={0x0, r4, 0x0, 0x2, &(0x7f00000012c0)="1c00"}, 0x30) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x9, 0x1]) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001340)={{{@in=@dev, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000001440)=0xe8) getgid() gettid() fstat(r2, &(0x7f0000001480)) getresgid(&(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r5) 23:19:58 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x8008551c, &(0x7f0000000300)=ANY=[]) 23:19:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdef]}}, 0x20) 23:19:58 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xfffffffbfffff7c1, 0x10041) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000ffc000/0x3000)=nil}) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r3, 0xe04b}], 0x1, &(0x7f0000000200)={0x0, r4+10000000}, &(0x7f0000000240)={0x4}, 0x8) shutdown(r2, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) dup2(r2, r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) tkill(r1, 0x15) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000280)) [ 467.024050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 467.032754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:19:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000003c0), 0x8) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @dev}, 0xc) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000380), 0x35b) 23:19:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x20000000012, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0xfffffffffffffdd9) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2300, 0x0) semget(0x0, 0x6, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{0x3ff, 0x6, 0x400, 0x2}, 'syz1\x00', 0x29}) r4 = dup3(r2, r0, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r3}) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:19:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffff00000000]}}, 0x20) 23:19:58 executing program 3 (fault-call:9 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:19:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xa0010000]}}, 0x20) [ 467.281297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 467.302114] FAULT_INJECTION: forcing a failure. [ 467.302114] name failslab, interval 1, probability 0, space 0, times 0 [ 467.363525] CPU: 0 PID: 23082 Comm: syz-executor3 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 467.372058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.381415] Call Trace: [ 467.384023] dump_stack+0x1d3/0x2c4 [ 467.387674] ? dump_stack_print_info.cold.2+0x52/0x52 [ 467.392880] ? __save_stack_trace+0x8d/0xf0 [ 467.397226] should_fail.cold.4+0xa/0x17 [ 467.401302] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 467.406432] ? save_stack+0x43/0xd0 [ 467.410070] ? kasan_kmalloc+0xc7/0xe0 [ 467.413977] ? kasan_slab_alloc+0x12/0x20 [ 467.413993] ? kmem_cache_alloc+0x12e/0x730 [ 467.414007] ? __d_alloc+0xc8/0xb90 [ 467.414020] ? d_alloc_pseudo+0x1d/0x30 [ 467.414040] ? alloc_file_pseudo+0x158/0x3f0 [ 467.422499] ? shmem_file_setup+0x65/0x90 [ 467.422518] ? mark_held_locks+0x130/0x130 [ 467.422539] ? percpu_ref_put_many+0x11c/0x260 [ 467.434569] ? retint_kernel+0x2d/0x2d [ 467.434589] ? trace_hardirqs_on_caller+0xc0/0x310 [ 467.434606] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.434622] ? trace_hardirqs_off+0x310/0x310 [ 467.434645] ? fs_reclaim_acquire+0x20/0x20 [ 467.443017] ? lock_downgrade+0x900/0x900 [ 467.443036] ? retint_kernel+0x2d/0x2d [ 467.443052] ? check_same_owner+0x330/0x330 [ 467.443076] __should_failslab+0x124/0x180 [ 467.443096] should_failslab+0x9/0x14 [ 467.451559] kmem_cache_alloc+0x2be/0x730 [ 467.451574] ? kasan_check_write+0x14/0x20 [ 467.451587] ? do_raw_spin_lock+0xc1/0x200 [ 467.451607] __alloc_file+0xa8/0x470 [ 467.461291] ? file_free_rcu+0xd0/0xd0 23:19:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xeffdffff]}}, 0x20) [ 467.461308] ? d_instantiate+0x79/0xa0 [ 467.461324] ? lock_downgrade+0x900/0x900 [ 467.461343] ? kasan_check_read+0x11/0x20 [ 467.470143] ? do_raw_spin_unlock+0xa7/0x2f0 [ 467.470159] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 467.470177] alloc_empty_file+0x72/0x170 [ 467.470196] alloc_file+0x5e/0x4d0 [ 467.478217] ? _raw_spin_unlock+0x2c/0x50 [ 467.478239] alloc_file_pseudo+0x261/0x3f0 [ 467.478256] ? alloc_file+0x4d0/0x4d0 [ 467.478277] ? kasan_check_write+0x14/0x20 [ 467.486823] __shmem_file_setup.part.47+0x110/0x2a0 [ 467.486843] shmem_file_setup+0x65/0x90 [ 467.486862] __x64_sys_memfd_create+0x2af/0x4f0 [ 467.486882] ? memfd_fcntl+0x18b0/0x18b0 [ 467.494820] do_syscall_64+0x1b9/0x820 [ 467.494836] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 467.494853] ? syscall_return_slowpath+0x5e0/0x5e0 [ 467.494868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.494890] ? trace_hardirqs_on_caller+0x310/0x310 [ 467.503349] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 467.503368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.503384] ? prepare_exit_to_usermode+0x291/0x3b0 23:19:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x8000a0]}}, 0x20) [ 467.503403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.503422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.511003] RIP: 0033:0x457579 [ 467.511033] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 467.511041] RSP: 002b:00007f31ee5e3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 467.511056] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 0000000000457579 23:19:59 executing program 3 (fault-call:9 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 467.511071] RDX: 0000000020000258 RSI: 0000000000000000 RDI: 00000000004bc7c9 [ 467.523242] RBP: 000000000072bf00 R08: 0000000020000258 R09: 00000000fbad8001 [ 467.523252] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f31ee5e46d4 [ 467.523260] R13: 00000000004c4ac9 R14: 00000000004d7e30 R15: 0000000000000006 [ 467.769615] FAULT_INJECTION: forcing a failure. [ 467.769615] name failslab, interval 1, probability 0, space 0, times 0 [ 467.781275] CPU: 1 PID: 23103 Comm: syz-executor3 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 467.789786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.799138] Call Trace: [ 467.801741] dump_stack+0x1d3/0x2c4 [ 467.805386] ? dump_stack_print_info.cold.2+0x52/0x52 [ 467.810588] ? lock_downgrade+0x900/0x900 [ 467.814750] should_fail.cold.4+0xa/0x17 [ 467.818827] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 467.824125] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 467.829243] ? is_bpf_text_address+0xd3/0x170 [ 467.833744] ? kernel_text_address+0x79/0xf0 [ 467.838248] ? __kernel_text_address+0xd/0x40 [ 467.842755] ? unwind_get_return_address+0x61/0xa0 [ 467.847695] ? __save_stack_trace+0x8d/0xf0 [ 467.852032] ? fs_reclaim_acquire+0x20/0x20 [ 467.856386] ? lock_downgrade+0x900/0x900 [ 467.860537] ? kasan_slab_alloc+0x12/0x20 [ 467.864693] ? __x64_sys_memfd_create+0x2af/0x4f0 [ 467.869539] ? check_same_owner+0x330/0x330 [ 467.873878] __should_failslab+0x124/0x180 [ 467.878123] should_failslab+0x9/0x14 [ 467.881923] kmem_cache_alloc_trace+0x2d7/0x750 [ 467.886580] ? __might_sleep+0x95/0x190 [ 467.890556] apparmor_file_alloc_security+0x17b/0xac0 [ 467.895765] ? percpu_ref_put_many+0x13e/0x260 [ 467.900335] ? trace_hardirqs_on+0xbd/0x310 [ 467.904646] ? apparmor_socket_getpeersec_stream+0xae0/0xae0 [ 467.910433] ? kasan_kmalloc+0xc7/0xe0 [ 467.914314] ? kasan_slab_alloc+0x12/0x20 [ 467.918447] ? kmem_cache_alloc+0x306/0x730 [ 467.922763] security_file_alloc+0x4c/0xa0 [ 467.926991] __alloc_file+0x12a/0x470 [ 467.930784] ? file_free_rcu+0xd0/0xd0 [ 467.934664] ? d_instantiate+0x79/0xa0 [ 467.938536] ? lock_downgrade+0x900/0x900 [ 467.942706] ? kasan_check_read+0x11/0x20 [ 467.946854] ? do_raw_spin_unlock+0xa7/0x2f0 [ 467.951258] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 467.955837] alloc_empty_file+0x72/0x170 [ 467.959884] alloc_file+0x5e/0x4d0 [ 467.963415] ? _raw_spin_unlock+0x2c/0x50 [ 467.967567] alloc_file_pseudo+0x261/0x3f0 [ 467.971789] ? alloc_file+0x4d0/0x4d0 [ 467.975577] ? usercopy_warn+0x110/0x110 [ 467.979625] ? kasan_check_write+0x14/0x20 [ 467.983858] __shmem_file_setup.part.47+0x110/0x2a0 [ 467.988870] shmem_file_setup+0x65/0x90 [ 467.992843] __x64_sys_memfd_create+0x2af/0x4f0 [ 467.997500] ? memfd_fcntl+0x18b0/0x18b0 [ 468.001567] do_syscall_64+0x1b9/0x820 [ 468.005446] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 468.010807] ? syscall_return_slowpath+0x5e0/0x5e0 [ 468.015721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.020564] ? trace_hardirqs_on_caller+0x310/0x310 [ 468.025566] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 468.030567] ? prepare_exit_to_usermode+0x291/0x3b0 [ 468.035596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.040431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.045605] RIP: 0033:0x457579 [ 468.048783] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 468.067679] RSP: 002b:00007f31ee5e3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 468.075368] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 0000000000457579 [ 468.082621] RDX: 0000000020000258 RSI: 0000000000000000 RDI: 00000000004bc7c9 [ 468.089875] RBP: 000000000072bf00 R08: 0000000020000258 R09: 00000000fbad8001 [ 468.097130] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f31ee5e46d4 [ 468.104389] R13: 00000000004c4ac9 R14: 00000000004d7e30 R15: 0000000000000006 23:19:59 executing program 2: mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) clone(0x7bb796679e6bfc40, 0x0, 0xfffffffffffffffe, &(0x7f0000000480), 0xffffffffffffffff) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="38a2a29b301344d2611acce06e425b04c6725b8dcad04c0d90fbcae51581ec58b849ea5cfc"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000006c0)) getpid() gettid() getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @dev}, &(0x7f0000000180)=0xc) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000680)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000002c0)={{0x5, 0x101}, 'port0\x00', 0x32, 0x120000, 0x9, 0xfffffffffffff885, 0x3, 0xffffffff, 0x7, 0x0, 0x4}) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000240)=0x4, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x558, 0x0, 0x258, 0x0, 0x470, 0x470, 0x470, 0x4, &(0x7f0000000000), {[{{@arp={@loopback, @multicast1, 0xff000000, 0xffffffff, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x1, 0x9, 0xf6, 0x7fff, 0x80000001, 0x4, 'bcsh0\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0xc0}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@multicast2, @remote, 0xffffff00, 0xffffff00, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xca2be6ce946eade6]}, @mac=@local, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0xffff, 0x7fff, 0x1, 0x7, 0x100000000, 0x4, 'nr0\x00', 'tunl0\x00', {0xff}, {}, 0x0, 0x228}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @dev={0xac, 0x14, 0x14, 0x401}, @dev={0xac, 0x14, 0x14, 0x1d}}}}, {{@arp={@empty, @multicast2, 0xffffffff, 0xffffffff, @empty, {[0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x1, 0x401, 0xe2, 0x3, 0x3, 0x7dd4a979, 'gre0\x00', 'dummy0\x00', {0xff}, {0xff}}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5a8) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000004c0)=""/153, &(0x7f0000000200)=0x99) 23:19:59 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000400)="52dc96ad54f22ba555cfa8a104688d640aa5ac18b62ce5a7c4e08d8e02ab3531de2a954c75f1375f2a52c8981701a2340f8f084e03b0da07c289ff1e82") r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2500, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="1414bb01000000030000000002f2ddffffffffac14141219da7316d4e2a4977f2212946b8b55da7a1e46182a93b5564c39724e1b040000000000000000000000000021ec861540621572c956623a63a2ae1396bd06993267535e30d5dfb9688cc98574127f1750c4efaa6d8c7e64a8c08edf33b7f91ddcda48dceff5a916ab7ee2a21c21747946a22aff14addc3d3034f1a0cea8ca207b1140d26c59ca320e5e8ee17ad476a3b42a377c2137e3ddd7fac673d75f23a1cbb38e3c7869af098e117d"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000340)=""/17, 0x10000}, 0x18) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)="2e2f6367726f75702e6370752f73797a3110", 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x189000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$TIOCCONS(r2, 0x541d) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 23:19:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdef]}}, 0x20) [ 468.280758] cpuset: Unknown parameter 'cpuset' [ 468.288759] QAT: Invalid ioctl [ 468.296107] QAT: Invalid ioctl [ 468.301116] cpuset: Unknown parameter 'cpuset' [ 468.306588] QAT: Invalid ioctl [ 468.310211] QAT: Invalid ioctl 23:20:01 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x432000, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x1, 0x7, 0x7148}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100001000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}}, 0x0) 23:20:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x82200, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x4, 0x8, 0x9}, 0x8) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:01 executing program 3 (fault-call:9 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffffa0010000]}}, 0x20) 23:20:01 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) clock_gettime(0x6, &(0x7f00000002c0)) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x2007) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_aout(r1, &(0x7f0000000500)={{}, "53ce35366a62308a2b12b28d68f807141837dfd9e443467637b6d33a97da82eeb0a196b5d59c9eab783ce6b0fd5afd1fa29aacaabdfd67f512e512fdfe00c03daf8a49c92b965828ffde5fed6c0dfb526ef6dc8ac6037ca6953472eee15f9a5fe6fe629138426f1fc5e3a9961b869ec9ce68afe04c44b5b586d03ca70e1420555f80fe21ce77656772"}, 0xa9) r2 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r3 = accept4(r0, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000180)=0xff53, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x6, &(0x7f00000000c0)='^!em1\x00'}, 0x30) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x141800, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x80000000, 0x4, 0xffff, 0x3, 0x0, 0x8, 0x1000, 0x4, 0x2ac, 0x9, 0xff, 0xfff, 0xf6, 0x401, 0x6, 0x5, 0xb1d3, 0x8, 0x7, 0x3, 0x1, 0xffffffff, 0x7fff, 0x8000000, 0x6, 0x101, 0x100000001, 0x3, 0x1, 0x5, 0x5, 0x3, 0x100000000, 0xfffffffffffffffb, 0x3, 0x6, 0x0, 0x3ff, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0x20000, 0x2b5, 0xcfa, 0x3, 0x7, 0x628ea625, 0x7}, r4, 0x9, r5, 0x8) recvfrom$inet(r3, &(0x7f00000001c0)=""/168, 0xa8, 0x0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x705000) 23:20:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003ac0)={&(0x7f0000000040)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000003a80)={&(0x7f0000003240)={0x20, r1, 0x225, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x402, 0x0) r4 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0x81013, 0xffffffffffffff9c, 0x0) r5 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x4830, 0xffffffffffffff9c, 0x0) r6 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x110, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x2}, @increfs={0x40046304, 0x1}, @register_looper, @increfs_done={0x40106308, r4, 0x2}, @acquire_done={0x40106309, r5, 0x1}, @increfs_done={0x40106308, r6, 0x1}, @request_death={0x400c630e, 0x0, 0x2}], 0xd3, 0x0, &(0x7f0000000180)="1c7b53eb9905bd9eb23fc5859460205ffa5248f7c434a8ee2b6251578e64ce1f5079cfc1b518ab537855f8b5f93f32fe65ffd1cb06c2412ea868395b4f270a80c8e45bc91e445bb18564862a57e8fc66d62c4f9590458d16e844d2e4e4078b36c81dc93a6b6c117f10df6caadcdec84c550aeaa75cea7bc4e7a084eab1a3fd0f3fc7ef5ba269e73e37681abd36fce5ef4ce2b9e8f0372a56d2ef3d9b234d3e48164e90b6473390fa11e9ee48f421147607927e7728444efde40adeae90b1df95f84741bb0c0eecc7c3bcfe6922ed690e72442a"}) [ 470.099099] FAULT_INJECTION: forcing a failure. [ 470.099099] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 470.130878] CPU: 1 PID: 23129 Comm: syz-executor3 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 470.139390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.148745] Call Trace: [ 470.151352] dump_stack+0x1d3/0x2c4 [ 470.155009] ? dump_stack_print_info.cold.2+0x52/0x52 [ 470.160214] ? trace_hardirqs_off+0x310/0x310 [ 470.164720] ? do_raw_spin_lock+0xc1/0x200 [ 470.168983] should_fail.cold.4+0xa/0x17 [ 470.173061] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 470.173078] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 470.173099] ? trace_hardirqs_off+0x310/0x310 [ 470.187441] ? retint_kernel+0x2d/0x2d [ 470.191360] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 470.196137] ? retint_kernel+0x2d/0x2d [ 470.200057] ? ___might_sleep+0x204/0x330 [ 470.204221] ? lock_release+0x970/0x970 [ 470.208217] ? check_same_owner+0x330/0x330 [ 470.212564] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 470.217355] ? __might_sleep+0x95/0x190 [ 470.221343] __alloc_pages_nodemask+0x34b/0xdd0 [ 470.226028] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 470.231049] ? retint_kernel+0x2d/0x2d [ 470.234949] ? percpu_counter_add_batch+0x79/0x190 [ 470.239907] ? percpu_counter_add_batch+0x141/0x190 [ 470.244937] ? mpol_shared_policy_lookup+0xf7/0x150 23:20:01 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x0, 0x0, 0x264]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)={'syz0', "f392a7050e56ea710be7b0a38a02c8e477c30d56b15c447e3d949f411e916c75d01dc4a7f3ac81a70ec6c10b842a83aa058a4b53104d4684d0b42378dc16a0fae96b5ed8fc010e47f2de3fce59ef23ed6a9c3c488c1d209a36121d8d347f6746252127643cc403181a39d8d114ac5c4e1b884eaac48749ccffb922358d17"}, 0x82) 23:20:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003ac0)={&(0x7f0000000040)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000003a80)={&(0x7f0000003240)={0x20, r1, 0x225, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x402, 0x0) r4 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0x81013, 0xffffffffffffff9c, 0x0) r5 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x4830, 0xffffffffffffff9c, 0x0) r6 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x110, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x2}, @increfs={0x40046304, 0x1}, @register_looper, @increfs_done={0x40106308, r4, 0x2}, @acquire_done={0x40106309, r5, 0x1}, @increfs_done={0x40106308, r6, 0x1}, @request_death={0x400c630e, 0x0, 0x2}], 0xd3, 0x0, &(0x7f0000000180)="1c7b53eb9905bd9eb23fc5859460205ffa5248f7c434a8ee2b6251578e64ce1f5079cfc1b518ab537855f8b5f93f32fe65ffd1cb06c2412ea868395b4f270a80c8e45bc91e445bb18564862a57e8fc66d62c4f9590458d16e844d2e4e4078b36c81dc93a6b6c117f10df6caadcdec84c550aeaa75cea7bc4e7a084eab1a3fd0f3fc7ef5ba269e73e37681abd36fce5ef4ce2b9e8f0372a56d2ef3d9b234d3e48164e90b6473390fa11e9ee48f421147607927e7728444efde40adeae90b1df95f84741bb0c0eecc7c3bcfe6922ed690e72442a"}) 23:20:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}}, 0x20) [ 470.249994] ? shmem_pseudo_vma_init+0x1b4/0x2e0 [ 470.254761] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 470.260313] alloc_pages_vma+0x1bc/0x3f0 [ 470.264385] shmem_alloc_page+0xa5/0x190 [ 470.268450] ? shmem_swapin+0x230/0x230 [ 470.272465] shmem_alloc_and_acct_page+0x248/0xdb0 [ 470.277427] ? shmem_getattr+0x2c0/0x2c0 [ 470.281512] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 470.286541] ? tick_program_event+0xbe/0x130 [ 470.290998] ? perf_event_update_userpage+0x7fa/0xcd0 23:20:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000280)) recvmmsg(0xffffffffffffff9c, &(0x7f0000003c40)=[{{&(0x7f0000000000)=@ax25, 0x80, &(0x7f0000000880)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000000640)=""/130, 0x82}, {&(0x7f0000000700)=""/110, 0x6e}, {&(0x7f0000000780)=""/243, 0xf3}], 0x9, &(0x7f0000000940)=""/238, 0xee, 0x7}, 0x7}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000ac0)=""/252, 0xfc}, {&(0x7f0000000bc0)=""/12, 0xc}, {&(0x7f0000000c00)=""/161, 0xa1}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)=""/1, 0x1}], 0x5, &(0x7f0000000dc0)=""/85, 0x55, 0x1}, 0x1fffffffe0000}, {{&(0x7f0000000e40)=@ll, 0x80, &(0x7f0000001240)=[{&(0x7f0000000ec0)=""/77, 0x4d}, {&(0x7f0000000f40)=""/55, 0x37}, {&(0x7f0000000f80)=""/92, 0x5c}, {&(0x7f0000001000)=""/74, 0x4a}, {&(0x7f0000001080)=""/130, 0x82}, {&(0x7f0000001140)=""/81, 0x51}, {&(0x7f00000011c0)=""/58, 0x3a}, {&(0x7f0000001200)=""/60, 0x3c}], 0x8, &(0x7f00000012c0)=""/28, 0x1c}, 0x7}, {{&(0x7f0000001300)=@xdp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001380)=""/117, 0x75}, {&(0x7f0000001400)=""/228, 0xe4}, {&(0x7f0000001500)=""/207, 0xcf}, {&(0x7f0000001600)=""/92, 0x5c}, {&(0x7f0000001680)=""/62, 0x3e}, {&(0x7f00000016c0)=""/236, 0xec}], 0x6, &(0x7f0000001840)=""/4096, 0x1000, 0x8}, 0xff}, {{&(0x7f0000002840)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000028c0)=""/207, 0xcf}, {&(0x7f00000029c0)=""/160, 0xa0}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/240, 0xf0}], 0x4, &(0x7f0000003bc0)=""/119, 0x77, 0x8001}, 0x9}], 0x5, 0x2122, &(0x7f0000003d80)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000003f40)={{0xa, 0x4e24, 0xc0, @mcast1, 0x3}, {0xa, 0x4e23, 0x4, @mcast2, 0x100000000}, 0x2, [0x9, 0x88ce, 0x320, 0x5, 0x7763290c, 0x7, 0xfff, 0x1f]}, 0x5c) sendmsg$nl_generic(r1, &(0x7f0000003f00)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e00)={0x98, 0x30, 0x30, 0x70bd27, 0x25dfdbff, {0xd}, [@typed={0x8, 0xf, @u32=0x1e}, @generic="045394e1faee809bcb7c71c324102965ae174af9ffabd8d9d43200366604a04a74c7137ec790990b03cd8d58ce91ff37cca9f92465dc8df2e3c35acee2d5a1e72e048a3039bebd7fc52b7fa28617c7f10e2c267ae2f6ec145a341412e823b429e4f6289584af0257998cb3cab6bf6ea2034f0bd87626e2605754"]}, 0x98}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000) r2 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/tcp\x00') ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000003fc0)) [ 470.296209] ? perf_event_task_disable+0x120/0x120 [ 470.301159] ? perf_log_throttle+0x530/0x530 [ 470.305579] ? do_raw_spin_unlock+0xa7/0x2f0 [ 470.310006] ? trace_hardirqs_on+0x310/0x310 [ 470.314444] shmem_getpage_gfp+0x74a/0x48b0 [ 470.318825] ? native_apic_msr_write+0x5b/0x80 [ 470.323437] ? shmem_add_to_page_cache+0x1950/0x1950 [ 470.328586] ? kvm_clock_read+0x18/0x30 [ 470.332573] ? kvm_sched_clock_read+0x9/0x20 [ 470.337007] ? sched_clock+0x31/0x40 [ 470.340728] ? sched_clock_cpu+0x1b/0x1b0 [ 470.340745] ? hrtimer_try_to_cancel+0xb8/0x6f0 23:20:01 executing program 1: syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7569e43d", @ANYRESHEX=0x0, @ANYBLOB=',block=0x0000000000000800,\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 470.340767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.349588] ? cpu_clock_event_start+0x12c/0x180 [ 470.349611] ? task_clock_event_start+0x1f0/0x1f0 [ 470.364741] ? mark_held_locks+0x130/0x130 [ 470.369008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.374587] ? perf_pmu_enable+0xd9/0x120 [ 470.378764] ? event_sched_in.isra.107+0x6bb/0xe40 [ 470.383707] ? retint_kernel+0x2d/0x2d [ 470.387628] ? trace_hardirqs_on_caller+0xc0/0x310 [ 470.392574] ? trace_hardirqs_on_thunk+0x1a/0x1c 23:20:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x60, &(0x7f00000001c0)=[@fd, @flat, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1}], &(0x7f0000000280)=[0x30]}, 0x100}}], 0x0, 0x0, &(0x7f0000002000)}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280001, 0x0) [ 470.392593] ? trace_hardirqs_off+0x310/0x310 [ 470.392610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.392632] ? check_preemption_disabled+0x48/0x200 [ 470.412415] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 470.417221] ? retint_kernel+0x2d/0x2d [ 470.417236] ? retint_kernel+0x2d/0x2d [ 470.417257] ? trace_hardirqs_on_caller+0xc0/0x310 [ 470.429985] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 470.434796] ? trace_hardirqs_off+0x310/0x310 [ 470.439310] ? update_stack_state+0x3f9/0x690 [ 470.443829] ? mark_held_locks+0x130/0x130 [ 470.448090] ? mark_held_locks+0x130/0x130 [ 470.452339] ? lock_downgrade+0x900/0x900 [ 470.456514] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 470.461455] ? retint_kernel+0x2d/0x2d [ 470.465363] ? trace_hardirqs_on_caller+0xc0/0x310 [ 470.470322] ? kasan_check_read+0x11/0x20 [ 470.473162] binder: 23159:23160 got transaction with invalid offset (0, min 88 max 88) or object. [ 470.474490] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 470.474508] ? trace_hardirqs_off+0x310/0x310 [ 470.474528] ? rcu_softirq_qs+0x20/0x20 [ 470.492780] ? unwind_dump+0x190/0x190 [ 470.492800] ? retint_kernel+0x2d/0x2d [ 470.492816] ? trace_hardirqs_on_caller+0xc0/0x310 [ 470.492838] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 470.500693] ? trace_hardirqs_off+0x310/0x310 [ 470.505466] binder: 23159:23160 transaction failed 29201/-22, size 88-96 line 3036 [ 470.509512] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 470.509532] ? retint_kernel+0x2d/0x2d [ 470.523544] binder_alloc: binder_alloc_mmap_handler: 23159 20001000-20004000 already mapped failed -16 [ 470.526510] ? lock_acquire+0x268/0x520 [ 470.526588] ? simple_xattr_get+0x106/0x180 [ 470.526612] ? current_time+0x72/0x1b0 [ 470.538150] binder: BINDER_SET_CONTEXT_MGR already set [ 470.544688] ? lock_downgrade+0x900/0x900 [ 470.544705] ? do_raw_spin_unlock+0xa7/0x2f0 [ 470.544725] ? trace_hardirqs_on+0xbd/0x310 [ 470.544744] ? do_raw_spin_lock+0xc1/0x200 [ 470.559751] binder: 23159:23160 ioctl 40046207 0 returned -16 [ 470.562314] ? current_time+0x72/0x1b0 [ 470.562331] ? retint_kernel+0x2d/0x2d [ 470.562354] ? trace_hardirqs_on_caller+0xc0/0x310 [ 470.575624] binder_alloc: 23159: binder_alloc_buf, no vma [ 470.579457] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 470.579482] ? iov_iter_fault_in_readable+0x22a/0x450 [ 470.579502] ? _copy_from_iter_flushcache+0xf70/0xf70 [ 470.589313] ? __sanitizer_cov_trace_pc+0x50/0x50 [ 470.589331] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 470.589357] shmem_write_begin+0x10a/0x1e0 [ 470.595068] binder: undelivered TRANSACTION_ERROR: 29201 [ 470.598170] generic_perform_write+0x3aa/0x6a0 [ 470.598197] ? page_endio+0xb50/0xb50 [ 470.604297] binder: 23159:23162 transaction failed 29189/-3, size 88-96 line 2973 [ 470.609262] ? file_update_time+0xe4/0x640 [ 470.609281] ? current_time+0x1b0/0x1b0 [ 470.609304] ? down_write+0x8a/0x130 [ 470.624524] __generic_file_write_iter+0x26e/0x630 [ 470.624542] ? trace_hardirqs_off+0x310/0x310 [ 470.624568] generic_file_write_iter+0x436/0x870 [ 470.682067] ? __generic_file_write_iter+0x630/0x630 [ 470.687187] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 470.692785] ? iov_iter_init+0xc2/0x1e0 [ 470.696791] __vfs_write+0x6b8/0x9f0 [ 470.700511] ? kernel_read+0x120/0x120 [ 470.704406] ? lock_release+0x970/0x970 [ 470.708382] ? check_same_owner+0x330/0x330 [ 470.712725] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.718267] ? check_preemption_disabled+0x48/0x200 [ 470.723290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.728831] ? __sb_start_write+0x1b2/0x370 [ 470.733158] vfs_write+0x1fc/0x560 [ 470.736710] ksys_pwrite64+0x181/0x1b0 [ 470.740603] ? __ia32_sys_pread64+0xf0/0xf0 [ 470.744934] __x64_sys_pwrite64+0x97/0xf0 [ 470.749107] do_syscall_64+0x1b9/0x820 [ 470.753010] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 470.758385] ? syscall_return_slowpath+0x5e0/0x5e0 [ 470.763325] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.768172] ? trace_hardirqs_on_caller+0x310/0x310 [ 470.773190] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 470.778209] ? prepare_exit_to_usermode+0x291/0x3b0 [ 470.783239] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.788089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.793286] RIP: 0033:0x411237 [ 470.796514] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 51 17 00 00 c3 48 83 ec 08 e8 27 fa ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 6d fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 470.815416] RSP: 002b:00007f31ee5e3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 470.823138] RAX: ffffffffffffffda RBX: 0000000020000250 RCX: 0000000000411237 [ 470.830427] RDX: 0000000000000012 RSI: 0000000020000100 RDI: 0000000000000007 [ 470.837711] RBP: 0000000000000000 R08: 0000000020000258 R09: 00000000fbad8001 [ 470.844984] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000007 23:20:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x9, 0x4000000000000800, 0x1}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x0, @empty, 0x4e22, 0x4, 'lblc\x00', 0x4, 0x1, 0x71}, {@rand_addr, 0x4e20, 0x2, 0x4, 0x6, 0x5}}, 0x44) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000002180)=""/4096}, 0x18) [ 470.852255] R13: 0000000000000001 R14: 00000000004d7e30 R15: 0000000000000006 23:20:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000009, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setsig(0x4203, r3, 0xf09f, &(0x7f0000000080)={0x39, 0x5, 0x0, 0x2}) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 470.953890] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 23:20:02 executing program 3 (fault-call:9 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$unix(0x1, 0x40007, 0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x1}, 0x6e) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 23:20:02 executing program 1: memfd_create(&(0x7f0000000380)='/dev/dsp\x00', 0x3) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffbadd, &(0x7f0000000100)}) mmap$xdp(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x2, 0x10, 0xffffffffffffffff, 0x80000000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='illinois\x00', 0x9) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000180)=0xffffffffffffffed) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000300)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0xd000, 0x4000}) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 23:20:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}}, 0x20) 23:20:02 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r1, &(0x7f0000000080)=""/235, 0xeb) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x12, &(0x7f0000013e95), 0x4) close(0xffffffffffffffff) 23:20:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xeffdffff00000000]}}, 0x20) [ 471.134024] FAULT_INJECTION: forcing a failure. [ 471.134024] name failslab, interval 1, probability 0, space 0, times 0 [ 471.158724] CPU: 1 PID: 23192 Comm: syz-executor3 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 471.167233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.176593] Call Trace: [ 471.179202] dump_stack+0x1d3/0x2c4 [ 471.182861] ? dump_stack_print_info.cold.2+0x52/0x52 [ 471.188085] ? should_fail+0x88d/0xd01 [ 471.192009] should_fail.cold.4+0xa/0x17 [ 471.196104] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 471.201229] ? shrink_node+0x16b0/0x16b0 [ 471.205306] ? trace_hardirqs_off+0x310/0x310 [ 471.209913] ? blkcg_maybe_throttle_current+0x5ae/0x1450 [ 471.215396] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 471.220947] ? try_to_free_mem_cgroup_pages+0x581/0xc90 [ 471.226347] ? fs_reclaim_acquire+0x20/0x20 [ 471.230689] ? lock_downgrade+0x900/0x900 [ 471.234862] ? check_same_owner+0x330/0x330 [ 471.239197] ? lock_downgrade+0x900/0x900 [ 471.243365] __should_failslab+0x124/0x180 [ 471.247622] should_failslab+0x9/0x14 [ 471.251440] kmem_cache_alloc+0x2be/0x730 [ 471.255622] getname_flags+0xd0/0x590 [ 471.259439] ? do_syscall_64+0x6be/0x820 [ 471.263523] getname+0x19/0x20 [ 471.266723] do_sys_open+0x383/0x700 [ 471.270452] ? filp_open+0x80/0x80 [ 471.274021] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 471.279524] __x64_sys_open+0x7e/0xc0 23:20:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x8000a0ffffffff]}}, 0x20) [ 471.283344] do_syscall_64+0x1b9/0x820 [ 471.287243] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 471.292620] ? syscall_return_slowpath+0x5e0/0x5e0 [ 471.297565] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.302431] ? trace_hardirqs_on_caller+0x310/0x310 [ 471.307478] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 471.312516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.318072] ? prepare_exit_to_usermode+0x291/0x3b0 [ 471.323107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.328000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.333203] RIP: 0033:0x4111d1 [ 471.336421] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 471.355344] RSP: 002b:00007f31ee5e3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 471.363084] RAX: ffffffffffffffda RBX: 0000000020000268 RCX: 00000000004111d1 [ 471.370367] RDX: 00007f31ee5e3afa RSI: 0000000000000002 RDI: 00007f31ee5e3af0 [ 471.377656] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 471.384946] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000007 [ 471.392244] R13: 0000000000000001 R14: 00000000004d7e30 R15: 0000000000000006 23:20:02 executing program 5: socketpair$unix(0x1, 0x100000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='jqfmt=vfsv0']) 23:20:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1a0]}}, 0x20) 23:20:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), &(0x7f0000000140)=0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}]}) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'speck128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000280)="ba845ea43752cc872df4cf026e", &(0x7f00000002c0)=""/13}, 0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x80}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400)={0x0, r5, 0x2}) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340), &(0x7f0000000480), 0x0, 0xfffffffffffffffb) bind(r1, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) 23:20:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x1, 0x1}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r2, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r2, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 471.552033] binder: undelivered TRANSACTION_ERROR: 29189 23:20:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x3, 0x70, 0x6e, 0x5, 0x3, 0xddf0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x6, 0xfffffffffffffff9, 0x200, 0x8, 0x0, 0x4ab4, 0x10001, 0x78, 0x80000001, 0x0, 0x8, 0x10001, 0x1d2, 0x20, 0x4, 0x100000001, 0xc, 0x3, 0x7f, 0xfffffffffffffff8, 0x5576, 0x3, 0x1ff, 0x2, 0x20, 0x9, 0x4, 0x0, 0xffffffff, 0x6, @perf_bp={&(0x7f0000000040), 0x2}, 0x8000, 0x7, 0x8dfb, 0x6, 0x400028a, 0x1, 0xfff}) readv(r1, &(0x7f0000000100), 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) r4 = gettid() setpriority(0x0, r4, 0x80000000) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0xeced815674e7de2, 0x102000}) 23:20:03 executing program 3 (fault-call:9 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffdef]}}, 0x20) [ 471.691227] REISERFS warning (device loop5): sh-2021 reiserfs_fill_super: can not find reiserfs on loop5 [ 471.981903] FAULT_INJECTION: forcing a failure. [ 471.981903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 471.993779] CPU: 0 PID: 23240 Comm: syz-executor3 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 472.002278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.011636] Call Trace: [ 472.014246] dump_stack+0x1d3/0x2c4 [ 472.017898] ? dump_stack_print_info.cold.2+0x52/0x52 [ 472.023112] should_fail.cold.4+0xa/0x17 [ 472.027190] ? fault_create_debugfs_attr+0x1f0/0x1f0 23:20:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffffa0008000]}}, 0x20) 23:20:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000180)={0x7, 0x4b, 0x2}, 0x7) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x100) ioctl$TIOCSBRK(r3, 0x5427) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x4000) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x115, 0x20, 0xd973, 0x5, 0x8, @remote}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000000c0)=0x2007f, 0x0) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 472.032309] ? delayacct_end+0xc5/0x100 [ 472.036297] ? lock_downgrade+0x900/0x900 [ 472.036320] ? trace_hardirqs_on+0xbd/0x310 [ 472.036339] ? mark_held_locks+0x130/0x130 [ 472.036360] ? kasan_check_write+0x14/0x20 [ 472.053305] ? do_raw_spin_lock+0xc1/0x200 [ 472.057560] ? mark_held_locks+0x130/0x130 [ 472.061810] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 472.066939] ? delayacct_end+0x5a/0x100 [ 472.070949] ? retint_kernel+0x2d/0x2d [ 472.074872] ? trace_hardirqs_on_caller+0xc0/0x310 [ 472.079813] ? __delayacct_freepages_end+0xe0/0x140 [ 472.079832] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.079854] ? trace_hardirqs_off+0x310/0x310 [ 472.089624] ? do_try_to_free_pages+0xe63/0x1290 [ 472.098875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.104430] ? should_fail+0x22d/0xd01 [ 472.108340] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 472.113481] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.118284] __alloc_pages_nodemask+0x34b/0xdd0 [ 472.122981] ? retint_kernel+0x2d/0x2d [ 472.126885] ? __alloc_pages_slowpath+0x2de0/0x2de0 23:20:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x1a0ffffffff]}}, 0x20) [ 472.131915] ? retint_kernel+0x2d/0x2d [ 472.135818] ? trace_hardirqs_on_caller+0xc0/0x310 [ 472.140770] ? blkcg_maybe_throttle_current+0x5ae/0x1450 [ 472.146244] ? try_to_free_mem_cgroup_pages+0xa06/0xc90 [ 472.151621] ? trace_hardirqs_on_caller+0xc0/0x310 [ 472.156559] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.156581] ? fs_reclaim_acquire+0x20/0x20 [ 472.156601] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.156622] ? trace_hardirqs_off+0xb8/0x310 [ 472.156642] cache_grow_begin+0x91/0x8c0 [ 472.178936] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 472.184510] ? check_preemption_disabled+0x48/0x200 [ 472.189541] kmem_cache_alloc+0x665/0x730 [ 472.193719] ? trace_hardirqs_on_caller+0xc0/0x310 [ 472.198667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.203444] getname_flags+0xd0/0x590 [ 472.207282] ? do_syscall_64+0x6be/0x820 [ 472.211364] getname+0x19/0x20 [ 472.214567] do_sys_open+0x383/0x700 [ 472.218290] ? filp_open+0x80/0x80 [ 472.221850] __x64_sys_open+0x7e/0xc0 [ 472.225662] ? do_syscall_64+0xca/0x820 23:20:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}}, 0x20) [ 472.229652] do_syscall_64+0x1b9/0x820 [ 472.233549] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 472.233568] ? syscall_return_slowpath+0x5e0/0x5e0 [ 472.233583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.233601] ? trace_hardirqs_on_caller+0x310/0x310 [ 472.233626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.243916] ? prepare_exit_to_usermode+0x291/0x3b0 [ 472.243938] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.243978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.243999] RIP: 0033:0x4111d1 [ 472.277606] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 472.296516] RSP: 002b:00007f31ee5e3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 472.304234] RAX: ffffffffffffffda RBX: 0000000020000268 RCX: 00000000004111d1 [ 472.311513] RDX: 00007f31ee5e3afa RSI: 0000000000000002 RDI: 00007f31ee5e3af0 [ 472.318807] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 472.318817] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000009 23:20:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}}, 0x20) 23:20:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000300)={0x0, r1}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x1a, 0x8080f, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000540)=""/246) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x10000, @mcast2, 0xfffffffffffffb75}}, 0x1f, 0x3f, 0x5a7, 0x40, 0x8001}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r4, 0x5, 0x4}, &(0x7f0000000240)=0xc) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000340)={0x1, {}, 0x1e, 0xbcb}) [ 472.318826] R13: 0000000000000001 R14: 00000000004d7e30 R15: 0000000000000006 23:20:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xeffdffff]}}, 0x20) 23:20:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000026c0)={0x0, 0x81, "14f31d17cb7760eafb643cbc12e6bf3a4012a5302d4826ad081907fb1a638d57c8a6532d8d68be246dd5c192999369c72ae6bd48cf9ba2411b9cb38779239b83d7918855b5e1b3fe316b4ab9fa68b130be2db2d4d209fe7e132349a1256d692d26b16f093398b19cf6b05801923b68e7e085d194cc518a4502738f4c303817604b"}, &(0x7f0000002780)=0x89) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000027c0)={0x0, 0x6f, "ec589f005af901746e347f103b123f02d64a1979b6db33de41565570a14355b0b92d512805bd08d64719e3f38e9d051ae64bb8538ab70b036ab529758a4c0509032d1f4f6b19b22281832ce2ba17fdac2aaf60d6bb5e2aba6bb2f234707faa2020eca0fe4e8a0799a6bf8951358b0c"}, &(0x7f0000002840)=0x77) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000002880)={0x0, 0xd0}, &(0x7f00000028c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002bc0)={0x0, 0xbf0000000000000, 0xfff, 0x7, 0x80000001, 0x2, 0xcff, 0x6, {0x0, @in6={{0xa, 0x4e23, 0x4, @loopback, 0x8000}}, 0x100, 0x3, 0x8000, 0xfb6a, 0x4}}, &(0x7f0000002c80)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002cc0)={0x0, 0x7f, 0x1000}, &(0x7f0000002d00)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002e40)=[{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xff, @local, 0x100000000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="7211c292903644622590a799deab26e1a1c4ea7de92524a788adb29f3435e32f978c6175a260c2c6ef177782d1bb015edaa7795026d1dbcc72b7a26ee971d40a03dc927b9e039d45e139b842b19a184556f429fa31865e70dcfa7476e9f9e8f53591fc5f0c692808ae690218599a1ffe4ceb8712991fa65a5dda656dfa3c4b39972beedd65456b735cc0c41b8e95a164b7e404446f731df1bf340e580dfca4b33e98e3acf73fcfedfed637883dd88c2b90f002999afe41d23ae4cd9ac97b81d8f8a8f4c191320d8018623fd38d074cc3fad708eafbb6dc0dcfc55b855db3dc67ae4e6b4de33d6b78716c363e14dd56b8707cbee26831651b", 0xf8}, {&(0x7f0000000340)="81eb410afaa247ccb7b8e0bb5f6a8634f2711c076e7d2bcc11661fc1f6c41624e538f5ea9b4c26ca1bf57f84a7376a1488c3", 0x32}, {&(0x7f0000000380)="a4364865ccc4594e546b", 0xa}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f0000000400)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="e177ba307ddaa617d04a2f", 0xb}, {&(0x7f0000001480)="857cfe1384e84197cbcd2ba0ef6fdc308d8c3da286ad6e48510d02865d84", 0x1e}, {&(0x7f00000014c0)="fdac9b04311eb4f4dddf3c7162f6a7162c90c399c89d75bd338f7def8c9e81472dd7109c56ef7aa9ccff440ded77ae95534ef54303edfd8766e0165d3f503c630cd246c276dc5c24f896e1cb6fff418b2c175cf84666ddf0cdb406e67fd1dc0600505958e1b3e44a7e976fd055056ee3e0fc979a67d0b41bc945c8e48369cadd9159f7a69568ae5edb428cf3b74f817a7cb8e6d10163c545b22108db8802b59922aaf3cc5a28f9010517761864c98d7f741afd7a99a0467f573526390ebc7cdb3ef5d359e035e08e98e1bd77912772d8c72a46c7ba8eae3bccdadcaf253f8e7b1212b2", 0xe3}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="45a88444882d9c10fc6ac04cb3cade011ac2177f967dabc02cad9527f03e6f346aea4efb82ddd78a505bfd522395e20afc020ac55e2f927adbc9faf457b27474c39f086ba3c0bd98775e", 0x4a}], 0x6, &(0x7f0000002900)=[@sndrcv={0x30, 0x84, 0x1, {0x401, 0xfffffffffffffffb, 0x6, 0x0, 0x1, 0x5, 0x0, 0x3, r2}}, @sndrcv={0x30, 0x84, 0x1, {0xe8, 0x81, 0x200, 0xffffffff, 0x2000, 0xf86, 0x1, 0x100000001, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x2}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x30000000000, 0x8000, 0x3, 0x10001, 0x200, 0x2, 0xb562, r4}}, @init={0x18, 0x84, 0x0, {0x8, 0x6, 0x2, 0xb08}}], 0xe0}, {&(0x7f0000002a00)=@in6={0xa, 0x4e22, 0x1ff, @ipv4={[], [], @local}, 0x3}, 0x1c, &(0x7f0000002b80)=[{&(0x7f0000002a40)="27eca1a7aee7cde33f76ffb19d62e6430335fc7e4a30bd9a1043e6c62f84b6395c857dedf1fb49e538ea46ea07bfb3dd0354c440db13d2b5dac56aa512e05c196df038c00171e6dbe64ff6fc780ab10331ef107adda536a7b5a5ae4cee0d67b8333ae97c9783def61a44c2cc27974522344d5dd7ba45a10e3e6004cf36e7f0b73765c10704b683433d6c733d7d29dd6128210b26fb070ba121c1da7bc99229aced6146cf3ac5860c0eacdaf6997c4073b7d749d019167b137a4ccf90a8271048e895616f670d131ad50ca3c7ff8eab05bd14dca847b8", 0xd6}, {&(0x7f0000002b40)="742363fc563744ea", 0x8}], 0x2, &(0x7f0000002d40)=[@authinfo={0x18, 0x84, 0x6, {0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x3, 0x200, 0x6, r5}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x20}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x1f, 0x8, 0x8c3, 0x2, r6}}, @init={0x18, 0x84, 0x0, {0x400, 0x9, 0x0, 0x7fff}}, @prinfo={0x18, 0x84, 0x5, {0x30}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0xf0, 0x40000}], 0x3, 0x40001) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200400, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r7, 0x9) ioctl$TUNSETGROUP(r0, 0x400454ce, r8) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x80000000000000}, 0x3) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x4) 23:20:03 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000000000b) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x1000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x340, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000a68], 0x0, &(0x7f0000000000), &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, 0x3ae) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/103, 0x67}], 0x1, &(0x7f0000000140)=""/57, 0x39, 0x9}, 0x40000000) [ 472.507502] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:20:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000000, 0x40000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) poll(&(0x7f0000000040)=[{r1, 0x40}, {r2, 0x1000}, {r1, 0x40}, {r0, 0x2c0}, {r0, 0x2200}, {r1, 0x22}, {r0, 0x544}, {r0, 0x84}, {r0, 0x8010}], 0x9, 0x6) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x4000) [ 472.578639] kernel msg: ebtables bug: please report to author: Wrong len argument [ 472.586211] minix_free_inode: bit 1 already cleared 23:20:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:04 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r2, 0x100000000000001) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x0, 0xc2c9}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x2}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/106) 23:20:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000a0]}}, 0x20) 23:20:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r1, 0x43) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xf8) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000140)={0x1fd, 0x0, &(0x7f0000ffb000/0x4000)=nil}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000540)='veth1_to_bridge\x00', 0x38f) sendmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000000)='u', 0x1}], 0x1, &(0x7f0000275000)}}], 0x1, 0x48084) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080), 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', 'veth1_to_bridge\x00'}, &(0x7f0000000580)=""/4096, 0x1000) shutdown(r2, 0x2) 23:20:04 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = semget(0x1, 0x3, 0x10) write(r1, &(0x7f0000000200)="95eb5412f206a8a244236f3974ad4e5b0cb021f297f0dbcc06b0641e2f427809ac307e851da8c561f7055f783e93b40b80aefc3f6d775f5871bca03578a37000c6c5022983f1ac1b9b19d8dc22a4856c9cf214fc1638488254933cf91437e2c281", 0x61) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000040)=[{0x5, 0x3973, 0x1800}, {0x2, 0x0, 0x1800}, {0x1, 0x100000001}], 0x3, &(0x7f0000000100)={r3, r4+30000000}) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 23:20:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xeffd]}}, 0x20) 23:20:04 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x8000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x87}}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) 23:20:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x3fe0000) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) [ 472.870017] MINIX-fs: mounting unchecked file system, running fsck is recommended 23:20:04 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 23:20:04 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f00000001c0)=""/149, 0x70a2fa) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000380)) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)) 23:20:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='\ninix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdef]}}, 0x20) 23:20:04 executing program 5: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/55, 0x37) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000040)=""/127, 0x7f) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x200, 0x4, 0xe509, 0x6, 0x5, 0x0, 0x3, 0xc71d, 0x0, 0x7f}) write$P9_RLCREATE(r2, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x8a, 0x4, 0x1}, 0xfff}}, 0x18) [ 473.023526] minix_free_inode: bit 1 already cleared 23:20:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x34000]}}, 0x20) 23:20:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000000c0)=0x3) sendto$inet6(r0, &(0x7f00000000c0), 0xfff7, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) socket$inet6(0xa, 0x2, 0xffffffff) 23:20:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x2, 0x40000) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) getpeername$unix(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="22496e5e00bf488a41b3196fdaa4c68434cd20b25963822927cdc68f3513323ec5c18f6935a317ebf46d06ee1ca2b87182ab4de3c130f436366f18acb9290b9d3589787e14ac790c58cf12b7319bb9ccea5e5d35ff96cbc16398896d26c63336b0ef92c82fe8c13022c08d4d4c085097dc26131bb60503f6b4da2ccc3037197bd889e1196e89cfef76d183950a93b6ca90d730b5a5e80ec9e7fd8f0b6c164969f5b4fcba8f644563974006c75041500e440d87655be6e2a37bd6cdd808939830bb898f9b14901573d45991d874833421875fd24faf0ab2fda5cfc21e93744163754d9f6c820346", 0xe7, r3) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x80, 0x10000000000, 0x0, 0x8}, 0x69c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x100000000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0xcc, 0x9}, &(0x7f0000000180)=0xc) r2 = accept(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="a5347013e9e51d2832e61aedebcc0e56", 0x10) listen(r0, 0x800000002) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000300)) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) lseek(r0, 0x0, 0x2) 23:20:04 executing program 2: r0 = socket$inet(0x10, 0x0, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8}]]}}}]}, 0x64}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) fstat(0xffffffffffffffff, &(0x7f0000001440)) tkill(0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) userfaultfd(0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000041000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{}], 0x1}, 0x0) [ 473.056442] audit: type=1804 audit(1538695204.425:171): pid=23361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir095208667/syzkaller.5SfAkp/528/bus" dev="sda1" ino=16568 res=1 23:20:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40030000000000]}}, 0x20) 23:20:04 executing program 5: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='mime_type\x00', 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r2) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) munmap(&(0x7f0000595000/0x400000)=nil, 0x400000) madvise(&(0x7f0000541000/0x2000)=nil, 0x2000, 0x8) r3 = semget$private(0x0, 0x3, 0x526) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000100)=""/14) 23:20:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa0008000]}}, 0x20) 23:20:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:04 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x3d6a28ba) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x2000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x101100, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r2) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000140)=""/117) socketpair(0x8, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) 23:20:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='%inix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:04 executing program 2: r0 = socket$inet(0x10, 0x0, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8}]]}}}]}, 0x64}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) fstat(0xffffffffffffffff, &(0x7f0000001440)) tkill(0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) userfaultfd(0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000041000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{}], 0x1}, 0x0) 23:20:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa0010000]}}, 0x20) 23:20:04 executing program 5: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000004c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000006c0)=0x0) sched_setaffinity(r3, 0x2, &(0x7f0000000680)=0x7fffffff) r4 = getpid() wait4(r4, &(0x7f0000000100), 0x1000000, &(0x7f0000000500)) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x1) creat(&(0x7f0000000440)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xa0) fcntl$setstatus(r2, 0x4, 0x4400) r7 = perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x1, 0xfce, 0x0, 0x7fff, 0x0, 0x2, 0x800, 0x9, 0x580, 0x7, 0x0, 0xffffffff, 0x0, 0x1ff, 0x7, 0x7, 0x0, 0x2, 0x6, 0x100000000, 0x40, 0xc3b, 0x100000000, 0x400, 0x0, 0x5, 0x4, 0x3a, 0x8, 0xfffffffffffff284, 0x8, 0x2, 0xf51, 0x1b82, 0x40, 0x3f, 0x0, 0x30000000000000, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x46, 0x0, 0xffffffffffff8000, 0x4, 0x10001, 0x7, 0xe66a}, r4, 0x2, r5, 0xb) r8 = creat(&(0x7f0000000480)='./bus\x00', 0xfffffffffffffffd) openat$cgroup_procs(r2, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)) openat$cgroup_procs(r6, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000140)=0x14) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EVIOCGABS3F(r9, 0x8018457f, &(0x7f0000000300)=""/194) fcntl$setstatus(r7, 0x4, 0x42000) sendfile(r10, r9, &(0x7f0000000040), 0x100000001) r11 = getpid() socketpair(0x5, 0x80006, 0x4, &(0x7f00000000c0)) sched_setscheduler(r11, 0x5, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @link_local}) write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x2, {0x0, 0x5}}, 0x20) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000180)=""/206) 23:20:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x7ff, 0xfff, 0x9}) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) close(r1) close(r2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000300)={{0x4, 0x7, 0x5, 0x8001, 'syz0\x00', 0x80000001}, 0x5, 0x10, 0x5, r3, 0x3, 0x9, 'syz1\x00', &(0x7f0000000280)=["706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 'em0]\x00', 'ppp0&\x00'], 0x49, [], [0x3, 0x5df, 0x80000000, 0x10001]}) 23:20:04 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000001100)=[{&(0x7f0000000000)=""/59, 0x39}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2, 0x0) 23:20:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000000)=0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x7fffffff}, &(0x7f00000001c0)=0x8) 23:20:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdef]}}, 0x20) 23:20:05 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) socket$inet(0x2, 0x0, 0x8001) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x800, 0x0) write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x8, 0x81, 0x9, 0xfff, 0x5, 0x100000001, 0xa2, 0x5, 0x7}}, 0x43) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000540)=""/4096) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x4) 23:20:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x146, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000100), 0x10) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="153f6234488dd2") sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f0000000080)={@loopback={0x400000000000000}}, 0x20) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x8, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000180)={0x18, 0x0, 0x7, {0x7fffffff}}, 0x18) 23:20:05 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) read(r0, &(0x7f0000000080), 0x0) socketpair(0x11, 0x7, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 23:20:05 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x200}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x240, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f00000000c0)=0x1) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000140)={@remote}, &(0x7f0000000180)=0x8) ioctl(r2, 0x4000008912, &(0x7f0000000280)="153f7a34488dd25d766070") ioctl$VT_ACTIVATE(r3, 0x5606, 0x7) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000200)={r3, 0x0, 0xff, 0x4c}) getsockopt$sock_int(r2, 0x1, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0xfffffdeb) connect$l2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @remote}, 0x1, 0x4, 0x3, 0x4}}, 0x2e) 23:20:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xeffdffffffffffff]}}, 0x20) 23:20:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xeaa, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f00000000c0), 0x4) semget(0x2, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x0, 0x2452}, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff, 0x0, 0x0, 0x1b, 0x7fffffff, 0x1f, 0xfffffffffffffff7}, &(0x7f0000000200)={0x3f, 0x1f, 0x0, 0x0, 0x0, 0x9, 0x8, 0x7f}, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000340)={&(0x7f00000002c0)={0x8}, 0x8}) 23:20:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) r3 = dup(r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040)="82bb1ca23ab1061963638828b81fc2e73dc29ccf84d7af296174bfc2fd05b8fd043a07e089c20577bac65439af6677c0b68c14690c383960cd1e1645d0097f25c066bee5dc3b176b8f5fe0f1ed47f97ed99b947b544eea67ed0bbe3aef7e6f2801dd8699ab757c8f50aca3e8276d329361ce1ff5cbf9474ae5afdd2cca1ffa7e17936ae62a617e8c3446f3e0e98da4331562e3ff7f194dae9169e6aae441", &(0x7f0000000100)="080a42fe0e828cbd3e382d87fa542f64242de4fa67bfc8c815bdf2c26ac60f15a99db1b328048dc05a113c01a9ec4c32648043bb5dfd0ac5d5894d9a7084e3a25344f79fe99f2af72ad431f9fb1151d26451fd4f421cd7bcfd1f98e3de4e5ab5e831d37b061e7ef817282c50856bb6537f75", 0x3}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) listen(r4, 0xfffefffffffffe04) accept4(r4, &(0x7f0000000340)=@alg, &(0x7f0000000100)=0x80, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") shutdown(r4, 0x0) sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='m\nnix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000500)="72e01a6e337e92a768b3d2333931bf55c8d934830f7a9fd511285930fcdcbd3b9fab3e8fa5a2a1a35ad7481c48fc9ceae79902d5907669f1857754b32209b8403e085c970e4c0b7632146dc8a78918ba7021d5e290fc536e665d4fcecfc3525b4813ac671d1dc3bec0ae655f074fd396cd8ded7c26e0589dfe0720d1d8822fbb21dfe27c58c2b0dd0f474c37c1524b8cc325a4a72a88769411cea7c9fbafeeab85cefbcef926d84969bad7844059a0e82eab259307d5a52ee3b36023100e54314efbecf8219d67261e9d11f7aa8c380f57bf505e336801a6208062aaafcde69e2f2ce133dad0926cc185866cf49c157f3b141fe79ff70ddc71116cc847ae4dc1f1c6918f032a342d130cdc82165261fceeb4a7d2d39dc03f1e80bef238622425198e5509f54a865d16b9565b0f428d809e4b6cf66d667806052dd5d85a48a1423ea58ba520ee71678692e1927560e7fb8180b2ae5cf58bcb34f3b82fbc3f701552e4c82218ede5a3d9d9cb6ef0317e3130697d7598c6739ef295e3d3f4de4a735e91d2bc90f371ca01c1dbbce554a454c112ffb21fc0cbeab64456150cd645029482085f57fd5b201d8f2fe198f4f6122dde0370755287115922dcf8915f6bc3d6a42473410b0535765ac018fcfe6909e48a934f3f1d7b64107c0f0fb81fc9a61def0900000000") bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402440, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0xe8, "6759ee", "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"}}, 0x110) r3 = socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r3, 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000300)='gretap0\x00', 0x6e1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') fchdir(r3) 23:20:05 executing program 5: prctl$setmm(0x34, 0x0, &(0x7f00001b5000/0x1000)=nil) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x32000, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) 23:20:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, 0x20) 23:20:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x80000) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000380), 0x113, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000200003070000000000000000020000000061b30000000000180000001400110065727301616e300000000000000000000800180000000000"], 0x3c}}, 0xffffffffffffffff) 23:20:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0), 0xc) r1 = socket$l2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001400)=""/4096, &(0x7f0000000080)=0x1000) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 23:20:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000]}}, 0x20) 23:20:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a4cc80700315f85715070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) getdents64(r1, &(0x7f0000000080)=""/116, 0x8) lseek(r1, 0x0, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRWALK(r2, &(0x7f0000000140)={0xf, 0x1f, 0x1, 0x4}, 0xf) getdents64(r1, &(0x7f0000000200)=""/66, 0x5d) 23:20:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1fe, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="230305"]) 23:20:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}, 0x20) 23:20:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='m%nix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21012, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:05 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f00000002c0), 0xfffffffffffffffb, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 23:20:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4800100000008912, &(0x7f0000000280)="88f96234488dd25d766070") r1 = socket(0x10, 0x20000000000003, 0x0) write(r1, &(0x7f00000000c0)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c26485a3d5728", 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000840)=""/198, 0xc6}, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xbe21, 0x4c0000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000040)={0x98, &(0x7f0000000100)=""/152}) 23:20:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000009000000002000000020000000010000000000006e5fbe5a0000ffff53ef0100010000006e5fbe5a000000000000000001000000000000000b000000800000002c", 0x5d, 0x400}], 0x3, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000140)="c002aae549742fc1a0a2cd6a16b7aa54deb8fbced6d7f47321f6df5adf3d5e675e5c680940") 23:20:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff]}}, 0x20) 23:20:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000ffe0, 0x0) [ 474.542744] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 474.618814] EXT4-fs (loop5): fragment/cluster size (524288) != block size (1024) 23:20:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x1}, 0x4) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x400300]}}, 0x20) 23:20:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='mi%ix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}}, 0x20) [ 474.743740] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 474.771498] EXT4-fs (loop5): fragment/cluster size (524288) != block size (1024) 23:20:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000]}}, 0x0, 0x60}, 0x98) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/rfkill\x00', 0x515c00, 0x0) getsockname$llc(r3, &(0x7f0000001900)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001940)=0x10) 23:20:06 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x103080, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x1b, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) write(r1, &(0x7f0000000140)="050d4e48850ce803ce27086009bad1db67ffed1c37484b0a798771b7d2e91c06682cb6e563661097dfb220c433b59d9bda452e094b8c924d00e252ae9fe95a48feaeebebcebe6f0057bbcb7c5cda68816abfa7b419d521613d7454351d79acd239f72e67082f51d51af1763d654c6dc7c36844d564739d5825684c3e1e646acd475b8d9437912dafed3a31bd72254099da5eec37319f610f86dd00e1c092f5203f8bde17997e14f11d18fec9468bdd96ea312bba53aee035d12dfde27f7eab6bc4a08d69f430b0710e669d6cfd0946cac26aca16", 0xd4) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="b0b8aad0a169b3e6a50f25ab887686fa0f631b"], 0x2) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'eql\x00', {0x2, 0x4e20, @multicast2}}) fadvise64(r1, 0x0, 0x2, 0x4) 23:20:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) r2 = dup3(r0, r1, 0x80000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@reserved}) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)) r0 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000e00)=ANY=[]}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000001c0)={0x8000, 0x0, 0x8, 0x4}, 0x8) close(r2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x10000, 0xb000}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 23:20:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x20) 23:20:06 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000019c0)={&(0x7f0000001840), 0xc, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0102000000000000000001000000300001000500010000000000080006000a766600080008000000000008000500000000000c0007006368e65300000000"], 0x44}}, 0x0) 23:20:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='mi\nix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) [ 475.118920] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 475.153160] netlink: 'syz-executor5': attribute type 1 has an invalid length. 23:20:06 executing program 2: socketpair(0x8, 0x803, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x8647, 0x3, 0x3a, 0x8, 0x5, 0x4}) 23:20:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffdef]}}, 0x20) 23:20:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x800, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000140)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) quotactl(0x8000, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000280)="a704538ff8bdfe16948b3abd2616130c80af05d8f53f23e7673702c06c2c0b6a0b2718469dbfb8ac0b1c4d69ade1b728f680ed") chmod(&(0x7f0000000080)='./file0\x00', 0x42) 23:20:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x8b3b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0x8, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0xfff) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xfffffffffffffffc, 0x200400) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x18000, 0x0) getdents(r2, &(0x7f0000000100)=""/151, 0x97) clone(0x802103001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) r3 = getpid() r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) write$cgroup_pid(r4, &(0x7f0000000040)=r3, 0x12) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x38, 0xfffffffffffffffe, 0x3) 23:20:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='min\nx\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:06 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x5, &(0x7f0000000040)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x8000000a00, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x40}, 0x8) [ 475.450041] Unknown ioctl -2147199744 23:20:06 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffd) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3) 23:20:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1a0]}}, 0x20) [ 475.507733] Unknown ioctl -2147199744 23:20:06 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x78) 23:20:07 executing program 1: r0 = socket$packet(0x11, 0x414000000000001, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x7, 0x1000, 0x7}, 0x10) setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000080), 0xfffffd7e) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0x200, 0x1ee7, 0x78, &(0x7f00000000c0)="e599de50712f70dc63efe78a9d04084e0d21e0eb78e6462455d3a101aeb8c87554a03e46e486d7157ab19dcf0da1f13e7585b70dc0055896b60fc3a6a2a1aab8e4fce1281eaae38727e2774517f449a146895dd48f9d4bf10c0fe4c7807be87ba83e487f0998238d0878c8adbaa21874523a10edc248d2b4"}) 23:20:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}}, 0x20) 23:20:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x40) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x10, 0x1, @in6={0xa, 0x4e24, 0x5, @empty, 0x1ff}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000200)={0x9}, 0x4) 23:20:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='min%x\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:07 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x10, &(0x7f00000001c0)={0xff0f}, &(0x7f0000000200)=0x10) 23:20:07 executing program 1: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xaaaaaaaaaaaacde, &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="64617461636b2c646c6d2c000000000000000000000000000000000000000000000000000000bff760b2e9b1b7c06c0e13ffbd4c79cd5538662c99958e9b856348a3dfcef9df2f0ecbd8cbdfa708ab5fe4e4915b441a474fca21684c510db869ea7e53c81d554532e31be85c78061b316a0dc863d5c6ac7d494addeccd4c9c6286984aa2ee978ff5fc5744217548bc0af43f7b8919e6ae83807a53578a82007fc08e043bbff911e68c4e945298b0fe"]) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000240)={@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x4, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x18}, 0x6f}}}, {&(0x7f0000000180)=""/186, 0xba}, &(0x7f00000000c0), 0x24}, 0xa0) 23:20:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000140), &(0x7f0000001180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1f, 0x80200) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 23:20:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}}, 0x20) 23:20:07 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x14103e, 0x0) ftruncate(r1, 0x4000005) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0) 23:20:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}}, 0x20) 23:20:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x2, 0x5, 0x19, 0x5, 'syz1\x00', 0x8}, 0x6, 0x20, 0x1, r3, 0x4, 0x1, 'syz0\x00', &(0x7f00000001c0)=["243a747275737465642b5b266d696d655f74797065266e6f6465765eda4000", '/dev/sequencer2\x00', "776c616e302e73797374656d2e47504c0f73656375726974796264657673656c667472757374656473656c696e757800", '/dev/sequencer2\x00'], 0x6f, [], [0x2f4, 0x9, 0x200, 0x1]}) r4 = socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x418000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x0, 0xfff, &(0x7f0000000080)=0x3}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000240)={0x7f, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e23, 0x1, 'none\x00', 0x20, 0x9, 0x50}, 0x2c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000540)={0x3, 0x0, 0x2080, {0x7004, 0x4000, 0x3}, [], "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", "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"}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000100)={0x40000000}) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:07 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x4e21}, 0x3e) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local, @multicast2}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@random="e187a48d30b3", @empty=[0xd000000, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x1, @remote, 0x5}}, 0x2ee, 0x3ff, 0x2, 0x400, 0x40}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0xab, 0x3935}, &(0x7f0000000180)=0x8) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x14c7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4011) 23:20:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x200000a0) 23:20:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x0) socket$kcm(0x11, 0x1000000000000002, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) r2 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000540), 0x1000) 23:20:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000780)={0x1, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}]}, 0x190) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e22, 0x61c91aec, @mcast1, 0x5}}}, 0x84) 23:20:07 executing program 1: syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x0, 0x200) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000300), 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x8200) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000480)) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setxattr(&(0x7f00000000c0)='\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="9e29a74c5d36bb920f882a0a2523083787135de318b68e8334a6dd69b1f5e26d77b2fd7c37250b87a7166e584c82dbd41a36a0363d1e91771eb817106e224a9edcdfc61b7e8fac07de456ef53fedd067eee54efd220688f819d1df25374fe6f40795da808757872273"], &(0x7f0000000140)='\x00', 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000400)=@srh, 0x8) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 23:20:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x5) [ 476.296786] audit: type=1804 audit(1538695207.665:172): pid=23795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir915462082/syzkaller.NoPJwF/516/bus" dev="sda1" ino=16571 res=1 23:20:07 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x10080) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x310, 0x70bd29, 0x40}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) prctl$setname(0xf, &(0x7f0000000200)='/dev/usbmon#\x00') r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x9d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x20000, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xd}]}}}]}, 0x3c}}, 0x0) 23:20:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) write$FUSE_STATFS(r1, &(0x7f00000001c0)={0x60, 0x0, 0x7, {{0x7, 0x2, 0x401, 0x1f, 0x1, 0x7, 0x2, 0x2}}}, 0x60) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000080)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21010, r2, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r2, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:07 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x14103e, 0x0) ftruncate(r1, 0x4000005) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0) 23:20:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) [ 476.437011] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 476.484455] minix_free_inode: bit 1 already cleared [ 476.500252] netlink: '/dev/usbmon#': attribute type 13 has an invalid length. 23:20:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000000c0)={0x1, {0x0, 0x1c9c380}, 0x5, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) 23:20:08 executing program 2: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000300)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x3, 0x240000) write$P9_RFLUSH(r0, &(0x7f00000003c0)={0x138, 0x6d, 0x4000000000000004}, 0xffffffffffffff4e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900)="173074fb8c62c7934719212e2502da2d2f2a5736bcec670f5da0de3b165e6999d4d12b2a1bf0c14ea0a482a6a489facd33e339ac611aa3", 0x37, 0x7fffffff, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0xfffffffffffffde8) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x7, 0x313000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3f, 0x200500) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000940)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000200)) accept$alg(r2, 0x0, 0x0) gettid() recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59700000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) sendto$inet6(0xffffffffffffffff, &(0x7f0000000880)="7116976428203587543bbc1562b772328507b45f649b278def9a0759738087a5d38c0172c5b11f32cfe1490600860cf613aaae2bb333590dcb6f20e4c6f1b04e62832c521f249fc69a8f2a36762f9f454b568187edba3e371cf1a6c76496", 0x5e, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 476.601192] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 476.640919] minix_free_inode: bit 1 already cleared 23:20:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x8) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) 23:20:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000078000/0x4000)=nil, 0x4000, 0x8, 0x21011, r0, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x7, 0x0, {0xffffffffffffffff, 0x0, 0x9, 0x3, 0xffff}}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000100)=""/137) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) 23:20:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x76, 0x7, 0x0, 0x7fffffff, 0x0, 0xffffffffffffff80, 0x0, 0xb, 0x51, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x86, 0x0, 0x4, 0x9, 0x0, 0x4, 0x2, 0xffff, 0x3, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x100000001, 0xb78, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff}, 0x88e0, 0x0, 0x8, 0x0, 0x100000000, 0xfffffffffffff001, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @rand_addr, 0x4e23, 0x0, 'dh\x00', 0x0, 0x4}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'ip6_vti0\x00', 0x1000}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) epoll_create1(0x80000) syz_mount_image$minix(&(0x7f00000000c0)="6d696e6978fc", &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socketpair$inet6(0xa, 0x4, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x81}, &(0x7f00000001c0)=0x8) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr}, 0x4, 0x3, 0x1, 0x1}}, 0x26) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x40, 0x20040) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r3, 0x0, 0x0, 0x1, 0xa199, 0x4}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000380)={0x401, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @rand_addr=0x4}, 0x120, 0x3, 0xffffffffffffffec, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x100}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 23:20:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) waitid(0x1, r3, &(0x7f00000001c0), 0x6, &(0x7f0000000200)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) setresuid(0x0, r4, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) [ 476.749084] audit: type=1804 audit(1538695208.115:173): pid=23839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir915462082/syzkaller.NoPJwF/516/bus" dev="sda1" ino=16571 res=1 23:20:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x8) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) setresuid(0x0, r3, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) [ 476.826897] audit: type=1804 audit(1538695208.145:174): pid=23795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir915462082/syzkaller.NoPJwF/516/bus" dev="sda1" ino=16571 res=1 23:20:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x9, 0x21011, r1, 0x0) socket$kcm(0x11, 0x2, 0x300) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x113, 0x7}}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r3, r4}}, 0x18) r5 = socket$kcm(0x29, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, &(0x7f0000000080)={0x100000001, 0x6}) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) fcntl$dupfd(r5, 0x800000, r6) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000002c0)=""/197) socketpair$inet(0x2, 0x80000, 0x8001, &(0x7f0000000240)) 23:20:08 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r2) openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8936, &(0x7f0000000040)={'tunl0\x00', @ifru_ivalue=0x7fffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000005c0), &(0x7f0000000600)=0xb) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x0, 0x2000}, 0x4) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) connect$netlink(r0, &(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x41}, 0xc) clock_gettime(0x8000000000, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106, 0x36fe1f270d9ec149}}, 0x20) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x4, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x40000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='highspeed\x00', 0xa) [ 477.034020] kasan: CONFIG_KASAN_INLINE enabled [ 477.038655] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 477.046089] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 477.052341] CPU: 1 PID: 23867 Comm: syz-executor0 Not tainted 4.19.0-rc6-next-20181004+ #87 [ 477.057720] kobject: 'loop4' (00000000ab85a476): kobject_uevent_env [ 477.060839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.060863] RIP: 0010:__handle_mm_fault+0x2d72/0x55c0 [ 477.060885] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 20 00 00 49 8b 9c 24 b0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 57 20 00 00 48 8b 1b 31 ff 48 83 e3 9f 48 89 de [ 477.093003] kobject: 'loop4' (00000000ab85a476): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 477.100715] RSP: 0018:ffff88018394ea08 EFLAGS: 00010246 [ 477.100728] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8160f791 [ 477.100737] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88018394eb40 [ 477.100752] RBP: ffff88018394ecb8 R08: ffffed0037ca3ff0 R09: ffffed0037ca3fef [ 477.137357] R10: ffffed0037ca3fef R11: ffff8801be51ff7b R12: ffff88018394ec90 [ 477.144632] R13: ffff8801bd8cc800 R14: ffff8801ccd125f8 R15: 0000000000000067 [ 477.151910] FS: 00007f74bfe4c700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 477.160142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.166057] CR2: 0000001b30c27000 CR3: 00000001bd2cc000 CR4: 00000000001426e0 [ 477.173351] Call Trace: [ 477.176023] ? vmf_insert_mixed_mkwrite+0x40/0x40 23:20:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)) accept4$alg(r1, 0x0, 0x0, 0x800) setresuid(0x0, r4, 0x0) tkill(r3, 0x28) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) 23:20:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, r3, {0xffff, 0xf}, {0x9, 0xfff2}, {0x1b, 0xffff}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0xa97}, {0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000044) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000480)='nv\x00', 0xff86) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x800000031, 0xffffffffffffffff, 0x0) [ 477.180881] ? __dump_page.cold.3+0x179/0x179 [ 477.185247] kobject: 'loop5' (0000000059c9d54e): kobject_uevent_env [ 477.185391] ? follow_page_mask+0x18d/0x1fb0 [ 477.196214] ? handle_mm_fault+0x42a/0xc70 [ 477.200491] ? lock_downgrade+0x900/0x900 [ 477.204673] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 477.209617] ? trace_user_stack_print+0x3e0/0x6b0 [ 477.214496] ? __get_user_pages+0x806/0x1b30 [ 477.218919] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 477.221523] kobject: 'loop5' (0000000059c9d54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 477.224381] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 477.224397] ? check_preemption_disabled+0x48/0x200 [ 477.224417] handle_mm_fault+0x54f/0xc70 [ 477.224446] ? __handle_mm_fault+0x55c0/0x55c0 [ 477.224459] ? find_vma+0x34/0x190 [ 477.224488] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 477.261663] __get_user_pages+0x806/0x1b30 [ 477.265921] ? follow_page_mask+0x1fb0/0x1fb0 [ 477.270446] ? lock_acquire+0x1ed/0x520 [ 477.274452] ? get_user_pages_unlocked+0xfd/0x5d0 [ 477.279359] ? lock_release+0x970/0x970 [ 477.283350] ? check_same_owner+0x330/0x330 [ 477.287693] ? down_read+0x8d/0x120 [ 477.291321] ? get_user_pages_unlocked+0xfd/0x5d0 [ 477.296166] ? __down_interruptible+0x700/0x700 [ 477.300836] ? mem_cgroup_charge_skmem+0x1e0/0x380 [ 477.305781] get_user_pages_unlocked+0x2fc/0x5d0 [ 477.310543] ? get_user_pages_longterm+0x650/0x650 [ 477.315488] get_user_pages_fast+0x322/0x450 [ 477.319899] ? __get_user_pages_fast+0x3f0/0x3f0 [ 477.324658] ? save_stack+0xa9/0xd0 [ 477.328287] iov_iter_get_pages+0x2c9/0x11e0 [ 477.332700] ? tcp_sendmsg_locked+0xee4/0x3f90 [ 477.337281] ? tcp_sendmsg+0x2f/0x50 [ 477.340996] ? inet_sendmsg+0x19c/0x690 [ 477.344984] ? sock_sendmsg+0xd5/0x120 [ 477.348873] ? __sys_sendto+0x3d7/0x670 [ 477.352850] ? __x64_sys_sendto+0xe1/0x1a0 [ 477.357089] ? csum_and_copy_from_iter+0x13d0/0x13d0 [ 477.362196] ? trace_hardirqs_on+0xbd/0x310 [ 477.366521] ? lock_downgrade+0x900/0x900 [ 477.370671] ? lock_downgrade+0x900/0x900 [ 477.374821] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 477.379925] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 477.385382] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 477.390918] ? check_preemption_disabled+0x48/0x200 [ 477.395954] ? mem_cgroup_charge_skmem+0x1e0/0x380 [ 477.400906] ? mem_cgroup_sk_free+0x90/0x90 [ 477.405236] ? kasan_kmalloc+0xc7/0xe0 [ 477.409128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 477.414673] ? tcp_leave_memory_pressure+0x2a/0x110 [ 477.419703] ? tcp_enter_memory_pressure+0x120/0x120 [ 477.424809] ? __sk_mem_raise_allocated+0x716/0x17e0 [ 477.429910] ? kasan_kmalloc+0xc7/0xe0 [ 477.433800] __zerocopy_sg_from_iter+0x240/0xb80 [ 477.438585] ? kasan_check_write+0x14/0x20 [ 477.442820] ? skb_copy_datagram_iter+0xc10/0xc10 [ 477.447663] ? skb_scrub_packet+0x490/0x490 [ 477.451996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.457538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.463099] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 477.468121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.473667] ? __sk_mem_schedule+0xac/0xe0 [ 477.477904] skb_zerocopy_iter_stream+0x24f/0x7d0 [ 477.482749] ? ___pskb_trim+0x1320/0x1320 [ 477.486903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.492458] tcp_sendmsg_locked+0x8cc/0x3f90 [ 477.496886] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 477.502086] ? lock_downgrade+0x900/0x900 [ 477.506243] ? tcp_sendpage+0x60/0x60 [ 477.510050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 477.515592] ? aa_label_sk_perm+0xfc/0xa50 [ 477.519830] ? aa_profile_af_perm+0x410/0x410 [ 477.524331] ? ksys_dup3+0x680/0x680 [ 477.528052] ? lock_acquire+0x1ed/0x520 [ 477.532027] ? tcp_sendmsg+0x21/0x50 [ 477.535746] ? trace_hardirqs_on+0xbd/0x310 [ 477.540069] ? lock_release+0x970/0x970 [ 477.544047] ? lock_sock_nested+0xe2/0x120 [ 477.548285] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 477.553741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.559277] ? check_preemption_disabled+0x48/0x200 [ 477.564294] ? lock_sock_nested+0x9a/0x120 [ 477.569049] ? lock_sock_nested+0x9a/0x120 [ 477.573293] ? __local_bh_enable_ip+0x160/0x260 [ 477.577980] tcp_sendmsg+0x2f/0x50 [ 477.581530] inet_sendmsg+0x19c/0x690 [ 477.585335] ? ipip_gro_receive+0x100/0x100 [ 477.589661] ? apparmor_socket_sendmsg+0x29/0x30 [ 477.594420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.599973] ? security_socket_sendmsg+0x94/0xc0 [ 477.604730] ? ipip_gro_receive+0x100/0x100 [ 477.609074] sock_sendmsg+0xd5/0x120 [ 477.612806] __sys_sendto+0x3d7/0x670 [ 477.616615] ? __ia32_sys_getpeername+0xb0/0xb0 [ 477.621295] ? lock_release+0x970/0x970 [ 477.625273] ? check_same_owner+0x330/0x330 [ 477.629594] ? posix_ktime_get_ts+0x15/0x20 [ 477.633919] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 477.639386] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 477.644926] ? put_timespec64+0x10f/0x1b0 [ 477.649076] ? nsecs_to_jiffies+0x30/0x30 [ 477.653230] ? trace_hardirqs_on+0xbd/0x310 [ 477.657551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.663089] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 477.668468] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 477.674466] __x64_sys_sendto+0xe1/0x1a0 [ 477.678541] do_syscall_64+0x1b9/0x820 [ 477.682427] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 477.687830] ? syscall_return_slowpath+0x5e0/0x5e0 [ 477.692763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.697608] ? trace_hardirqs_on_caller+0x310/0x310 [ 477.702624] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 477.707642] ? prepare_exit_to_usermode+0x291/0x3b0 [ 477.712687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.717543] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 477.722742] RIP: 0033:0x457579 [ 477.725945] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.744853] RSP: 002b:00007f74bfe4bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.752559] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 477.759827] RDX: fffffffffffffee3 RSI: 0000000020000b40 RDI: 0000000000000004 [ 477.767092] RBP: 000000000072bf00 R08: 0000000000000000 R09: ffffffffffffff61 [ 477.774361] R10: 00000000040000cb R11: 0000000000000246 R12: 00007f74bfe4c6d4 [ 477.781639] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 477.788919] Modules linked in: [ 477.792560] ---[ end trace 3491ba22b991a0ca ]--- [ 477.797346] RIP: 0010:__handle_mm_fault+0x2d72/0x55c0 [ 477.802589] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 20 00 00 49 8b 9c 24 b0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 57 20 00 00 48 8b 1b 31 ff 48 83 e3 9f 48 89 de [ 477.821573] RSP: 0018:ffff88018394ea08 EFLAGS: 00010246 [ 477.827000] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8160f791 [ 477.834311] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88018394eb40 [ 477.841612] RBP: ffff88018394ecb8 R08: ffffed0037ca3ff0 R09: ffffed0037ca3fef [ 477.848923] R10: ffffed0037ca3fef R11: ffff8801be51ff7b R12: ffff88018394ec90 [ 477.856242] R13: ffff8801bd8cc800 R14: ffff8801ccd125f8 R15: 0000000000000067 [ 477.863558] FS: 00007f74bfe4c700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 477.871804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.877727] CR2: 0000001b30c27000 CR3: 00000001bd2cc000 CR4: 00000000001426e0 [ 477.884839] IPVS: ftp: loaded support on port[0] = 21 [ 477.885043] Kernel panic - not syncing: Fatal exception [ 477.891137] Kernel Offset: disabled [ 477.900097] Rebooting in 86400 seconds..