CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) acct(&(0x7f0000000000)='./file0\x00') ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1809e8000050"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:10:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x2, 0x20000) r1 = accept$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x1c) ioctl$sock_netdev_private(r1, 0x89f9, &(0x7f0000000000)="12694a9b7940b6891a6cf7735d683782a479e98eeac435f024d95254251219b32b0bd398dd0d7bd85f8e45b5ac571deb4d53a1b49590da471b9089178d0961981333f05154bf25c1b567d98d72e39874036b6e3c03ebddbd530cbe529cc80d632f8220fad91ebe0a63be2d37a980b54336ae1e85a9eaaa82a07458f4ef6743002280a366f397d58de4f3008fe7fb22fae81281a7cd3861ba20eb938681fb2d5a80ebf1eef2d13747a150c60a299a95fa1a40f8f6cf6174aba34dc22b5b071fbf1471c4cd659e70a618a447969efcad2eee0ba231af49e17f") r2 = socket$inet6(0xa, 0x1000000000001, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r3, 0x100}, &(0x7f0000000380)=0x8) 05:10:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='pstore\x00', 0x0, &(0x7f0000000180)="b18893d7b0dd8878e76df2c7438ab2db1153faeb67ad48c223936abb86b3b43beadade397c3b492e1a8787f9d3ba233d51f4f5f1c3499831828a40370d749ada73899b374b0dc05e74e7152b7782cadc90add8980e438eb0691598003d2b05dded25d76d0d50c719306940f16bcbe04e3f9b6beceb1d16c40f49c71054b021178c2cb4d290a64019988b76c16a44426cf1fbe060930dacfa4252d579faf658145511d172d91fee85b97f7ab0c5c09c8d490147fb14d54acf6ac009df4849e09ecd467c37f06a13e9c8f1b3c50cfec3bc160abb20335a09447eea3c10d2cace3bd8eea3603ecfd7ed13a9cd7548c20d0be8ba58d26ddde3") listen(r0, 0x20000000000001) [ 193.091868] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 05:10:14 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x52, 0x80000) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) r2 = accept4(r0, 0x0, &(0x7f00000001c0)=0x3c8, 0x807fe) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r4, &(0x7f00000002c0), 0x10000000000443) 05:10:14 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200402, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r2, 0x10, 0x0, @in={0x2, 0x4e23, @broadcast=0xffffffff}}}, 0xa0) r3 = socket$inet6(0xa, 0x805, 0x2000000000fd) ioctl(r3, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) 05:10:14 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000)=0x1c, 0xfffffffffffffe1f) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) connect$unix(r1, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r2, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 05:10:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x111000) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000040)={{0x2, 0x101}, 0x31}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000b80)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000000b40)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b40)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440000000000e630c40000000000000000000000000d3d7d77e9687b6e0b8ceb1115872318809fe141e0d18b5082a8572b029d2d92b40400b837c65a92c5bc2befb1c84c6b80238ac591127af523daf7f3a1ff5cc603da802acfc12e23695c172ca39f00db115f6893b30a0b2c3900cc395f310f6d191fad4d06bb631b1a4ad962dec5b116d0bc35b1763217c80aeac07c861bed44608a13cff7a4cd725abe5cbe7eb44703f3aa0f7420f1d836aad66f8057c03229084a00b2d568a9d25cc9a2714fb3506ade906b6b02e6793ac2588d0dfc58825db300a23c7b40eece9a16baff3e6515bebe984b1ce4f47b4de63b6973545f4d6af7f9d3c7a41e683cf5a0a99726eadd4439b719528aea002e4fba3e993ccfe2ab8b5372ee61ac83183956ed0be7e51df65df03f37a1e7fd469668d181fca8aa8c8243ab8adc54dd22ea00feed555505d73f1dd39f783806137fd51bb2ee3de46788a7fa1138960243cd67c387681685c1ff7fe67d46452c2f89b7135e61d000000000000"], 0x0, 0x0, &(0x7f00000001c0)}) 05:10:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) rt_sigaction(0xe, &(0x7f0000000000)={0x2, {0x9}, 0x10000000, 0x80000001}, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) writev(r0, &(0x7f0000000080)=[{&(0x7f0000999000)="390000001300094700bb61e1c3e4ffff06000000020000004500000020000000190029000dffffff9e00280f00000007fd17e9ffff06060400", 0x39}], 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0x1, 0x1ff, 0x5, 0x9}) 05:10:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) r2 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x2, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r3 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="560000001a0c97e53249d6323c460ab8ceba3602aec0361ffa9aceb860d5e9c8efcde2f9c65a95988455a475e4ae76a5c8312cbfd825cba9985fc9c34c59f3fa804af9b2467e7b0cca210d8e7018ecc45ef02254f98e32f885bb"], &(0x7f00000001c0)=0x5e) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r4, 0x401, 0x4, 0x6d9b, 0x17, 0x1}, 0x14) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) accept$alg(r1, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40002, 0x0) epoll_pwait(r5, &(0x7f00000000c0)=[{}, {}], 0x2, 0x5, &(0x7f0000000100)={0x35}, 0x8) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2) 05:10:14 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f00001e3000)) io_setup(0x7, &(0x7f00000002c0)=0x0) r3 = memfd_create(&(0x7f0000000380)='/dev/full\x00', 0x3) r4 = perf_event_open$cgroup(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x1, 0x6, 0x5, 0x0, 0x2a42, 0x24, 0xd, 0x4b4, 0x3ff, 0x1, 0x4, 0x1, 0x10000, 0x10000, 0x2, 0x100000001, 0xffffffff, 0x40, 0x7, 0x100000001, 0x30b, 0x0, 0x6, 0xff, 0x45, 0xffffffffffff3674, 0x85, 0x356f, 0x2, 0x7, 0x8e2, 0x0, 0x2, 0x10001, 0x3, 0x0, 0xffffffff, 0x3, @perf_bp={&(0x7f0000000400)}, 0x10, 0x4, 0x7f, 0x7, 0x4, 0x2, 0x3}, 0xffffffffffffff9c, 0x7, r0, 0x8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x200, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000001580)='/dev/vcs#\x00', 0x0, 0x200) io_submit(r2, 0x3, &(0x7f0000001600)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000000300)="2e980176c2aff860019536db8f721ff887842f67b4b6f4ea7969071639e186e5fba36ca99d3817c49e568b57b3d6a13a68a806055cea4a3bc4562eb4172dcee5787cb9757fa3666181062ddd7ad0d4187f7acfa576e6f6bc58d8da0eb30aed4764f099e91cee6b", 0x67, 0x100000000, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x0, r4, &(0x7f00000004c0)="c7b8893b66f6640bea28d6dc88d3862f8acf32cbf467aad468b767f93fc14bd3487abe319b64528987", 0x29, 0x8, 0x0, 0x0, r5}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0xf, 0x1, r0, &(0x7f0000000580)="1e7ab3a1e482e25a090a7419947a4a74d2aa33650ac0c23ac2e8fd179768cf133528db753b7d49ec51b294fbb0e1d8b82d94dbd0516806684bac9d6d68a4079c149634b3a0f516eefc2defbe6879531871cf256a93b81a1cab9d18e89142a29493ffbf5be6cee5c7bb3b49301fd3a442bd1c63c335d739a42d42381db030fb3144080a5999f0e501d1a3cc9a09247213bccbf5adf4571e1766dba97620e77d93d8e42c01d659bd50902e200b32ab3bccaf802c87c3d64f1ea99754cc7971e5a54778fc42463359e1dddd5ac74200b1ea3cdd7476efc0cbb4115616f349b265be8ea4e51403da0040670940d524eb2af4da390730c5f46ad51c8751eb6d1396951b5fd2d31bd77c4837613eb8d045d94603a43d6e569d8f5e8035090f5bfe17c5d4c1a2dfe4be32de3cd4138564a4a40f13dacd1eba4ca5f69bf3cb7d4f8dfe6b7d042ce5dafba3eac58515f683a43eadbbc6f40916dede7a6b7ee743514202fc691d89762ee9ba14fc6451ad7dbdea28623c354cda3aa9755971d9f18227ae98fe1243a718df0001d382dc1120c6663e03d9648cb5c798d5637a9572532b3d95aa8a5f540b09f0c00a125cfa39f750b11c0a9697906e98e52ea77d722c28375b760b886bbef241e15e6645ef91cf267b90a98a67f8df5045b98d6d15323f839b5904d527285d896e46c2d8a8e584d7724a541296ca4e0d4415377795e23c837d527c8362c76f1e5ec2877fbca335e03ebc45268b5d563e73ad434b668fadcdaccc322f0da02292f609559dc076553dd911a80a1d9d165a9730c65b78f530f090afdb5a8d9d59114106cdefe9200a401dfaf78dd3a43f6e97a6e5749dbac0cd5c276e67d88bf939e884e0977cbd9bb6d4a79c829437f1247cfdf97be8154dd11f503db271ca2327fb27ee6d89d25ae0dc2ddae2950f1f484bad70f044b627637bd4388d0581ccb694025338fdeba743af65d0f5f30c26259c5e22fbed3ddb8ce4b1db657d657535542177d79d46d16bf578dacebd42f8976e239783f6208c016b849a032357dee022e98627763aa45340664eb1ca7f4774ef4aef38f98f6317b0567756e8f0889e9d733543aa411e0933fd7e034738168ec7f51753f82d88da27b7b8876dbeb6371b50070b8e674097098940a91ecd6cd7a34c2049e773db13cb7ef6bc0df79e56c2a1719b80641f25cac9b70c1f81082f2ec857b85dfdb69f5c7dcdcba8aa2187a5f8e49e45e29306d10165dcbe761b58b91e8deff37ad5618b96497b665369d06050107edf8cba5ce4fa1d5c6cbd6f1ac2eef36cbc17d1c55ee05abfbd90b3090ed1c36774e9f4d41e42c841a3e460462213ea96893feda3acccef4624dcc73a2100b0d078ab2703ee20e62740b80feb8ec5fa695ac4f5696907bb81e79d42f96af100a9a4bd86ca0544e926b8ebefb3449c7ef87aa2783afdcbc6a2bcd36f087f02a6e972f1e01533baed0ee656886ecd45f1a86fd378797f3e85e9c2397af7ed2d3b07e4c854046ad041207f4c0ffbf1a8bd1c3dceebdbf10d5f68d27b56da1d6525c82e6b4b4e5e20908d875b05e36cf918077ebde79c77474d19d38f9f66f1b548135b92ddf55ca1a35828ffe89435e9434b2df2af3fd30431727de10811610ebb4d6549b8ae7234a066197dad010026ac8973107d4b0cc054aaf9c6cfb12190dedd8dc657eec0556d2d64fcff4ab0f346602134b751fc8da9a0cd9d1d48ca02ab675425f6c24a484f837e160143381b7b99e6c57c47532cd258f264df0a137d32843bb4a5d19744ea509106e58ea7dbe2455fcb20029f3ed1efa884a284b698d57be421e5289fcdc0b9afe2f90b67a2fd94274d7dc4c60f206b745b8cdc8f451d8eef403e6ef25a0c432cbad0e91b84b1312771cabf8904d365775d2d31e578d03457e2212c4240bf29e71af046250d9e1f589283fba5d576797d0ffaa357a23cc3489cc61a9af64a9552ea1d675b09084141e46c04ac14281017de3603e53cf4d1b26d89b9c914ae4f40e9b8ab5e8257a3c1415c842c69f0ae5eb8d36fa272c22dee93364715c3cd742c02f5fd7978483cda4466b46b8d2116d88684a44395928b42b53b895362696817e8f5d66657f29ee12987815894c4b6d6e7e6629449995b25a022614171883f15627ea1f806eaef9b0c7a03b1f104a7e14510f3606a42562e54a03f44688075d308cbc497a12f5ebbd1c591f48f14e496771d1b0b1772753f4e516ce5ad36602383461ba289ae7753e5aaa875addcf3e16fb43bda1b2d55efae3cd004722b8b50671172ce63714ad6cf1d1ef708e37cfd57226f48cbf7101138a8b6b693e45dd0067dc7e8484aac97c116465820e00dcecce20a949610ed0995e9d7d4ee35a85d27da28aca259329f9d497bc7297d81cb97c4d611844b860e0c8fbba5bdf77809639b3f68bb7940ead530ad8e62dda103cc68e7b2c28ba4ceb739c3550fe64a15c01ab98e86e0bf7df1f50e8d84d4e7491ffa57e522a557e799d7f9b5f8fade3384e9e78941d20d6ca2eb2e22961b8206e513a032d7e377b6f3fb3a591f1f68a3e08fc0e7a6ca648be6a69dccee094d13f05195c742088384b19310da441392fa98bb563686b0583bbc95a598b80529c4028e5998d50ee92bf8b641ed60fe6dfac6fe5b16bd608d210fb0db0ed661d410f2ecc80aa3df556cbbf7bdecb7c2925ff762891145601e5e8ffc6ec5d6fe58b85ce20c0c06d63aecd62f08a065640cc79fb5fd8f46c8375ed45472dca853ac068b58bfa07cd7b015c0c98bbb8653659bbbddeae3afa4a319910835901c3775870407f2e1a57ec1ddb1f0caa3d9f72f8b2133c4f1bb03cc893bbce6d87d20fe294cc400f58357922d07aabf223cd415d102ca58da3cc56699441e0463a6a7589606f38b594b6ec0a1a2ea00f2ef0b4784fbe38d187a13bebb1ca767c77a35f7ee2785d25579310d1ac66ff9ff3657203609c7b8edbae1e9ac0b32eca49ffaea7ae1fa509fd0e2d6f85d1ed71621f71b8b43a4866082c4a9f6a6fb6833f107dfb20aba5ec659138fe1c24ff4448e4b35dddbb783693a019a27324dec4c009c590a7c126ea184ba9f6caffbe11bfc3621dbff778596ba7d2a1f977fa5b67d58457c7cdb9019bd9cb7e59aa459e50834a41417fd262312c7ae8032dec1949e0250bcbd2b25b5dabfb5dbc148bec87479087b05cbf03b2c521683f3f749ea84e6c6fc6e2cc85b01a80d62721390d40d267d25037470a34eb6f730768272e8a0bda0ac95d9dcdd25c3d47329ffc3c15a1eb0bc32465c47d38b5996d1507963cf910f14ece3964fa41fe275f4dffc77aec54bb709e013593639aefe0fd5fd7ed41da13f3061acda9212c9838405e8e59e7d2e6e63c8839171de4e79e48c406e32a3fd009ee3d65e44f97a9df1e05488525aaac042cba20491be9f76885f1be34ddc5f252e717fc672bd864bba4228305f9397f1c5d348f452dcf55c025493992125fb236959105aa5a4a922d6d96c05b4eb520b7ad8f24d7a4abdc79676b22f47dc449700e007ca0267346a77f0cb79563161481e473c6a16f81d44d82f0e94c6cd31645e12d8f612663fecb2fc98ae4e90ae66b26cbb0e233907e2b6e5ef3927ba2c087ec315ed7affcbb7fa023ef83b05585b897fbc8b81c9dc667b5e90dff9cfa6b5c4242702c695680b879cf4525bff1c3047b1d4515370a91d31dab77a97acee977c0ad696b1c967b5a9cef83953e9eea30a893be8a0f9ab0ea188688e8cf7133461ef22ce00327ff064e47e30797927f9e32bfb517102b5974459a8cfbe4948d24515211c369ed865e5815f513a6d1268ece75e39a85c6a917ea7e6c72b490e78eb157218d728d4537ada6bb4913cb03fc8f0b9931e4e9a4f1e3e0c5d0c939e5dc6d89e4b610a2c80168bba417a7cb9204e844941cc9c8e66b7643ccc15b03bde5a8ce9c024b565cd3fba4b0bcbe8a931dce3a993733c86d66b58b21607940c2a41438578abdb1fa2860fcbf76dcbce4406a5e628b5297ffe96bb96ddfb8cc11686ae35974b37a59daf39260458014bac81b45f5454dc185c03d086783821fb8b5c0f0cd6fa61d31c30c2aec4a015d2f10cedad254da8fade381bb798f6f395847ce66661ab756cd40d654ac2ad3db4457bbe36f55a5ac95041dd474dc1888e14dd797b9f715378a97640d05694090152b3596e5755e59de73ae300336fdbac43c998c2f04b71dfee96678c854459b872416fa7e4f625a2b9dfbb489d588f3d4f229e4ffd8d99eb8c2f73c65fb7b753e02868dd2f090080b4df316e081ddaa2e891ce4bbbff52e849a8df959c5fada101b1a2813b9d1a126822d3546c31c70b128aed3d4e371c5f5cafd85d6601599f8702349000c368a2b519393f13d4b263cf240d6fe98fe993f7ef6235ed0e5dd4e05ec3184b90697b7dcdbdceedd18a66a9be59aa72ba93c8cb589b7fd508e688aef7181e301001438a0120fbd67fcd1e50b522da28251960f4e07714f29d4f4f1f043972e82a88dce8329e44439254f2786aa2c0fd8ac36550ed3530a24cdeb8d5c5b1cbce101a71aa842ebb670382a17d5c8af01f20bd9b47b6321c541d5e7fb7cc058162e9f7808176fef6187d588e1a61633ea7167616079d5debc1177f89217a1ef0c0ff423030e5d84385a9008a99f64a8514cde26665363f83a9752f428fd0ef08f31869e367f08fa6c0e66d258d1624bb5964726e8c428d88e6a9e206d40343805c9dd26c7d9bbc366afa9fb6665fa07ff20aefe9b940d37aba908ed2b1536e4f3b851d504a5b2b2e4a9d4a3c2e6d47843d01f637bb3818c99ad57abb438d68ed1eae416a34230ab186691511caf17d91c90b2fa3c99acd1769a24d1124f59c4a8f51a417f7b07754107f5f65d5cd3ad1be1fd0258b2259a29c45de00732ccaf715d9a31f682173ad69c4486915e5d288c52fe336a26c33f35c7cd574ae6a0aaf3dc81a9bd3636dcb1347b3e2fc9d33672dd856cb8ee6c1c1a456319d09d898589802e0c757e4e5abac49a594669bf5be611478eba671b52fd78eab533df265a2dbf96bc9a1493672f28422720c2892df5365f7587acf7d14eb1a9edf67fcbd08b17e062b4d478b2ae075e731297353400df5895e9cf1621bed224e80dfcf3dd089f38aa3c9ebafdc9794327663809f2a4f8d6e67f92af0c88df73e4beed1ef822158145e598f8d85fa61e18d4530cbb6253b0d9d190c8170b3e0099c13fe827d5432aee5bc02d9e0eb1b051c36326585da79e49c0659e565636d533fc399e68661279b4ef249f0467426ab87bfcdd73cb2a9a16e7804a149b54f4df6602e040298c7726d38c2680972299a252ad14532d556280f7c4a7760686296d2e735101b92b5b43ffe2c2b0554f848aa08ac9995e35c6831b48c1487f78a027a5a1866c4cf7b852270d52c1d325a3029b0c8e285c39894b280d4658a905004d93f12aaf5c94be579cf79c5959143a9b841ca3a651e27950dc8ab334c4260ff08ac476314405025b9447434e7c5eeace7762a54519e6b59f0da086e5851c7d7c14753889342b971d65888d0b1aefb1dcb62128c48e693c6a0a1e718732fdc67b59188b02754f7a78b39d642eb6a529770fcb47e7487441c6726907d937079edb770a582a00bf8c92ff732873002ada982ac0a1d2388585e57860b128a1befe2ee1427baf5ebf313d69182b627b3cb6117e8ddbfcd0dc86b3c0705d9d2acc03bbf1bc61cd584796e1fc0f49f87dfc7c86c9f2207ce3b62db3f6157cfc84a32f8bcd6d3a4ae6f867bd05327397d4c", 0x1000, 0xcccf, 0x0, 0x0, r6}]) r7 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r7}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getscheduler(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r9, 0x0) close(r1) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x101000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000280)={r9, r10}) r11 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9d, 0x2000) getsockopt$inet_dccp_buf(r11, 0x21, 0xd, &(0x7f0000000100)=""/124, &(0x7f0000000180)=0x7c) 05:10:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4000000000000000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000100)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000fc0)={'filter\x00'}, &(0x7f0000000500)=0x54) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="1cead6b672a8ef325a811c9b1c117193", 0x10) 05:10:14 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 193.330209] netlink: 'syz-executor0': attribute type 41 has an invalid length. [ 193.334993] binder: BINDER_SET_CONTEXT_MGR already set 05:10:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000100)=0x3, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x4, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 193.380159] netlink: 'syz-executor0': attribute type 41 has an invalid length. [ 193.403535] binder: 12245:12246 ioctl 40046207 0 returned -16 05:10:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x1ff, 0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000200)=0x9f, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='cpuset\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f0000000080), 0x50000000000443) 05:10:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) ioprio_get$uid(0x3, r2) ioctl(r0, 0xf9, &(0x7f00000002c0)="c1109ebb2aa06fd4d2fa134fc5dfb2e87ebe3e4a3b99052050e447327d90718e8276102f232c8f3808d56fc9a8c677bd91784f39ce7e6e51032e963ca16e3c71b4a7f484c44d3c793048f05ea2cd63b25089bdb31cd6b2c21f8d783e777f8ec13078b4116e0528c0f4efc775c606e817470017b208196c000c11ac0c535c38964058919e59c402a0315782b4fdeede5736f2d18c42c939b680c80cbfcfd723af1f137d828cb41d9b90a3d098aeed80869ee704434277671c33fc0ab15faeedf33fdab67fb5488c3203d4510ea3bdef1b8dd5525604") r3 = socket(0xa, 0x3, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f00000003c0)={0x3, 0x3ff, [{0x94, 0x0, 0x9}, {0x4, 0x0, 0x3}, {0x6, 0x0, 0x8}]}) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmsg(r1, &(0x7f0000002540)={&(0x7f0000000000)=@llc, 0x80, &(0x7f0000000280)=[{&(0x7f00000012c0)=""/210, 0xd2}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f00000024c0)=""/86, 0x56}, 0x0) 05:10:14 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:14 executing program 3: unshare(0x40000000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000001c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x2) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair(0x19, 0xa, 0x40, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000040)={0x200, 0x0, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'lo\x00@\x00', 0x101}) 05:10:14 executing program 6: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}, &(0x7f0000000000)=0x100) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x200800, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f00000000c0)=""/205, &(0x7f00000001c0)=0xcd) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0xffffffffffffffff) 05:10:14 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000014c0)="2f70726f632f76657273696f6e000d6de871155d5469176cb885015aa2ac0000b8b5a28a29aecb0700385a51250398ce12d984f52a149eaf9866f3c33828fe73d4f319528bbd89fcefb625adac46df7522ebb23c98ad69bdc82509df6f43791702000000ca02988905b60300000010f890b9f57724340b384eca6136eae4fd4a015e073076b8f1cde45eea0f0f0c3ca64ebdd0cefc0d9e8ea91d0bb3a500000000000000000000000000000000", 0x2, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0xf7, @broadcast=0xffffffff, 0x4e21, 0x2, 'sh\x00', 0x0, 0x101, 0x23}, 0x2c) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x10, r0, 0x80000000) 05:10:14 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x14, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f00000001c0)=0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) socketpair(0x3, 0xf, 0x0, &(0x7f0000000000)) 05:10:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cd83daae65f8f762070") r1 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x8}) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0xfffffffffffffffc, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {0x6}, {}, @addr}], 0xffffffbd) ioctl$TIOCGPTPEER(r3, 0x5441, 0xf6c0) 05:10:14 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 193.625944] IPVS: ftp: loaded support on port[0] = 21 05:10:14 executing program 0: r0 = socket$inet6(0xa, 0x7, 0x80) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x8) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4e0}], 0x1, &(0x7f0000000280)}, 0x0) r1 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x7, 0x4, 0x478, 0x140, 0x0, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000080), {[{{@arp={@loopback=0x7f000001, @empty, 0x0, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x162fb29b4451ff32}, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x2, 0x5, 0x8001, 0x4, 0xfffffffffffffef5, 0x4, 'ipddp0\x00', 'rose0\x00', {}, {}, 0x0, 0x60}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, @rand_addr=0x6851feb8, @loopback=0x7f000001, 0xf, 0x1}}}, {{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@empty, @multicast1=0xe0000001, 0xffffff00, 0x0, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x10001, 0xffffffffffffff9a, 0x0, 0x8, 0xa01a, 0xffffffff, 'ip6_vti0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x4}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7fffffff, 'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) 05:10:15 executing program 2: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x800000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfffffffffffffffc}, 0x1c) [ 193.840542] device lo entered promiscuous mode [ 193.863608] IPVS: ftp: loaded support on port[0] = 21 [ 193.902975] device lo entered promiscuous mode 05:10:15 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8001, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x0, 0x1}) 05:10:15 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:15 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000002c0)={[], 0xffffffff, 0x7fff, 0x7fffffff, 0x0, 0x5, 0x7000, 0x0, [], 0x7b}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket(0x11, 0x80002, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x53, 0xab0c, 0x2, {0x3, 0xffff}, {0x6, 0x2}, @const={0x7525, {0x2, 0x0, 0x8, 0x3}}}) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) getsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000100)=""/82, &(0x7f0000000000)=0x52) 05:10:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='GPLtrusted(wlan0-em0vboxnet0\x00'}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=@delsa={0xf0, 0x11, 0x10, 0x70bd2a, 0x25dfdbff, {@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d5, 0x2, 0xff}, [@coaddr={0x14, 0xe, @in6=@loopback={0x0, 0x1}}, @ipv4_hthresh={0x8, 0x3, {0x0, 0xa}}, @output_mark={0x8, 0x1d, 0x60f}, @algo_auth={0xa4, 0x1, {{'digest_null-generic\x00'}, 0x2c8, "ad350806f3157988247ae5794fcf60833e6d4a105b88114431d7b6a894f0c34e38cce5819061acede0d99ba4af8896c45169c04aeddb91a39a7ab6d81e5b447985c7f6a18b8e5dcd6c77774827c091bc140538f13503794c3c"}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8884}, 0x8000) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000002c0)=0x32, 0x4) socket$inet6(0xa, 0xf, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) accept$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x14) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000940)={0x0, @dev, @dev}, &(0x7f0000000400)=0xc) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000028}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)=@newpolicy={0x1d8, 0x13, 0x8, 0x70bd2a, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x17}, @in=@broadcast=0xffffffff, 0x4e21, 0xffffffff, 0x4e24, 0x4, 0xa, 0x20, 0x80, 0x7f, r3, r4}, {0x1, 0x1, 0x2, 0x12, 0xc5, 0x3, 0xfe71, 0x1}, {0x1, 0x5, 0x7, 0x3}, 0x100000001, 0x6e6bb2, 0x2, 0x0, 0x1, 0x3}, [@coaddr={0x14, 0xe, @in=@remote={0xac, 0x14, 0x14, 0xbb}}, @tfcpad={0x8, 0x16, 0x8001}, @ipv4_hthresh={0x8, 0x3, {0x13, 0xb}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x4}}, @sa={0xe4, 0x6, {{@in=@broadcast=0xffffffff, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4e22, 0xfffffffffffffff9, 0x4e23, 0x5, 0xa, 0xa0, 0x0, 0x0, r5, r6}, {@in=@loopback=0x7f000001, 0x4d5}, @in6=@mcast1={0xff, 0x1, [], 0x1}, {0x5, 0x5878, 0x8, 0xa51c, 0xffffffff, 0x9, 0x3f, 0x2}, {0x388, 0x9, 0x2}, {0xffffffffffff0000, 0x3, 0x3}, 0x70bd27, 0x3504, 0x2, 0x2, 0x7f, 0x1}}, @proto={0x8, 0x19, 0x6c}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) sendto$inet6(r2, &(0x7f00000000c0)="040400000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046afd77fc7ae664f65bfc370ad30c2750684a7a4938b4b677081c14445c06232055397880d89abad699af485f036c70bbb8a78410e617e9be77", 0xa4, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 05:10:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) 05:10:15 executing program 2: r0 = socket$packet(0x11, 0x400000000000, 0x300) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r2, 0x300, 0x70bd25, 0x25dfdbfe, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa7}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) utime(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x3}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)="0404000000c000ddb8460900fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94d1100294846cda5e015ceaee4ec3b50035060f118d5e47f55d8a01000000010000002600001b", 0x64, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005, @loopback={0x0, 0x1}}, 0x1c) 05:10:15 executing program 5: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000080)="006cf61aad7bf3794218e0fc4eebc9fc7084041ef0", 0xa) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = getpgrp(0x0) ptrace$setopts(0x4206, r1, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000001000), 0xffff) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000002c0)=""/224) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mq_timedsend(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)) 05:10:15 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:15 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setlease(r0, 0x400, 0x40000000000000) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000000000000010000004000000006000000000000009c92000000000000570800000000000008000000000000000200000000000000060000000061f702e1ffffffffffffff3c1dfffff7ffffff40fedcfde57c97f6da28f5f239f4724011156d05f288b10b3119a1c29fc2370ea5daef2bf901e9c79b5958d210b7d91d15bacfe98ee3a17c94f98049425dc7408f003a6eb1a63d25c065bd025be73af10185883a22ffadc4c008102c07494aad954e53ad48297300285b41f9cfd7"]) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) ioctl$RTC_UIE_ON(r0, 0x7003) prctl$void(0x1f) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file1\x00') 05:10:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x3, 0xfffffffffffffe74) write(r0, &(0x7f00000000c0), 0xfec9) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x111000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000080)={'\x00', {0x2, 0x4e21, @rand_addr=0xb16}}) 05:10:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x7}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x7, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)='ppp1posix_acl_accessð1vmnet0cgroup)\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x3f, {{0xa, 0x4e20, 0x3, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e21, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x101}}}, 0x108) r4 = getpid() tgkill(r4, 0x0, 0x29) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) sendfile(r2, r3, &(0x7f0000000000), 0x100) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) semget$private(0x0, 0x0, 0x0) uname(&(0x7f00000006c0)=""/176) r5 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000004, 0x8013, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x70, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, r5, 0x2}, @request_death={0x400c630e, 0x4, 0x4}, @reply={0x40406301, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000140), &(0x7f0000000180)=[0x78, 0x40, 0x20]}}, @increfs={0x40046304, 0x1}], 0x6e, 0x0, &(0x7f00000004c0)="44a9050a92f617501631f246145e9780111424728d478872e4935f5a547d4d7d65c534d27d2b29dbeea52c398d19ec72ee4dde849e1a8be24c7faf17e94aa1e747473b5d77dbd6078375a62360ce51ce2b626e7b4fee72f722afbdf1b7db2cd45b6d18e62dc5560af5eb19e25f21"}) 05:10:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x14) ioctl$VT_RELDISP(r0, 0x5605) mq_timedsend(r0, &(0x7f0000000040)="b645641a834a1a3581e1993edb4463e8e62f405fe4cf671cde31fc3054930c718492fece0dc3d0e1d3a0cb101bd9cc32f552feef6afda4e2a5e030a5fc5b00fb63dc40cfb1198dc80e26a32814c81e60dd9dab4e1c10c61eb0", 0x59, 0x2c, 0x0) ioctl$VT_RELDISP(r0, 0x5605) 05:10:15 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x11}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) socketpair$inet6(0xa, 0x0, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 05:10:15 executing program 3: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x10000, &(0x7f0000000140)) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x6, 0x62217f) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) 05:10:16 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:16 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f00000003c0)=[0x0]}}], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 05:10:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000280)) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0xfff}}], 0x0, 0x0, &(0x7f0000000440)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008fd0)={0x50, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}, @register_looper={0x630b}], 0x0, 0x0, &(0x7f0000fedffe)}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0), 0x4) getpeername$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000000)=0x6e) 05:10:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="290000001800190000003fffffffda0602000000fde80001024000040d000500000500000005000000", 0x29}], 0x1) 05:10:16 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7fff, 0x4000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x200) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = socket$inet(0x2, 0x3, 0x800000000000b) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/159, 0x9f}], 0x1, &(0x7f00000001c0)=""/116, 0x74, 0xffff}, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) ioctl$FICLONE(r1, 0x40049409, r1) [ 194.860850] binder: 12412:12413 got transaction with invalid offset (0, min 0 max 0) or object. [ 194.890585] binder: BINDER_SET_CONTEXT_MGR already set [ 194.898929] netlink: 'syz-executor1': attribute type 5 has an invalid length. 05:10:16 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:16 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)=ANY=[@ANYBLOB="b5000000ee0cd74c4f3d0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050324f11cc40000000081ff34c78ed3d67b8024882a1567a7647d6d54a7c9d50e276cbc6cab7c73a4643f49f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0b40205f13cfa9b5327a4ebe5e9b3eda749101be2fbaa07d30eb"], &(0x7f0000000140)=0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000340)=0xffffffffffffffff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 194.916611] binder: 12417:12418 ioctl 40046207 0 returned -16 [ 194.932392] binder: 12417:12418 got transaction with unaligned buffers size, 4095 [ 194.943740] binder: 12412:12413 transaction failed 29201/-22, size 0-8 line 3030 [ 194.960432] netlink: 'syz-executor1': attribute type 5 has an invalid length. [ 194.980180] binder: 12417:12418 transaction failed 29201/-22, size 0-0 line 3012 [ 194.989794] binder: 12412:12413 got transaction with unaligned buffers size, 9093 05:10:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x8010001) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x81}, 0x1c) fchmod(r0, 0x2) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x80}, 0x1c) [ 195.010732] binder: 12417:12418 ERROR: BC_REGISTER_LOOPER called without request [ 195.019183] binder: 12412:12413 transaction failed 29201/-22, size 0-0 line 3012 [ 195.055004] binder: BINDER_SET_CONTEXT_MGR already set [ 195.060748] binder: 12417:12431 got transaction with unaligned buffers size, 4095 [ 195.071903] binder_alloc: binder_alloc_mmap_handler: 12412 20ffa000-20ffd000 already mapped failed -16 [ 195.091167] binder: 12417:12431 transaction failed 29201/-22, size 0-0 line 3012 [ 195.126700] binder: 12417:12418 ioctl 40046207 0 returned -16 [ 195.135106] binder: BINDER_SET_CONTEXT_MGR already set [ 195.150670] binder_alloc: 12412: binder_alloc_buf, no vma [ 195.156349] binder: 12417:12434 transaction failed 29189/-3, size 0-0 line 2967 [ 195.164453] binder: 12412:12413 ioctl 40046207 0 returned -16 [ 195.183932] binder: send failed reply for transaction 33 to 12417:12418 [ 195.208524] binder: undelivered TRANSACTION_ERROR: 29189 [ 195.217557] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.240335] binder: undelivered TRANSACTION_COMPLETE [ 195.245526] binder: undelivered TRANSACTION_ERROR: 29189 [ 195.269994] binder: undelivered TRANSACTION_ERROR: 29201 05:10:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfff, 0x200000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ff4000/0xc000)=nil, 0xc000}) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) 05:10:16 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:16 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) r1 = socket(0x11, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x200, 0x401}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x8000, 0xe5, 0x800}, 0x1c) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x1, 0x4) 05:10:16 executing program 6: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x0, 0x4e, &(0x7f00000000c0)="84a070a7924ae3ab2d53b51461e50f1bf266da3a29c7d13d1cc423b1f29899c34e85fd19d01dca823411ad9e5896711580ceb14ee351276f9a596c24fc5840ba216754d4e8b4038ab0ee23749ece"}) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x80104592, &(0x7f0000000100)) 05:10:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r1, r0) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x785f, 0x6, 0x80, 0x100000001]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0xc0000100]}) 05:10:16 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340), &(0x7f00000003c0)=[0x0]}}], 0x1, 0x0, &(0x7f0000000480)='I'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40486311}], 0x3f3b8c0a42f03c70}) 05:10:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000280)) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0xfff}}], 0x0, 0x0, &(0x7f0000000440)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008fd0)={0x50, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}, @register_looper={0x630b}], 0x0, 0x0, &(0x7f0000fedffe)}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0), 0x4) getpeername$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000000)=0x6e) [ 195.524397] binder: 12454:12457 got transaction with invalid offset (0, min 0 max 0) or object. [ 195.536737] binder: BINDER_SET_CONTEXT_MGR already set [ 195.542325] binder: 12458:12460 ioctl 40046207 0 returned -16 [ 195.549071] binder: 12454:12457 transaction failed 29201/-22, size 0-8 line 3030 [ 195.579495] binder: 12458:12460 got transaction with unaligned buffers size, 4095 [ 195.601436] binder_alloc: 12454: binder_alloc_buf size 9096 failed, no address space [ 195.609474] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 195.618743] binder: 12454:12457 transaction failed 29201/-28, size 0-0 line 2967 [ 195.630952] binder: 12458:12460 transaction failed 29201/-22, size 0-0 line 3012 [ 195.682576] binder: 12458:12460 ERROR: BC_REGISTER_LOOPER called without request [ 195.698567] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.706167] binder: release 12458:12460 transaction 40 out, still active [ 195.713131] binder: undelivered TRANSACTION_COMPLETE [ 195.748997] binder: send failed reply for transaction 40, target dead 05:10:17 executing program 3: prctl$intptr(0x100000000021, 0x1) 05:10:17 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:17 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x89a0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="93", 0x1, 0xfffffffffffffffd) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r1, r2, 0x0) 05:10:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101000, 0x40) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xeabc}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x3}, &(0x7f0000000240)=0x8) r3 = open(&(0x7f0000000040)='./file0\x00', 0x10800, 0xc) getpeername$inet(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 05:10:17 executing program 6: llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/94, 0x5e) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xb) r1 = syz_open_dev$amidi(&(0x7f0000003740)='/dev/amidi#\x00', 0x80, 0x20000) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000100)={0x2, {{0x2, 0x4e22, @multicast1=0xe0000001}}, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x108) getsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000003780), &(0x7f00000037c0)=0x4) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x6c8a02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0xffffffff, 0x3, 0x100000000, 0x2, r0, 0x800}, 0x2c) 05:10:17 executing program 5: r0 = socket$inet6(0xa, 0x401000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f81762070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 05:10:17 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") open(&(0x7f0000000100)='./file0\x00', 0x141045, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x8, 0x10, r0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 05:10:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010300000000000000000200000000000005000000001400090008000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0], 0x30}, 0x1}, 0x0) 05:10:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x26e, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) shutdown(r0, 0x1) 05:10:17 executing program 6: times(&(0x7f00000000c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="3e0f238966b9030100c066b84c18f16566ba7afd6b770f30360f01d12e0f019c06002e36ab2e0fdac00f01cf0f01ca66b8a8b100000f23d00f21f86635200000000f23f8440f20c0663509000000440f22c0", 0x52}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:10:17 executing program 1: syz_emit_ethernet(0x2cf, &(0x7f0000000300)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@mpls_mc={0x8848, {[{0x800, 0x320, 0x0, 0x7ff}, {0xff, 0xf96, 0x2, 0x5}, {0x8, 0x4, 0x100000000, 0x10000}], @ipv6={0xb765, 0x6, "ec39ac", 0x28d, 0x88, 0x3f, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @local={0xfe, 0x80, [], 0xaa}, {[@routing={0x0, 0x6, 0x3, 0x1293, 0x0, [@empty, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80, [], 0x14}]}, @srh={0x3b, 0x2, 0x4, 0x1, 0xfff, 0x10, 0x9, [@dev={0xfe, 0x80, [], 0x19}]}], @gre={{0x0, 0x0, 0x1, 0x9, 0x0, 0x5, 0x0, 0x1, 0x880b, 0x72, 0x2, [0x80000001], "ba36e1a11a52d6c33925a87683b392fd6ee2d7ceca938b63748ab01968ba4e45fadf97d3e4a3beb6775795057871b3d4414e5b1b11130454484a071ea7da40e37055854ec46e686c6b61d225a89abc4d4ef80fa313a366dcd7763b8cffed79370d936b775b05f612ab5d92220415d8efeed0"}, {0x38, 0x0, 0xfffffffffffff800, 0xed, 0x0, 0x0, 0x800, [], "9ddb77cc8ca86d34b9e6152a125b1839299e9bb6051d03fb6bba774b2d2627a75d3ba927551c49cd06c07cbce6d92ca7d47ea2cdc03f63882d7dc62d3bd521e5aa9c1ad981b677db"}, {0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0x86dd, [], "9daf75998af9cab1bad6f9a32697d62e8b506814dad5111d2f9b55c20df7b1d9a7406a862a6c915596a94fdf8705bfdd31802ac282d17198aaacb92dad437ccfbfeb61aadf971670f5ed07886d2d84218d2d15feb422a6d60465f7cd5a99de2133c4245c12c94a15f59643f92101c6f0f473c8c5b621e3c17ec7b5207181a3fd702f"}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x1, 0x100000001, 0x67f0, 0x1, 0x0, 0x3}, 0x1, 0x401}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x2, 0x5282, 0x400, 0x3, 0x40, 0x7}, 0x2, 0x1, 0x401, 0x5, 0x0, 0x73a, 0x1a56, 0x1f, 0x6, 0x8000}}, {0x8, 0x6558, 0x4, "13be7633764626d78e59b1618207ce1b4d687d41c39d24a455f96154d70c23c0100df8a4f4c93e81a83bbde7909e6fbac87e8d135176ac71b2f4f0503c989d30b930546e8907d8eb5b503081b8cdbb18eec1e1317a6d1fabdffe71fce231e5fac61d9210af3d61ccf88193bcfdd1958e1a9b795b0969f44a69b26ef085d53ef95429a728d6f0ff026c2b58ce9f2cc13a51915051425d8ee2a6544d0f45df04743f360fb93c4c41f2afa7318e88801360d89450a39b7f0ebb7ef3e4"}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 05:10:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x81) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r1, &(0x7f00000012c0)=""/4096, 0x1000, 0x2000200020) [ 196.188310] xprt_adjust_timeout: rq_timeout = 0! 05:10:17 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000002c0)) getpgid(0x0) getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000300)) getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) getpgid(0xffffffffffffffff) getpid() gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) getpgid(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getpgrp(0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = getpgrp(r1) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r2, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x7, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400400, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000200)) r6 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x40000) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r6, 0x4) 05:10:17 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:17 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) umount2(&(0x7f0000000100)='./file0\x00', 0x2) poll(&(0x7f0000000000)=[{r1, 0x3}, {r0}], 0x2, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8001, 0x4000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 196.247065] xprt_adjust_timeout: rq_timeout = 0! 05:10:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x2, 0x100) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0x9b, [], 0x1, &(0x7f0000000240)=[{}], &(0x7f00000002c0)=""/155}, &(0x7f0000000400)=0x78) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='netT/ip_mr_cache') getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000440)={0x0, 0xffff}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000004c0)={r3, 0x1ff}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000001c0)=0xfffffffffffffff9, 0x8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r4, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000080)={0x1d}, 0x10) recvmmsg(r6, &(0x7f0000000180)=[{{&(0x7f0000015000)=@can, 0x80, &(0x7f0000015000), 0x0, &(0x7f00000000c0)=""/184, 0xb8}}], 0x2, 0x0, &(0x7f0000013000)={0x77359400}) sendmsg$can_bcm(r4, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r5}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) 05:10:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000200f7ff001900800000000000ffff000000000000000000000000003fcf6d70b8a7992976325fe7d3ec6cb40d6a6efbfefdb9bcd9395d693d057aee4f670ad8ddf46070114d6d097ba61db59160b01ef931587b224887e206405086c959db14822373c139000000000000000083f0bacae791a2c173d09961972ef453750d40fc5c"]) 05:10:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x7, &(0x7f0000000480)="025cc83d6d345f8f762070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xfffffffffffffdc2}, 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/152, 0x98}], 0x2, &(0x7f0000001040)=""/4096, 0x1000}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d0000020000000000000015a38374"], 0x10}, 0x1}, 0x0) gettid() r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000006c0)='mountinfo\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000500)={{0x0, 0x3, 0x4, 0x3, 0x6}, 0x800000000, 0xa9e, 'id1\x00', 'timer1\x00', 0x0, 0x100000000, 0x401, 0x7f, 0x10001}) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x3f, 0xffffffff, 0x2, 0x401, 0x5, 0x4, 0xff}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf2501001400790000000800120003000000000000003800000046003270b4a69956a98fe40000000000ac1414bb0000000000000000000400000000000000000000000000000000000004000400170000001f000000000700003f00000000000000030000000000000002000b00050000000100000000000000"], 0x88}, 0x1}, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x1}) sendmmsg(r4, &(0x7f0000000180), 0x400000000000117, 0x0) 05:10:17 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)) io_getevents(r3, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) close(r2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000140), 0xf000000}]) ioctl$int_out(r4, 0x5460, &(0x7f0000000040)) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000040), 0x5}) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7, 0x400000) 05:10:17 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001400090500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140006000000000000000000000000000000000014000100ff0100000000000000000000000000011c000200fe8000000000000000000000000000aa"], 0x54}, 0x1}, 0x0) 05:10:17 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x6, 0x0) syz_open_pts(r0, 0xc800) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2da, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a73000)}, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:10:17 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000000000004) clock_settime(0x0, &(0x7f00000000c0)={0x0, 0x989680}) 05:10:17 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 196.562747] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 05:10:17 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x100000000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000180)={'bcsf0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x2cb5, @remote={0xfe, 0x80, [], 0xbb}, 0x2}}, 0x10000, 0x0, 0x2, 0xfffffffffffffff7, 0x2}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r1}, 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000001c0)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3f, &(0x7f0000d1c000)=0x2c, 0xffffffffffffff50) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) 05:10:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x14, 0x11, 0x1, {0x40, 0x4}}, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x20000, 0x0) r2 = dup2(r0, r1) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) [ 196.612550] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 05:10:17 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f000000eb80)=[{}, {{&(0x7f0000009dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80, &(0x7f000000a080), 0x0, &(0x7f000000a0c0)}}], 0x2, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@can={0x0, 0x0}, &(0x7f0000000100)=0xffffffffffffffa3, 0x80800) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x44840, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x40000011}) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000080)) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) 05:10:17 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000028c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt(r1, 0x541b, &(0x7f0000000080)="a1e5c684d509c155fb26c7e906da440f126b1ba6b140d93588ada71ee1a8297141b0a65dc1a580275968e2705573bc10995b2fd629968979b9e6d4bdb791089aff27af80bb1fd3b566f5a893bca0d6b3cd03f38f489ae6e21e700eac0f60c1cd9a84bfd7067e91ac37f1fee85ba91a5687b0f7faf898e180f44b7f3e08868fe58746cf8192660ea449d70b719252d73cb6d56003b4992ddb8fa37ba870c03983c219cb920c7615e690de6f9945d6") r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000000)='g', 0x1}], 0x1, &(0x7f00000000c0)}], 0x1, 0x2002) recvmmsg(r2, &(0x7f0000004b00)=[{{&(0x7f00000027c0)=@ipx, 0x80, &(0x7f0000002840), 0x0, &(0x7f0000004a00)=""/245, 0x46}}], 0x40000000000019e, 0x0, &(0x7f0000002880)={0x0, 0x1c9c380}) 05:10:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206430000a84309c02623692500080003000200f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x808c1, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000000c0)={{0x1, 0x23}, 0x36}, 0x10) 05:10:18 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:18 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/33, 0x21) getdents(r0, &(0x7f00000002c0)=""/135, 0x1a5) 05:10:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x7e) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x5ed000}], 0x1, 0x0) fchdir(r0) write(r0, &(0x7f0000002140)="c100f54464ac371234e3553be243b66aec06b2e1b27703cd9d84858ad3331bd069ceea6563e693b0352f1ea530c500370c7f49a29751d57591dbe41f5ecc48208642b1d9b9e80f2c8680e91dca3cab623a76aea290a9213cff6ff4b0e74df6333ec569ade4b946cf4afe194a25c000b570a7ccf317d3fc4a0f46010cc0149232ab5706274d965d4ba94cd5be36a8744025debd376efc74f9b81e1e5f580cc57d8ab63e52d43d8004e6f8dccb86a505d2f19465ca86cdfdfb11c9ce3dde62449bee4faf824bff1d5d19e3e6814188d3d1add196d65379ddddf3a75fc80d8cb0daa925f34fa4aa617459d21f9087e44d6daf60c963cfb33d9ebf01996c5321af02c486cbda1be634e0ebd093c12bdbed2b6765183cccc20aecc54f9acc0effd115662d4520cfe3f29b368ba8cc2144dfd81f93c36752a3994a2f06d16291cbf9ead1e6b1f546728d1546c909820e2de542b079dec1cde33b2c17a05a95fe73181359f189b6d18b4c9372c46375e339f786d3688f4a20450a2ebb719d6dbcdb566fcfef128e90858f686486de55974f2285abb59280e575ee47f925a7d5f8e43bf66a03222ae07ab3f38ec63807a33bc1cc341bc545d584fa06dfb99e0e090b9df88d77a61006dced7c875883fab8c90d83ef0d82d9e08a97bd2684bd555e415520f18b7b91aa1bdb794755118d355424948cb930f71828c84c905481a1e539c1644fed3279c53a2236d34ef27b2a4f28fa6e045a64db46030e150d632ea1bdad0943887105e7a6e2603dea9f37605ad3a4b1b19ca4c5c750050dc6b00b759d93a7e9a37a6ae2b825652fc13c323fb2ce4e3133389f8ec9b80384aaca6f731973a642a5be436e04f570106cdc3dd9b4dd05190cd23b2ed559e917f84e36a8ff0a6155becdf230b4f63f5dd917ce32bd1262ef1991a9e066fb214448a63c21e06fa8c85c8f4b68f4a175c7e2437211a346766d19a6b3d302b7b26282761f54996fff919dc9a9ff1b534504f803c4cf09c10da0596abee40226fdc28864440f4bfcb9daf535cf6f3dd64109fb42f4fdd3817bfeaec3e98d1e15949766b56999fad2af4bcb0b0435992dae446c1f0846ea0bb3f8b5b7b947c2353300a18cd0dd6fea16491e87a563f8a31df1fb8ea4b7758e5adada5fc57fc583d6089cb3adc310347dcaa500414f263ca9d82c5638efc30b4208b2064a1e1f56e566c92e8f53eeb493d5fc0e5485c3aaa3d4186bf64a6145da0b5be18a0578f0bbbfaa38ea3dabc944335f2da21f21708f75bfc46f7b87d829f419251f95cafe25462f3ca8992ca7e348a00fd81b6d7c42eb4ecab46a06222021a61d5c2fa320b916227841e52ab7a068f6d0783e20962a76c5f759594c20436820e7e9ee09490eb6a265c09f257991fcb2e8fb43736b8b83a0defc9331d0a76e6d751a455e84cf67b1d13ad939c9ec7f21d8a3644012a35ad06e58a55bc707cb1010e189309f0c67e37b2914e3e3982a9ec5bd95353ebc8b839c4599ebf2da24cbf76730fbb5caa2af50ede60c957fe6566b09e15a3ecb2c192ae802e8a5c137fa9c196a1772ccfd5ace3b71b1275b2f3a2ccc8440552934594458df7be923972f60e99a89d1bfb137470cb3f86a89637d60c931e8d92ea65fe19944114f7bf5d003f2696f267e5526cb3a0d0e2fc1cd6f8308d7bb2f2ee682617b5a687ad81780409da2d37100ecb6bd3eceddad65c5dfea8c6125143125f26051f6c230d1ad3b32fe4d9709ae22c4fc9f5963ad75023513189ee549a7e8ce70977db28768aa8e5bc9623e95b0d32add00dc03d99803feb8de0ee7d34cb2aa23e2de20b0360525d4aca61cf27526d1f0c3f1155b59a494b90ffddc75a4056ba84a33d5f183f2955da9c0bc320145f0c7ab9096a4cdcf599b66a4063dbec5e4a34ec06887942ea93ff828f6efd631e183c4e3d597f08c43ffd2b298c5b7391d6214267d651f10e6f4738eb97455cbc12a21c7ca9232411fd4c4e13ea7c2ba40dcfe8142534563c242df8eb5bee1cb590da5aa798e1920f6115218a618feabab5ebbfd19503873d3b9a2272ea196f71412b46a0ffb50d525d5c5604c77451957ac08a014b8b9c0a76af00552e0d4db5edc9dfcbf076330dadd511fbe267f6ee6347727318da28f2754a9e29c0a8fd624760ac42596d009b9667737de8180fe9edf4807fe23fb3f215be8822fa0ea6f2aec080d95c0192cd59e12cc3c46693b1e2b490f1258c3798c7ea81947eb2c476b2b486fac66ed35db91a11d2b47b6a224ec5bdd613d133a4573e0c429d6a46f961f7d888a5406b5074da3393a9a49a69f3a2820abdc63019c24880252a42d9bb54777f809168fbed6a489a9cd76ffd96706c40dbaa4b6fe398604c0970849710b2dc20a17c1399ccecc233acc80eafbf5420f8d4f3ac614bd0f7c6a8b72165879e7cf6d247480729f9f3ee27d58d6f03b6df13053329380360e6f4f320b287d60635f000b9d1b3620709bd8de808633bcf721ae4c3bfc3434cc47c1453c7ca53920428557f25a1112302c6511cbf11238a0d1723ffead504957084aa8df6d36bbddae25b464e9db29adbc0d9660c5dccf7ce2cb3d676e545fd4ecaad6ea682e37be84adbd875af88ca41c8d62eed4fab703a9faf715117b90a5f3e0b2db1ae17f24c85fb6fa4011f32382c79876894e9379fe9d39c05a2c89b3f3bf2cafc11b96622b3d7b0480f7bbac216577f6aa9943ff7a4de98c08251c806445dccebbf0a113975ab28874109aa02b0bfd56cd2e155aee2a92acf0e2dbc7f41a29a3b2cb7eba25e42540c609148fc2143042ac34bb8e0d4cd244856666132ef757d323971a5d34bcc38674b255fbf0adf7f5c668595fe5a1545100de7900fe5096c04ce04162a19a3d665bf24586e4edd944e82704f51d5cd68f662dcbb5585a06a8c20624ed0be06e8fd4d3260fb855c2eef8c4e2c37dc2de6d2491451ab30fed6a3c23b96d79a2d2a1974831b0f3abd155584f63aee6b53a6016824d3586b998f2c5f971c2c7cf90c71ecae208dcd16133d9b9c0c72cc783b23a626cdba5b26882e6b43a9b86945e52ed30cb9c80300695eadf46e0723d963f7d0c7563c66851a33d15c58b6f27b4d7c2e4b6bd9d8f8c9370e0dcfdf0f997c5c2b9847b6555e2a1c6644d93e3787e9961f7307f012fb473495205a7dad0c08842632d9c9115b95ddd617b3286176362035b0bf0bdfc6e56ad8b9dde6bef617984ae395abb87b54067d2961c6afd638dedcfab9d3acbd181bc412250eff1d5037a1902c2f17060f09d610ed36242d0560205cd0997d5b2dd98fe73161d5f13010f0ae2955eea60eb6c592842c4895ff9a44501e1f2918f749ef91bda1bc6ddcfd5cb15787239e84dfb9270a5343da7947129b2799b98848904fe99423406cd3e186721eb5285b0ce6995966eede02b6d8d641029e83b122d5fb6311d66c4fbcca64c04b846571b6ec3229dca8d30c5f0380ab192f12857259df5186e85663cc553538aaa9d506ba774f005a55ca7f3d8d7b6dc0642fdcc6cf059dd4b301c38d9c6ebab233f2ddf758ee0b531e556d44180fd104f02090c63f62161f67f70a46c881fdb70369aca2a464e9e35381d77d58a1e4e6466b9dd836f7d2d8446fca95370c997a0b7636e834d3afb483515329c0c8fa9c5d721b20c2458ef1c20358756bd6919fc01eea9d674b25ba8d3e0e588b36505d24356df2753c5b80ee318da60d81d4500318952db54df5bbc75592c39c21b52fa654b7dd074ff888d010acc0ec23cde0ad3a140478f29eba523a395a1113e76da401573a9934c591331cb4e4ffed37ec338d6a54f511823aabf39659215d7fdf76317ad74be26d0837fc790dc738540374b8a1b1c1e0fb7df3e162e5a90355b677bfe83456035b8316ce0592d3a449281b8ab80b2202bf464df8f6e260992872b5445c2ca55d4c0286f7b95524ef661d6b753ac4978bbacd01d334866503edd7900c22d3b0a234b8e2ed0e23a8e0e99b3ba485aa4e7bd1010fcc5960a4ba04898cf6cd6b7d653e2d619f59d74ff392c3bdb907f906e9f8b763383988bb1c859d6f86f4556611291c697345a6a36ecbfc15af99646faeae2220b47a6c73083ba7fcb030a0e1d772f4bae4a5ca752c4dd436ac63b1a3183d3ebd0d260cf13904676e0867ed8450340090437a4a5acf4d3d5c4a100e002bb8e1e9d91c5f29400b47055c84a44486df33f719c083a5e2a506f314b65a8072ecc05c1275c020525ffdbd0cf13201bb852ece60c5546c2b220adec2ccdecdaf6a4a612984de7924a6d7abdcbd9df6951485b29db5c14730d4ace8270b486ecf39e4e58356ccd5dff8853ff0f784a3f912a32375af99bb9dbe97bc96b6aa22c0fc8a83522a8baf06b15dcb187b54bfdc508402c359e5cf6f6c487c5afe164988b84c72cee371e7110882e44e7f375b2d0950be7d7ef20aa8d389070c3998ca40047cae40e09e4898451257a387c06c3276f281eb59a1690c72371e33a87574919bf6560e0e66836fb8ab4641dd25f7321a0f42058281d382d8c4765895cf38aa1ab13eaeabf580ab2c6172ba3c854a5baca713677f19e10da00e6f9a7a39f23a32969989ed5ca56b025b6bbae1cdaa88fbcce0f8e351e3ee430d37d1017a349065d75907cae6784388c61c360d56038340ad67161e74bba100da650631a2af88cfc07948e6d71ec7005aee630e472adbd761d16e811df539e37d3dd1b2c9759f771694965b489d11442657a4cb0cad8e44135898f50e3fe82edce873139d576f12ae8d09b5ca8ef7d2218cd8879363858b4f443c1408514d2e74081f1316c315ea1b33f2f3e405f880638539effa4b0f08e769ac74898f322380c6ed5dc64c3d3386ceeb5bfe6b7d960f3ddbaf25daa2cefd85afd55e6a262366545e4ae41fffe97d378b8e3dae6920485b6abe0be051c6842474454f545ca742010c2eac33e88dcd6b8dd3f2221ca5acce904b6c11653eed8b3f445288f33f48f7cf7c94d5e7c7a8da06f5d49ae855b1159fce85ca68a0f62ac34215a5b580e5002c340d71cc752a76737547c4b6f80626e9ba76398ebcc6da49dc9cc9c3ce036f94bd8eba179c2384572ea1705527907a3f13b474fabe357759eab773bf2c22e9147398bc17c8b53cdd676e22e6cfdaa9a6011a227be4d53c42cafcfb5394ba588810e6629d7a60c2aaf8f9e859c25e74ffa3b70fd5c91d80d38cbf71c4803d0a4bd402bb37899c4984381390308ffe9932320d92acc1464a18d12b5dd7b6126a2bf1f8ae92ff31bc6921cc6f72b917b4c3859601294097fab68d98e671e227448503885be4de64c505129dd7a97efee598cc8aeeaadb0fb8b53f4d0e9453c3d07705b00dad5b84eb89a5d7c231ae859ac4f573c6ffe719be5c98d96763bccc09bb6ef73fe519df94c6c8d2c0d216f39f4ca17e692e638891f58d564574c557a0a123aca07c254640b79681f7cc1f29ce51525817b5d47d2c67b9129fb3526f717ba94854dad2173d3230530afc853858f67a872c0cc52fcb4b52230f23b134e0db58b092f23c6e2e2329d9b40bbe731d56df4bb23a0f5bcf53b8fe33cbc7003027c9195676fc5da3ec2c29c0c5ead7d1d55881810f5ad2253e92680bbf0d6871bcdf996cb54b5e4fffd350133ff942eae1cf658e39d2437dd07173099de6c136c7da58bbeb34748aeeaa938166e57751347f4e8764dc3801399ea1d00b3a45ec435f18b8223199fb04b39abaa4a391af8f9ce062ccaad134c0d8100df5a7f2d3d5a90563a07d2ea54c8a47329665f7af72fb1183f7ec1d4501ef59a085951a2f75371516e93af6383fef6eae84224c43faf57467ff300173b0f5d0fcea8f57d6189bd185548cf3fc4391374b93408316da0739e81e9b51823f5fb916a7facfe3ad721f2e17dae599535e6d9", 0x11cc) 05:10:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0xfffffffffffffe2d) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = dup2(r0, r2) dup2(r3, r1) 05:10:18 executing program 0: r0 = socket(0x200040000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0xa, [0x2, 0x9fd, 0x6, 0x8, 0x4153, 0x5, 0x8000, 0x5f, 0x6, 0xffffffff]}, &(0x7f00000000c0)=0x18) sendto$inet(r0, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) readahead(r0, 0x5, 0x7) sendto$inet(r0, &(0x7f00004b3fff), 0xf00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/40, 0x28, 0x0, 0x0, 0x0) 05:10:18 executing program 6: r0 = socket$inet6(0xa, 0x88800, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r1, 0x29, 0x8000000039, &(0x7f00000000c0)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) sendto$inet6(r1, &(0x7f00000001c0)='a', 0x1, 0x0, &(0x7f0000aa9000)={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) listen(r1, 0x5) eventfd(0x3) r2 = accept(r1, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) dup2(r0, r2) 05:10:18 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10001, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="4e6a99624f7e0a66d541aedaaca25717", 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x5, 0x5, 0xff, &(0x7f0000000000)) syz_emit_ethernet(0x209, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x30, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000040)) 05:10:18 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xfffffc29, &(0x7f0000000600)=""/50, 0x0, 0x2402}}, 0x305) write$vnet(r0, &(0x7f00000000c0)={0x1, {&(0x7f0000000000)=""/24, 0x18, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 05:10:18 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:18 executing program 2: rmdir(&(0x7f0000000280)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x100, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x2e, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d, r2}, 0x2c}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000340)=0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x0) 05:10:18 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000180)={0x10000, 0x0, 0x3, 0x4, 0xffffffffffffffae}) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0x2, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x7c5d, {{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0xa}, 0x1}}}, 0x88) 05:10:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) bind$alg(r0, &(0x7f00005e1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000cdfffc), 0x0) 05:10:19 executing program 2: r0 = socket(0x200040000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000180)={0xff, 0xffff, 0x3ff, {}, 0x1}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x101200) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0x7ff, 0x5]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x0, 0x37, &(0x7f0000000080), &(0x7f0000000200)=0x4) 05:10:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x101, 0x20000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc7539esp(chacha20,poly1305-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) 05:10:19 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:19 executing program 1: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)=@hci, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000800)=""/216, 0xd8}, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000040)) ioctl(r3, 0x8992, &(0x7f0000000080)="450b36a6855c08872cf66f") r4 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="dfb9e19b42d1a0206890767b585e8079ce574b922472b351", 0x18, r0) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r4}, &(0x7f0000000740)=""/132, 0x84, 0x0) 05:10:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, r1}, 0x14) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x2, 0x0) delete_module(&(0x7f0000000000)='\x00', 0x200) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000010000000000000000000001e00000010000000000000000000000000000001000000000000006659b6386b81ee861cc1d686d95bffcfadfa109364c4374c8aef2da1e3c5cd9bf41e9cdfefa8be91bc4b4ac1a0534abc48f9ba44249a1f34c59bb35b1139653376650fe85e67e1d5b0d7b3a9ede5c41d3b84beee12bb9a9e75242bb3f946bda9f832d9a60a0313e526e5c7f127408f1751d46f6de6a097ba5afa3c71e7dec15e892e8b725fe46ccd024210bb8cd834d882e15b6ae2dc8fca385c791f8355e38ea5778c2c49c4d9b00c03bf50aef3746b6afe17ea1ec325e2d36c4332c2fe4cf43b9db0ef439551d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2e1142f1defac052bfb0e4f4a4284b0412f06e5f2205c70ab26f3696daf3a8e5d5991b2412f0e4c3e693730de779e7f4a1b73582c60e0174ceb777e9dcad72c5a0608c7dbac5b23472d6efc2e287d09981cfea1ce4bb5752c0f38a1ed4f865a8a4a666e711353c90bc4bafd0c0652518b26963b0368a14f6af004b31f5d17ec94c7b08e801a00ed2538009103b92fdb5c84116ad759de117d86a3070b5da4742bf87b2b96fc58ec43126937c6c02c314bfbff1c000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x2}, 0x20) 05:10:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x280, 0x140, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac, @rand_addr=0x832, @local={0xac, 0x14, 0x14, 0xaa}, 0x1, 0xffffffff}}}, {{@arp={@loopback=0x7f000001, @multicast2=0xe0000002, 0x0, 0x0, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, 0x5, 0x5, 0x2, 0x401, 0x2, 0x4, 'gretap0\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x190}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}, @loopback=0x7f000001, @rand_addr=0xd021, 0x5, 0xffffffff}}}, {{@arp={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x15}, 0x4fff4de5e377529f, 0xff, @mac=@random="bdd8f7a330d4", {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0xfff, 0x5, 0x6, 0x4, 0xfff, 0x60, 'ip6_vti0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x0, 0x2c8}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) setsockopt$inet6_int(r0, 0x29, 0x180000000000048, &(0x7f0000000000)=0x1, 0x4) 05:10:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r1, 0x203, &(0x7f0000000140)={&(0x7f00000000c0)=""/76, 0x4c}) r2 = dup2(r0, r0) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000007dc0)=[{0x0, 0x0, &(0x7f0000001a80), 0x0, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000880)={&(0x7f00000001c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/100, 0x64}], 0x10d1, &(0x7f0000000840)=""/38, 0x26, 0xffffffffffffffff}, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000180)={0x77359400}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)="fd82ce25d2fda493c0b0e140af5aedee3f06ce2f672da62698c804003091948aea6ee13f9611a11756c7f1c67c05e69040e8a1f0bba5b55139da78a00b71d446f9c19dc0d7ec2ff69c150fcc3a9a3410400a49acf9bb232f823d5ec53ec72fbdef81e2ca122caad3c83311b376d6954273f4c4e61dc5c34ad40240281eedb93f67a982183500457a", 0x88) 05:10:19 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921e"], 0x3f) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x20000, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="0665e1035fb3ad65f626d22ccc282841298888df6d9996707f4e05c326faebf91ea885fc9fe5e69f7f2e1eb391377c9925391945f8b79d2103974b210b3573c3921ecbd9b50ba8a068e6184eac4553ca662ccaaf0752", 0x56, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x6, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x87) sendto$inet(r0, &(0x7f0000000140)="312e26fdb87a1aef2db94c2b2f12de098ce1b0d0f95d366342163e34606e47a7034478986a3ac3dd0bd51675bd365ceb58e5845ba1153383292173c146fe0029717de7d7f453cf05c758570c0b09f8de373d9528fd2e01c088ee52f486fd185be9ee719b4e82a15b389d39a64b10daa08deddc7671421adca3870a215b3a59e480daf9", 0x83, 0x80, &(0x7f0000000200)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) r2 = accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000000040)=0xd) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}, 0xfffffffffffffff8, 0x50}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r3}, &(0x7f0000000280)=0x6) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0xf1, 0x4) 05:10:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) r2 = socket(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000adb000)="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", 0x7d0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='securitysystemuser{bdevnodev&,^mime_type\x00', 0xfffffffffffffffc) keyctl$clear(0x7, r3) dup2(r2, r2) 05:10:19 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x100) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000180)=0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000fcffffff0000030007000000000002004e21e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e20e00000a0ea864eccd2ce5ea2"], 0x60}, 0x1}, 0x0) 05:10:19 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) keyctl$session_to_parent(0x12) sendfile(r0, r1, &(0x7f0000000000), 0x101f7fffd) sendfile(r1, r1, 0x0, 0x2) 05:10:19 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0xffffffffffffffcd) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x30000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x1000, 0x3f}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380)={r3, 0x1}, 0x8) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r4, 0x5}, &(0x7f0000000200)=0x8) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0a, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 05:10:20 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921e"], 0x3f) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:20 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) io_destroy(r0) exit_group(0x4) io_setup(0x80a, &(0x7f0000000280)) io_destroy(r0) 05:10:20 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') 05:10:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x75, &(0x7f00000001c0)=""/233, &(0x7f0000000000)=0xe9) connect(r0, &(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x80) r1 = dup(r0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/14) 05:10:20 executing program 3: socketpair$inet6(0xa, 0x5, 0xa26, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x401, 0x8400) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x3) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r5, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x0, 0x4, {0xa, 0x4e22, 0x8, @loopback={0x0, 0x1}, 0x9}}}, 0x2b0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x40047459, &(0x7f0000000180)) 05:10:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socket(0x0, 0x4, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)) ioctl$KVM_ENABLE_CAP(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) close(r2) 05:10:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl(r0, 0x0, &(0x7f00000002c0)="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") r2 = socket(0xa, 0x1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000180)={0x7, 0x7f, 0x1}, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x15, &(0x7f0000000100)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'wrr\x00\x00 \x00'}, 0x2c) 05:10:20 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921e"], 0x3f) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:20 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x2c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x5017}, &(0x7f0000000140)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x8, 0x100000000003, 0x9, 0x10}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/7}, 0x18) 05:10:20 executing program 6: r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000040)=0x8000000000003, 0xff67) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x100000001}}, 0x18) 05:10:20 executing program 2: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000b2d000)) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000000000099f3b7befe"], 0x8, 0x0) 05:10:20 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501"], 0x5f) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)="24d5e40665e41ade5e8be222a4c7898e1a33f7af88e309a9582bc1a9ddc161fda6d689b70cd860e5ca0cc3fdd9dc590f54fe550a619a30da3ae5a64ba01e374b1409b242d67d137bf3cc5a32f0829e76255cadfc5ef275f4d76401184b7b7af91e7d52f2a00831388c60c9", 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) pread64(r2, &(0x7f0000000100)=""/218, 0xda, 0x0) read(r1, &(0x7f00000012c0)=""/4096, 0x350) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r3) 05:10:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ipvs\x00'}, &(0x7f00000004c0)=0x1e) 05:10:20 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000040)={0x7}) socket$l2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x7, 0x9}, 0x2c) ioctl(r2, 0x20, &(0x7f0000000080)="127f1b1f61f5ec2a0d98e6eee4975d579ec62df647ae8bd38fd7c739bd769ea7d09992858f531eb772bc14dbb327bf9c0f19d90c53bb3f5c39a497f50dcbf1c8c4dda614699acc5b7cea22eac9f8576e8ccf1ae39efe8d5df4da47a4b7e37fad143e9e3e171d91196214d2f611308b61f3050c0ef9c2699f") ioprio_get$pid(0x1, r1) sched_getscheduler(r1) r4 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x10001, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1118) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x3, r3}, 0x175) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r5, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={&(0x7f0000000000), &(0x7f0000000040)}}, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000280)=0x4, 0x4) timer_delete(0x0) socket(0x19, 0x1, 0xfffffffffffffd03) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) 05:10:20 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x101001, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000280)=0x7, 0xff99) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/igmpU\x00') getrlimit(0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0c0583b, &(0x7f0000000040)) 05:10:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x20200) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000680)="025cc83d6dbbd74a3d2070") r2 = shmget$private(0x0, 0x1000, 0x1, &(0x7f00003b8000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)="000000000000000000eab3f550aa6acaa94e3e77c12ebb0cdd671d9d52fba91859cfd30fe4b9") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000280)) 05:10:20 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0xffffffffffffffdb, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}}], 0x400000000000208, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$amidi(&(0x7f0000001740)='/dev/amidi#\x00', 0x7, 0x0) faccessat(r2, &(0x7f0000001780)='./file0\x00', 0x100, 0x400) sendmsg$can_raw(r1, &(0x7f0000001700)={&(0x7f0000001640)={0x1d}, 0x10, &(0x7f00000016c0)={&(0x7f0000001680)=@can={{0x2, 0x3cbf, 0x1, 0x8000}, 0x6, 0x2, 0x0, 0x0, "9b783abab597716d"}, 0x10}, 0x1}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=ANY=[@ANYBLOB="14df2500040c00"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r3 = memfd_create(&(0x7f0000000000)='eth1\x00', 0x2) syz_open_pts(r3, 0x40000) recvmmsg(r3, &(0x7f00000015c0)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/172, 0xac}, {&(0x7f0000001400)=""/77, 0x4d}, {&(0x7f0000001480)=""/5, 0x5}], 0x8, &(0x7f0000001540)=""/113, 0x71, 0xd}, 0x5}], 0x1, 0x12020, &(0x7f0000001600)) accept4(r0, &(0x7f0000003cc0)=@hci={0x0, 0x0}, &(0x7f0000003d40)=0x80, 0x800) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000003d80)={@empty, r4}, 0x14) 05:10:20 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x5, 0x590, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000140), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x4, 0x80ff, 'bcsf0\x00', 'ifb0\x00', 'veth1\x00', 'eql\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz0\x00', 0x2}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x10000, 0x7, 0x6, 0x1, 0x0, "705c8a43c86a34a880e50ed981c40b57aac6b3b2232e492f43ff1f86c30bb025db12955590cc344df8f76e4dc9db9aaeee74d55cc4baef524c94de1f6cfaeb40"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x11, 0x2, 0x0, 'veth0\x00', 'lo\x00', 'nr0\x00', 'vlan0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1d}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xdb8}}}}, {{{0x9, 0x11, 0xc, 'bridge_slave_0\x00', 'veth0_to_bridge\x00', 'veth0_to_bond\x00', 'ifb0\x00', @random="0786a3f4f36b", [0xff, 0xff, 0xff, 0xff], @random="161e33fc6a05", [0x0, 0xff, 0x0, 0xff], 0xc0, 0xc0, 0x110, [@helper={'helper\x00', 0x28, {{0x1, 'RAS\x00'}}}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x81, 0x9a3}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{{{0x17, 0x69, 0x88df, 'ip6gre0\x00', 'yam0\x00', 'erspan0\x00', 'bridge_slave_1\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0xff, 0xff], 0xf0, 0xf0, 0x128, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}, @pkttype={'pkttype\x00', 0x8, {{0x7}}}]}}, @common=@dnat={'dnat\x00', 0x10, {{@random="386a7694cc8b", 0xfffffffffffffffc}}}}, {{{0x0, 0x22, 0xe8f7, 'bcsh0\x00', 'bond0\x00', 'ip6gretap0\x00', 'veth1_to_bridge\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0xff], 0x70, 0xa0, 0xd0}, [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}]}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}]}, 0x608) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = accept$alg(r0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000000)=""/111, 0x6f, 0x0, &(0x7f0000000540)=@abs, 0x709000) [ 199.651540] Unknown ioctl 21545 05:10:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000100)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000300)=""/117, 0x75}], 0x4, &(0x7f00000003c0)=""/4096, 0x1000, 0xfff}, 0x20) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000001400), 0x4) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000140007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b2fcbf4042d1", 0x4c}], 0x1}, 0x0) [ 199.676725] Unknown ioctl 21545 05:10:21 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501"], 0x5f) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x3ff) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000003c0)=""/1, 0xfffffda7) ioctl$TIOCCONS(r2, 0x541d) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCSETAF(r2, 0x541a, &(0x7f0000000000)) ioctl$VT_RELDISP(r1, 0x5605) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 05:10:21 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r0, 0x541d) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={&(0x7f0000000240)='./file0\x00', r0}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x900, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x100000, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000180)=""/167) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x3, 0x8}}) listen(r1, 0xb712) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x22d}) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x5) 05:10:21 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={r2, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af13, &(0x7f00000000c0)) 05:10:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x7fff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="41fd065158f6b2bb67ed829d67a7cad4b2e9ad74c6b7d9", 0x17}, {&(0x7f0000000080)}, {&(0x7f00000000c0)="100af802ef37d7e4ae9a5f67d06200f8cff12107261c8f4b2645ab06e0eb349735660acfad15d12d931c67bfa8d3b6f0fcae77a59bee98c8b1c31086cd5b697172501a8341a07e2dc99276257658ed64b21571ea010f2b5b05a9178ac7fde31667a0cf5511e7f1c2e613bb4cf3bf97c6a39dd70a150294625e82cbe4e7ff59e5598b65d2cd852b56a281db55f102b60a3d38bc0a524f73204498ac183e55a044e862e03fbe61f4e9f3937da4868c9c4806af5fedc3777aecf4c55b6119eb041d3c85a706471dfa5f0f5b25efff8014376c", 0xd1}, {&(0x7f0000000200)}, {&(0x7f0000000240)="faf4dd", 0x3}], 0x5, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x40247007) 05:10:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x3) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)=0x101) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000080)=0xab4) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2}) 05:10:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000001c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGETD(r1, 0x5452, &(0x7f0000000000)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") 05:10:21 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2}, 0x2d0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)=""/123}, 0x1) 05:10:21 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501"], 0x5f) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000600)={'nat\x00'}, &(0x7f00000000c0)=0xfffffffffffffdd2) r2 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000002c0)=0x6) sendto$inet(r2, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) r5 = getpgrp(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001800)={'team0\x00', 0x0}) recvfrom$packet(r3, &(0x7f00000004c0)=""/214, 0xd6, 0x2002, &(0x7f0000001840)={0x11, 0xd, r6, 0x1, 0x0, 0x6}, 0x14) getegid() ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000380)={'ip6tnl0\x00', {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}) tgkill(r4, r5, 0x3b) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000001c0)=0x8000) r7 = request_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000480)='@ppp0&\x00', 0xfffffffffffffffd) request_key(&(0x7f00000003c0)='4ruwted\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='$user{\x00', r7) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/kvm\x00', 0x3fe, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r2, r8, &(0x7f0000000080), 0x8000080000002) 05:10:21 executing program 0: r0 = memfd_create(&(0x7f0000000040)="18a5ff0243c6640cf2e917a3bcf6", 0x0) write(r0, &(0x7f0000000300)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f0000000180), &(0x7f0000000000)=0x4) 05:10:21 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) bind$vsock_dgram(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @reserved=0x1}, 0x10) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x100000001, 0x5}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000280)=@srh={0x3c, 0x4, 0x4, 0x2, 0x1f55395d, 0x20, 0x2, [@dev={0xfe, 0x80, [], 0x1e}, @loopback={0x0, 0x1}]}, 0x28) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000440)="031b1eeb29772470c267c6d3a2ba8d8bb2e0565639e3426a2ef92d59f253b7c29ca7653c3f05991800282ab8c2fa4c6349c61781ddd2d391e9d060eda8e9e691b099a2d1798df4bd310bbf113a1f72f8ee5cbab78432c59f5eca29fed647e96ef0449bcb9f068351fc380e778e2cc1c431dc8c6ccdc06b4ace7f558d3a91491b721c570b16544177d39158efddcc45a0c52183f2eb9c1528caf0eaed77c0812b005325dfc2ffbc698e37a00e3c811c2b37ef5f8973d112b7e89b0ad70e908e3ac2394b53498eb831dff05e3bf929eaf1f157b77ad6bed125500897adccb6fb40f0e429fdf7a8") 05:10:21 executing program 2: pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1000008001}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x3, 0x0, 0x8000, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x2808, &(0x7f0000000240)) setxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="8a"], &(0x7f0000000380)='\x00', 0x1, 0x0) dup2(r0, r1) 05:10:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0xffffffffd4cf0188, 0x4, 0x0, 0xf}) read(r0, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 05:10:21 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) pipe(&(0x7f0000001800)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001840)={0x0, 0x80000001}, &(0x7f0000001880)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000018c0)={r4, 0x2}, &(0x7f0000001900)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a58}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000001b00)={'nat\x00', 0x0, 0x4, 0xca, [], 0x9, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001a00)=""/202}, &(0x7f0000001b80)=0x78) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="025505b6826af2af2872a2d88e93a0eb453fe912f5fa1e7d44fd4041ca2b4a5208a8d086c2dd24b975efa9b038ec20435c4bda66566549673bbef99d4f3c5ccdce9480ca091cb78e8161f7d2ff5970569657bbd4da6fc0444343ed8b23ea", 0x5e}], 0x1, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x200}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3}, @iv={0xe8, 0x117, 0x2, 0xd2, "b81fb46be0c22500c4cce9a0b4f73aeb5700c89ba9cf6c12f7edbeac2d9287df3be1092377a76cad76c06a2840411e3ce79ac10a3919a51f2487d8db9119ae5e9730cd3be41e1160e3751312b42c7fc977c739d79ff8e6cbc225bb6123513efe43c7a909e6310e1770f50cfb6d1c72c15de888759bbd50c3970ab48da72867362011c1e75b00204e099a7a07f60e7af78842a8181b1fd8e6489bdddb3c356c0d10c978efb45b77658ba554cf534b04ac413295cdd75625a67a7709541a46c002cf311278ff0c8b25568c833f9edf779899a4"}], 0x1160, 0x4000000}, 0x84) r7 = socket(0x1a, 0x100000000007fffc, 0xf7a) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r8, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x401, 0x1, 0x3, 0x0, r5}, 0x2c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e20, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, {0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}, 0x4000000000000000}, 0x3ff, [0xffff, 0x8000, 0x0, 0xffffffffffffff7f, 0xffffffff, 0x6, 0x6, 0x4]}, 0x5c) getegid() r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) r10 = socket$inet6(0xa, 0x3, 0x3a) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000001740)='fou\x00') sendmsg$FOU_CMD_DEL(r7, &(0x7f0000001bc0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r11, 0x0, 0x70bd2d, 0x25dfdbff, {0x2}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x7e}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x401, 0xffffffff}, 0xc) setsockopt$inet6_int(r10, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x1, 0x2dfd, 0x1, 0x8000000000008000}, 0xc) ioctl$PIO_SCRNMAP(r9, 0x4b41, &(0x7f0000000100)="2910d7d157badfbbb9") setsockopt$inet6_MRT6_ADD_MFC(r10, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r9, 0x800442d4, &(0x7f0000000400)=0xa15d) getsockopt$inet6_int(r8, 0x29, 0x35, &(0x7f0000000140), &(0x7f0000000300)=0x4) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 05:10:21 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2c"], 0x6f) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x2, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000fe0039a7f93187356f6100200001020000000000000f0b00000000000000000000000000000000cadcabbf551f3346c4a887a17eefa5eb"], 0x20}, 0x1}, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 05:10:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="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") r1 = socket$inet6(0xa, 0x80f, 0x400) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x80}) 05:10:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000000009a80f77044001c6910fd004503003c000080000029907800000000ffffffff0000005f411c741c76b214a7c9a6c828a5b9402e466bfe4bdcccc68d7ec2add90f89e32c16f414c228eff390ec8f08824a00cd030dce201130864a3c18658c3ed624ff73d7f7ddc2d00ada97bb0c4df6065f2a164996e4551ea67bd0afabfa91e2dc31958602a94a627dc4aa9713b154f508ed26fba98cb5a484c2a3a81ae7bb5bb0c691705f5bfcf531b4fca8d4170c14f574cc5b221844332f4b65e1a2f05d6b81a8aacbddc724b8f159dd9d7ff80dda281f21ce19d2940ffec962154f05f8049867cca71fcd1f3630917df2b590bfcc367cef89c69373cb82cb90784e1e65e9ecc867e5c46f1c991daddf8ecf88de08cd00e50a809c9d466e82633ee7617f006ab5288d5de32aa9625d5d512576d1b3ef7ea1db000000000000000000ca5f6f53ae7116306d8a127738d4d79df228e1d4dc3dd933636389e9d4908469118ce4cbb8c28c7954c2924d2a4c172e42e6bf0591d80e10d35a5106401a4e3059098e94036768aaf2f362c3d2fda1a421819f608133cffecb87a159c1c14142a5027e7638fefb31abe104dd568caaebd53739fea2b87d5520d44cca89ba9d25763f1fff779c319d490060a5cbe1d7ec0000000000000000000000000000"], &(0x7f0000000380)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa000, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) 05:10:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x9, &(0x7f0000000140)="025cb0595bf699f7685dc833fd18f51ea446b11a92cb5fe46dba7e35a1a40400000000000000686744f8994480") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x200100) getsockopt$inet_udp_int(r1, 0x11, 0x6f, &(0x7f00000000c0), &(0x7f0000000080)=0xffffffffffffff3e) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000180)=""/184) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000750000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 05:10:22 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2c"], 0x6f) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:22 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)="7272470d656e7400000000a906e54b4195b989b422ab914ca2c900000000", 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)}, {&(0x7f00000003c0)="7db6ee6969a76d8e3f26a674623974822fb22e2232f27d7f1ba0e593053366e490b58af6fd43e42e1e8adb2c916ff483f33afe4642ed6bbf3d4ec7ef4b36a0a77569f8bc18a37cde392d3264417a74afe8811ec616530393f8d210f1e3a27219cd7677", 0x63}], 0x2, &(0x7f00000004c0)=[{0x38, 0x110, 0x5, "47829f5d060565dfe36dbdde34b538e394c6130df1d89c27dfe3147f253254628b"}], 0x38, 0x4000000}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x800000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa}, 0x1c) munmap(&(0x7f0000005000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[{}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x200000000000, 0x1f, 0x2, 0x0, 0x3, 0x40, 0xe4, 0x401, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r3, 0x9, 0x7ff, 0x8, 0x8, 0x9}, 0x14) 05:10:22 executing program 6: msgrcv(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000c17c00000000000000000000"], 0x8, 0x0, 0xa4a3ad41a879dde0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x240000, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x14, 0x0) r2 = msgget$private(0x0, 0x20a) msgsnd(r2, &(0x7f0000000000)={0x2, "b1072eaa8e5bf0685c7cda1f4b5551702acc604e54302098015ae6595e4a"}, 0x26, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0xd3, 0x4e21, 0x8001, 0xa, 0xa0, 0x80, 0xff, r1, r3}, {0x8, 0x4, 0x40, 0x6, 0x8001, 0x6, 0x3, 0x401}, {0x3f, 0x9, 0x0, 0x76}, 0x5, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x4d3, 0x3b}, 0xa, @in=@rand_addr=0x334, 0x3504, 0x7, 0x2, 0x5, 0xf7b, 0x9, 0x8001}}, 0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/38, &(0x7f0000000480)=0xfcde) 05:10:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ab2000), 0x4) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000f4c000)=""/4096) pipe2(&(0x7f0000f61000), 0x0) 05:10:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x101000) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000000c0)=""/179, 0xb3}, &(0x7f0000000040), 0x57}, 0x20) mmap(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x4, 0x1010, r0, 0x0) close(r1) 05:10:22 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001ac0), 0x3, 0x0, &(0x7f0000000080), &(0x7f0000001c40), 0x0) futex(&(0x7f0000000100)=0x1, 0xf, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200), 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xc386, 0x80000) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000240)={0x3, 0x401}) 05:10:22 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) sendto$inet6(r1, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000140)={0x5, {{0x2, 0x4e24, @multicast1=0xe0000001}}}, 0x88) dup2(r0, r1) recvmsg$kcm(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1, &(0x7f0000000540)=""/207, 0xcf}, 0x0) 05:10:22 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) r3 = gettid() fcntl$setown(r1, 0x8, r3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000240)={0xa0, 0x0, 0x7, {{0x0, 0x1, 0x0, 0x1, 0x6, 0x6, {0x0, 0x4, 0x7, 0x9, 0x4, 0xfff, 0x44e, 0x1000, 0x4, 0x4e, 0x1f, r4, r5, 0x4041, 0x8}}, {0x0, 0x1}}}, 0xa0) sendfile(r1, r2, &(0x7f00007ed000), 0xffa) 05:10:22 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x1) recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000240)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/22, 0x16}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0xa0bf) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) 05:10:22 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2c"], 0x6f) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140), &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000280)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r2, r1, 0x7, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, [0x3bdc0435, 0x7, 0x1000, 0xffff, 0x6, 0x2, 0x7, 0x3, 0x3, 0x0, 0x8, 0x5, 0xff, 0x80, 0x100000001]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x59, 0x3}, 0xc) clone(0x1fc, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000780)="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") open$dir(&(0x7f0000296ff8)='./file0\x00', 0x400, 0x51) 05:10:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) modify_ldt$read(0x0, &(0x7f0000000280)=""/17, 0x11) ioctl(r0, 0x2, &(0x7f0000000080)="02ffffff0700000000009aea1acf75b58d14b0d1504653bf723bc7c5818388f794799583cf5508713585d81d7e7c047f11d0842c7c91d4106a0d4064f2d5aecc8bd644d0ca05c9e95cfea5abc666fda973b2067f01") r1 = syz_open_dev$usbmon(&(0x7f0000001dc0)='/dev/usbmon#\x00', 0x1085, 0x400240) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000001e00)) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0x3, 0x4) r4 = socket(0xb, 0x6, 0x7) r5 = getpgrp(0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=0x0) r7 = getpgrp(0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000001c80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000340)={0x18f4, 0x12, 0x9606ab1965eb418e, 0x70bd2d, 0x25dfdbfb, {0x15}, [@generic="cc4f206a63254f4fb6ade02c8e1e6515156ece8f1b3372d77faa98a1f9c44214153f3fb57311af34e16b65d88cde02d7396667bf44ec325d45bd6e66139a054840df4490aa5a26ed00d492cac272c4592d2a159d2db6ebf012b404a73b8ea3b1885334b659cdc7319a5bd59ced1706925722950c919abd8828a4aa200485f8b68b5648281909a68cd02e1f8881b151dfb12a537f2597fe59beca2ce49e853fa06685447d28296dfe062dd359a12c20f6d72d1eb879cbc835fbb61f6973bbb2110fccc00d213dcfdb54484d396345256f6d4142567c07c6ac7553c6", @typed={0x4, 0x75}, @generic="5a59909359fae3585fe5aba9ab1d52e95bcabac43df12e9cc439b9a4217f6c26d2984772d8629b9eecffe64546c73dc0157dc40432b8502fe4e3831c30e34328c6fe5713358c089599c8374aeca632043673d70d12b62056b66be7d114715ed9d6927fd020da693b158e101c809ff7b8059e7c27c118701f9427be10", @nested={0x124c, 0x63, [@generic="cdffe7827f25103780830743734e61a4152c3025dfdc62bed03d", @generic="e1ccb02df6ca5d0fe7a901850a6cee2e8af57a0dea0363e5112d2afae70221826b8d65aa1aadae15a2d39ca05ed8ad046f2b337633da5a8d68491a9a5c6741da7ed8c6b3a37d1ebd58e0f2bab9b67044aa60c997d2ea069fd8b6a7a9124220b03f91099abc4f51284046f906e1e57df653af35f6effc3c05d80b485536a7d6ef2d1946f3efddb315eb75e058e0a878d99f42e7dc87f5d37a36536f3c566f06c6db7f824339e6a61d6f8ad6b2d4d5cf385e044bea727e63510211f237c6a7d235e57e590456ae74361e926b7c7596bffca7b85c80f1356bd056a499322d9a8dd72ddeed2343f283b7", @generic="25954df0c2a234cfd0411096b66090750f0d610a1badb5c86459186283249ad025e3d8dfe828c11141d751f14b0fbc3bcb487c30475bb40a173ba1ee53f8c531d13675a6d20bbfc21c03e775e0affda8398e76de3f5b92c03f07ce97e3b60df43a9ee25ff766d421efccad24aa8d87ff7a3c6b0850f5d4b448bc6ae8605ea2e28b479881c016c5d686", @generic="4f2e6d1a52a70d0573ce81cded6fbbc572018e2ab1c8f159e7fff9d954142cac8f6a34c219bb26cde747e1843d598fbb80f08919c09dca37b3c69da1ae120be7479ac9e467462dcfb390bdeaf6941d9cb53a5edcadfc039800d1aab813a9772de05cf12ab2ef4ef85a9a94b742c538fda9906c215d375f53dd0611c2714073d5c7df0314e139cbd9f8573cfc071a2db7c8ba97044c1c1f172b716420af356d8ac15dfb2c4ff503b348233d4f225d58f0e804155bb7f20994a066efdcc9", @generic="59457c61bb7ee4029a62258cc10385679af0e77e2b41d1e92ca000a7ed6f2dae744575dd31143eca41c4160217b92abd0c538f0c0ae62a9a924570e19f4c1f50f98e889cc98d681bed4d7c70f03471fa5f23cb0e782a5512759f01f701c7c9492ebc1b28871809cbd8c0c6ad7dd132ea056f5cef7cd02c6a784810785727602e933697322c02be7a7745cf375dfd6333288d93cfc54cc4242262c5b3daf3d12374c182b31254d2f3c61a189da7f05c8d19563c490b5a6728989d82713f3899b233fcffa878cd3d252e5c8855fc57e6914552b6b5e8b6090338fda2266f857d7fb9daadcecaf3ef54fda9cb68775eaaa3a853c878a1e6b5ff5a0180be4057c829478d9d4888527fe0c27f54131fbbacd39a6fcea2f7096ea6a5ce32f5cdd2993cc82a65f68b8d4bec97e169650006d2b0d30e169ac00af426f302d557da69aa75ccc88f5b54871771f54650871d403b7348bfc05ad23f333b26ac109874d8a951aa5ccb049cee09946d076041fed05facff3bb056c769780131ade2b5792bf6dd788c6fd72be8d87d604cfd5934c110c08c3518227ac5847e913d1b55fa43bbb36295a7e677d35238f3a430b22396b9432402ec337c03aebaf2bff36cb2d49decf74e19560431284f6f7a21bfcacef319a3bc16c0464304f0eccbfe3767073f2e2b0e361dfc1686bc93f6e799bb8c2133ba18b65acbcd8cf026a861de12ef8b8b00997e7a67f0df109aeeb9c284795571b9b3aefa7fe8a55de7d442c553939073b29d83b0dcc2e267fee1cb390ffb8962f75f2eb213aba5775efb02199b6e90940dcf3a6690c4bd3c4a3151f8b532599279e224474d5e1bb7d8e52319b0389e94b8c5217bd8b642ce9e4b39d19bfa40434191daf7466dd835356eaf4db12c7ed3f27419e26b0534b9c548affa6ea3e8023007997abd55826ac3d02e9ca65411094e15d2e2b0e3e072cb0dad0c896b3d1ad62ea42011cce5c8d7f59b317aecdfe700402b744c86cf867ab86d713ee5bea25c543d9526319ca09880f278e72afc87503aef42c304be7c35bb035b35cb3b67bbbedefc6ac03ba91e59a9c28d8caf96f43dcbc8ae9dc1520a3f4609cf6f7ca5e13ce389d5cf1978ad1c5ff8fa1d2c886eb95b27c8bc0dd4b970293e1c3924d5c669536c67e5c51b64a0083abe8d7b433da42ef9a602ffa22029647977451238e7d647dc4c45c3173ecaef92507d5ca11f172aac99cd3fde372cf842d45c0b390487671884475de89dd04107a43536086ea7886684915a70179fd3af5383dc51e2090ed9ec5f2c27bb9ba089631919b5cac062ed01d4c678b113584bdde1c75ac90f6fa521e41f061edba521e532bde876a133400f1a6153cf37369a02d999de22b197f3ddc48701335d6ee69d34c2362fcb2b687efeaffced95da263af7eb89bd685d690747824fb95110fd9ef07e9efd63a556cfbdf92e4d4e0bcd5846d0d499e17148cc5d57b312feacf8de6d5b74f3fa93e8bbfd1f88f2cfdc2ac6ee37cf45847aa16acdadfaa0b7a790465b674fe4fc875083eda159114b3ac4c7e0c0355cf3fff9c732f2264b8208766803d112d26550afcd2c565d06f78d730ca5ef1554ce12aa943f2a26b279f24bd665cfbed7873743db67ae5bc9680a51032d982d689d5a9b112908b86c19b96e1ee318ea201d6f9e9da99c77580d9355bcbdac9398ef08b04c1d8c9f5ed42c08847c767f1fea8a485b64b2bd5258ad411c2576ff79519979aee84f97c27e85e7c680ac8c523b9302f8127d4d4ae257dc8a8537f33ec845e8bd016972cd1c31807b4b013a9e904b0e4de8ba4e5c675e9969dc0a54cca184b622b585d024e88086ba372dd015c455bdce9be3d26c7f70eade9c10b7c83090b919579eb709e448c355c276870a34c73da52949e3b5a313dc5c81c3230ec3f9f110be96c0b2bb0ec7517777b57328bcae978885fd65918cd7e5e5a9b34fb5ef257fe6a4047a66ef8791382d5dcfb0f6da66a213e496dbb80f85fb3b96272af39e29a18213fcd2a3c9df7e71d5d29797009e11cc29e2d09330b4301cffc068f9bce461c1da4148a0e3d3185eccabc29ba17e8bfbc4cc571701648fb57a0787030e90b94c508e945f5176522ee5a702b81e0a08586736952ed86ba3d28f9561158061253938e8eb6cbbf6a43b02b4a0b647bd847a1a8525670f6142a5ca490d356df26cefd82a028943cc27c481f6ffe193d0840955085a82825f53155081acb83381559d162fda660d1fa0d33f83f3990fb8c8548b4ce30b83ba404c34ef679ecf8528780334c5a1b2ccda20c087b319c8ae0aede40fbe88660e214b1097e470890bee3c97fb118a6a4441599caee29eaa239f6f97d45690b576c80773e2495161a7139cb39c3e6bfe6bed4a1f92ae7a768bcafa935f36976aa99fb4cdc9d1905e33903817acea47fb348642ef651118c7e93abfc8d1cfbbac88c22eb39bbd6c30e1a9b2ad3ebea3ed66344d8c013ecbdf753e1416b898e5627f0f809683019dc94813c1c480ef044cbc838df3ac05ffb32afd9c92467c402978a238d3f1bc5002644a24d8eeb22eeb8bd8c2c5b5d35591d1a52a4131d843a56843263ed290788f7b201bcbd38d4249030ce0688b15afb145ffa3e7f986b7f19357941108c8dc5710213b22a77e6486cebc7aebc43b75ebb73f76d56a925f0a8ed72fec610c6a3c7e34db11cd9044429e3bf161d5eca13e25eec0a8176bfc680755f822cd3e9cb702c156787c1d1ae578ed4f12a7a986f78af1f65157af1bc7802e1059e38ba08b35228bac4f6dfee8e1215527f5867f28e7b88d9ea938c22de1dd3992a5543798ad8e3f392ec0574ce4b620fe639197d3d3f58d4988f6cd28e8a1ca75b7f5dcf480f85210e95b61c4e1f1e4532d1a023bdb143da4941320b97dd8834e5ca6c2e315ecd8dedae6601442d76ee3968c5ece8d5f0ef02f05b3927b4152c94db9e2e64a1df5b8d69029baf89628cd408aae8398d48752610266adecd69b76c9a19611d67f388bd26641ad95ce5948b2be109adc8a3bc1470f8ec6c97486c4f8faa86857a618a1d7f3d62c31535826eb439f3bc08789e36c5013a496b48b730e8d202394c205f0837d781c09db947b16664e5480564ca35c87a0d426c5213f7946780c2002f42b17f862e7a2a0ef980dfc544f9622079a6bd7d40c092d31ed0b660f8b16235089b033a2066e3a7ae77543ff5a371d251390bf76cd15ec290247b4f23fe76fa92987f4f5391533c15d24326c68bf7a8cb14780c60b6495bead25be7935cc132ce98edc0f553fc0c8e85f746dab1ed4b4a9ad9692e9d7708a09a003bd3f773f0c4caed2f319c7c9ce5407189857255e34ad51bcf3a9c9792daccfde54f6975a980842654f223179c9487cc955c00f72117e08138fba4fcea24a0403c074e400622a7376fa1a9e8b393c974e8b790d81e849791b983e6f58912ab664d31b5bdc535d71af9916b0771d1788bd3e652337a9fe763b6e0c739ded9d44f2be5e75bc79f322c10e6e91a1b0e57aef312f4b96d85ebe7703f1bed18d50a47738d3837134d42baf1a7247fb8f06d9ada43479d7cc67f4ac9baa5b665d482611fb011b8e96a130aaa5efba64fed1acceac7c30dec100d9a2bc7567268ca4e9c5bea28b4b27db1e4568a82cbabdb434a5e660ee5ab1d5215009f03378526d3d970d1b3a5e0ee36a04e3779ff76fed9a38d69035058895437cfbdcbb923f864ae40d1850776f1d09b381d59aaecc5ac7d119300bd4fe2d1b621fccfbb4c825ee3fad6aade750ec646827d191beb138d762d14ed4f3f092302709765bf05587f67934d597023abedaa2d590d59826d2b565e76cf0e32eb460d75c85ed4cede6b81fce14e45bc37c64b8e804dacce59f5b548d9ae9b17dc103b087d8e31765a9df225888d66337af5194a3354416f7789444b2f85b0d54a1243e53b027d36f9d93f9d139f67fc750e56dc9a585f0e273af74657c586831f229d17fcbb4dba3781724dacc7f240ad9f93c8a5e1656bf9aa13d1554c592e592b3f35272d55ea7c81a4330fd843fe36109c457782bad60c7b13df144385f729fa2e1d1f863c9fab6a28d77be00de2f108938b5110f7def63b8b64ccd93dc28b69dd0bfe66a595cf1194007e64338be8d092bb85e8dc39d289a5ceacb3e6190fe82f751ff421bc7523b94a2498ee0409f652441d03f2a455ca08ed15934cbb08b7bcd4c9f0a0245f5b00a5b7ec688eb701aaffa8effb69469af0ddfdd87f6d9cc8ff47238d27c17eaa21cc9729b4bdcf137fdcb26631d54fcf86b9c650abeadb1caead3138ed641aedc67600ed4ae6ac650bd55042744eaf85bd25ff471a07d3e8b53793d42728d26666dd3db38d15c54b4373f106c64c11e68485425635783c851fd2d4930a3a76311d91199c5f9661042cd66996e64648176bf78aad550a7d70ea56eb3de88f586d9ac3e0dd2ce00a34948d08c5c629aa6844f0aa79cc2df09b245ad1d379c22d8297759d818bbb747fc0678eca0280d909700a1f640f50edfde131bebd7df31dbbfa777242a4d44fb02656ff1f6b109628a1124d74f1776831c6100fd637eb08f41ada722d1a3e8ba3ffca2e64ed65d0cc6ca3a6753c5b607d3397cf543c7dc83a95d778cc4d8e33e34b7c604f683b4ee4c746b9d658bde0c1840742617b9a44a762c413368447d8753a07ba8acb4a8f713c4d450f10362ca9dad434250152aa31729e7444f351ce2f77358530a2812e97bf308bc8cb5925f053c0f2228d10ea140c0d12b899b07d45df433715f281b3ba8c4d26ca61a9b8b4f967e8d6ddd02f87b47f96f299da08c45d84af3a3c0fca5fb3e28977504c12a74c914856800dbb2cb5f1b89cca69bd9453da3c373f736c3163ecc1e6afe4e6b3a4e794e4a48f028d4c7fd2535245717a4358b479837a7e218b0ecb0849cece7dcd45dd3baf168abf002d024b57e27ffbbd2720f7a52e269468e7b3bfef95a868affe20d3faac8764dcdb17ea01153c0328b9709b9e0ef76df9329b6ee55d6653686b6091fbed6f082eebefa7ea52b44305a10b3515c1644d9488675ff18d0f855a04085abf1a959016f439bd9dd747c7a983b42f8e57fdab1f7076e3b2901abd769ac2ad02112b4064466a30868a7c95dd06273407dce060ddd26dcea364cd2bf3008c148a1d6f8a308d2a71b11e0eb48a49aa6d158d55dcbda3b6a0fa7dc2ce0be158c6631e76212ce1a6168d1587661b4da80ea2a1e43fb20857fe14f6fecd67286d4671b5a489d28d79118d10f9138a0e8e7b2afc966e74c71d376ddfc66bd12e96acf8ebe818f57bebe7f853f362fad61ba355598edfafaa96ce69587da4469efaaac9c2b0ce19f6693f6b641568c03eb83354d3a5f76eec3f174aef131d34e776ee9eabcaf1e57b853033351d8cba577adbb29216102a7c60d11f42947a53157733201eb57f2816a5719e8d210f5f8868e5c08fd6f243cd796608fe548b5f78d7e0ad46828372983cc461e6736639e6da2ae850f5e2971e1cb2ee675bf09d1f7792de4c845324e118e2167bea0723bd9b475f199eabd7759c4ab7ddc7e988ce7ebbbfcfcec87b21f8ba02c8ad39f38121fb4781a62561a8aa616fb305eb271d70352f8cc5f04cd4b0e1be824cce109e4e6fc8357030c70947eacb35c5e27b72e55c4b5a845aee0bb9b701769413e07068d2bcc33b9bfb8ef33c340afb4ff4333c9ba1008634c16847613826ecd17e82d63a1e25f424aadbdd19145217ca4065136cb26750f277414f916ccc595675f9510a691cdd5"]}, @generic="3defef1a2ead29", @nested={0x230, 0x62, [@typed={0x8, 0x2, @pid=r5}, @typed={0x14, 0x43, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @typed={0x8, 0x58, @pid=r6}, @generic="72221c839ebd19a78d618475924de86b60715a2ba6191a8548d54328a18eb9c310a6f2601340b3c084a51f4b9a59001332a21ffa5616d4cedfd03bd7ade38f205ab4a2d7613c4b63e241c62d21a6bcbd920fbdc58e2e14e5178021fed93d2aa9354567bae3fceacb2d87d37bfb0cde18af8f8d9ea503c25dffad9a12731fe94bcb424c434aff54946cbe122e4688da1957051bb71168dac41ef4d9540383d19665c5826f453f9dbc947efc2afd6a223fd5a2a1d65a1c8ced04e5958d5d5b99478bd6123282a851c9659e64125d2c1ec886c22f264adb0ee3ae883711cf0c0d3e", @generic="14384d09c2ed6df2214cd04c00b31f92cafb60fb", @generic="7384f63a01c72e2599e623664abbea311ca969", @generic="e3a573f54f4435c663b683e5783913f57d549aa1d1d7718eb84ac09b1a22f911ddf87902560bc7411d8ca38f6fd6309674c18767b04da453d8b438630fd7675b66781cd83bffaaee1168502556928887ec79857dce5f258e13fb486731274eb8ca9d04082d1ed69e401e20bd387365a2c32d6c0c3731eaad19fbaa869a253e74ebf7cc20e383127349e5d974846112803053367969833fdd1716c03858d0cee0b14ee94e514f2483b817d6ff376dffa1eb89ffff", @generic="e2b1b98eda3b3d1734b8a24054718aafdef431d21ed2151b518cc771e3268e0fd89ebf919a5de6918351357fe12b207a6c64d0cd356cf98e1d92f8410e6f01b23126628983ab6a4efadd"]}, @typed={0x8, 0x31, @pid=r7}, @nested={0x2f8, 0x2, [@generic="82b6487fbbe9184255cdb5f28188df62635167d7122d118d7a420ceecc4491a73e28119f3bfd4eebb3d2ff80206fb7da7d83fcba9654a7385096dee3723ffee8f947a42c97e9e46d635624e9f5ebeb5f5ebcfe1748e0df5a445f69bb1638869845e328c3220c00ca7e54d2576a294699298dcf2e5d2fe6f5b51012fa1b401fa590ed18c4a87e68565d39159a768279", @generic, @generic="3b1a510b8b93d10c1585af317828a502c06f4a904ccc01fa2589e27605e58a54c51e1c9d066019a6ac2e7357a77e834b00522dcc7713941e2f7cf649d4a5c520c9dc0feb60fbcaa08f3864", @generic="9b2bfceeb617bcf0e6df44b2d9d0f02d6ed89f4b62f9c68e5c1d273c2d75d3fa0a7db15b6bf09c985ba25688b8a096ca80ccc4ab05b047ef02c3cd889281f51c62380d884da1eec60228cd0bc0ccd80f340686b9391ccf7c691f95249b7ff1784bfecb1b0aeed37c561c86347b3c94e9750308779cb824f13f0ceefcc957d8bf54230f22fce7e7eed89247cffa5acc4bd811c760d87eb7b8e12fd285ad1145660a2d071df75d0535698da3c80c1e166be723cd0c7b52a6a046c2c43a44a12a2136ec21da5b702c49cc4472b849dc9d", @typed={0x8, 0x1c, @pid}, @typed={0xc, 0x30, @u64=0x7fff}, @typed={0x8, 0x8f, @fd=r3}, @generic="22f614454d9526c16032379f3024edbf33cdad76dea06fa5962c24f6796a7c10449ff8877e4094cce461713979c8f5e7b72099", @generic="2a8137f64233dadaed2077f6a047310fd67d7c5cfb51ea1b8bc3048b64ea3eafb02a71726c76c7e9bbb8085db603e11bb51bc085dcc548c86f40921bc3bb3381917a68c5a02215b6318413a45f1c4bcc6a6d1772c7eb51601bbfafd182349d9d3ef3d5bb1d24ee0e226b6c86d660b213ab7e37d851e7ac02300d00fc5fd43f6e8e3be9a8a88b8bc253c34203d0083b70d277909632ae2399019f426a17cc7c1ebbd9e85f04ca0afd2d0460a76cd7b7eddd18923d906dd2c302a97182f7f35bee7814729625995ebe4cdf52ca666fe13ba3592726eedef136474d006e312e965820b9926c47bd4e629d1564368e1dc16eec3ca79152add9f070"]}]}, 0x18f4}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @ipv4={[0xfec0], [0xff, 0xff], @dev={0xac, 0x14}}}, @in={0x2, 0x0, @multicast1=0xe0000001}, @in={0x2, 0x0, @loopback=0x7f000001}], 0x3c) r8 = syz_open_dev$admmidi(&(0x7f0000001cc0)='/dev/admmidi#\x00', 0x42a6, 0x501240) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5336, &(0x7f0000001d00)={0x3f, 0x65ee, 0x800, 'queue0\x00', 0x8}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x200, 0x7, 0x7000000, 0x8001, 0x41}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={r9, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, [0x4, 0x80000000, 0x2e06, 0x71f1, 0xdb3a, 0x45f, 0xfffffffffffffff8, 0x80, 0x8001, 0x1, 0xa00000000000000, 0x2, 0x4, 0x76e1, 0x3]}, &(0x7f0000000240)=0x100) 05:10:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc9, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000e4a0a01fe2836a75bbfb5800154870bf5906ffeaf61d9c86b26977f5f57ca6e3937391aaf5e80100000000000d001600004000000000000000009e0aa6", @ANYRES32=0x0], 0x28}, 0x1}, 0x0) 05:10:22 executing program 6: r0 = memfd_create(&(0x7f0000000440)='bdev}trustedself}.\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000005c0)={0x2, 0x8001, 0x6, 0x3, 0x3, 0x9}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") pread64(r1, &(0x7f0000000080), 0xff9b, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x2d, &(0x7f0000000380)=""/76, &(0x7f0000000400)=0x4c) ioctl$int_in(r1, 0x0, &(0x7f0000000040)=0x8000) r2 = add_key(&(0x7f0000000600)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="53f2849ed0a93ae44928f614493e62117fe6fb2b1545b8ac774ac448faf2b8f84ebe0eb70bd76aeb587fe20c60ead8071e681d2c81291d891c76a028dac92fe12a4a376187a953ba6289771183e7e294f571b0c58528415828bdc1c328e3ff15bd7c6ac308536752dce8d37a198831566a422c80e5d822b438f70c42a024395d0c42237751c124ff088ce3edc12aa267bea53d61aafd6265ded10ad6a94ff1b8c3ed8474b1fbdf3b76eae5a4f0522bfdde5ab0b4f844891a3d75fb4900bd17af524e924dbc30be243ca958b9373d14bb9397534881d4c49e5f7bcb3bc60eebeba5faf6d404", 0xe5, r2) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000580)=@get={0x1, &(0x7f0000000480)=""/225, 0x9}) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000300), &(0x7f0000000500), 0x1000) 05:10:22 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r1, 0x300, 0x70bd25, 0x25dfdbfd, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}]}]}, 0x38}, 0x1}, 0x800) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(r0, &(0x7f0000f7db7f)="ba", 0x1, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000180)=""/1, 0x1}, 0x10020) 05:10:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x402, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x14) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0xc, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x3, 'lc\x00', 0x8, 0x9, 0x2d}, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, [], 0xe}, @in6=@loopback={0x0, 0x1}, 0x4e20, 0x0, 0x4e24, 0x4, 0x2, 0xa0, 0xa0, 0x2, r1, r2}, {0x3, 0x4, 0x0, 0x0, 0x9, 0x4, 0x6628, 0x100000000}, {0x463b, 0x6, 0xff5, 0x41ce1a92}, 0x2, 0x6e6bba, 0x3, 0x1, 0x3, 0x3}, {{@in6, 0x4d6, 0xff}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3500, 0x3, 0x2, 0x5, 0x1, 0x8}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff7f08060001080006040002aaaaaaaaaa00e00000019717772dc577e0000002"], &(0x7f00000002c0)) 05:10:22 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff00"], 0x77) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:22 executing program 2: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x20100) sendmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000280)}}, {{&(0x7f00000002c0)=@nl=@proc={0x10, 0x0, 0x0, 0x1010400}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)}}], 0x2, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x8, 0x8, 0x3, 0x1ff, 0x5b3, 0x10001}, 0x6f83}, 0xa) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x410200, 0x0) 05:10:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket(0x10, 0x3, 0x0) fanotify_init(0x40, 0x800) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a32fd3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 05:10:22 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x1800}], 0x1) semop(0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x1801}], 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x48440) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x3) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x4, 0x800}, {0x4, 0x1ff, 0x1800}, {0x7, 0x100000001, 0x800}, {0x2, 0xbd69, 0x1000}, {0x2, 0x0, 0x1800}, {0x3, 0x40}], 0x6, &(0x7f00000000c0)={0x0, 0x989680}) r2 = semget$private(0x0, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000001c0)={0x8, 0x3, 0x6b5, 0x2}) semop(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x1800}], 0x1) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000100)={0x7f, 0x0, 0x1}) semget$private(0x0, 0x3, 0x400) 05:10:22 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff00"], 0x77) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:22 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, &(0x7f0000000500)) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x4) pwrite64(r0, &(0x7f0000000000), 0xffffff0c, 0x3) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockname(r0, &(0x7f0000000140)=@vsock={0x0, 0x0, 0x0, @host}, &(0x7f00000001c0)=0x80) 05:10:22 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$sndseq(r0, &(0x7f0000000100)=[{0x200, 0x5, 0x2, 0x81, @tick=0x4, {0x20, 0x1}, {0x200000000, 0x1}, @quote={{0xffffffff, 0x2}, 0x8, &(0x7f0000000080)={0x1f, 0x7fffffff, 0x4, 0x1ff, @tick=0x80000001, {0x2, 0x5}, {0x80000000, 0x100}, @raw8={"6926eb14ac0e8c87b1d1fd2d"}}}}, {0x2, 0x4, 0xffffffffffff0001, 0x8, @tick=0x4, {0x1000}, {0x800, 0x7}, @raw8={"ac3ac582d17aabf474fe3551"}}, {0x1, 0x0, 0x3ff, 0x3, @tick=0x5, {0x5, 0x8}, {0x80, 0xeda}, @ext={0x2d, &(0x7f00000000c0)="9dad82a3fb29482807a6b03b8ed5a9d8fa34a456021a274db6c8a73705a777c4d05951d4257e87f0be8cddf07d"}}, {0x5, 0x7fffffff, 0x71, 0x7fff, @time, {0x5, 0x9}, {0x8001, 0x8}, @raw32={[0x7, 0x3d, 0x4]}}], 0xc0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x86002) r2 = memfd_create(&(0x7f0000000380)="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", 0x0) r3 = getpgid(0xffffffffffffffff) fcntl$lock(r2, 0x7, &(0x7f00000001c0)={0x2, 0x7, 0x7fff, 0x8, r3}) pwritev(r2, &(0x7f0000000340), 0x0, 0x81806) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000240)=0x4800, 0x20000102000007) 05:10:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1d) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x20, 0x21, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, [@FRA_FLOW={0x8, 0xb}, @FRA_SRC={0x8, 0x2}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}]}, 0x38}, 0x1}, 0x0) 05:10:23 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xc00caee0, 0x0) 05:10:23 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff00"], 0x77) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f00000070c0), 0x8c0) eventfd(0x101) read$FUSE(r0, &(0x7f0000000640), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f646576656d3100000000000000000000000000000000000000000001000000000000002c00000000000000000000000000000000000000000000001c000000000000002b73797374656dcc6370757365746367726f7570246367726f75701500000000"], 0x90) 05:10:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x121000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) request_key(&(0x7f0000000940)="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", &(0x7f0000000000)={0x73, 0x79, 0x2e, 0xffffffffffffffff, 0x10000502}, &(0x7f0000000340)="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", 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x101, 0xff, 0xc000}) socket$packet(0x11, 0x3, 0x300) 05:10:23 executing program 0: add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) 05:10:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000180)=0xe8) setuid(r2) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x9adf, 0x2, 0x1, 0x1f, 0x7ff, 0x3, 0x8, 0x33a}}) 05:10:23 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02080000050000000000000000000000030006ffff9f0000ff000000ac1414aa0000000000000000"], 0x28}, 0x1}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000080)=0xc) 05:10:23 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000"], 0x7b) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0x7, @link_local={0x1, 0x80, 0xc2}}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") shmget$private(0x0, 0x4000, 0x2, &(0x7f00007b0000/0x4000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000000040), 0x400000085, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100), 0x4034020002) 05:10:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r1, r3) 05:10:23 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x280840, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x7fffffff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100000) 05:10:23 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 05:10:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) read(r1, &(0x7f0000000240)=""/229, 0x42b) r2 = dup3(r0, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x9}, 0x8) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 05:10:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x400000000008915, &(0x7f00000002c0)="09000000008f01000000003f000000067ef6b8cfb8b82968d5e04da3931ee22020fa2e43b5ed360c978af08d51b389c6f9515c0f57abd056ac8990bbaa46d76819b25bbc5cb1217eb78ac9c1aea1a0e1d6bb65f48b4bd9727226d2794f2f81c5e8eb899ad18c59dcca8d9361835bdd0f73da5db797913ae21f199b7eb5ec5b02fbe13451494aa384522a6ad18676cf06a9e5ca5c096f801c56640e4cd8eef98351ca1870a80c436bf0c3849c32dcc22ce80cf44a08") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) shutdown(r2, 0x1) r3 = accept4(r1, 0x0, &(0x7f0000000140), 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0xc, 0x2, @thr={&(0x7f0000000000)="d189f9dd0c117dded0037fbc1c59a26a82290ca766f310fb02cc34473089cca81d881f687b43faa7c6a5e91827e1e8a4538ae49c561852a55520173ef604c8d7c3f2a4279a1af77991b66b2b2a6c0a965bc386d11cba", &(0x7f0000000080)="fe78627450129f73f08f5775eeab4eeaa4aec41cb63ef36c86c41cbafbfb70a8aacf32274594384c69e0986257151061ac367e87d68f933a2191759a17d70857da65d09e95e3e7d036ffb3d221e05bb4dc6e4ca9bc184bf109651274ca8379f4dd56278bc4b0f841"}}, &(0x7f0000000180)=0x0) timer_getoverrun(r4) dup2(r1, r3) 05:10:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000002640)=@ipv6_newroute={0x2c, 0x18, 0x9, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_ENCAP={0x8, 0x16, @typed={0x4, 0x4, @binary}}]}, 0x2c}, 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x83f9be11c66d85fb, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/35) 05:10:23 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000"], 0x7b) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002e0020030000000000000000030000000c0000000800010000000000"], 0x20}, 0x1}, 0x0) 05:10:23 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./control/file0\x00') pivot_root(&(0x7f0000000100)='./control\x00', &(0x7f0000000140)='./file1\x00') rename(&(0x7f0000000240)='./control/file0/../file0\x00', &(0x7f0000000200)='./file1\x00') dup2(r0, r1) [ 202.283897] netlink: 'syz-executor5': attribute type 21 has an invalid length. [ 202.292926] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 202.322366] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 202.367145] netlink: 'syz-executor5': attribute type 21 has an invalid length. [ 202.380675] netlink: 'syz-executor5': attribute type 4 has an invalid length. 05:10:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 05:10:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff314", 0x20) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000180)=0xa) sendmmsg$alg(r1, &(0x7f0000002580)=[{0x0, 0x0, &(0x7f00000013c0), 0x293, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f000000a700)=[{{0x0, 0x0, &(0x7f000000a680)=[{&(0x7f000000a580)=""/200, 0xc8}], 0x1}}], 0x40000000000015f, 0x0, 0x0) 05:10:24 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000"], 0x7b) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:24 executing program 7: r0 = socket(0x10, 0x2, 0xc) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000a00)=0x4) write(r0, &(0x7f0000136000)="1f0000000104ff00fd43544007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000257fe1)="1f0000000104ff00fd43544007110000f3050100080006000000ff07ffdf00", 0x1f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)='|', 0x1}], 0x1, &(0x7f0000000140)=ANY=[]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000ac0)={0x0, 0x1000, "aaea592d9a9ef3e3d8456246338e16c2f4c597188aff95d14311490a543c3bf4a3a8af12568e489a193f46e82b1484309df03498f75a298ddb19929fb25f2c4256f02a90b59bda8ef4065800132b25dce6b51573112937d5d0cbf0ecb1ba92f4025dd5050937ef5d4eceaedd84abf15779d1cdbbf9ed0e1d50ec9860409535ad76bafab9c988ea586de8abf3764ccb555546ce7b727440cfb43eaef97f17e3e58d0c52eebf6425231a28959fc7042134be7fdae0098c3786cc980762e64cdc6c33acb32bc9e8d2a604aa1a9d7eb68ab6472c676300d03365dac19c0cdbc90cb3aba121f7ebf70bcf0583942e12839aa5956204e8f40d0d3a01cb1e7b7730e8ed31343a19350a6958751a33c124fcc3ed2fe42aaa00b1d6e6ce1892f591315c62dc2d48b7b26244804307da94a700c156ed4209ee8ba6ef6aeb9e776e2d75dc01d7d1f43e4d200c7c5e0fa1bdf5d8ae50cd5911cae2624c738e3b73f2bd1d5886af10820b6971907fb7eb31a77f1e28cf884e8baa56395b406e6dde6c542701604a439e5c94d2b38cae119f192c5eaed8d96f5071ae378cd94f933614e678350d6827b053080d8fe148141c134f09f9cca83b31c9d6d2ac66f154dc7b0afc14131b8a8792212fbe4416efaf42267289132a1879301686ea256d37e41d868b6365d57eed2ef29bc05f50843a230435b66b1ede0f020d1d64ec4bf981d32be0cc9f02c68f7986060e991ef467a5f4b7d7b6003e86c15e355ecc5ac6a1653cabf61c04c4cc37b2cf07ffbde156d73012499dde3f02fd19f4d35449445fcc118c70cef3c9b250311c01724c7c8c3167f7f7faadd5f19c35fbfd1855637fc978d409593b2687ab68d54624b8f081a681d4df4c4c46290d0aff42d39101f686e4ba12cb773861e2399fd4757fb4550a81d8589f517edc96b7be5f8fa541b0517959a104c904ff050d89c581dfa8934a400c541cc27e9ac27d3fe260ad3801cdcde2fefc297e403a00c62ffb349f326027fc538de4e945807f304c0e31ae50f0d75b1f00cd24d242b901de570e182b5a6a52e1b9aca4fa60a3326b759efe7dba3be81a447870cdce6733417f14e09849d84d158b1fdca79805be8cda3125574ef2d0240b62b46a4fa931db62777463201bc7613e496b28cd08e534e2c15aed31a03dc6f53e0037edf424c3d9d8dd727250ab320631f7b2a65d3f57023d6bf704614fe4282ee8ef26a79f5372328925a3c53bc1393e65d1885d3fbb143d4be612d8dd37bb7a95fedb704f7f86db6b959e87a510000d8126ec88280abf13f722837f5ed92f7046bc2ab6c33abd9e46fea62927aa6e5edacee16759fc54bc539a51679993042c448904330dbe9a4cdee081ebf5b1864ab42897745c069e68130c8688285d9dd18345da5233bcfb20d0c87d4f8634f9701e95807a45db2eea442d12d2a05f49e05cf7026d3214b38aba12cdc334b4c380a93aa4a1139933d4f05ca345ec603115a66fc9c7c403a3cae0677dc07ce34e23dce580d59456489a5b92eaac7e2d37bd369a1b69c9458566fb7df16757a9e4d34d02440b59100fd259b19e531d4b34cdc17139ac6bd876f7a511ecbb3906e566b4aa4d5c066cad39d4ee624fbc58c6fd0a9d8357643e79f594221725227b16fb7c9217d044a3c8cb3b37a62bf77404c9bfd258098a9a563ba0298a7a7658870562e2f225b3db90211d0f767b3380e595e58637b7ae7eb4443df91b2646e5df4a5552930376e04f9b4264c43cfec128bfab96613648d28652bd1d8e5fe1c8af1bad1afd98b2c2613cd02241d6f08afdfd6f23a30940c7bbd67e8f6e1f26bc21c77b1f74425092c1ec8c88dfafc130de41c1e33b6ad00eced20651839f987a451a5b27eef914d334521ad13fd8df7db173f51f9e82b4eb6561c6b5fc3d8e37d9dbb8963d4ed43fe384e4b6b9da819b2155a11c69784dd825ef6ba289ec69a96a11745a77f73946099b4ef304bcdf446899d003547e3869e3229df50a29b0faa23126d7a6688c47ffd3e3c5c354eb17ba16326a863c931d7ba63eae88515dfea6fb7c662f97618dd8c233a48bd95f9e866ff4888a9178260e1946c1d5b23d6cbe4b666de37672c2bc002b50d2f95d0260744931c2e383fcbcba31e1ec694dfecfaae5981f8a4108e67d75419cec381039f5d8d7d1c0d37060a83a774c69805ee9d7cc518bfc0594830e71d0f607b22ae866517f538100eadea0cc0d74d560487b926a585797716e77e1df8cd9acfd364bc960357921b50ff3051a9820c50cd9edd0097699e45de3d6aa8fd8879d9dd71835d3ba046f6288c99e96b179ed8e441cca8f46be7d1180ac164b0ee8764c9abe11803d223bfadc10ea02ccb380a02e68457f51d9e8d580033eb487a18956e7b8d8cb41416fae11aefb51d52d1afed0eb08187776e04ca3efd557dc01a59d92cb676db6129b6fd7857dd41f60c4df44053b1942e590fd265fe208a910920a036ac9e8eac548b4ecb850224276f47573fedd07610106864cc7f8f2d70ce3de51c88f7c3ea2a924974487a600bc1345bf169bd7cafc849c64917eb8b0f280ea66f4ce5e03093a7bbad9c1088df63ded92753eb8e583c96250862105904a729789072629cc8fa06af7c135fe6debba74ac52f9e35dce2ce4174cc4275b6e10500ad75df4ac7fd9ab18b95539fdf8ae59bf9f935547fd54022474562775613a1e6c86ddaecab18e8cdf53b367ceae80f092b41a386e37360e2f2e2bbb42a493fe52a15d641ed38ed33be2caf4b1c52fc02fc3706f088f15ae929593b10aafaeb61f268c2582efc4b972925a78e0c96a4e07a340c2e4ae4ce17973d370d8dc400848ded63f6dc11df9e049fcd812d2c18cac3491a18e525190b4bf9b16e696610b2f8930478e9d952302f205a67b296ae2844d44f5acd50437fd5a772b31d91bb1cb2f0b24615b75abaa7dd83f8e622feda9b15b3c41797cfc37ba0411da87533f4d06bf6f7bc807c61f0bb702f1fa97706633ecbf4856d0a8507437769b5a24cbada12ad1b41da29c44bf863b74c4ef6f39e2a3af7fa9856d2f262b253005aad94226f113a8c9fe3fe1c440649b4ac1839afff135066222fd03c1323f417aabb73c5b1450b290ec46023449c3dc08b16ceb22aad4fd023071a9e672a27b4e6207d965962b7478f29d78302b452bf83ef3d2eab5d3e30000456688de69605615050d19247ee420a928f26476a024597c6e708d5e271955979dfd1ffe847a9b29a9448500d3e2fe01633eaf107143019432f637a2a7be6eea3813d84ae2a821c7fdadecbafb084745dbbc7a2e968cf6b960b707484d09f2589c0b8d868150206d3257729a4502892e68b487dd4687cefcc73d2a0e2071814f538e17fe8f0fd5d8e838f6b02b61f27b68edd71b3732ae9fe4e14879f5ce39ba062dc378372ef4af55630840a7b8ba244046f02eb81b6df23c4e80ded696722c4ec502c9d0ae0de14a8ac028bec5a6cc19be38c0a02bfbef5709363f721fde740392c65ca432ec58bc4348165653d7ae492bff1f6f9a2aa821a76cbade28c87a1612cf58a1a66617aa7aaf988084718de09819f0ad17e147a8b9285193b51a2ed8571d20b845b757cf10cef17cfba729d280c713af49a95c596cb5f50963f8ad93f9d1611b21f2b7b458835c259782275ccb6e502bab1370cfa1eeae9fa95429be4f90eb0673ccfe013f8d46b60f26eb39e60765985411ad1a67e9132998541ae227509ec4dde9d92c506e729cbe06a5514694be79b979b75d357dec5c00652978c264034c114e606b14ed6cdb5044e465840603069a5de15807bf45822034b65cfb4b02083f6eac3f430ef05a9e9e384b5a7c05bacb457d487e777f7115964f1d8ef6af5bfa50c79cf93407f490c17ab9c31902d069225c929ee7f79600d945dd6f56244f744503ea47988063a726075bda5233f3ec67e9b1aa6ce59fe2a66f90a1cb593128c3988304ce780324a161310da0e1fcc0f72442f1bba3ef7e2b19d3b9f2698efeabb135be03e06981559626c324168c135fe58a9e0e56402698c78de5a9d8b181c1187ee8c56c92bf527d1b23c5300f5fef3b6f8f9eb45f0ca6c4e858e48cdf347dbaf29f67bcf62799b7589238c2e1c5721bd064f316300aa83fb9299077669b8077654af078f4a44541e5f3f1fb9043caaf17725d3a76cda9e0f0f20a875327079039caa104480c4e9d6be4d9918ad73c35ea69512f61dceef1c763580b148fa32db63f2ea2e16490fe3df5a92de1099a34a9e47229d52d4ac8a87d3c5030c51878c09bde8eb05024198ccd9e0f3fbc6782526b266f16d5d474cc5ea423e101cdb27372d22aab45afc02dc9616c842d171ba2ba434197e299a5f4f76a4513e919b3688b0811f6c72d7544d2d86204b9a6cd59a279e10831fc6ca8f51cc6bdf22a0a603a378edab2b37860a6d556f092c969d2a6395821adee2ad539437d75c7b7bf4c3e811aaf07357944af6b94d58990d627a794701feed52cb12af453e3d37d267453c119adb332050a277abc23790b4f1853f88f2149cd049076dff76e5c42ccefa4b913499cb8e2c6f858a3dc65d422f722decb9d9c2631c5bc829d6f73b1698659dbeded68813f385b21d2c48e470163332b8ba2478d09c1a1f8f63f3069054896514d7a1912af4caf8043ea8ea6707f7fe160afe4078014d7d0a74fae69a6c5605c800eb40d1fcf49635fee277f1630eaf2433f4195cd4f2478bd67d5f4b314d6c137d1595d52680dfa3baf3545ac514f839f11cf0c0ae49bf628d74abc9114f222dc892e395847fa280fb224dcdcb4cc1fd6718121441a2c00067fb32b4d6da11e3d7cc30f1f38761a403e6cecfab107e17199db2008323719fa92813bc6952a87fef27584fbf0d641806742b907c482aa013f457bbfeab4ff2b3de4928937ddbf8b4e74c7e92856a6ee575e98b15b8d58181ff060a13aab8438d75920c6c15fdfd5f336547ec3fd7e6362e18f81cd7a6f0cf896a73a69c9d3886d4506ac4b53ac2030e88873fdb29d883909df8078a5d0c81a23fa02a25737d46af21ee03b2184296cfd817264ed695a7e8be454101790bd5cfca6d583275478ee915535555f8cd3a8d040d2c2f9515ac6010a9e98860097651b2106d0a55d2a00c8ad054730de33f036e999d883aa35e53ecc0efd3b6139b15da305b6eb1d0a1180d64f4e86f7cb1c21424f0d7c98843496cece07b1e2b61f15680317a2bc2d29581f5485ba19d838c65064db0b991eb3394f95680f0b8f2feee12cf10c9cfe73924c1a41fc1085b3f2bedb66bf0befbe074e642f7136e0393d9e9c226bd41bb60f1ee4f0dda7081f5569a551a63f5ac26830476e56d0fec3c86305a9b7516137df0703d58e931dbf2a9cb262e385f60278941eff43e3cd6afeed19e9dcaa0ce57bd6cf2431b91a64d306c1fbfbfa133a3e1416031aec21c6922f462ee68ad8ce2ff46aaeec047d26de3cde30a5fa19073692b86981eb2f1a35da0174bbf0908a30075334ead47ab078cb6eb551e848b9a7392d8428918d18f7b7fd70a82afae44fe4926f59bc6feebf7d724e1a4a0b319096073940ca360cb1ee9173853aff5a2849e2a4c8e9b30f7d68d11011dd6b636e0471a409592ba845d13500d13470686fca64878bec95be69462827191c4e234f6e01e661d28206d436d90866c68aa3ea54bc054eaeb2a4485cd7133cab1288a209cfecd24e41e33f5e9cdc6aa0d2dcfe2ec571f554c37448c454dbea38b8a4f1e7cc867f90d2633aea8666620fc3da9402cbfcbecf"}, &(0x7f0000001b00)=0x1008) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001b40)={r2, 0x31, "e7156f90cb026b7e2d325c7d4ad90ac575416c7f33d26c5a05d676e2efdf581a11f244ad4aedb95db0c2e51df8fd14ce19"}, &(0x7f0000001b80)=0x39) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/248, 0xf8}, {&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000800)=""/238, 0xee}], 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000180)=""/60, 0x3c}, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000080)={0x7fffffff, 0x9, 0x8000000000002}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000a40)='/dev/loop#\x00', 0x3, 0x48200) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000001c40)=r3, 0xffffffffffffffd4) syz_open_dev$dspn(&(0x7f0000000a80)='/dev/dsp#\x00', 0x101, 0x2) 05:10:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8983, &(0x7f0000000000)={'veth1\x00', 0x1}) 05:10:24 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) fanotify_init(0x9, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f0000000180), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffd, 0x8}, 0x10) 05:10:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x100000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) r2 = dup(r0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x5, 0x10000, 0x8, 0x2, 0x3, 0x9, 0x8237, 0x1, 0x9, 0x6, 0x6, 0x100000000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000fb2fe0), 0x0) ppoll(&(0x7f0000ae7000), 0x0, &(0x7f00002d4ff0), &(0x7f000079dff8), 0x8) [ 202.937927] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. 05:10:24 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e"], 0x7d) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:24 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ip6gre0\x00'}}, 0x1e) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)='>', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000040)={0x3, 0x100}) ioctl$TIOCSBRK(r1, 0x5427) [ 202.981101] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 202.988523] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. 05:10:24 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100, 0x80) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/74) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) [ 203.051311] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 203.051352] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 203.058714] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. 05:10:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x100) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local={0xfe, 0x80, [], 0xaa}, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 05:10:24 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x8000000000004002) r1 = socket$inet6(0xa, 0x1000000000002, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x2}}, 0x1e) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000000c0)=r2) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000440)={0x3, 0x1, 0x7, 0xffffffffffffffc0, 0x4}, 0xc) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)="daae6f9d268365325d7f25376618ee7c5c2c2003bb08b4afafd7210ad5f48ca30ce6ab2e61d3e227ea57d22b70e7884e402f87b8bc5b74f8d135f124b6b84b9779bab9e538ffb6a55906bb7f7ce53e1f42399afc29a3ff0090563ab84c9d9cd309a1b337e3d0b4a6fa76660bd56e6f84a6ce8d95d3fd76fee1f1e48f7c2260884f33e532d8f10a97cf4ae89321381c24b144a502da33e1a329ab52", 0x9b}, {&(0x7f00000002c0)="ffc1ee95b0e2f497a987ad40e266cb1aa1b9ce6f34f04f6b090bb48b7e037ec138e61b5708b6b912bcecd6b9ac856bcf5e276cdc1aa112d7cb23b89d405f298bbab9217c4051dee99654168b3eb33a1da2ad90cac6e29662303359acb49532a0db8e0732ded5a4d069", 0x69}, {&(0x7f0000000340)="fb3f84c631b33d36e2c720ea2a4d6c35717aa97fbb0aa9d6d13c00925522674eabec92cbac79f2cf4c0185d722a08b4dbe05e94f79bdf144aef5714fbd087c277f32c46ba80c267bef82d139552849264a0ec7c88dff7aad0ef195956ed4c8d6e0e70acd6aee7eb8052c7243752a7a31fb016a54e2bdfb4c7b322376f0a4d6ecd78149ff9cde9a2ade55c7bfbe849b323174db6dca5c9ca8d90ef0b847632d2c1ee6460bd7838a2dff2814bbeff923d780de42bbadc33f74", 0xb8}], 0x3, 0x0, 0x0, 0x20000000}, 0x4) 05:10:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x30e, 0x5, 0x8, 0x1a044419, 0x9, 0x1, 0x3, {0x0, @in6={{0xa, 0x4e22, 0xd0, @ipv4={[], [0xff, 0xff]}, 0x80000000}}, 0xffff, 0x1, 0x5, 0x6, 0xa6e}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x2, &(0x7f0000479000)=0x0) io_submit(r4, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 05:10:24 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e"], 0x7d) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xffffff0c, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001500e7de8ff8b84a3c6e453bcfd63c0000000000000000000002000000", @ANYRES32=0x0], 0xfffffffffffffeda}, 0x1}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='skcipher\x00', 0xffffffffffffff9c}, 0x10) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000100)={0x3}) bind$alg(r0, &(0x7f00003f1fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006a9fef)="e5fcb5bf", 0x4) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003500)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x20}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000000000ffdd00000000c16bc857e0f932b6614219c70911eed94c60d61708f188ca5bb37d08fb9474ab0d8e9730c0188febd6dc436143464fb4580a315783d1c61a4896bcc8ad45cb8f18afa54028b7dab491ef7430ef2b8b10abeee55028edbf46d256d7ec8ec45e54143be3f69cdb38e7fc3356b2819bd0ba0579b32997fcd69e845f57f10915365bfb58b7180f0e75f2585504f1e31f45578440e151115555f75d171831aa"], 0x344}}], 0x2, 0x0) 05:10:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000002]}) 05:10:24 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5f, 0x4000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000000c0)=0x101, 0x4) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) 05:10:24 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e"], 0x7d) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:24 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)=':-\x00', 0xffffffffffffff9c}, 0x10) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x113}}, 0x20) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000480)=0xae, &(0x7f00000004c0)=0x1) ioctl$RTC_UIE_OFF(r0, 0x7004) modify_ldt$read(0x0, &(0x7f0000000380)=""/248, 0xf8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/137, 0x89, 0x0, &(0x7f0000000140)) 05:10:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8800, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000040)="bded9faec66cfa9d529b7edf7933f40fa270a07b66b84d8cbfbe82243d23e46d26616e72ad4edb9c50caace61d", 0x2d) r2 = userfaultfd(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) 05:10:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r0], @ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="e87488c545f6cc3b6da759a74823c423eda62cdbcfe21cd17cedd36b218567dc76356edf5c7ff80d2097ed73285bf5baee95507f343885271937ff15e646ad38fb1ad9a4e6ea85e99e26f22e5acd4d845bdf6a951ae2abc3c270a3df1087440e4be2c7068b78814defef8d628c22fe969f7a2af651f76ebd1feb808163139a4cf4a17d431b791e5ad017107cc6aa3d3f25724cb7f779f9ae39a4b0d59c57e620deb0f80c9381b59b88fe0bc9fd6f1e3b3128d86295bde6d3", @ANYRESDEC, @ANYRES64=r0], @ANYRES16=r0, @ANYRESDEC=r0]) 05:10:25 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x8000008004500b, &(0x7f00000001c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x82, 0x0) 05:10:25 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x2) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x301000, 0x0) setsockopt$packet_int(r4, 0x107, 0x1b, &(0x7f0000000040)=0x8ef1, 0x4) 05:10:25 executing program 7: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000000000), &(0x7f0000b3bfff)) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000e00)={"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"}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) rt_sigaction(0x0, &(0x7f00000000c0), 0x0, 0xb4, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) madvise(&(0x7f0000012000/0x2000)=nil, 0x2000, 0xb) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x3}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) accept4$packet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x14, 0x0) dup2(r0, r2) clone(0x88081100, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000080)) 05:10:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={r1, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000100)=0x98) ioctl$SG_GET_NUM_WAITING(r0, 0xc0c0583b, &(0x7f0000000000)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00000001c0)) 05:10:25 executing program 5: bpf$OBJ_PIN_MAP(0x13, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00'}, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0)=""/216, 0xd8, 0x2041, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) 05:10:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100020423dcffdf00", 0x1f) r1 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r1, 0x2) 05:10:25 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r2, 0x80047456, &(0x7f0000d1df52)=""/174) [ 203.842224] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:10:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = semget$private(0x0, 0x4, 0x400) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f0000000180)=""/247) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040)=0xfffffffffffffffe, 0x15e) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0x0, 0x0, "a9a107d7dcd4e081"}}) close(r3) close(r1) 05:10:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x11, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/248, 0xf8}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)=""/215, 0xd7}], 0x7, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x6, 0x80}, 0x8) [ 203.912046] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:10:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x30000, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xa7b, 0x102) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0xa0800) memfd_create(&(0x7f0000000140)='ns/ipc\x00', 0x1) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x80, 0x2) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x85, 0x400) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x3, 0x800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) ioctl$VT_RELDISP(r2, 0xb701) [ 203.965160] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:10:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) semget(0x1, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0x8001, 0xffff, 0x1f, 0x13a3033e}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000823bd7000fbdbdf25020000003800030008000400af030000080007004e22000014000600fe8000000000000000000000000000bb08000400ff07000008000500ac1414aa1c000200080003000100000008000800000000000800050001800000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x14) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000040)=""/42) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000580)=""/183) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff095ffefd956fa283b724a6008c00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000640)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000880)={r3, &(0x7f0000000700)="6628d2b36f98bdcb21b00e6580868d43836422e4a5ccdb458794ca8f920bb19c78cb9dcab7861c7bc1af824c20e5ef3fd6a54f53112673b01dbcdfc63170a9b6ab6f077e75b541404cb110209b54a53539b88556b9daaa3034b22bfa005ea39024950ee6b798d30c946690290e01ee4eb563c3abb90a691ad1fcfb0a054dc1841bc8948bd69619c1738ba6f9c97491ed3adc5d9cd5f50da76a3d93df2586", &(0x7f00000007c0)=""/183}, 0x18) prctl$setname(0xf, &(0x7f0000000500)='IPVS\x00') socket$unix(0x1, 0x5, 0x0) sendmsg(r1, &(0x7f0000000540)={&(0x7f00000003c0)=@nl=@kern={0x10, 0x0, 0x0, 0x18080503}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="4083a2f77272daffdcf1f65b576646e905497965dee40e1cb6a1558fb99d25affcbb2830faa97a880d19ae6c30a6c9e636ead58f09407c6056e420ac9bf2d49120e9f993c7c49fdead2465320699177e753bf13c0ff6462b9b87add011bcbd90b78105c0d5bffff0479f27c7ffa5ecd4617c10542785936c8a95dcc48019026d5bfb12258f01d817ef9b49458d", 0x8d}], 0x1, &(0x7f0000000500), 0x0, 0x4804}, 0x20000005) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) 05:10:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x82, &(0x7f0000000400)="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") setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000580)={0x9, {{0xa, 0x4e22, 0x80, @ipv4={[], [0xff, 0xff], @rand_addr=0x44}, 0x1}}}, 0x88) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0x158, r3, 0x322, 0x70bd27, 0x25dfdbfb, {0xb}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x374b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xf58}, @IPVS_SVC_ATTR_AF={0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xada}, @IPVS_CMD_ATTR_DAEMON={0x9c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x8000) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) r4 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x8}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r5, 0x1}, 0x8) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x6, {{0xa, 0x4e24, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x100}}}, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000200)=0x4e) 05:10:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2000105082) r1 = memfd_create(&(0x7f0000000040)="003fcc78ffff2d", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) fallocate(r0, 0x11, 0x0, 0x100000001) [ 204.013486] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 05:10:25 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000002c0)) 05:10:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:25 executing program 7: r0 = userfaultfd(0x3) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x4) r2 = socket(0x10, 0x6, 0xc000000) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={r3, 0xfa, "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"}, &(0x7f00000002c0)=0x102) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000005000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000006ffc)={{&(0x7f000000b000/0x1000)=nil, 0x1000}, 0x1}) [ 204.112993] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 204.120484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:10:25 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20}, 0xffffffffffffff81) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f000031aff8)={r0}) fcntl$setstatus(r0, 0x4, 0x46000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0xd}}, 0x5580}, 0x1}, 0x0) recvmmsg(r2, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000004480)=""/178, 0xb2}}], 0x16, 0x0, 0x0) 05:10:25 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000400)={0x7fffffff, 0xbafe, 0x200, 0x4567, 0x80000001, 0x3, 0x20000000000000, 0x401, 0x0}, &(0x7f0000000440)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r1, 0x5}, 0x8) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000300)=0x5, 0x4) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000040)=0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r4, 0x11c, 0x70bd2c, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4004) 05:10:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001f0000/0x1000)=nil, 0x1000, 0x200000000000000, 0x10, r1, 0x4) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback=0x7f000001}, 0xfffffffffffffe2a) sendto(r0, &(0x7f0000000280)="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", 0x1001, 0x0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f00001ed000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 05:10:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="26eba638c542beca83fcdbc5c936d2c75b99053b312ae15fbaef978017b0321ac4bfdbc2f140dadc9b9c55283535a9179c3a4518f3db8f1490b471d039cd1c9793b9bac905b822ee10552b19a5194419138449bb62307832b86e3b3b28feab3b0b6a23929b87c4c7e3c4adb539bf6eba176dc82c90cb977623c2c1039811f49da638daa2d021f78392dd457ca018e34bd28a5bd4a15d07f4bab812e03012425c229e9b062eea3925a664fdffbf92ecebd4a360ab14410f96f25d1a60532a66e8c161fd537b57ca61be47024f34c417", 0xcf, r1) r2 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="07b9fdb5eec38889cb6432af98de0fe422895e96336db9e49333781f677bcf193a4aaa3427e77eed839df63e141526f53bbf59341a04000000000000007ad54e530b79e1f99adff88adf298014e1f3e4d694b4502aeb9521b77d2b3d1ff7bb79b7d0e01a204f968c79549b0cee43411c0d21caa238333ba10904a3569a556e2826ec28d796dc77d4b31b2e4b0e1c7b12ce92b9a46e8fed3502af693880c22d9e5c7e9d5adfda7be8f7fac5feec102838dc561eec84912923dc3c334c6f2f0b049d29f14a414d7d3cec"], &(0x7f0000000080)=0x23c) 05:10:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) [ 204.200796] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 204.208311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:10:25 executing program 7: r0 = memfd_create(&(0x7f0000000140)="7472757374656417366f786e6574300027656d7f1b8333a2ad26464d626c2f883c1870daab910c114e1cc9d3fc1ca7510e4b44106d0dd252bb020cafa4efd5e289b0007e2cbdbc420965258cb2decd0de18d0201000000ab348329568b2ab30d8871ec3875c448f2706f61aa99eddc8452689f11c51c869527419e2f02e75e05a55df593e0f3ab96069b777acfb788bc533b4052bea3071b676f7a53e585baad509d3f31b1b101c1db1aa9e1549ce34d9c4ec6b8bdb9dc89e187003791ee07bbab702271748e909aa57fdc567e", 0x1) getpeername(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) sendfile(r0, r1, 0x0, 0x4) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x1000, 0x1, 0x6730000000000000, 0x0, 0x2}) accept(r0, 0x0, &(0x7f0000000100)) pwritev(r2, &(0x7f0000001380)=[{&(0x7f00000012c0)="70c0fddea326c85212e18da8f93e84ded7f2222baad9a0d2400d887f491a5ea6d1e1c1e145553fd280c26686f8d506884c91bcd4acf5741356aec2eb55e1cea48d2fb2a706da22dce0f278cdcf58ae3cade84c70621b924fea7e0a7930a9fdad82e8d44e04bba11fee657019dcf6d5d3cecec9f3dba1e7999b04d694cb9066d445", 0x81}], 0x1, 0xf0ff7f) 05:10:25 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x30) mount(&(0x7f0000000000)='[::]:2::', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) [ 204.334841] netlink: 'IPVS': attribute type 29 has an invalid length. 05:10:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) [ 204.376447] netlink: 'IPVS': attribute type 29 has an invalid length. [ 204.410575] libceph: parse_ips bad ip '[::]:2:' 05:10:26 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005d40)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}, 0x1}, 0x0) r3 = shmget$private(0x0, 0x4000, 0xc00, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x9, 0x80000001, 0x7, 0x100000001, 0x40, 0x6d57, 0x6, 0x1, 0xfffffffffffff801, 0x7f, 0x8, 0xfffffffffffffffd, 0x7405, 0xffffffffffff0041, 0x81]}, &(0x7f00000001c0)=0x100) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x18400, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f00000002c0)={0x9, 0x6, 0x3ff}) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r4, 0x4) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10, 0x0) clock_getres(0x0, &(0x7f0000000080)) 05:10:26 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x168, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x269) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x108, 0x2, 0x26, 0x1eb, 0x37f, 0x3, 0x75, 0x6ba4}, "19a29a96dbe0e5d8589309c943a427fa7465bdd9368c8252c44063f34716b418eb68f439d8ca4b606e23f792bc213b6397972644b7e216536eab9523bc3721735869933b288f6c9dcd052216f384c2ee07dd3b540e0ee2e6c42b0d546f5b46489e0099abed099a9ea0240c25fb8f819c7befb2cd43d118e862a711e3a2627ee1c7b68180f6c80dd4789ccb98134229f1b4d5e8e92db8359c00a4cb8a8581504890ce3fdd7614e403718eadbd53", [[]]}, 0x1cd) r3 = socket$inet6(0xa, 0x1, 0x0) dup(r3) connect$vsock_dgram(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) r5 = getpgrp(0x0) ioprio_get$pid(0x1, r5) ftruncate(r4, 0x280080) dup(r3) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa}, 0x1c) sendfile(r4, r6, &(0x7f0000d83ff8), 0x2008000fffffffe) 05:10:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)="593bccb04cf1abb6ccc4525f5b9c24d32d1e4e83cc2b", 0x16}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x2f4, &(0x7f0000000000)=[{&(0x7f0000001700)=""/4096, 0xfffffe3b}], 0x1, &(0x7f0000000340)=""/80, 0x46, 0x20000003}, 0x0) prctl$intptr(0x17, 0x6) 05:10:26 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) 05:10:26 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000bc000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x49249249249296e, 0xc0) close(r0) socket$can_raw(0x1d, 0x3, 0x1) 05:10:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(blowfish-generic)\x00'}, 0x58) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x400000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000180)=r2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="9134abc0", 0x4) r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[], 0xffbd) rt_sigpending(&(0x7f0000000080), 0x8) recvmmsg(r3, &(0x7f0000008380)=[{{&(0x7f0000005940)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000006c00)=[{&(0x7f00000059c0)=""/185, 0xb9}], 0x1}}, {{&(0x7f0000006c80)=@ipx, 0x80, &(0x7f0000008200)=[{&(0x7f0000006d00)=""/4096, 0x1000}], 0x1, &(0x7f00000082c0)=""/189, 0xbd}}], 0x2, 0x0, &(0x7f0000008540)={0x77359400}) 05:10:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000008201ffff42de6e64edaecff746ad0000000000000000000000001d574b7c84788c44d302d0e496890bb6fdef7ae1f7b731cf4c597e18bc162ccf5d53c1a13c1e0a1c022c296d8d86488e5841d4b55483000000"], 0x14}, 0x1}, 0x0) 05:10:26 executing program 4 (fault-call:2 fault-nth:0): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 204.956055] kernel msg: ebtables bug: please report to author: Wrong len argument [ 205.020354] FAULT_INJECTION: forcing a failure. [ 205.020354] name failslab, interval 1, probability 0, space 0, times 1 [ 205.031675] CPU: 1 PID: 13243 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 205.039040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.048420] Call Trace: [ 205.051021] dump_stack+0x1c9/0x2b4 [ 205.054654] ? dump_stack_print_info.cold.2+0x52/0x52 [ 205.059848] ? trace_hardirqs_on+0x10/0x10 [ 205.064092] ? trace_hardirqs_on+0x10/0x10 [ 205.068341] should_fail.cold.4+0xa/0x1a [ 205.072418] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 205.077540] ? trace_hardirqs_on+0x10/0x10 [ 205.081792] ? find_held_lock+0x36/0x1c0 [ 205.085878] ? check_same_owner+0x340/0x340 [ 205.090210] ? rcu_note_context_switch+0x730/0x730 [ 205.095154] __should_failslab+0x124/0x180 [ 205.099406] should_failslab+0x9/0x14 [ 205.103217] kmem_cache_alloc_trace+0x2cb/0x780 [ 205.107901] ? kasan_check_read+0x11/0x20 [ 205.112062] alloc_pipe_info+0x175/0x5a0 [ 205.116133] ? pipe_read+0x940/0x940 [ 205.119855] ? __fget+0x414/0x670 [ 205.123319] ? expand_files.part.8+0x9c0/0x9c0 [ 205.127666] kernel msg: ebtables bug: please report to author: Wrong len argument [ 205.127933] ? find_held_lock+0x36/0x1c0 [ 205.139596] splice_direct_to_actor+0x6fc/0x8f0 [ 205.144270] ? fsnotify+0xbb4/0x14e0 [ 205.147989] ? pipe_to_sendpage+0x400/0x400 [ 205.152317] ? do_splice_to+0x190/0x190 [ 205.156297] ? rw_verify_area+0x118/0x360 [ 205.160459] do_splice_direct+0x2d4/0x420 [ 205.164615] ? splice_direct_to_actor+0x8f0/0x8f0 [ 205.169463] ? rw_verify_area+0x118/0x360 [ 205.173623] do_sendfile+0x623/0xe20 [ 205.177348] ? do_compat_pwritev64+0x1c0/0x1c0 [ 205.181947] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 205.187491] ? _copy_from_user+0xdf/0x150 [ 205.191647] __x64_sys_sendfile64+0x15d/0x250 [ 205.196150] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 205.200740] ? do_syscall_64+0x9a/0x820 [ 205.204723] do_syscall_64+0x1b9/0x820 [ 205.208604] ? finish_task_switch+0x1d3/0x870 [ 205.213083] ? syscall_return_slowpath+0x5e0/0x5e0 05:10:26 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000003400)=ANY=[@ANYBLOB="140000000006ffff000000157481efcf32b80100"], 0x14}, 0x1}, 0x0) 05:10:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="f20f94ff0f01cf0fc72f6436f0f79b450066b9800000c00f326635000100000f3066b91a09000066b8fdafa70566ba000000000f30650fc7a900700f01cf642e3e0f005a0fb800098ee0", 0x4a}], 0x104, 0x5e, &(0x7f0000000100), 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x400002, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000240)={0x3, [0x401, 0x236b, 0x2]}, &(0x7f0000000040)=0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000200)=0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl(r2, 0x5, &(0x7f00000004c0)="86aa7d2d04a8de062094ea0de2229341ad295dbf581ce6cf5242fa973c44bca1f0fd63fadebe052ef672a542e085d32b47abe240e0d6da56dc7d3241c9aeb0007cf42050df6ffd16f992801fd7654d1548df718a00ed5f6f6b366d9889e3ce8dc86b976d7c7b0f204e88430eeb69091c5ed70c89a3a11a0b6b68addc32236d68ea2e94e6df3828803b3aa56387a7dfdbde174d56780738021739616f7a") ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000005c0)) openat(r3, &(0x7f0000000000)='./file0\x00', 0x400, 0xae) ioctl(r4, 0x8912, &(0x7f0000000340)="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") r5 = socket(0x2, 0x100000001, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000002c0)={'lo\x00'}) 05:10:26 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x5, 0xf, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x7, 0xb, 0x7, 0xf, 0x80, 0xfffffffffffffffc}, @exit={0x95}, @call={0x85, 0x0, 0x0, 0xe}, @ldst={0x0, 0x3, 0x3, 0x2, 0x5, 0xc, 0x1c}, @generic={0x2, 0x10001, 0x1, 0x100000000}, @call={0x85, 0x0, 0x0, 0x1d}], {0x95}}, &(0x7f00000011c0)='syzkaller\x00', 0x1, 0x31, &(0x7f0000001200)=""/49, 0x41f00, 0x1, [], 0x0, 0xf}, 0x48) r1 = open$dir(&(0x7f00000012c0)='./file0\x00', 0x404000, 0x5) sendfile(r0, r1, &(0x7f0000001300), 0x101) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r3 = socket$inet6(0xa, 0x800, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000000000)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000001100)={0x0, 0x4, 0x10, 0x400, 0x6}, &(0x7f0000001380)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000013c0)={r5, 0xe4, "b0136404f78c84524856ece2fed043cbfb827ebbd882ea003bec5a2c66f8d127a313c1b6d72a5e84a0eaa43312e59628de51af0f4b2ea3677684c8bdacb3f71dc91a1adeef232c8e20b16cb1611bf9001fe3aee6e97cb68b1e25ee4f6f14869300774d90932eb473009314d17bce2451ebdfd54884c686be5b5efdecaed316f116d65aaa2644e4893ad3e0fea0a50b56aad852a9bdece59ad2a128cb12411e7a536a784c0ee6be936f8e8d5438a11aa2edd3e89cf09f03ca8adf3e364eae81f32dde5e0e684ce8328b680f37a20063de71509e53c0c592cca5afc2c012f72092ec0a8e48"}, &(0x7f00000014c0)=0xec) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000001340)=0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14}}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0xa) 05:10:26 executing program 5: r0 = socket$inet6(0xa, 0xa, 0xbca) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000040)={0x1ff, 0x800000000000}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setpipe(r0, 0x407, 0xffffffffffffff01) read$FUSE(r2, &(0x7f00000002c0), 0x1000) madvise(&(0x7f0000c0f000/0x1000)=nil, 0x1000, 0x1a) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x5) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000013c0)={0x0, @loopback, @local}, &(0x7f0000001400)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0xd, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7}, [@exit={0x95}, @map={0x18, 0x8, 0x1, 0x0, r1}, @ldst={0x3, 0x0, 0x2, 0x1, 0x8, 0xfffffffffffffff6, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x0, 0x0, 0x0, 0x379278f2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, @generic={0x3, 0x3, 0xfffffffffffffffe, 0x7fff}, @alu={0x0, 0x4, 0xb, 0x7, 0x4, 0x18, 0x1}, @generic={0x1, 0x4, 0x9, 0x100}], {0x95}}, &(0x7f0000000180)='GPL\x00', 0xfffffffffffff000, 0xe6, &(0x7f00000012c0)=""/230, 0x40f00, 0x1, [], r3}, 0x48) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) 05:10:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/24, &(0x7f0000000000)=0x18) 05:10:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x8, 0x5}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x627}) [ 205.218001] ? syscall_return_slowpath+0x31d/0x5e0 [ 205.222931] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 205.228289] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.233125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.238310] RIP: 0033:0x455ab9 [ 205.241493] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.260864] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 205.268581] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 205.275853] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 205.283121] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 205.290381] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 205.297640] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000000 05:10:26 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 05:10:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x7) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 05:10:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x60) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) ioctl$int_out(r1, 0x90004523, &(0x7f0000000100)) 05:10:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x20000000004, &(0x7f0000000040)="8234864eea5f8bed000000") r1 = socket$inet(0x2, 0x3, 0x2) getsockopt(r1, 0x0, 0xce, &(0x7f00000004c0)=""/203, &(0x7f0000000000)=0xcb) 05:10:26 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="00020000000000000401000000000000000000000000"], 0x20) r1 = socket$inet6(0xa, 0x10000000000002, 0x4040000000000) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000003b40)}, 0x0) 05:10:26 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000002700)=[{r0}], 0x1, &(0x7f0000002740)={0x77359400}, &(0x7f0000000040), 0x8) r1 = socket$inet6(0xa, 0x6, 0x6a76109b) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x15}, 0x1000}}, 0x9, 0x9, 0x4, "fcb71f275c0e132a3953c6dce79c710fd23355794bfd8b9df90f5c75d2abf239a964fab96c1327fb5205c591561cb6a19a5ed5fcccb54a8f776d1e6519b0dd290bae0b7157868466673537bbad3d1198"}, 0xd8) 05:10:26 executing program 0: r0 = socket(0x40000000002, 0x3, 0x9) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xcc, r1, 0x100, 0x70bd25, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5991}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4156}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x21}}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x4041) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x100000000, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000002c0)) 05:10:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0x9, 0x29, 0x13, 0x12, 0x6, 0x0, 0x2, 0x12e}}) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000480)=""/224, 0xe0}], 0x1, 0x0) 05:10:26 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x101, 0x10, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x80000000002) 05:10:26 executing program 4 (fault-call:2 fault-nth:1): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c4c379146600006543a02d0000000000000064670f01cab8010000000f01d946d8f1e1b066ba400066edb9f60800000f32f2400f0964460f35", 0x39}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x401}]}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x5, 0x3f, 0x200, 0x2, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x6, 0x0) [ 205.755654] FAULT_INJECTION: forcing a failure. [ 205.755654] name failslab, interval 1, probability 0, space 0, times 0 [ 205.767649] CPU: 0 PID: 13322 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 205.775006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.784375] Call Trace: [ 205.786965] dump_stack+0x1c9/0x2b4 [ 205.790597] ? dump_stack_print_info.cold.2+0x52/0x52 [ 205.795788] ? __save_stack_trace+0x8d/0xf0 [ 205.800121] should_fail.cold.4+0xa/0x1a [ 205.804183] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 205.809287] ? save_stack+0x43/0xd0 [ 205.812909] ? kasan_kmalloc+0xc4/0xe0 [ 205.816780] ? kmem_cache_alloc_trace+0x152/0x780 [ 205.821618] ? alloc_pipe_info+0x175/0x5a0 [ 205.825841] ? splice_direct_to_actor+0x6fc/0x8f0 [ 205.830667] ? do_sendfile+0x623/0xe20 [ 205.834540] ? __x64_sys_sendfile64+0x15d/0x250 [ 205.839194] ? do_syscall_64+0x1b9/0x820 [ 205.843241] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.848597] ? find_held_lock+0x36/0x1c0 [ 205.852655] ? check_same_owner+0x340/0x340 [ 205.856957] ? rcu_is_watching+0x8c/0x150 [ 205.861099] ? rcu_note_context_switch+0x730/0x730 [ 205.866023] __should_failslab+0x124/0x180 [ 205.870246] should_failslab+0x9/0x14 [ 205.874035] __kmalloc+0x2c8/0x760 [ 205.877578] ? kmem_cache_alloc_trace+0x616/0x780 [ 205.882408] ? alloc_pipe_info+0x2a8/0x5a0 [ 205.886634] alloc_pipe_info+0x2a8/0x5a0 [ 205.890679] ? pipe_read+0x940/0x940 [ 205.894377] ? __fget+0x414/0x670 [ 205.897819] ? expand_files.part.8+0x9c0/0x9c0 [ 205.902384] ? find_held_lock+0x36/0x1c0 [ 205.906451] splice_direct_to_actor+0x6fc/0x8f0 [ 205.911104] ? fsnotify+0xbb4/0x14e0 [ 205.914803] ? pipe_to_sendpage+0x400/0x400 [ 205.919116] ? do_splice_to+0x190/0x190 [ 205.923079] ? rw_verify_area+0x118/0x360 [ 205.927213] do_splice_direct+0x2d4/0x420 [ 205.931348] ? splice_direct_to_actor+0x8f0/0x8f0 [ 205.936175] ? rw_verify_area+0x118/0x360 [ 205.940308] do_sendfile+0x623/0xe20 [ 205.944016] ? do_compat_pwritev64+0x1c0/0x1c0 [ 205.948594] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 205.954116] ? _copy_from_user+0xdf/0x150 [ 205.958250] __x64_sys_sendfile64+0x15d/0x250 [ 205.962731] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 205.967298] ? do_syscall_64+0x9a/0x820 [ 205.971260] do_syscall_64+0x1b9/0x820 [ 205.975130] ? syscall_slow_exit_work+0x500/0x500 [ 205.980046] ? syscall_return_slowpath+0x5e0/0x5e0 [ 205.984958] ? syscall_return_slowpath+0x31d/0x5e0 [ 205.989876] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 205.995228] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.000060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 206.005230] RIP: 0033:0x455ab9 [ 206.008407] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.027639] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 206.035341] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 206.042594] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 206.049855] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 05:10:27 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000700)=@broute={'broute\x00', 0x20, 0x3, 0x448, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x9, 0x0, 0x0, 'veth0_to_team\x00', 'syzkaller1\x00', 'team_slave_0\x00', 'bridge_slave_1\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0xe0, 0x118, 0x148, [@connbytes={'connbytes\x00', 0x18, {{0x0, 0x0, 0x0, 0xc031759d59d6f22f}}}, @state={'state\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}, {{{0xd, 0x0, 0x0, 'bridge_slave_1\x00', 'vlan0\x00', 'yam0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0x1], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0xf0, 0x138, [@quota={'quota\x00', 0x18}, @time={'time\x00', 0x18}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0xd, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00', 'team_slave_1\x00', 'bridge_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x108, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}]}, 0x4c0) [ 206.057105] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 206.064366] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000001 05:10:27 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) recvfrom$packet(r2, &(0x7f00000002c0)=""/231, 0xe7, 0x40000001, &(0x7f0000000200)={0x11, 0x1c, r4, 0x1, 0x8, 0x6, @random="7a68817153b2"}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f16}) dup3(r3, r5, 0x0) 05:10:27 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000100)={0xf001, 0x0, 0x8000, 0x9, 0x40}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180), &(0x7f0000000140)=0x4) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='veth0_to_bridge\x00') setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'bond0\x00', 0x3}, 0x18) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) ioctl(r2, 0x800000000008982, &(0x7f0000000000)) accept$packet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000740)=0x14) bind$packet(r0, &(0x7f0000000780)={0x11, 0x6, r3, 0x1, 0x5, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 05:10:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000680)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x90800, 0x0) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x5, {0xffffffffffffffff}}, 0x18) chroot(&(0x7f0000000040)='./file0\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x101000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000500)=0x3f, 0x4) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000140)={0xf6, 0x7f, 0x9, 0x6, 0x2, 0x12d}) 05:10:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x3cf) r2 = msgget(0x2, 0x100) r3 = fcntl$getown(r0, 0x9) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x200000, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid\x00') msgsnd(r2, &(0x7f0000000040)={0x0, "258ce1d030ebf773508ed2e7ff602dce3b1f3df676e9778a157e45c440d3fd4afdcbb895bfe8ad931efe232bdfe4bbd2619e3e49f3ea174329e09c6dc0c43dd707709e78ceb4f3dfde72ec499cb62283ff0fc9a3cfadbd71935edc5414f36d598b9ed0a5bccb8b5541deba06d2cca748d509202fd11618d5bf55c684edfbbdaa672c1ac242d4a4d5f1c006adaf6b073acb7ee7899e82a4f76c865ce8dc71e63864bc8661c57f4ec5911a761be387c26a9e26a92ac13163f57ce995c44619fe4cd3eb6ce1f9889bb4d006037a654dd4"}, 0xd7, 0x800) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000200)={r4, 0x7, 0x1f, r4}) write$P9_RCLUNK(r4, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180f00000000000000000000000000009e810893db48d9e100000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x4000000000000}, 0x48) 05:10:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) getdents(r0, &(0x7f0000000000)=""/90, 0x19) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) getdents(r0, &(0x7f0000000080)=""/69, 0xffffffffffffffd7) modify_ldt$read_default(0x2, &(0x7f0000000300)=""/238, 0xee) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000200)={0xca, "98de29b778f99450c57350c136de909aaeb8840950e964dc9d9d55bbdf566afc6c9a7947e0a87a1d510607f8f093ce7be406b7f2f3569aa6b47dfb069d2cb07ce16b156c5bbd9674caaf7a60d8a52e1ab56ffd7e94fb44552afb4d20c91ad5cb9ca3946e300baca92cbf46d6fadc570e9bd5de31e321e67acb611e280d2a68552854fb3ead71806f6f826aac6933d2236f258c3219dc3f0601a386bf2c2f907d299ef2af3521ce5b48b603470a510078e8756deebbfcaf45d6c89213f94ce94fcb93f5f06c4a25ce6c3b"}) socket$nl_generic(0x10, 0x3, 0x10) 05:10:27 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1005}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x4b5800000}}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xe803, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast=0xffffffff}, @udp={0xc0ffffff, 0x0, 0x28}}}}}, &(0x7f0000000380)) 05:10:27 executing program 4 (fault-call:2 fault-nth:2): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x80040, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000440)=0x4c74) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x9, 0x101000) r3 = add_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000003c0)="8370b01fa1df39a420e55c8a515ff75b2290a0", 0x13, 0xffffffffffffffff) keyctl$clear(0x7, r3) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair(0x1d, 0x803, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000240)="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") write(r4, &(0x7f0000000140)="9375f8070cd96537d78757eeb07183d7cedce4e1e5801629c50cf28ca36ff8797caeeb12c92459b0f04e3c6ffd59bc039f8212fb339b2f5c71103626c0e60489b4fb9228f41eb171cdfb8e5d26f5cfd9d6a4cac98a46780a7fa92ed3d3795b1c7e8c134c1da4bc11bd41b2dd92a0e2843d60ad94d8a2f0af5b39d79193d9517540c78a7377370963ce908a33b8643695fc576e3418ffb82b389cfeba286e4bd8d4", 0xa1) r5 = gettid() move_pages(r5, 0x4, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000040)=[0x3], &(0x7f00000000c0)=[0x0, 0x0], 0x6) [ 206.299531] FAULT_INJECTION: forcing a failure. [ 206.299531] name failslab, interval 1, probability 0, space 0, times 0 [ 206.310866] CPU: 0 PID: 13350 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 206.318237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.327590] Call Trace: [ 206.330196] dump_stack+0x1c9/0x2b4 [ 206.333841] ? dump_stack_print_info.cold.2+0x52/0x52 [ 206.339056] should_fail.cold.4+0xa/0x1a [ 206.343136] ? fault_create_debugfs_attr+0x1f0/0x1f0 05:10:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0xffffffffffffa365, 0x40, 0x6, 0x74, 0x401, 0x7fffffff, 0x3, 0xad, 0x1ff, 0x9, 0xff, 0x2, 0x4}, {0xb7, 0x8, 0x8, 0x2, 0x8, 0x5, 0xfffffffffffffff9, 0x3, 0x800, 0x2, 0x9, 0x3, 0x2}, {0x9, 0x1, 0x4, 0x7, 0xffffffff, 0x9, 0x8, 0x7, 0x7fffffff, 0x6, 0xb129, 0xfffffffffffff90f, 0x80000000}], 0xbe}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 05:10:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00'}, 0x28) r3 = dup2(r1, r2) setsockopt$inet6_dccp_buf(r3, 0x21, 0x8d, &(0x7f0000000200)="a74a17ab9eb462f342cf8ed4afb069e2d2dfe36ea8270d7bb1cf34f40201b78b3765c59d9fed3b60382f284244af04cb15081fec99b53fd569e876fce992e622f2", 0x41) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) [ 206.348349] ? trace_hardirqs_on+0x10/0x10 [ 206.352603] ? find_held_lock+0x36/0x1c0 [ 206.356694] ? check_same_owner+0x340/0x340 [ 206.361025] ? rcu_note_context_switch+0x730/0x730 [ 206.365965] __should_failslab+0x124/0x180 [ 206.370216] should_failslab+0x9/0x14 [ 206.374026] kmem_cache_alloc_node_trace+0x26f/0x770 [ 206.379154] __kmalloc_node+0x33/0x70 [ 206.382965] kvmalloc_node+0x65/0xf0 [ 206.386690] iov_iter_get_pages_alloc+0x7da/0x1530 [ 206.391626] ? kasan_check_read+0x11/0x20 [ 206.395787] ? iov_iter_fault_in_readable+0x460/0x460 [ 206.400982] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 206.405393] ? is_bpf_text_address+0xd7/0x170 [ 206.409884] ? kernel_text_address+0x79/0xf0 [ 206.414289] ? __kernel_text_address+0xd/0x40 [ 206.418779] ? unwind_get_return_address+0x61/0xa0 [ 206.423699] ? __save_stack_trace+0x8d/0xf0 [ 206.428027] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 206.433034] ? iov_iter_pipe+0xc2/0x2f0 [ 206.437000] default_file_splice_read+0x1da/0xb10 [ 206.441835] ? do_splice_direct+0x2d4/0x420 [ 206.446144] ? do_sendfile+0x623/0xe20 [ 206.450024] ? __x64_sys_sendfile64+0x15d/0x250 [ 206.454684] ? do_syscall_64+0x1b9/0x820 [ 206.458776] ? iter_file_splice_write+0x1010/0x1010 [ 206.463789] ? kasan_check_read+0x11/0x20 [ 206.467926] ? rcu_is_watching+0x8c/0x150 [ 206.472061] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 206.476458] ? __lockdep_init_map+0x105/0x590 [ 206.480942] ? lockdep_init_map+0x9/0x10 [ 206.484990] ? __mutex_init+0x1f7/0x290 [ 206.488962] ? rcu_pm_notify+0xc0/0xc0 [ 206.492837] ? __ia32_sys_membarrier+0x150/0x150 [ 206.497582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 206.503106] ? fsnotify+0xbb4/0x14e0 [ 206.506814] ? init_wait_entry+0x1c0/0x1c0 [ 206.511037] ? fsnotify_first_mark+0x350/0x350 [ 206.515608] ? fsnotify+0x14e0/0x14e0 [ 206.519413] ? security_file_permission+0x1c6/0x240 [ 206.524418] ? rw_verify_area+0x118/0x360 [ 206.528552] ? iter_file_splice_write+0x1010/0x1010 [ 206.533559] do_splice_to+0x12e/0x190 [ 206.537355] splice_direct_to_actor+0x270/0x8f0 [ 206.542015] ? pipe_to_sendpage+0x400/0x400 [ 206.546332] ? do_splice_to+0x190/0x190 [ 206.550297] ? rw_verify_area+0x118/0x360 [ 206.554435] do_splice_direct+0x2d4/0x420 [ 206.558576] ? splice_direct_to_actor+0x8f0/0x8f0 [ 206.563409] ? rw_verify_area+0x118/0x360 [ 206.567634] do_sendfile+0x623/0xe20 [ 206.571342] ? do_compat_pwritev64+0x1c0/0x1c0 [ 206.575929] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 206.581454] ? _copy_from_user+0xdf/0x150 [ 206.585592] __x64_sys_sendfile64+0x15d/0x250 [ 206.590074] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 206.594644] ? do_syscall_64+0x9a/0x820 [ 206.598610] do_syscall_64+0x1b9/0x820 [ 206.602483] ? finish_task_switch+0x1d3/0x870 [ 206.606968] ? syscall_return_slowpath+0x5e0/0x5e0 [ 206.611883] ? syscall_return_slowpath+0x31d/0x5e0 [ 206.616808] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 206.622164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.627002] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 206.632180] RIP: 0033:0x455ab9 05:10:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000005e0007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000002c0)={0x1000, 0x7ff, 0x7, 0x7ff, 0x7, [{0x9, 0x8, 0x9, 0x0, 0x0, 0x888}, {0x5be08ad5, 0x2, 0x80000001, 0x0, 0x0, 0xc}, {0x0, 0x8, 0x20, 0x0, 0x0, 0xa00}, {0x4, 0xe5a140b, 0x3}, {0x5, 0x7, 0x4, 0x0, 0x0, 0x1000}, {0x29e7, 0x6, 0x3842, 0x0, 0x0, 0x200}, {0x8000, 0x3, 0x400000000, 0x0, 0x0, 0x200}]}) [ 206.635349] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.654676] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 206.662372] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 206.669628] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 206.676882] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 206.684136] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 206.691390] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000002 05:10:28 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x80, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000500)={0x1}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000340)="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") ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x2, 0x100, 0x400}, 0x10) readahead(r1, 0x1000, 0x800) r2 = socket$inet(0x2, 0x1, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x800, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f00000001c0)="9022ceb4d8d8b4367b1d40f868d533039a28a7d1a3ff4217512951c0ab8f478ff86e46a086581330acb8231b3466a8af8f501a21319bcbd38b2ec9618de93bf063cc986d3a7a0d855827844dedd9b0b8f87d2f79c51164ca391d134f6893c94e16c86168dacbc6e7ab5edbbedc3bd012bba8d9971c6d0c031f9ec9a19c6e04ba4375e31e27fc39e26fa91f879082b795e9745f1b73f42af3929cc1f317f8c33c240469a4385983ba195dce5b98b72f220df7682e8c7512a1d8f1", 0xba) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000180)=""/31) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x10) fsetxattr(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='ty./dev/uinput\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000300)='/dev/uinput\x00', 0xc, 0x1) setsockopt(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001000), 0x47e) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000000c0)=""/128, &(0x7f0000000000)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000340), 0x2}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x1e, &(0x7f0000000e40), 0xf9, &(0x7f00000012c0), 0x302}}], 0x198, 0x0) 05:10:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$KVM_GET_IRQCHIP(r2, 0xc008ae67, &(0x7f0000000140)) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000080)=""/192) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x7fff8, @dev={0xfe, 0x80, [], 0xd}, 0x8}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0xfff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}, 0x5}, @in6={0xa, 0x4e24, 0xa2c, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in6={0xa, 0x4e22, 0x1, @empty, 0x2}, @in={0x2, 0x4e22, @rand_addr=0x2}, @in6={0xa, 0x4e20, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x8137}], 0xdc) [ 206.783168] Unknown ioctl 1074310960 05:10:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) times(&(0x7f0000000080)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) bind$netlink(r0, &(0x7f0000001c00)={0x10, 0x0, 0x0, 0x100}, 0xc) 05:10:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x85, 0x1a}, 0x1d2) r0 = getpgrp(0xffffffffffffffff) ptrace$poke(0xa849306bb17b1609, r0, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f0000000000)="73010080001e000000", 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 206.810671] Unknown ioctl 1074310960 05:10:28 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r2, 0x9, &(0x7f0000001700)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x200, r0, &(0x7f0000000080)="e66bf02ee1c5306b52", 0x9, 0x9, 0x0, 0x1, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000200)="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", 0x1000, 0x6, 0x0, 0x0, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x2e, r0, &(0x7f0000001780)="ae03efb6fffe58eec26b5dd8ec2b9502631465925799d6afee846404cf9d567952d6dd8cd96d645d52055c4550718f5827ef545c9179e7c32ef4a9fea14e378ba20bbc307beab6ff9e1dae4d16d2f6f41dcf82555f2a4abd33b27c787f5d1ac8cdff28607507ad89ddfd63e225af6933bf9d9a440a18e2c9ac41bae99b12996f551a6d4d0d8c3458bb9ae306a5212166e0c21211b81c6509f18c85a3d2f858e153ebd8f6410fbcf770a1e0ff6d4564ea9dcb95335f2c16f22f8dec9c3c884f71b7d0067b4a782f7df10fccb3dd62e93a2bcce9f10eb64386710d05812997ae6f00271d", 0xe3, 0x2, 0x0, 0x0, r1}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000001300)="291d5a0a4cbe9c2398", 0x9, 0x5b63, 0x0, 0x1, r1}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x5a, r1, &(0x7f0000001380)="3fba73dc5952d01b096fbd673d51a86bf3154f5ecc7423e6e7f83275cb9644206eb97c7a8609a35d9aec80876a5dd11dcbe9ec2ea2c343a2439b78cb0bdd7d312b583c093f6932d00f5bdbe2d8bc3df9f6f8694459787c0fddaee0a4490b7fa4f408", 0x62, 0xaa6d, 0x0, 0x1, r1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000001440), 0x0, 0x100000001, 0x0, 0x1, r1}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0xb, 0x9b, r1, &(0x7f00000014c0)="53a2d6c2713550", 0x7, 0x200, 0x0, 0x0, r1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000001540)="8d2456fda86cc00bb979108daeb466c54e455043f2898efc0fb6f05a42bd947b4597e1c398e0d987e964e997026e91a1fec953c147de28994a43c67abf00a14a8e6d7cbb86f85da1d4b03a3571061c7d83c88ea50cff122aeedd69b4137976b7d86f9f12c710bb033e97dac3c6eb7d03c581e3f459eaa8b26e65f63a677de9fe6770c11339e5cc9a32917a42a19c8a3a3769b6695dc05b9f1da4fb8a6ae60aca663cc10c", 0x71, 0x3f, 0x0, 0x0, r1}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000001640)="62e8ca2f1d08f53c32c71be0b9587eb144c7aa4a1d483994dabe240ca5c441399f7afb8acf1d8105633c4a3d1428966ede1f8faa7104b784fc72da6810e2c92708d67ddee54a02fecf814c6720acd299c2", 0x51, 0x9, 0x0, 0x0, r1}]) 05:10:28 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x10883, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000440)={'vcan0\x00', 0x6}) pselect6(0x40, &(0x7f0000000000)={0x9, 0x8, 0x100000001, 0x7, 0x7, 0x1, 0x2, 0x1f15}, &(0x7f0000000180)={0x7, 0x518, 0x2c, 0x2ea6, 0x0, 0xffffffff, 0xfffffffffffffff9}, &(0x7f00000001c0)={0x2, 0x3, 0xff, 0x3, 0x8000, 0xa8, 0x8, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={0xc8}, 0x8}) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000340)) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') unlink(&(0x7f0000000140)='./file0/file0\x00') 05:10:28 executing program 6: r0 = socket(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) write(r0, &(0x7f0000000040)="2400000052001f0014f9f407000904ff0200070208000100fffffffe0800000000000006", 0x24) fadvise64(r0, 0x0, 0xfffffffffffffe01, 0x0) 05:10:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeb7000ee9a90f79801a699a2954fa07424ada75af1f02ac06edbcd7a085c1fdd9c2f2a467414b7e7cae86245771fb35331ce39c5af3e2d7ff") ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000080)={0x6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}]}) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0x38a) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) 05:10:28 executing program 4 (fault-call:2 fault-nth:3): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:28 executing program 2: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, @multicast2}, &(0x7f0000000280)=0x10, 0x800) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0)=0x6, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x10) getdents(r1, &(0x7f0000001100)=""/182, 0x1ea) 05:10:28 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x2]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x9, 0xff, 0x2, 0x1, 0xff, 0x0, 0x1, 0x3f, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e23, 0x100000000, @dev={0xfe, 0x80, [], 0x19}}}, 0x7}, 0x90) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000240)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r3, 0x40046104, 0x701000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100), &(0x7f0000000140)=0x8) 05:10:28 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001d4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) mremap(&(0x7f00001d5000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f00001d4000/0x4000)=nil) [ 207.024780] FAULT_INJECTION: forcing a failure. [ 207.024780] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 207.036668] CPU: 1 PID: 13413 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 207.044037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.053482] Call Trace: [ 207.056081] dump_stack+0x1c9/0x2b4 [ 207.059726] ? dump_stack_print_info.cold.2+0x52/0x52 [ 207.064930] ? find_held_lock+0x36/0x1c0 [ 207.069012] should_fail.cold.4+0xa/0x1a 05:10:28 executing program 5: r0 = memfd_create(&(0x7f0000000100)="657468312f2f2c245bae2e766d6e65743100", 0x2) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x7, 0x0) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000300)) rt_sigsuspend(&(0x7f0000000000)={0x80000000}, 0x8) setsockopt$inet6_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000280)="89b6afb977ea2ba5fc8d4bcbdf67a2b7532700930a0e7123480ae6ad01f24648905f772db03a35462ca92ed799de4aaca9dda2c323df8ef35c6632f04c07f9855d553dc2433929d938ff67fd435feec8449c2da90c4a40ff63b953fd2184a2", 0x5f) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vcan0\x00'}) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x2) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000001c0)=""/19) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f00000003c0)) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x9, 0x200000) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0xb42, 0x2, 0x3, 0x1, 0x5, 0xe7c1}, 0x400000000}, 0xa) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000400)=""/235) 05:10:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000003c00), &(0x7f00000041c0)=0x4) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 05:10:28 executing program 0: syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x400, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1baf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x800000, 0x1) 05:10:28 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x10001, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000bfcffc), &(0x7f0000d12ffc)=0x4) 05:10:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x8000000000000003) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x400) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc008551b, &(0x7f00000000c0)={{0x9, 0x1, 0x0, 0x0, "d24867de5bdd032be86e073db2eccb959e8fee0ea444fbb03a176fb6e53b456df5b13162a55cbdd8dd95b480"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "506d4b95d0d6c48bf01a1a8402a61439529e3b64e553152146896ba6d0c596e413e633507a3ec693358f4371628a44a2cc2c91257fcdc9ebd59d9ef08653a01d", &(0x7f0000000080)}) r2 = getpid() ioprio_get$pid(0x0, r2) [ 207.073093] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 207.078210] ? kasan_check_read+0x11/0x20 [ 207.082361] ? rcu_is_watching+0x8c/0x150 [ 207.086521] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 207.090938] ? find_held_lock+0x36/0x1c0 [ 207.095019] ? check_same_owner+0x340/0x340 [ 207.099348] ? rcu_note_context_switch+0x730/0x730 [ 207.104294] __alloc_pages_nodemask+0x36e/0xdb0 [ 207.108975] ? default_file_splice_read+0x1da/0xb10 [ 207.113997] ? do_splice_to+0x12e/0x190 [ 207.117982] ? splice_direct_to_actor+0x270/0x8f0 [ 207.122839] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 207.127880] ? rcu_pm_notify+0xc0/0xc0 [ 207.131778] ? __kmalloc_node+0x33/0x70 [ 207.135755] ? __kmalloc_node+0x33/0x70 [ 207.139739] ? rcu_read_lock_sched_held+0x108/0x120 [ 207.144767] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 207.150322] alloc_pages_current+0x10c/0x210 [ 207.154742] push_pipe+0x400/0x7a0 [ 207.158291] ? __kmalloc_node+0x47/0x70 [ 207.162282] iov_iter_get_pages_alloc+0x866/0x1530 [ 207.167225] ? iov_iter_fault_in_readable+0x460/0x460 [ 207.172406] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 207.176812] ? is_bpf_text_address+0xd7/0x170 [ 207.181302] ? kernel_text_address+0x79/0xf0 [ 207.185700] ? __kernel_text_address+0xd/0x40 [ 207.190181] ? unwind_get_return_address+0x61/0xa0 [ 207.195099] ? __save_stack_trace+0x8d/0xf0 [ 207.199413] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 207.204435] ? iov_iter_pipe+0xc2/0x2f0 [ 207.208399] default_file_splice_read+0x1da/0xb10 [ 207.213224] ? do_splice_direct+0x2d4/0x420 [ 207.217527] ? do_sendfile+0x623/0xe20 [ 207.221413] ? __x64_sys_sendfile64+0x15d/0x250 [ 207.226067] ? do_syscall_64+0x1b9/0x820 [ 207.230116] ? iter_file_splice_write+0x1010/0x1010 [ 207.235130] ? kasan_check_read+0x11/0x20 [ 207.239259] ? rcu_is_watching+0x8c/0x150 [ 207.243397] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 207.247793] ? __lockdep_init_map+0x105/0x590 [ 207.252272] ? lockdep_init_map+0x9/0x10 [ 207.256322] ? __mutex_init+0x1f7/0x290 [ 207.260277] ? rcu_pm_notify+0xc0/0xc0 [ 207.264148] ? __ia32_sys_membarrier+0x150/0x150 [ 207.268889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 207.274412] ? fsnotify+0xbb4/0x14e0 [ 207.278114] ? init_wait_entry+0x1c0/0x1c0 [ 207.282333] ? fsnotify_first_mark+0x350/0x350 [ 207.286901] ? fsnotify+0x14e0/0x14e0 [ 207.290693] ? security_file_permission+0x1c6/0x240 [ 207.295695] ? rw_verify_area+0x118/0x360 [ 207.299830] ? iter_file_splice_write+0x1010/0x1010 [ 207.304833] do_splice_to+0x12e/0x190 [ 207.308620] splice_direct_to_actor+0x270/0x8f0 [ 207.313273] ? pipe_to_sendpage+0x400/0x400 [ 207.317583] ? do_splice_to+0x190/0x190 [ 207.321541] ? rw_verify_area+0x118/0x360 [ 207.325674] do_splice_direct+0x2d4/0x420 [ 207.329808] ? splice_direct_to_actor+0x8f0/0x8f0 [ 207.334636] ? rw_verify_area+0x118/0x360 [ 207.338767] do_sendfile+0x623/0xe20 [ 207.342469] ? do_compat_pwritev64+0x1c0/0x1c0 [ 207.347044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 207.352568] ? _copy_from_user+0xdf/0x150 [ 207.356702] __x64_sys_sendfile64+0x15d/0x250 [ 207.361185] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 207.365753] ? do_syscall_64+0x9a/0x820 [ 207.369716] do_syscall_64+0x1b9/0x820 [ 207.373589] ? syscall_return_slowpath+0x5e0/0x5e0 [ 207.378504] ? syscall_return_slowpath+0x31d/0x5e0 [ 207.383420] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 207.388771] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.393600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.398775] RIP: 0033:0x455ab9 [ 207.401944] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.421184] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 207.428875] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 207.436124] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 207.443376] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 207.450625] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 207.457876] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000003 05:10:28 executing program 6: socket$packet(0x11, 0x3, 0x300) r0 = geteuid() ioprio_set$uid(0x3, r0, 0x1ff) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x240001) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000180}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) r3 = socket$packet(0x11, 0x10000000002, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f000000c580)={'ip6gre0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8001, 0x4, [0x7, 0x5, 0x80000001, 0x8]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x200, 0x2, 0x200, 0x80000001, r5}, &(0x7f00000002c0)=0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000200)) sendmmsg(r3, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) 05:10:28 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000465f8e)=""/114, 0x47) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 05:10:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="3b8f79c2d9f9dc46e543813eaaaaaaaaaaaaffffffffffff86dd60d8652b00dd489d63eea97d870800000000000000000000000000890000ff737e463e6eaa433943b6883cc630f2554e202f0df6c4f823fcaca10f6d327ce07d6577afba00233eda86a47498530795f17ea8395d1630ebba1ef383677c24fb4619534c7b380b12641cc0dcf8225f0f6d4f0f8201342d8f990eb991bcf3a1969724bafe144d8a8662a415bfe0430642bf075793", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500a000090780000"], &(0x7f00000002c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x84000) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 05:10:28 executing program 4 (fault-call:2 fault-nth:4): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:28 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x1, 0x100) syz_emit_ethernet(0xbd, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@llc={0x4, {@snap={0xaa, 0x1, 'd', "f835a8", 0xe8b5, "8a1f066f5b958305106318981801f0090116278a83644c56e043f29b6fed31e863629695197e3692b2429deb2c74ffa11e0bd4be8dd1b90ca1ef4fdb2d3ed132af961008fa861d0b55875eedc0c42d7cae8bacb5a2542aef5fe2c8ea3dfd1afc51bb0f587d3f2b2fec5873b0295a6121314697d393164fdb25dc74fc8d2466d43311cb81ecc97d9f4415848e5f9e97fdbfdc34b0c4f3ba9cd1a2a4c86c1bc22380ce36b89e8681"}}}}}, &(0x7f0000000280)={0x1, 0x4, [0x774, 0xbf2, 0xb61, 0xafc]}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000180)) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x7, &(0x7f0000000000)='team_slave_0\x00', 0x10) 05:10:28 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) pwrite64(r0, &(0x7f0000000080)="f50d40e8382d5de7907c8ef2455ebc7593f5812db6bfe76e268bf78a78cbf624d19db4f1eebf05f9284e471c0fa8b521e6ab3f303e1eec4faeb7d8c9eec6be8991fee7b99ec7ec4f6952997ada12071bb349827d9c21f5e03f7556fac56bc033fa2d4b0ff61249fa55dd638c5a7afc5ca68e968da4a64b8c0033f47c835b7905fae57e05b3390a74c5912922db7ce124989a29a175af8e0cf6070226025c5714a7be91850e1b3c95467fc2e536b319978372d9", 0xb3, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000002480)=[{&(0x7f0000000180)="e0", 0x1}], 0x1, 0x81003) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1000) socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000300)=0x7) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) madvise(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x9) [ 207.671312] FAULT_INJECTION: forcing a failure. [ 207.671312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.683349] CPU: 0 PID: 13460 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 207.690720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.700075] Call Trace: [ 207.702766] dump_stack+0x1c9/0x2b4 [ 207.706408] ? dump_stack_print_info.cold.2+0x52/0x52 [ 207.711701] ? find_held_lock+0x36/0x1c0 [ 207.715782] should_fail.cold.4+0xa/0x1a [ 207.719859] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 207.724977] ? kasan_check_read+0x11/0x20 [ 207.729129] ? rcu_is_watching+0x8c/0x150 [ 207.733295] ? find_held_lock+0x36/0x1c0 [ 207.737386] ? check_same_owner+0x340/0x340 [ 207.741718] ? rcu_note_context_switch+0x730/0x730 [ 207.746672] __alloc_pages_nodemask+0x36e/0xdb0 [ 207.751350] ? default_file_splice_read+0x1da/0xb10 [ 207.756372] ? do_splice_to+0x12e/0x190 [ 207.761034] ? splice_direct_to_actor+0x270/0x8f0 [ 207.765896] ? __alloc_pages_slowpath+0x2d90/0x2d90 05:10:28 executing program 0: socket$pptp(0x18, 0x1, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x80, 0x0) r0 = dup(0xffffffffffffffff) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x4, 0x8001, 0x7, 0x4, 0x2, 0x2400000000000000, 0x80, 0x1000, 0x62c, 0xa7, 0x0, 0xf80}) signalfd(r0, &(0x7f0000000140), 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x7530}, 0x10) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x5c831, r1, 0x0) madvise(&(0x7f0000ae6000/0x4000)=nil, 0x4000, 0xe) 05:10:29 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/33, 0x21) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) getdents(r0, &(0x7f0000000040)=""/135, 0x57b) 05:10:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@newlink={0x60, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x68000, 0x200}, [@IFLA_LINKINFO={0x38, 0x12, [@IFLA_INFO_SLAVE_DATA={0x2c, 0x5, "5a1c2beab90f4714030d4b6599ccd3769a8aab2e1b6dfea25c5a2fd8b70e401466dc121fcce0"}, @IFLA_INFO_KIND={0x8, 0x1, 'lo\x00'}]}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x7}]}, 0x60}, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") recvmmsg(r0, &(0x7f0000003680)=[{{&(0x7f0000000000)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000300)=""/246, 0xf6}}, {{&(0x7f0000000140)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003580), 0x3d4, &(0x7f0000003600)=""/92, 0x5c}}], 0x2, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x5) 05:10:29 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000002200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000009680)=""/15) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)={0x303, 0x33}, 0x4) [ 207.770937] ? rcu_pm_notify+0xc0/0xc0 [ 207.774840] ? __kmalloc_node+0x33/0x70 [ 207.778823] ? __kmalloc_node+0x33/0x70 [ 207.782812] ? rcu_read_lock_sched_held+0x108/0x120 [ 207.787837] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 207.793386] alloc_pages_current+0x10c/0x210 [ 207.797806] push_pipe+0x400/0x7a0 [ 207.801362] ? __kmalloc_node+0x47/0x70 [ 207.805365] iov_iter_get_pages_alloc+0x866/0x1530 [ 207.810733] ? iov_iter_fault_in_readable+0x460/0x460 05:10:29 executing program 0: io_setup(0x7, &(0x7f0000000080)=0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80400, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x100, @loopback={0x0, 0x1}}, r2}}, 0x30) r3 = socket$unix(0x1, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f00000026c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000080)}]) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 207.810750] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 207.810773] ? is_bpf_text_address+0xd7/0x170 [ 207.810794] ? kernel_text_address+0x79/0xf0 [ 207.810814] ? __kernel_text_address+0xd/0x40 [ 207.810828] ? unwind_get_return_address+0x61/0xa0 [ 207.810845] ? __save_stack_trace+0x8d/0xf0 [ 207.810874] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 207.810887] ? iov_iter_pipe+0xc2/0x2f0 [ 207.810910] default_file_splice_read+0x1da/0xb10 [ 207.810925] ? do_splice_direct+0x2d4/0x420 [ 207.810938] ? do_sendfile+0x623/0xe20 [ 207.810952] ? __x64_sys_sendfile64+0x15d/0x250 [ 207.810967] ? do_syscall_64+0x1b9/0x820 [ 207.810994] ? iter_file_splice_write+0x1010/0x1010 [ 207.811013] ? kasan_check_read+0x11/0x20 [ 207.811026] ? rcu_is_watching+0x8c/0x150 [ 207.811040] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 207.811058] ? __lockdep_init_map+0x105/0x590 [ 207.811076] ? lockdep_init_map+0x9/0x10 [ 207.811095] ? __mutex_init+0x1f7/0x290 [ 207.811106] ? rcu_pm_notify+0xc0/0xc0 [ 207.811124] ? __ia32_sys_membarrier+0x150/0x150 [ 207.811141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 207.811153] ? fsnotify+0xbb4/0x14e0 [ 207.811172] ? init_wait_entry+0x1c0/0x1c0 [ 207.811188] ? fsnotify_first_mark+0x350/0x350 [ 207.811204] ? fsnotify+0x14e0/0x14e0 [ 207.811233] ? security_file_permission+0x1c6/0x240 [ 207.811251] ? rw_verify_area+0x118/0x360 [ 207.811268] ? iter_file_splice_write+0x1010/0x1010 [ 207.811285] do_splice_to+0x12e/0x190 [ 207.811304] splice_direct_to_actor+0x270/0x8f0 [ 207.811322] ? pipe_to_sendpage+0x400/0x400 [ 207.811341] ? do_splice_to+0x190/0x190 [ 207.811359] ? rw_verify_area+0x118/0x360 [ 207.811378] do_splice_direct+0x2d4/0x420 [ 207.811399] ? splice_direct_to_actor+0x8f0/0x8f0 [ 207.811421] ? rw_verify_area+0x118/0x360 [ 207.811440] do_sendfile+0x623/0xe20 [ 207.811463] ? do_compat_pwritev64+0x1c0/0x1c0 [ 207.811485] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 207.811500] ? _copy_from_user+0xdf/0x150 [ 207.811518] __x64_sys_sendfile64+0x15d/0x250 [ 207.811535] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 207.811551] ? do_syscall_64+0x9a/0x820 [ 207.811573] do_syscall_64+0x1b9/0x820 [ 207.811587] ? finish_task_switch+0x1d3/0x870 [ 207.811606] ? syscall_return_slowpath+0x5e0/0x5e0 [ 207.811624] ? syscall_return_slowpath+0x31d/0x5e0 [ 207.811655] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 207.811679] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.811705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.811717] RIP: 0033:0x455ab9 [ 207.811722] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.812020] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 207.812036] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 207.812045] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 207.812054] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 207.812063] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 207.812072] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000004 05:10:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x52000, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_hwaddr}) 05:10:29 executing program 4 (fault-call:2 fault-nth:5): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @rand_addr}, 0x85, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="6c6f3a00000600"}) 05:10:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'bpq0\x00', {0x2, 0x4e23}}) ioctl(r0, 0x1000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10200, 0x0) connect$can_bcm(r1, &(0x7f0000000140)={0x1d}, 0x10) r2 = memfd_create(&(0x7f00000001c0)='em1cgroupem0tuser\x00', 0x4) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'bond0\x00', 0x4}) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="29000000060000000000000000000300000100010000000000ff00000000000000000000000000009c193b521bf75e9ea57099366cae5fb4254292e2481f4ede2a31b08637c58241211139744501ab06974de1db555f4081580ba84951d7ab08e9d5ef04b8f2e2a75c56bb65f4b54eac5303935a6a169b6ad427a63f8cb1d047700064d1a1367f2028944458dfe25553b6558491e5292ec2a2a70c4e2761962ac7e208771f51f80eb258305544e0d916da76eb14c8d4cba18fe843a1ba410c279afb8f9fa0782bf3e772ede3d3a682460b77b60ccf53b37968a847452865359dbe9ea485dd18653e3950826fdc5e06baa9f24f917d3bbfc24adeb5"], 0x29) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000000c0)={0x3, 0x4, 0x1, 0x5f5c, 0x2a3, 0x6e}) fstatfs(r2, &(0x7f00000002c0)=""/4096) 05:10:29 executing program 2: r0 = socket$inet6(0x10, 0xa, 0x5) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c000b0000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xffffffff00000001, 0x200000) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) 05:10:29 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000014c0)="cf13f2b7e5233335781e38c8f3c5ff01000000000000df5f06fd01d2fe7d") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) fcntl$setstatus(r1, 0x4, 0x2c00) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000001500)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @ipv4={[], [0xff, 0xff], @rand_addr=0x1}, 0x4}]}, &(0x7f0000000200)=0x10) listen(r1, 0x43) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000002600)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x4, &(0x7f0000001480)=[{}, {}, {}, {}], &(0x7f0000001600)=""/4096}, &(0x7f0000002680)=0x78) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000003c0)={0x80000001}, 0x4) r2 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000440)=0x80, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000400)={0x0, 0x200000000000000, 0x200000, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc43}, 0xb) set_mempolicy(0x1, &(0x7f0000000340)=0x3, 0x1fffc000000000) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000040)=""/207, 0xcf}, {&(0x7f0000000240)=""/85, 0x55}], 0x4, 0x0) 05:10:29 executing program 7: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev_snmp6\x00') fchdir(r1) exit(0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x10) mount(&(0x7f00000008c0)='.', &(0x7f0000000000)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x40, &(0x7f0000000ac0)) 05:10:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x5450, &(0x7f0000000240)) r2 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001b40)={{{@in6=@remote, @in=@multicast1}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001c40)=0xe8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_SET_PIT(r4, 0xae64, &(0x7f0000000640)) sendmsg(r2, &(0x7f0000001b00)={&(0x7f0000000100)=@l2={0x1f, 0x401, {0x3f, 0x1, 0x7, 0x0, 0x9, 0x9}, 0xda, 0x40}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000180)="c4cad84abd265ef37965c061da281edf383ded20873549431c832a4a4bf7dee8b7ac12fbf3dd8be3c6f10e9ad27be7e3e0561305351318a9e194a6ff5b1b2f250feb5570980548f28c20080b40440124a029921e5be81df7daad839fdcb2399095d90d3118425be52c3bf40753fb447b7e91ac15654cfc2c206cf8590e0079cd84898674e7cd5342", 0x88}, {&(0x7f0000000280)="a563ac2075b2e56ec25c678c0a2ba1b4328f5fd70c85479693b245f67f6d1a70e843fb0ce6cd63f3f15f4dbd9d5c494cde1fc45fc8bd9b51d4f3eabc8ae10c570284ce5f4194fad5f8632c392ef745f7729a7cbd737094ae95309e38e6d7602eb809b19ea78612d3e9383f4927a0a6d9963341168b55fdc26c3e6a74e2ac7f8fcf831a2c17f014061ece5fa26e508346e9a491e81fe2d7ef8634", 0x9a}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="eb6b973fd9127a6cc0c0863dbe88f34ac94d64f61cadec9325d4bac4e76b9a2cd641f3f50241457e3f665c29e800c9e3e173f45d22e3adb7dd986f4858b971088975301ff2fcf56c1eb61a17e701004c1f447b8919fb779035a41b99b6b76b54a9d8506bfab9b7320557d5d0763d755828a33fb9a7", 0x75}, {&(0x7f00000013c0)="17c348a4cd165997ef07ecde259c20ba3428a07a414daf7e966de46bd9ddf5508d17181ce414e9cb63bdcd1f403577f3068afdbb35edda80b9bdf91a617e52dfe313b532767deb7b336a2c6829a480bf2ab47e593be273c798218196da35fcef120666bf4e757e91735505b292ae2eee702c949161d624b24beb1f82b91bfd51c1f4e9486b8c71ea48e4ea8bda291b1d94390fa1067afdca0d8b691edac88d47e226ec5baf67d7f7d2d2e5b2d3bd", 0xae}, {&(0x7f0000001480)="c285b8d9e613295af8f12838949673b6c258f7", 0x13}, {&(0x7f00000014c0)="0d7ac22673727abf88452a2936a3102052cda759962121102b42da13b5c4d678474b71f24043ecf7966f9f679d3a4722596ea9b8dee702244fceecde6dded158b5bdae75fa7895ced593103c62b885a725", 0x51}, {&(0x7f0000001540)="ce24efbbf77152cf5d3e84d15767df046277640e742d193847e2202c0ff71f8b7d50844f737f54d79a1cc68fb1187da5fec9a5cdae63935569189344fe427a5a1d32572358cc447597a55e7368a33840ec5418831849d38b35b5b693fdd2c2a8b45aaed622c37c32732e7e85b635e7fb33bdb85c43aa93b1f0d1dec2edaa73f2ca813fef9b596547e84f4ede37688bbeeec597fd3d3e96a0d5ae120b8f2d248d818b500c53aea85b473810285c46f90e25656b3affcedb0984e2dd9f9b1a4223b62af39a60cfcbf69950c118a157604293c52e", 0xd3}, {&(0x7f0000001640)="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", 0xfb}], 0x9, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x2d8, 0x800}, 0x4) [ 208.503293] FAULT_INJECTION: forcing a failure. [ 208.503293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 208.515243] CPU: 0 PID: 13500 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 208.522615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.531968] Call Trace: [ 208.534569] dump_stack+0x1c9/0x2b4 [ 208.538210] ? dump_stack_print_info.cold.2+0x52/0x52 [ 208.543400] ? find_held_lock+0x36/0x1c0 [ 208.547466] should_fail.cold.4+0xa/0x1a [ 208.551525] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.556620] ? kasan_check_read+0x11/0x20 [ 208.560754] ? rcu_is_watching+0x8c/0x150 [ 208.564891] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 208.569310] ? find_held_lock+0x36/0x1c0 [ 208.573380] ? check_same_owner+0x340/0x340 [ 208.577701] ? rcu_note_context_switch+0x730/0x730 [ 208.582632] __alloc_pages_nodemask+0x36e/0xdb0 [ 208.587287] ? default_file_splice_read+0x1da/0xb10 [ 208.592288] ? do_splice_to+0x12e/0x190 [ 208.596249] ? splice_direct_to_actor+0x270/0x8f0 [ 208.601081] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 208.606100] ? rcu_pm_notify+0xc0/0xc0 [ 208.609979] ? __kmalloc_node+0x33/0x70 [ 208.613939] ? __kmalloc_node+0x33/0x70 [ 208.617901] ? rcu_read_lock_sched_held+0x108/0x120 [ 208.622908] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 208.628436] alloc_pages_current+0x10c/0x210 [ 208.632837] push_pipe+0x400/0x7a0 [ 208.636365] ? __kmalloc_node+0x47/0x70 [ 208.640334] iov_iter_get_pages_alloc+0x866/0x1530 [ 208.645262] ? iov_iter_fault_in_readable+0x460/0x460 [ 208.650437] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 208.654836] ? is_bpf_text_address+0xd7/0x170 [ 208.659323] ? kernel_text_address+0x79/0xf0 [ 208.663718] ? __kernel_text_address+0xd/0x40 [ 208.668204] ? unwind_get_return_address+0x61/0xa0 [ 208.673120] ? __save_stack_trace+0x8d/0xf0 [ 208.677442] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 208.682443] ? iov_iter_pipe+0xc2/0x2f0 [ 208.686411] default_file_splice_read+0x1da/0xb10 [ 208.691242] ? do_splice_direct+0x2d4/0x420 [ 208.695548] ? do_sendfile+0x623/0xe20 [ 208.699425] ? __x64_sys_sendfile64+0x15d/0x250 [ 208.704082] ? do_syscall_64+0x1b9/0x820 [ 208.708138] ? iter_file_splice_write+0x1010/0x1010 [ 208.713146] ? kasan_check_read+0x11/0x20 [ 208.717281] ? rcu_is_watching+0x8c/0x150 [ 208.721414] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 208.725812] ? __lockdep_init_map+0x105/0x590 [ 208.730297] ? lockdep_init_map+0x9/0x10 [ 208.734349] ? __mutex_init+0x1f7/0x290 [ 208.738310] ? rcu_pm_notify+0xc0/0xc0 [ 208.742185] ? __ia32_sys_membarrier+0x150/0x150 [ 208.746928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.752451] ? fsnotify+0xbb4/0x14e0 [ 208.756158] ? init_wait_entry+0x1c0/0x1c0 [ 208.760380] ? fsnotify_first_mark+0x350/0x350 [ 208.764951] ? fsnotify+0x14e0/0x14e0 [ 208.768754] ? security_file_permission+0x1c6/0x240 [ 208.773758] ? rw_verify_area+0x118/0x360 [ 208.777910] ? iter_file_splice_write+0x1010/0x1010 [ 208.782913] do_splice_to+0x12e/0x190 [ 208.786709] splice_direct_to_actor+0x270/0x8f0 [ 208.791889] ? pipe_to_sendpage+0x400/0x400 [ 208.796202] ? do_splice_to+0x190/0x190 [ 208.800167] ? rw_verify_area+0x118/0x360 [ 208.804308] do_splice_direct+0x2d4/0x420 [ 208.808446] ? splice_direct_to_actor+0x8f0/0x8f0 [ 208.813281] ? rw_verify_area+0x118/0x360 [ 208.817419] do_sendfile+0x623/0xe20 [ 208.821127] ? do_compat_pwritev64+0x1c0/0x1c0 [ 208.825703] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 208.831227] ? _copy_from_user+0xdf/0x150 [ 208.835365] __x64_sys_sendfile64+0x15d/0x250 [ 208.839857] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 208.844427] ? do_syscall_64+0x9a/0x820 [ 208.848392] do_syscall_64+0x1b9/0x820 [ 208.852275] ? finish_task_switch+0x1d3/0x870 [ 208.856766] ? syscall_return_slowpath+0x5e0/0x5e0 [ 208.861681] ? syscall_return_slowpath+0x31d/0x5e0 [ 208.866602] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 208.871956] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.876792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.881976] RIP: 0033:0x455ab9 [ 208.885148] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 208.904471] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 208.912165] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 208.919420] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 208.926671] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 208.933923] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 208.941192] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000005 05:10:30 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xac71, 0x40000) write$binfmt_elf32(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="7f454c46da050208ff0100000000000002003f009f0000005903000038000000de0300000800000063cc20000200090000000000000000000000007000230000070000000100000005000000060000000800000006000000dad5a5e1bc8b8dacc2207014a305c317e0e15682665598cc812fc8d7ddf48cd56309e1189f7336c8f5858a2e71e3e42f85dfd8b24ac2985c7beda033b901953927c5b23c721f54567b94aef9433286c86aa98802bb2e9d9054591a790fd29e02b777de970eba643f9324be99c457c9938bfc8f76c58289b4f5037fae05649548b8240bae72dc44f8b8d85c1a054f9c70e38b31bce5d93f36c276d873d8b2dc329b01008f9d4ba90f0a610249d91d400bc4d1f4ccf3d44c463da181ae42ab249900c10e88bf5f51d6197b2a203675f3685014627741fbd85c17f227354177e61fa50a9b28f681a4cfb667b12608a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c401f1c3cb76acf0e69fe135a38a392448bc879fa18e7304614a7a6a8a97cb2fee1fab9c031be06fd434e1e54b475f871b3e0c34ccece07a146b2c3b5a939d262cea98ff832ca9e8d9c0b124a5497ef61ebd54e8a70fe54317b351564f89677f77dbdfaf4aae0c31310d9cc9ac7ee0b5fd5516e9913f494782aa2f8b341fcac6433b87c6bb531f49586db78ce32139ca83ea69895ea06ef50a74a16c000000000000000000000000"], 0x337) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f691c0264192f42be07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000400)={0x0, r1}) fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e23}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @rand_addr=0x7ff00}], 0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0xffffffff, 0xffffffff}, 'port1\x00', 0x4, 0x100000, 0x3, 0x5, 0x1, 0xfffffffffffffff8, 0x6, 0x0, 0x2, 0x4}) getpeername$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x14) r3 = msgget(0x1, 0x400) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000480)=""/143) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000e80)=""/4096) connect$can_bcm(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) 05:10:30 executing program 2: ioprio_set$uid(0x1, 0x0, 0x7fff) clone(0xfffbfffffffffffd, &(0x7f0000000000)="52d779989280c9f131c2aa2b3af7d0", &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000040)="478b883c89df42fb00000000000000000000000000") 05:10:30 executing program 4 (fault-call:2 fault-nth:6): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f00762070") request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)='\\{\x00', 0xfffffffffffffffc) 05:10:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x7a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0xfef7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r1, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x240380, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xffffffffb05a59f5) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) [ 209.105670] FAULT_INJECTION: forcing a failure. [ 209.105670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.117676] CPU: 0 PID: 13532 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 209.125043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.134403] Call Trace: [ 209.137004] dump_stack+0x1c9/0x2b4 [ 209.140650] ? dump_stack_print_info.cold.2+0x52/0x52 [ 209.145856] ? zap_class+0x740/0x740 [ 209.149596] should_fail.cold.4+0xa/0x1a [ 209.153675] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 209.158778] ? rcu_is_watching+0x8c/0x150 [ 209.162911] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 209.167309] ? find_held_lock+0x36/0x1c0 [ 209.171370] ? check_same_owner+0x340/0x340 [ 209.175676] ? rcu_note_context_switch+0x730/0x730 [ 209.180597] __alloc_pages_nodemask+0x36e/0xdb0 [ 209.185251] ? default_file_splice_read+0x1da/0xb10 [ 209.190254] ? do_splice_to+0x12e/0x190 [ 209.194213] ? splice_direct_to_actor+0x270/0x8f0 [ 209.199047] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 209.204059] ? rcu_pm_notify+0xc0/0xc0 [ 209.207936] ? __kmalloc_node+0x33/0x70 [ 209.211892] ? __kmalloc_node+0x33/0x70 [ 209.215850] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.220851] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 209.226378] alloc_pages_current+0x10c/0x210 [ 209.230773] push_pipe+0x400/0x7a0 [ 209.234295] ? __kmalloc_node+0x47/0x70 [ 209.238261] iov_iter_get_pages_alloc+0x866/0x1530 [ 209.243182] ? iov_iter_fault_in_readable+0x460/0x460 [ 209.248358] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 209.252778] ? is_bpf_text_address+0xd7/0x170 [ 209.257260] ? kernel_text_address+0x79/0xf0 [ 209.261653] ? __kernel_text_address+0xd/0x40 [ 209.266132] ? unwind_get_return_address+0x61/0xa0 [ 209.271049] ? __save_stack_trace+0x8d/0xf0 [ 209.275366] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 209.280364] ? iov_iter_pipe+0xc2/0x2f0 [ 209.284331] default_file_splice_read+0x1da/0xb10 [ 209.289159] ? do_splice_direct+0x2d4/0x420 [ 209.293464] ? do_sendfile+0x623/0xe20 [ 209.297334] ? __x64_sys_sendfile64+0x15d/0x250 [ 209.301988] ? do_syscall_64+0x1b9/0x820 [ 209.306048] ? iter_file_splice_write+0x1010/0x1010 [ 209.311053] ? rcu_is_watching+0x8c/0x150 [ 209.315184] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 209.319577] ? __lockdep_init_map+0x105/0x590 [ 209.324059] ? lockdep_init_map+0x9/0x10 [ 209.328106] ? __mutex_init+0x1f7/0x290 [ 209.332064] ? rcu_pm_notify+0xc0/0xc0 [ 209.335935] ? __ia32_sys_membarrier+0x150/0x150 [ 209.340675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 209.346194] ? fsnotify+0xbb4/0x14e0 [ 209.349897] ? init_wait_entry+0x1c0/0x1c0 [ 209.354114] ? fsnotify_first_mark+0x350/0x350 [ 209.358684] ? fsnotify+0x14e0/0x14e0 [ 209.362479] ? security_file_permission+0x1c6/0x240 [ 209.367480] ? rw_verify_area+0x118/0x360 [ 209.371613] ? iter_file_splice_write+0x1010/0x1010 [ 209.376616] do_splice_to+0x12e/0x190 [ 209.380404] splice_direct_to_actor+0x270/0x8f0 [ 209.385059] ? pipe_to_sendpage+0x400/0x400 [ 209.389369] ? do_splice_to+0x190/0x190 [ 209.393328] ? rw_verify_area+0x118/0x360 [ 209.397464] do_splice_direct+0x2d4/0x420 [ 209.401598] ? splice_direct_to_actor+0x8f0/0x8f0 [ 209.406429] ? rw_verify_area+0x118/0x360 [ 209.410560] do_sendfile+0x623/0xe20 [ 209.414263] ? do_compat_pwritev64+0x1c0/0x1c0 [ 209.418833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 209.424355] ? _copy_from_user+0xdf/0x150 [ 209.428490] __x64_sys_sendfile64+0x15d/0x250 [ 209.432974] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 209.437540] ? do_syscall_64+0x9a/0x820 [ 209.441505] do_syscall_64+0x1b9/0x820 [ 209.445374] ? finish_task_switch+0x1d3/0x870 [ 209.449856] ? syscall_return_slowpath+0x5e0/0x5e0 [ 209.454771] ? syscall_return_slowpath+0x31d/0x5e0 [ 209.459690] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 209.465046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.469886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.475059] RIP: 0033:0x455ab9 [ 209.478237] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.497512] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 05:10:30 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000013000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x440800) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) 05:10:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000100)={0x1, 0x4, 0x100000000, 0x7, 0x6, 0x4}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={r4, 0x3fd2}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) sendto(r5, &(0x7f0000000500)="03", 0x1, 0x0, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x80) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000140)) [ 209.505216] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 209.512471] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 209.519723] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 209.526984] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 209.534240] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000006 05:10:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x301500) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001400ff09fffefd956fa283b763a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) sendto$inet(r0, &(0x7f00000001c0)="ada0667573cfa35f2a007a01c45a6995f5ed5da9177bc8d5a7eeded5052b6b5ebcf9a843bfa5dbdb1b34661dc81e55e75aa288d4b1d8e57b172f980ad15a94644a4d97f24634398c4374b68ba5c684b98bcf0a84105801cd73d39be6dc9615b7712ca57a0dc0bfe7c65afe69f863dfe1697b33d4df4cea1d6105258aa7549a1e438b3aaf107aa57e4c3c53480389f8f40f92e8ec7e49d04471fccc608cdd01fc4d647eaf43648a273d5e7431", 0xac, 0x4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) 05:10:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000001500)=[{&(0x7f0000000180)="e7e9c88670500ea9a7f5d1ca2315ab4bfa7a98e2261b08622ba864bfba1f777e89512bb3b9714621c479845b8fd6ac00340ff36fc68bd196f5ee2c74808ed7fb2ecd5501021ead3873f43e7702fc8500e973e1bb1f0bcc6e846618b789b0a494c6de6234735a6b28b1003e53a5ac0626600e5abd09d42376adf5b179abd49fcd1678352db716a17562366528345f66461cb6ae7c35271d4de5c9e799e1d4cbb9d3effa3fea8fc0d84e0fb64de056fa9cefaf760f512f9505cc7e2d9d7eb82a618fd461477d6608902f1303f7ac", 0xcd}, {&(0x7f00000002c0)="1a5dd1b3f8d96719e980dd3dcc5046064349424c2de580f4c0db3cca55b5f10d90bea87d134a7941dade81be96ccbc15b0caa53effb3daa5c3c3d2f27eb4ab07347bb5007cf488b3c74f3c3c51bb6a6c4210dfb4f51259aea0fdd3e8ca52f64a311df9261c2e1142f9b28fab4d6d7b96b5b9", 0x72}, {&(0x7f0000000340)="2e8bc2971c62a8f22e8e4c837a7b24de2ee2fc8b6dc4106e254bb418b5ec22bc59005f58e6dfe7ba053dbc31fc3a1c4296b851e6bbd4d490ad02628027518b38b8e49480d1a3bebcec53857ecad77b61ef05b59c6aca68a66ce3469e83bbad573b8069eaff9c4357248c08093b0a33f3e4302dc7a7c9c2124f6661235d7023c409ba299a39e29eea1e7e7de033303b4f600223f9e990a22981bc2e2699abf7657c7676876298b924bbd153961ac77372", 0xb0}, {&(0x7f0000000400)="8bbba651fb561cefb9c7cdaff21cf3d043b78fa1270ed632c8f5710849a05b19fec10045e1210a13254e6768bb973e0d7869ba640e719ee22a268ec02bd27d04af01b5ed345012e300282ee31af3b2bc63e1fed9e95769604c46bd", 0x5b}, {&(0x7f0000000480)="c8796a3acab2d951a30216561a6a6343ab4e7ef1a6326296db913af70012308505e27509c2848e44a77524", 0x2b}, {&(0x7f00000004c0)="bb4e65cffc08fe72ab35582f2084ae62b43745fafe43b52b76bfcf333d7a2a80ad972d7d640db2ee105f09e0a968684687f69d6977474cd76e65", 0x3a}, {&(0x7f0000000500)="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", 0x1000}], 0x7, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x7530}, 0x10) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000280)=""/34, 0x22, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000001580)=ANY=[@ANYBLOB="9e00000080000000010000000016000000000000000000000000", @ANYRES32=r3, @ANYBLOB="0d006dfd875671aedac713332b5a00"], 0x2b) 05:10:30 executing program 4 (fault-call:2 fault-nth:7): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 209.680623] FAULT_INJECTION: forcing a failure. [ 209.680623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.692572] CPU: 0 PID: 13556 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 209.699941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.709303] Call Trace: [ 209.711897] dump_stack+0x1c9/0x2b4 [ 209.715513] ? dump_stack_print_info.cold.2+0x52/0x52 [ 209.720690] ? find_held_lock+0x36/0x1c0 [ 209.724743] should_fail.cold.4+0xa/0x1a [ 209.728793] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 209.733883] ? kasan_check_read+0x11/0x20 [ 209.738016] ? rcu_is_watching+0x8c/0x150 [ 209.742151] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 209.746547] ? find_held_lock+0x36/0x1c0 [ 209.750604] ? check_same_owner+0x340/0x340 [ 209.754912] ? rcu_note_context_switch+0x730/0x730 [ 209.760411] __alloc_pages_nodemask+0x36e/0xdb0 [ 209.765087] ? default_file_splice_read+0x1da/0xb10 [ 209.770086] ? do_splice_to+0x12e/0x190 [ 209.774044] ? splice_direct_to_actor+0x270/0x8f0 [ 209.778875] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 209.783882] ? rcu_pm_notify+0xc0/0xc0 [ 209.787758] ? __kmalloc_node+0x33/0x70 [ 209.791718] ? __kmalloc_node+0x33/0x70 [ 209.795682] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.800687] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 209.806212] alloc_pages_current+0x10c/0x210 [ 209.810606] push_pipe+0x400/0x7a0 [ 209.814130] ? __kmalloc_node+0x47/0x70 [ 209.818092] iov_iter_get_pages_alloc+0x866/0x1530 [ 209.823019] ? iov_iter_fault_in_readable+0x460/0x460 [ 209.828194] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 209.832591] ? is_bpf_text_address+0xd7/0x170 [ 209.837072] ? kernel_text_address+0x79/0xf0 [ 209.841466] ? __kernel_text_address+0xd/0x40 [ 209.845948] ? unwind_get_return_address+0x61/0xa0 [ 209.850863] ? __save_stack_trace+0x8d/0xf0 [ 209.855175] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 209.860174] ? iov_iter_pipe+0xc2/0x2f0 [ 209.864135] default_file_splice_read+0x1da/0xb10 [ 209.868974] ? do_splice_direct+0x2d4/0x420 [ 209.873278] ? do_sendfile+0x623/0xe20 [ 209.877152] ? __x64_sys_sendfile64+0x15d/0x250 [ 209.881817] ? do_syscall_64+0x1b9/0x820 [ 209.885869] ? iter_file_splice_write+0x1010/0x1010 [ 209.890871] ? kasan_check_read+0x11/0x20 [ 209.895000] ? rcu_is_watching+0x8c/0x150 [ 209.899137] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 209.903531] ? __lockdep_init_map+0x105/0x590 [ 209.908018] ? lockdep_init_map+0x9/0x10 [ 209.912068] ? __mutex_init+0x1f7/0x290 [ 209.916029] ? rcu_pm_notify+0xc0/0xc0 [ 209.919902] ? __ia32_sys_membarrier+0x150/0x150 [ 209.924644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 209.930163] ? fsnotify+0xbb4/0x14e0 [ 209.933864] ? init_wait_entry+0x1c0/0x1c0 [ 209.938082] ? fsnotify_first_mark+0x350/0x350 [ 209.942648] ? fsnotify+0x14e0/0x14e0 [ 209.946439] ? security_file_permission+0x1c6/0x240 [ 209.951444] ? rw_verify_area+0x118/0x360 [ 209.955587] ? iter_file_splice_write+0x1010/0x1010 [ 209.960590] do_splice_to+0x12e/0x190 [ 209.964470] splice_direct_to_actor+0x270/0x8f0 [ 209.969123] ? pipe_to_sendpage+0x400/0x400 [ 209.973430] ? do_splice_to+0x190/0x190 [ 209.977389] ? rw_verify_area+0x118/0x360 [ 209.981523] do_splice_direct+0x2d4/0x420 [ 209.985656] ? splice_direct_to_actor+0x8f0/0x8f0 [ 209.990484] ? rw_verify_area+0x118/0x360 [ 209.994617] do_sendfile+0x623/0xe20 [ 209.998331] ? do_compat_pwritev64+0x1c0/0x1c0 [ 210.002901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.008424] ? _copy_from_user+0xdf/0x150 [ 210.012557] __x64_sys_sendfile64+0x15d/0x250 [ 210.017038] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 210.021603] ? do_syscall_64+0x9a/0x820 [ 210.025563] do_syscall_64+0x1b9/0x820 [ 210.029431] ? finish_task_switch+0x1d3/0x870 [ 210.033910] ? syscall_return_slowpath+0x5e0/0x5e0 [ 210.038824] ? syscall_return_slowpath+0x31d/0x5e0 [ 210.043751] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 210.049099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 210.053928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.059101] RIP: 0033:0x455ab9 [ 210.062280] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:10:31 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000003, 0x100000002) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$intptr(0x29, 0x0) 05:10:31 executing program 6: r0 = open(&(0x7f0000000040)='./file0\x00', 0x6000, 0x40) ioctl$RTC_UIE_OFF(r0, 0x7004) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x3, 0x6, 0x0, 0x10001, 0x0, 0x0, 0x10482, 0x4, 0x2, 0x8000, 0x24, 0x4, 0xffff, 0x1000, 0x8a7a, 0x80000001, 0x7ff, 0x0, 0xfffffffffffffffd, 0x5, 0x1ff, 0x1, 0x7, 0xfffffffffffffffa, 0x0, 0x2, 0x2, 0x2, 0x80000001, 0xfffffffffffff436, 0x5, 0x3, 0x3fdc, 0x100000001, 0x5, 0x7ff, 0x0, 0x245, 0x3, @perf_bp={&(0x7f0000000180), 0x4}, 0x8080, 0x3, 0x2, 0x5af086ac139f1075, 0x0, 0x866}, r0, 0x2, r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') fchdir(r2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x140, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x14) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x40, &(0x7f0000000080)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0xfffffffffffffe74, &(0x7f0000000600)}}], 0x2, 0x0) 05:10:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x3e6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x1f, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x453b122a}, 0x0, 0x0, r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0xc602, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 05:10:31 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000040)={&(0x7f0000000400)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0), 0x0, &(0x7f0000000940)=""/42, 0x2a}, 0x202) sendmmsg(r0, &(0x7f000000d8c0)=[{}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/172, &(0x7f0000000000)=0xac) [ 210.081506] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 210.089202] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 210.096470] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 210.103724] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 210.110975] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 210.118236] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000007 05:10:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xdc, 0xb9f76cf169794bf5) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000140)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") getrlimit(0x0, &(0x7f00000000c0)) r4 = inotify_init1(0x800) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0xe40200}) 05:10:31 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="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", 0x90) 05:10:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETSNDBUF(r2, 0x401054d6, &(0x7f00000000c0)) r3 = dup3(r0, r2, 0x80000) ioctl$RTC_AIE_OFF(r3, 0x7002) 05:10:31 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10080, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0x800, 0x1, {0x0, 0x2710}, {}, {0x2, 0x1000, 0x5a, 0x8000}, 0x1, @canfd={{0x4, 0xffffffff, 0x5, 0x4}, 0x3c, 0x2, 0x0, 0x0, "b5092262cf95a005d8e800d0147794e8f287156fa025a02e1814f5e0362873687a9432f91eea1d4db900a2b88b95359079731661475ebcdb3d2041c32e55f021"}}, 0x80}, 0x1, 0x0, 0x0, 0x815}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @dev}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={r1, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast=0xffffffff}, 0xc) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000300)={'sit0\x00', @ifru_names='veth0\x00'}) signalfd(r0, &(0x7f0000000340)={0x9}, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=0x0) sched_setattr(r2, &(0x7f00000003c0)={0x30, 0x6, 0x0, 0x8, 0x2, 0x0, 0xffffffff, 0x401}, 0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000400)='ns/mnt\x00') ioctl$KDMKTONE(r3, 0x4b30, 0x5) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x303400, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000480)=0xc000000000000000, 0x4) ioctl(r0, 0x7, &(0x7f00000004c0)="0dcf06d83ebe1ad5f9bb8386de5c79ed74796c47b17f4076e0153d3265bfd5f3e4dc2b206c9419108582a31426e703d3c48529401002bd00f7f3425c724edf99295eee767055c3c807fec538ca430b2b0f96a6679d2d2c5241504c8d1288f0a5e718f6bdc5d12d69f150703f723c5ec0636e0b1a5256d855abdb2ffb5b33a4e7f07186f20b76b4b0f069650f2516aabeaf001d54e2a000e9039e18ace0f8e6ef6b74f7a390c57fd581e82ea2e5e82ba4fdbc83dab06d4a30843bff") r5 = syz_open_pts(r0, 0x400200) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000580), 0x4) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f00000005c0)=""/157) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680)) wait4(r2, &(0x7f00000006c0), 0x1, &(0x7f0000000700)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000007c0)={0x0, 0x401, 0x9}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000840)={r6, 0xbdf0, 0x30, 0x6, 0x5}, &(0x7f0000000880)=0x18) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f00000008c0)={'filter\x00', 0xa4, "f41da0bcd36dd1fdc60556b075588645edf1dfbe96e5a4fdda43f855e1dd84609286200f338d00c91356c42e54518f053e2a8694c30149e580e3d825865d097b8a3d3d95a5ce56da25c58d59ed2add6d92ec236b7e3b2d6d36edfc4a1b97fdf8fe3fbae84d76554ca005d62668d09301a375d4ee9e8e6b000355a95fca8aa8799cb63e379f2811c240b00db9be7747feca3b49b27209aabf1458d8d6f02bedac22a8bddb"}, &(0x7f00000009c0)=0xc8) perf_event_open(&(0x7f0000000a40)={0x5, 0x70, 0x800000000000000, 0x7f, 0x7, 0xd729, 0x0, 0x80000001, 0x80210, 0x1, 0x2, 0x9a5c, 0x4, 0x0, 0x1f, 0x3, 0x5, 0xfffffffffffffffd, 0x5, 0x6, 0x9, 0x9570, 0x9, 0x5, 0xd4ce, 0xe473, 0x0, 0x5, 0x7, 0x7fff, 0x0, 0x6, 0xfff, 0xe6b4, 0x5, 0xc960, 0x100000000, 0xc9aa, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000a00), 0x3}, 0x10, 0x2, 0x101, 0x7, 0x7fffffff, 0x0, 0x6}, r2, 0xd, r0, 0x1) r7 = accept$inet6(r4, &(0x7f0000000ac0)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000b00)=0x1c) getsockopt$inet6_buf(r7, 0x29, 0x23, &(0x7f0000000b40)=""/49, &(0x7f0000000b80)=0x31) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000bc0)=""/99) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000c40)={0x2, 0x999b}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000cc0)={&(0x7f0000000c80)='./file0\x00', r4}, 0x10) sendmsg$nl_netfilter(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x13, 0x9, 0x0, 0x70bd28, 0x25dfdbfd, {0x3, 0x0, 0xa}, [@typed={0x14, 0x30, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000e00)={[], 0x6, 0xdf, 0x692a, 0x9, 0x7, r2}) ioctl$KDDISABIO(r5, 0x4b37) 05:10:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000000, 0x10000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@local, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) getsockopt$sock_linger(r0, 0x1, 0x31, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 210.226491] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 210.293964] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT 05:10:31 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f000007a000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000140), 0x512e, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x800000000000000, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) r3 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r3}}, 0x18) ioprio_get$uid(0x3, r0) 05:10:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x400) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x462) r2 = dup(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @rand_addr}}, 0x20) 05:10:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) fstat(r0, &(0x7f0000000180)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x44d, &(0x7f0000000000), 0x0, &(0x7f0000000040)}}, {{&(0x7f0000001d00)=@hci={0x1f}, 0x80, &(0x7f0000001e80), 0x0, &(0x7f0000000040)=[{0x10}], 0x10d}}], 0x306, 0x0) 05:10:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0x40000000015, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xd1, "f4630948b4ab90503e9bdb7578eb7f7c5039ef8d409413ea19e3abefbc6ee5d2e4bfe78efbd0d45c21d424b02b6056eb0b644612264ce2148ffd96ef591be0ade908f870451f979c9dc233853ec0c1e3487cbaeb72a50ff6da58666a4999f2c3c8ff4ead3513ab9be31f04cdd78e2c211e44639c8b96aad5e6dd818eea84a503f775b8c966e3dfe69debd0561683c1cca9af80350f45699a1356dead9df2e04899627d521145c39bc66e8dd904315a6cc04571fd9fb0f55c66fa6239ad0b5923ef5fd031c6f99c39b73a383755522e8cb9"}, &(0x7f0000000180)=0xd9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r2}, 0x8) getsockopt(r1, 0x114, 0x5, &(0x7f0000af0fe7)=""/13, &(0x7f0000000040)=0xd) 05:10:31 executing program 7: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x104, @broadcast=0xffffffff}, 0x124) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x408d00) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='lo\x00', 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)}]) 05:10:31 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfffffffffffffffc) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffffffffffd, 0x3, 0x80000000, 0xffffffff, 0x10000, 0x7fff, 0x101, 0x9, 0x6a8, 0x883e, 0xffffffffffffff0e, 0xff}) 05:10:31 executing program 4 (fault-call:2 fault-nth:8): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, &(0x7f000045c000)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2000000000000002) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000080)=""/94) [ 210.523494] FAULT_INJECTION: forcing a failure. [ 210.523494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.535458] CPU: 0 PID: 13623 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 210.542828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.552186] Call Trace: [ 210.554789] dump_stack+0x1c9/0x2b4 [ 210.558440] ? dump_stack_print_info.cold.2+0x52/0x52 [ 210.563642] ? find_held_lock+0x36/0x1c0 [ 210.567721] should_fail.cold.4+0xa/0x1a 05:10:31 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x101000) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000300)=""/204) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xa2, 0xffffffffffffffc1, 0x8000, 0x100000001, 0xb8c, 0x24161e1c, 0x2, 0x0, r1}, &(0x7f0000000240)=0x20) mount(&(0x7f0000000480)='./file0/bus\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='logfs\x00', 0x810028, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x3, 0x80000001}) 05:10:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)={0x401, 0xfffffffffffff801}) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f00000000c0)=""/129, 0x81}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000400)=""/230, 0xe6}], 0x7, &(0x7f00000012c0)}, 0x2) [ 210.571798] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 210.576916] ? kasan_check_read+0x11/0x20 [ 210.581076] ? rcu_is_watching+0x8c/0x150 [ 210.585243] ? find_held_lock+0x36/0x1c0 [ 210.589332] ? check_same_owner+0x340/0x340 [ 210.593669] ? rcu_note_context_switch+0x730/0x730 [ 210.598621] __alloc_pages_nodemask+0x36e/0xdb0 [ 210.603303] ? default_file_splice_read+0x1da/0xb10 [ 210.608333] ? do_splice_to+0x12e/0x190 [ 210.612311] ? splice_direct_to_actor+0x270/0x8f0 [ 210.617167] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 210.622209] ? rcu_pm_notify+0xc0/0xc0 [ 210.626117] ? __kmalloc_node+0x33/0x70 [ 210.630104] ? __kmalloc_node+0x33/0x70 [ 210.634090] ? rcu_read_lock_sched_held+0x108/0x120 [ 210.639119] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 210.644673] alloc_pages_current+0x10c/0x210 [ 210.649097] push_pipe+0x400/0x7a0 [ 210.652644] ? __kmalloc_node+0x47/0x70 [ 210.656632] iov_iter_get_pages_alloc+0x866/0x1530 [ 210.661584] ? iov_iter_fault_in_readable+0x460/0x460 [ 210.666781] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 210.669177] devpts: called with bogus options [ 210.671197] ? is_bpf_text_address+0xd7/0x170 [ 210.671219] ? kernel_text_address+0x79/0xf0 [ 210.671239] ? __kernel_text_address+0xd/0x40 [ 210.671255] ? unwind_get_return_address+0x61/0xa0 [ 210.671273] ? __save_stack_trace+0x8d/0xf0 [ 210.671299] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 210.671317] ? iov_iter_pipe+0xc2/0x2f0 [ 210.700676] devpts: called with bogus options [ 210.703556] default_file_splice_read+0x1da/0xb10 [ 210.703574] ? do_splice_direct+0x2d4/0x420 [ 210.703588] ? do_sendfile+0x623/0xe20 [ 210.703603] ? __x64_sys_sendfile64+0x15d/0x250 [ 210.703619] ? do_syscall_64+0x1b9/0x820 [ 210.703644] ? iter_file_splice_write+0x1010/0x1010 [ 210.738791] ? kasan_check_read+0x11/0x20 [ 210.742947] ? rcu_is_watching+0x8c/0x150 [ 210.747100] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 210.751522] ? __lockdep_init_map+0x105/0x590 [ 210.756030] ? lockdep_init_map+0x9/0x10 [ 210.760364] ? __mutex_init+0x1f7/0x290 [ 210.764349] ? rcu_pm_notify+0xc0/0xc0 [ 210.768243] ? __ia32_sys_membarrier+0x150/0x150 [ 210.773010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.778542] ? fsnotify+0xbb4/0x14e0 [ 210.782259] ? init_wait_entry+0x1c0/0x1c0 [ 210.786485] ? fsnotify_first_mark+0x350/0x350 [ 210.791063] ? fsnotify+0x14e0/0x14e0 [ 210.794865] ? security_file_permission+0x1c6/0x240 [ 210.799875] ? rw_verify_area+0x118/0x360 [ 210.804029] ? iter_file_splice_write+0x1010/0x1010 [ 210.809044] do_splice_to+0x12e/0x190 [ 210.812842] splice_direct_to_actor+0x270/0x8f0 [ 210.817505] ? pipe_to_sendpage+0x400/0x400 [ 210.821824] ? do_splice_to+0x190/0x190 [ 210.825782] ? rw_verify_area+0x118/0x360 [ 210.829925] do_splice_direct+0x2d4/0x420 [ 210.834076] ? splice_direct_to_actor+0x8f0/0x8f0 [ 210.838909] ? rw_verify_area+0x118/0x360 [ 210.843051] do_sendfile+0x623/0xe20 [ 210.846755] ? do_compat_pwritev64+0x1c0/0x1c0 [ 210.851327] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.856858] ? _copy_from_user+0xdf/0x150 [ 210.861007] __x64_sys_sendfile64+0x15d/0x250 [ 210.865501] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 210.870071] ? do_syscall_64+0x9a/0x820 [ 210.874047] do_syscall_64+0x1b9/0x820 [ 210.877917] ? finish_task_switch+0x1d3/0x870 [ 210.882398] ? syscall_return_slowpath+0x5e0/0x5e0 [ 210.887314] ? syscall_return_slowpath+0x31d/0x5e0 [ 210.892230] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 210.897594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 210.902435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.907628] RIP: 0033:0x455ab9 [ 210.910807] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.930135] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 210.937843] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 210.945103] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 210.952366] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 210.959620] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 210.966870] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000008 05:10:32 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001180)={r3, @multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="920f6f251fcef3ba2e75b6f192869dc28b05fb63ec713178dd9237e124ab36535701fc288cf1d4ddbf605d22a7e3476af14e2159cfc6e5d125d616d201175934a67b8bd91b65a28fb4da9906fb7d7ca2e55f19260c5f623d679d8be2abf7267b30d01892e9b7ab34490c45b7e5ee466386f52ab725f6b937c7608948f5f925b577a35053d9a3d74748b4c9ea83d05535e0b8665a6ab48ab226b5c03f49"]) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:10:32 executing program 2: socketpair(0x4000000000001e, 0x802, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f00000008c0)={&(0x7f0000000240)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000000380)=""/98, 0x62}], 0x3, &(0x7f00000007c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x80, 0x3ff}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x3}, &(0x7f0000000440)=0x495dafbe, &(0x7f0000000480)=0xb21c, 0x5, 0x8, 0x3, 0x8001, 0x12, 0xd7a}}, @rdma_args={0x48, 0x114, 0x1, {{0x1000, 0xffffffff}, {&(0x7f00000004c0)=""/119, 0x77}, &(0x7f0000000780)=[{&(0x7f0000000540)=""/88, 0x58}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000006c0)=""/155, 0x9b}], 0x3, 0x8, 0x9e6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x7}], 0xd0, 0x80}, 0x4000010) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000100)={'T!ROXY\x00'}, &(0x7f0000000140)=0x1e) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000900), &(0x7f0000000940)=0x4) connect$rds(r1, &(0x7f0000000040)={0x1e, 0x200, @multicast2=0xe0000002}, 0x10) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x6) 05:10:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x56, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000000), 0x0, [], [0x2, 0x1, 0x1, 0x2]}) 05:10:32 executing program 0: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="070000000000000000907000000000000000000000000000000000000000000000b50e"]}) 05:10:32 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xbb}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}}, r1}}, 0x48) 05:10:32 executing program 4 (fault-call:2 fault-nth:9): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:32 executing program 7: r0 = semget$private(0x0, 0x1, 0x200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) getgroups(0x8, &(0x7f0000000140)=[0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0x0]) r4 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x342400000000, 0x0) ioctl$VT_ACTIVATE(r6, 0x5606, 0x40) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x80000, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)={0x458, r8, 0x708, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x1e4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xd15b}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7ff}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xf55}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x6}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r1}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r1}, {0xf8, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x40}, 0x90) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0xa, r2, r3, r4, r5, 0x58, 0x3f}, 0x2, 0x8001}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000800)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)=@migrate={0xac, 0x21, 0x301, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@remote={0xfe, 0x80, [], 0xbb}}}, [@migrate={0x5c, 0x11, [{}, {@in=@rand_addr, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}]}, 0xac}, 0x1}, 0x0) [ 211.065860] FAULT_INJECTION: forcing a failure. [ 211.065860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.077817] CPU: 1 PID: 13660 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 211.085188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.094543] Call Trace: [ 211.097141] dump_stack+0x1c9/0x2b4 [ 211.100780] ? dump_stack_print_info.cold.2+0x52/0x52 [ 211.105979] ? zap_class+0x740/0x740 [ 211.109713] should_fail.cold.4+0xa/0x1a [ 211.113784] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 211.118900] ? rcu_is_watching+0x8c/0x150 [ 211.123057] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 211.127480] ? find_held_lock+0x36/0x1c0 [ 211.131573] ? check_same_owner+0x340/0x340 [ 211.135906] ? rcu_note_context_switch+0x730/0x730 [ 211.140840] __alloc_pages_nodemask+0x36e/0xdb0 [ 211.145513] ? default_file_splice_read+0x1da/0xb10 [ 211.150540] ? do_splice_to+0x12e/0x190 [ 211.154521] ? splice_direct_to_actor+0x270/0x8f0 [ 211.159376] ? __alloc_pages_slowpath+0x2d90/0x2d90 05:10:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000040)="d17add5c665e1009ca2684f167a903dd79d72c34543fe3ee9ca5d81fe0a60bd7581b44bdf9b18a57cf6c30d2b56e824f079e7313c63c4750a457f6562dae79cfcb9851ec97f98550a27d2a76796e83026fdde566244506fc6bc048551be52ecd95d0f656328e1bac3cba48c292095964eeb81efcf34dcc42569a4e", 0x7b) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) pread64(r0, &(0x7f0000000180)=""/8, 0x8, 0x0) ioctl$void(r3, 0xc0045c78) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9ce}}, 0x7, 0x1, 0x0, 0x9, 0x10}, &(0x7f0000000140)=0x98) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2809000013001b1508000000e86bad94360b35da020de309f6e1b290782a92f593a423357d2d923c176e29f3307494b3906075f0824bd34374de673ec8e742f655ee43ad2129d62213c65a9dfa58a95beb09651f6aaa8ac4b202c705c1ec54340886137d2bf8207373616f8a430b435c405152c6c0a0f6ee506d", @ANYRES32=r1, @ANYBLOB="000000000000000008000a000f000000"], 0x28}, 0x1}, 0x0) 05:10:32 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000040)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x2) mkdir(&(0x7f0000000140)='./file1\x00', 0x10d) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$int_out(r2, 0x2, &(0x7f00000001c0)) bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x4, 0xffffffffffff0000, 0x4}) getrandom(&(0x7f00000002c0)=""/12, 0xc, 0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x3, 0x10, 0x0, 0x10000}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e21, 0x6, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x6}}, 0x8ba1, 0x21a7e256, 0x0, 0x3ff, 0x2a}, &(0x7f0000000440)=0x98) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000480)={0xffffffffffffffff}) fadvise64(r2, 0x0, 0x101, 0x7) fchmodat(r0, &(0x7f00000004c0)='./file0\x00', 0x124) r6 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) iopl(0x101) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000540)) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000580)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000005c0)={r4, 0xcbe}, 0x8) ioctl$sock_netdev_private(r5, 0x89fd, &(0x7f0000000600)="ce1638ec5157cd517e7360b344086cec67306a7ea0fbc74370deae8dc899e3b75510beb8f6170d978b4b90212bb7e7da63ffd9a8dce9ba5c19b89ae589ba") chmod(&(0x7f0000000640)='./file1\x00', 0x114) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x480, 0x118, 0x0, 0x118, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000680), {[{{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002, 0xff000000, 0xffffff00, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x21}, {[0xff, 0xff]}, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, {[0x0, 0xff, 0xff, 0x0, 0xff]}, 0x3ff, 0x8, 0x401, 0x4, 0xea, 0x6, 'syzkaller0\x00', 'ifb0\x00', {0xff}, {0xff}, 0x0, 0x42}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0xcdb5, @broadcast=0xffffffff, 0x4, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @dev={0xac, 0x14, 0x14, 0xa}, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa4, r7, 0x11, 0x70bd27, 0x25dfdbff, {0xb}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) stat(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000e40)={0xa0, 0x19, 0x2, {0x2, {0x0, 0x2, 0x1}, 0x100, r8, r9, 0x81, 0x3, 0x4, 0x7ff, 0x100, 0x24f, 0x4, 0xda66, 0x1, 0x9, 0x100000001, 0x93d, 0x0, 0x80, 0x3f}}, 0xa0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0x230, 0x230, 0x230, 0x0, 0x150, 0x360, 0x360, 0x360, 0x360, 0x360, 0x4, &(0x7f0000000f00), {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x3, [0x3, 0x6, 0xfff, 0x7fffffff, 0x0, 0x7fff], 0x10001, 0x0, 0x6}}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x0, 0x8, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xe}}}, {{@ip={@multicast1=0xe0000001, @broadcast=0xffffffff, 0xff, 0xff, 'bcsf0\x00', 'syz_tun\x00', {}, {}, 0x8, 0x2, 0x4c}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x103, 0x202, 0x1}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x80, 0x100, 0x0, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xdb54, 0x100000001, 0xff}, {0x2, 0x101, 0x7ff}, {0xffffffff, 0x7, 0xfffffffffffffff7}, 0x2, 0x100000000}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) [ 211.164420] ? rcu_pm_notify+0xc0/0xc0 [ 211.168323] ? __kmalloc_node+0x33/0x70 [ 211.172309] ? __kmalloc_node+0x33/0x70 [ 211.176294] ? rcu_read_lock_sched_held+0x108/0x120 [ 211.181317] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 211.186859] alloc_pages_current+0x10c/0x210 [ 211.191271] push_pipe+0x400/0x7a0 [ 211.194817] ? __kmalloc_node+0x47/0x70 [ 211.198805] iov_iter_get_pages_alloc+0x866/0x1530 [ 211.203750] ? iov_iter_fault_in_readable+0x460/0x460 [ 211.208946] ? rcu_report_qs_rnp+0x7a0/0x7a0 05:10:32 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYBLOB="a3de50"], &(0x7f0000000340)=0x1) getgroups(0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee01]) setregid(0x0, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/133, 0x85) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:10:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000cc0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x26f) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000004740)=[{{&(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000180)="91", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000001c0)="ab", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) [ 211.213366] ? is_bpf_text_address+0xd7/0x170 [ 211.217875] ? kernel_text_address+0x79/0xf0 [ 211.222292] ? __kernel_text_address+0xd/0x40 [ 211.226793] ? unwind_get_return_address+0x61/0xa0 [ 211.231730] ? __save_stack_trace+0x8d/0xf0 [ 211.236078] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 211.241103] ? iov_iter_pipe+0xc2/0x2f0 [ 211.245090] default_file_splice_read+0x1da/0xb10 [ 211.249941] ? do_splice_direct+0x2d4/0x420 [ 211.254264] ? do_sendfile+0x623/0xe20 [ 211.258154] ? __x64_sys_sendfile64+0x15d/0x250 [ 211.262832] ? do_syscall_64+0x1b9/0x820 [ 211.266903] ? iter_file_splice_write+0x1010/0x1010 [ 211.271910] ? rcu_is_watching+0x8c/0x150 [ 211.276048] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 211.280446] ? __lockdep_init_map+0x105/0x590 [ 211.284930] ? lockdep_init_map+0x9/0x10 [ 211.288978] ? __mutex_init+0x1f7/0x290 [ 211.292932] ? rcu_pm_notify+0xc0/0xc0 [ 211.296805] ? __ia32_sys_membarrier+0x150/0x150 [ 211.301545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.307068] ? fsnotify+0xbb4/0x14e0 [ 211.310769] ? init_wait_entry+0x1c0/0x1c0 [ 211.314986] ? fsnotify_first_mark+0x350/0x350 [ 211.319553] ? fsnotify+0x14e0/0x14e0 [ 211.323349] ? security_file_permission+0x1c6/0x240 [ 211.328351] ? rw_verify_area+0x118/0x360 [ 211.332486] ? iter_file_splice_write+0x1010/0x1010 [ 211.337490] do_splice_to+0x12e/0x190 [ 211.341281] splice_direct_to_actor+0x270/0x8f0 [ 211.345935] ? pipe_to_sendpage+0x400/0x400 [ 211.350243] ? do_splice_to+0x190/0x190 [ 211.354204] ? rw_verify_area+0x118/0x360 [ 211.358338] do_splice_direct+0x2d4/0x420 [ 211.362472] ? splice_direct_to_actor+0x8f0/0x8f0 [ 211.367300] ? rw_verify_area+0x118/0x360 [ 211.371436] do_sendfile+0x623/0xe20 [ 211.375152] ? do_compat_pwritev64+0x1c0/0x1c0 [ 211.379726] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 211.385249] ? _copy_from_user+0xdf/0x150 [ 211.389383] __x64_sys_sendfile64+0x15d/0x250 [ 211.393865] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 211.398432] ? do_syscall_64+0x9a/0x820 [ 211.402397] do_syscall_64+0x1b9/0x820 [ 211.406273] ? syscall_return_slowpath+0x5e0/0x5e0 [ 211.411188] ? syscall_return_slowpath+0x31d/0x5e0 [ 211.416109] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 211.421460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 211.426291] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.431461] RIP: 0033:0x455ab9 [ 211.434631] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.453882] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 211.461584] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 211.468842] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 211.476094] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 211.483347] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 211.490597] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000009 05:10:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r2, 0x4, "62de09", "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"}}, 0x110) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = accept$alg(r0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x0) recvmsg(r4, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 05:10:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0xfc69) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x10, 0x7fffffff) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x2) write$P9_RSETATTR(r3, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) 05:10:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = dup(r0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000000)={0x8, 0x9}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000000c0), 0x0) 05:10:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000200)=0x4) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000180)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="73799c31"], 0x4) sendto$inet6(r2, &(0x7f0000000280)="d3", 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000040)={'syz1'}, 0xffcf) r3 = accept4(r0, 0x0, &(0x7f00000001c0), 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)={'syz0'}, 0x4) 05:10:32 executing program 4 (fault-call:2 fault-nth:10): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:32 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23}}}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0xc000, 0x0) 05:10:32 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x40, 0x5) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00000000c0)=0x5, 0x4) sendto$unix(r1, &(0x7f0000000100)="1a84f4a212ea195e4ec0e13a2f1095a86a39daf9f40f96d88a76cd38ad31dfe7de600269693261b2e5f4148820d9d7942cdeaacec82eef293ac4a34deb5fd27796c776fc7ef225f0ab41bf90cfceaec1de12b5650ca92b2704ab4b66052fcbf6cf7d65f1da32b5664c7ae3130a009b0f30579ef2f4a6", 0x76, 0x0, &(0x7f0000000000)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x4}) 05:10:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200000, 0x36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='\x00', r1}, 0x10) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000359a99000000000000000000dc2f6aea12458966c99be6a23fcddc298e77ae3a41778f59de95066a1b457c37dff53f3a8220ab9e336a7722e7cd868800000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000030000e005020000193443d034ca0170aa7ffd142ee060161fd12f885ff6c5ec9e94c7cd1f8adfb86608c19a50aa4d2dda841def9bba4e46afe049e3fe3de95fdc22e91aef72e554"], 0x80}, 0x1}, 0x0) 05:10:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001800a20142e0fc54bbcdab794608a3a16af85f8368cf1b028bd38caa0000000000000000000800150002000000000000000000000000000058de6e2ff35732b622f178ea84ed06b3bade33c54f0c485278"], 0x2c}, 0x1}, 0x0) 05:10:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x6, &(0x7f00000000c0)="025cc83d6d345f8f68e9c82330ebaa9cbc917620700f6be2dbf13570c6a08c4fde29bad11576189627b6db") unshare(0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000000)=0xdf, 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 05:10:33 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10300) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0xff}) pause() preadv(r0, &(0x7f00000011c0), 0x1, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r1, &(0x7f0000001680)=[{&(0x7f00000011c0)=""/159, 0x9f}, {&(0x7f0000001280)=""/62, 0x3e}, {&(0x7f00000017c0)=""/131, 0x83}, {&(0x7f0000001380)=""/93, 0x5d}, {&(0x7f0000001700)=""/176, 0xb0}, {&(0x7f00000014c0)=""/129, 0x81}, {&(0x7f0000001580)=""/197, 0xc5}], 0x7, 0x10400003) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) getpriority(0x3, r2) socket$inet6(0xa, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockname$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 05:10:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000020307031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x200000) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1, &(0x7f00000001c0)=""/131, 0x83, 0x2}, 0x100) 05:10:33 executing program 5: r0 = socket$kcm(0x2, 0x6, 0x0) getsockopt$bt_hci(r0, 0x10d, 0x0, &(0x7f0000000000)=""/86, &(0x7f0000000080)=0x56) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x9, 0xfffffffffffffc00, 0x80000000, 0x33d, 0x871}) 05:10:33 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x2}}, 0x18) listen(r0, 0x7) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000300)={'ip6gretap0\x00', {0x2, 0x9}}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="07e1694bb9724a588bcaf137d8f784d6", 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000480)=0xe8) getgroups(0x3, &(0x7f0000000500)=[0xee00, 0x0, 0x0]) fchown(r0, r2, r3) clone(0x2202000, &(0x7f0000000540)="f0c5d7894945916604a864f91a1ae28a9ffb5c05428990e4de5eb38df6efe1a2a5c74b3a87c8e572533d5d608f75b1cd3f9ffe5d2de068a9dc4ec6bde216e79100c2ff1b855c8819bb30b740d4bb02", &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="f0f178bc594f46e7a7210627a2d579e0486388f169e7ef3544bf05b12e4e3db10492fedfff051bd8d18d803468e5bb50cce1aab14640") accept4$unix(r0, &(0x7f0000000680)=@abs, &(0x7f0000000700)=0x6e, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x7}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000007c0)={0x40, 0xc6, 0x8, 0xfef, 0x5, 0x800, 0xfff, 0x7b7e, r4}, 0x20) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000800)=0x0) ptrace$getenv(0x4201, r5, 0x2, &(0x7f0000000840)) ioctl$TIOCNOTTY(r0, 0x5422) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000880)=""/247, &(0x7f0000000980)=0xf7) write$P9_RSYMLINK(r0, &(0x7f00000009c0)={0x14, 0x11, 0x1, {0x0, 0x2, 0x2}}, 0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a00)={r4, @in={{0x2, 0x4e24, @loopback=0x7f000001}}}, &(0x7f0000000ac0)=0x84) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000b00)=0x4) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b80)=[@text32={0x20, &(0x7f0000000b40)="3e0fdb1f0f01cb670f32670d5f450000b8010000000f01c1660f38828800600000f2640f2306c4e27109560cc4e1c9582d168e000083873000000004", 0x3c}], 0x1, 0x0, &(0x7f0000000bc0)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}], 0x2) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000c80)) getsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000d80)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000d40), {[{{@arp={@broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}, 0xff, 0xff, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}, {[0xff, 0x0, 0x0, 0xff, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}, 0x2e6, 0xa1d, 0x10001, 0x25e, 0x5, 0x7fffffff, 'team_slave_1\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, @mac, @empty, @broadcast=0xffffffff, 0xc, 0xffffffff}}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x18}, 0xffffffff, 0xff000000, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x78957f5ff13afaaa}, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x6, 0x8, 0x6, 0xd, 0x5, 0xffff, 'ip6_vti0\x00', 'gretap0\x00', {0xff}, {}, 0x0, 0x40}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @multicast2=0xe0000002, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001280)={r6, 0x21a6, 0x9, 0xab, 0x8, 0xc753, 0x8, 0x10000, {r4, @in={{0x2, 0x4e24}}, 0x33223032, 0x4, 0x8, 0x3, 0x4}}, &(0x7f0000001340)=0xb0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000001380)) fchmod(r0, 0x84) write$P9_RSETATTR(r0, &(0x7f00000013c0)={0x7, 0x1b, 0x1}, 0x7) accept4(r0, &(0x7f0000001400)=@can, &(0x7f0000001480)=0x80, 0x80000) [ 211.851735] IPVS: ftp: loaded support on port[0] = 21 05:10:33 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x101, 0x8, [0x5, 0x9, 0x4, 0xfffffffffffffff9, 0x5, 0xa3, 0x3, 0x7fff]}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0x403}, &(0x7f00000001c0)=0x8) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x19, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000700)=@nat={"6e61748800", 0x19, 0x4, 0x3e0, [0x20000280, 0x0, 0x0, 0x20000400, 0x20000630], 0x0, &(0x7f0000000080), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'gre0\x00', 'veth1_to_team\x00', 'vlan0\x00', 'team0\x00', @empty, [], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffc}}}}, {{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'bpq0\x00', 'veth1_to_bridge\x00', 'veth0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'team0\x00', 'syzkaller0\x00', 'eql\x00', 'ip6tnl0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [0x0, 0x0, 0x0, 0x0, 0x400000000000000], @empty, [], 0xe8, 0x120, 0x158, [@quota={'quota\x00', 0x18}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}, {{{0x5, 0x0, 0x0, 'eql\x00', 'veth1_to_team\x00', 'bcsf0\x00', 'gre0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x458) 05:10:33 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x81, 0xa001) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0xa0000005}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') pwrite64(r2, &(0x7f0000000140), 0x0, 0x3) [ 211.878342] nla_parse: 4 callbacks suppressed [ 211.878352] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 211.938590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 211.951172] FAULT_INJECTION: forcing a failure. [ 211.951172] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.963146] CPU: 0 PID: 13738 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 211.970508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.979857] Call Trace: [ 211.982450] dump_stack+0x1c9/0x2b4 [ 211.986085] ? dump_stack_print_info.cold.2+0x52/0x52 [ 211.991281] ? find_held_lock+0x36/0x1c0 [ 211.995359] should_fail.cold.4+0xa/0x1a [ 211.999433] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.004543] ? kasan_check_read+0x11/0x20 [ 212.008696] ? rcu_is_watching+0x8c/0x150 [ 212.012855] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 212.017287] ? find_held_lock+0x36/0x1c0 [ 212.021375] ? check_same_owner+0x340/0x340 [ 212.025706] ? rcu_note_context_switch+0x730/0x730 [ 212.030653] __alloc_pages_nodemask+0x36e/0xdb0 [ 212.035329] ? default_file_splice_read+0x1da/0xb10 [ 212.040352] ? do_splice_to+0x12e/0x190 [ 212.044330] ? splice_direct_to_actor+0x270/0x8f0 [ 212.049181] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 212.054217] ? rcu_pm_notify+0xc0/0xc0 [ 212.058118] ? __kmalloc_node+0x33/0x70 [ 212.062097] ? __kmalloc_node+0x33/0x70 [ 212.062480] IPVS: ftp: loaded support on port[0] = 21 [ 212.066070] ? rcu_read_lock_sched_held+0x108/0x120 [ 212.066091] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 212.066115] alloc_pages_current+0x10c/0x210 [ 212.066133] push_pipe+0x400/0x7a0 [ 212.066147] ? __kmalloc_node+0x47/0x70 [ 212.066171] iov_iter_get_pages_alloc+0x866/0x1530 [ 212.098654] ? iov_iter_fault_in_readable+0x460/0x460 [ 212.103848] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 212.108264] ? is_bpf_text_address+0xd7/0x170 [ 212.112769] ? kernel_text_address+0x79/0xf0 [ 212.117180] ? __kernel_text_address+0xd/0x40 [ 212.121678] ? unwind_get_return_address+0x61/0xa0 [ 212.126615] ? __save_stack_trace+0x8d/0xf0 [ 212.130955] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.135965] ? iov_iter_pipe+0xc2/0x2f0 [ 212.139938] default_file_splice_read+0x1da/0xb10 [ 212.144781] ? do_splice_direct+0x2d4/0x420 [ 212.149109] ? do_sendfile+0x623/0xe20 [ 212.153001] ? __x64_sys_sendfile64+0x15d/0x250 [ 212.157669] ? do_syscall_64+0x1b9/0x820 [ 212.161753] ? iter_file_splice_write+0x1010/0x1010 [ 212.166775] ? kasan_check_read+0x11/0x20 [ 212.170923] ? rcu_is_watching+0x8c/0x150 [ 212.175077] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 212.179491] ? __lockdep_init_map+0x105/0x590 [ 212.183993] ? lockdep_init_map+0x9/0x10 [ 212.188062] ? __mutex_init+0x1f7/0x290 [ 212.192035] ? rcu_pm_notify+0xc0/0xc0 [ 212.195931] ? __ia32_sys_membarrier+0x150/0x150 [ 212.200697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.206236] ? fsnotify+0xbb4/0x14e0 [ 212.209964] ? init_wait_entry+0x1c0/0x1c0 [ 212.214201] ? fsnotify_first_mark+0x350/0x350 [ 212.218782] ? fsnotify+0x14e0/0x14e0 [ 212.222596] ? security_file_permission+0x1c6/0x240 [ 212.227615] ? rw_verify_area+0x118/0x360 [ 212.231765] ? iter_file_splice_write+0x1010/0x1010 05:10:33 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x309501, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1f, @dev={0xfe, 0x80, [], 0x1b}, 0x8}, r1}}, 0x30) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00007d9fc8)={&(0x7f000087fff4)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000a40000)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4000000210011040000000000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000010000000000000000a481d7b8e087180371b93f9e0000ffff0000000000008000000000005c001100ffa8f4ae598efdf70000000000000041e0000002000000000000000000000000000000000000000000000000ff0100000000000000000000000000018a00000000000000000000000c001000ff00000000000000"], 0x4}, 0x1}, 0x0) 05:10:33 executing program 0: r0 = getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) r1 = syz_open_procfs(r0, &(0x7f0000000140)='children\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) [ 212.236788] do_splice_to+0x12e/0x190 [ 212.240595] splice_direct_to_actor+0x270/0x8f0 [ 212.245276] ? pipe_to_sendpage+0x400/0x400 [ 212.249604] ? do_splice_to+0x190/0x190 [ 212.253582] ? rw_verify_area+0x118/0x360 [ 212.257738] do_splice_direct+0x2d4/0x420 [ 212.261891] ? splice_direct_to_actor+0x8f0/0x8f0 [ 212.266739] ? rw_verify_area+0x118/0x360 [ 212.270891] do_sendfile+0x623/0xe20 [ 212.274616] ? do_compat_pwritev64+0x1c0/0x1c0 [ 212.279211] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 212.284757] ? _copy_from_user+0xdf/0x150 [ 212.288915] __x64_sys_sendfile64+0x15d/0x250 [ 212.293414] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 212.297996] ? do_syscall_64+0x9a/0x820 [ 212.301978] do_syscall_64+0x1b9/0x820 [ 212.305870] ? finish_task_switch+0x1d3/0x870 [ 212.310367] ? syscall_return_slowpath+0x5e0/0x5e0 [ 212.315301] ? syscall_return_slowpath+0x31d/0x5e0 [ 212.320243] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 212.325618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.330474] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.335664] RIP: 0033:0x455ab9 05:10:33 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="92", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x1, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r0, &(0x7f00000000c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x80, 0x80000) sendto$inet6(r1, &(0x7f0000000000)="e6", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept4(r0, 0x0, &(0x7f0000000040), 0x0) 05:10:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 212.338847] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.358238] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 212.365960] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 212.373234] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 212.380508] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 05:10:33 executing program 4 (fault-call:2 fault-nth:11): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:33 executing program 2: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r1 = socket$inet6(0xa, 0x20002000000808, 0x8000000001) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x100032, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f00000002c0)={0x0, 0xd10a}) epoll_create1(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb21}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r4 = socket$inet6(0xa, 0x80000, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000000)="295ee1311f16") r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x6) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f00000003c0)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x370) r7 = msgget(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(r7, 0x3, &(0x7f0000000280)=""/135) r8 = accept4(r5, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='gretap0\x00', 0x10) sendmmsg$unix(r8, &(0x7f0000006180), 0x1b3, 0x0) 05:10:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/28, 0xfffffe83) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d7a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[{0xa, 0xffffffff}, {0x0, 0xde}, {0x7, 0x8}, {0xb, 0x5}, {0x8, 0x3c30}, {0xb, 0x6}, {0x3, 0x5}, {0x3}], 0x8) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000340)=0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={r5, r6, r7}, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000180)={{0xfffffffffffffff9}, 'port1\x00', 0x10, 0x10, 0x0, 0x33ba, 0x101, 0x2, 0x30, 0x0, 0x5, 0x1}) 05:10:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r1, &(0x7f00000007c0), 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x610041, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000000c0)) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) 05:10:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f00000000c0)="7dbf2a78892d764fd34a556b884fc44e1d3903c25662e82a6cdc43eba6e41224d1a37a7a85f41eccfcf6b65f5fcaef1b9d0e50771b4e5b81921550c50e061708af0a75d844397a9e52086a68cea96adaf842848d122eeb959a0ab24dc7d1874ec54f7322fc0cfafe", 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) setsockopt$inet_tcp_buf(r2, 0x6, 0x16, &(0x7f00000002c0)="afedba44d435e1ec506b84610aa7c07115ebe67f6a9aa3c746779b5ff6dfe40aec6fe8636d18de2c95e109689ced62e9415bc3d4a2e8ad17809e6903223bd973e05eb668419b68b5f6338c29d3e32fa2e0e79d11608537008efdb36430df25b01ad39b745a15f80f462c6ca51378defd17179751c5cd45f63c997130b4413b1d50a375f7a81b4b36d81df8b52630c7ce8d3cb2f1d490411c5045fa9c762d389fdf63ca41912e10aa237e96959cbf4c8503152e3b1f9ae976d54467f104d35a97f67cbe39d8adf3ae58b8e041462f70ea969d1f92cee3f4ea445538efdec224e6b500b6c589beb3dfdf06a5cc783d96287719792b", 0xf4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x40000, 0x0, 0x12, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') sendfile(r3, r1, &(0x7f0000000140), 0x100007ffffffe) 05:10:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000940)=@xdp, &(0x7f00000009c0)=0x80) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000a00)={0x0, @broadcast, @multicast1}, &(0x7f0000000a40)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000c00)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000c40)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', r1}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, 'bpq0\x00'}]}, 0x34}, 0x1}, 0x0) [ 212.387780] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 212.395052] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000000a [ 212.478079] FAULT_INJECTION: forcing a failure. [ 212.478079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.490124] CPU: 0 PID: 13796 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 212.497490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.506847] Call Trace: [ 212.509452] dump_stack+0x1c9/0x2b4 [ 212.513094] ? dump_stack_print_info.cold.2+0x52/0x52 [ 212.518293] ? find_held_lock+0x36/0x1c0 [ 212.522351] should_fail.cold.4+0xa/0x1a [ 212.526403] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.531499] ? kasan_check_read+0x11/0x20 [ 212.535635] ? rcu_is_watching+0x8c/0x150 [ 212.539764] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 212.544158] ? find_held_lock+0x36/0x1c0 [ 212.548216] ? check_same_owner+0x340/0x340 [ 212.552539] ? rcu_note_context_switch+0x730/0x730 [ 212.557458] __alloc_pages_nodemask+0x36e/0xdb0 [ 212.562111] ? default_file_splice_read+0x1da/0xb10 [ 212.567107] ? do_splice_to+0x12e/0x190 [ 212.571063] ? splice_direct_to_actor+0x270/0x8f0 [ 212.575891] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 212.580896] ? rcu_pm_notify+0xc0/0xc0 [ 212.584773] ? __kmalloc_node+0x33/0x70 [ 212.588726] ? __kmalloc_node+0x33/0x70 [ 212.592686] ? rcu_read_lock_sched_held+0x108/0x120 [ 212.597705] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 212.603230] alloc_pages_current+0x10c/0x210 [ 212.607648] push_pipe+0x400/0x7a0 [ 212.611184] ? __kmalloc_node+0x47/0x70 [ 212.615146] iov_iter_get_pages_alloc+0x866/0x1530 [ 212.620063] ? iov_iter_fault_in_readable+0x460/0x460 [ 212.625239] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 212.629632] ? is_bpf_text_address+0xd7/0x170 [ 212.634110] ? kernel_text_address+0x79/0xf0 [ 212.638502] ? __kernel_text_address+0xd/0x40 [ 212.642982] ? unwind_get_return_address+0x61/0xa0 [ 212.647895] ? __save_stack_trace+0x8d/0xf0 [ 212.652209] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.657208] ? iov_iter_pipe+0xc2/0x2f0 [ 212.661177] default_file_splice_read+0x1da/0xb10 [ 212.666007] ? do_splice_direct+0x2d4/0x420 [ 212.670313] ? do_sendfile+0x623/0xe20 [ 212.674186] ? __x64_sys_sendfile64+0x15d/0x250 [ 212.678836] ? do_syscall_64+0x1b9/0x820 [ 212.682885] ? iter_file_splice_write+0x1010/0x1010 [ 212.687891] ? kasan_check_read+0x11/0x20 [ 212.692031] ? rcu_is_watching+0x8c/0x150 [ 212.696161] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 212.700551] ? __lockdep_init_map+0x105/0x590 [ 212.705034] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 212.709775] ? lockdep_init_map+0x9/0x10 [ 212.713819] ? __mutex_init+0x1f7/0x290 [ 212.717771] ? rcu_pm_notify+0xc0/0xc0 [ 212.721643] ? __ia32_sys_membarrier+0x150/0x150 [ 212.726381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.731898] ? fsnotify+0xbb4/0x14e0 [ 212.735598] ? init_wait_entry+0x1c0/0x1c0 [ 212.739816] ? fsnotify_first_mark+0x350/0x350 [ 212.744379] ? fsnotify+0x14e0/0x14e0 [ 212.748172] ? security_file_permission+0x1c6/0x240 [ 212.753172] ? rw_verify_area+0x118/0x360 [ 212.757303] ? iter_file_splice_write+0x1010/0x1010 [ 212.762300] do_splice_to+0x12e/0x190 [ 212.766089] splice_direct_to_actor+0x270/0x8f0 [ 212.770740] ? pipe_to_sendpage+0x400/0x400 [ 212.775049] ? do_splice_to+0x190/0x190 [ 212.779009] ? rw_verify_area+0x118/0x360 [ 212.783148] do_splice_direct+0x2d4/0x420 [ 212.787282] ? splice_direct_to_actor+0x8f0/0x8f0 [ 212.792112] ? rw_verify_area+0x118/0x360 [ 212.796246] do_sendfile+0x623/0xe20 [ 212.799946] ? do_compat_pwritev64+0x1c0/0x1c0 [ 212.804516] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 212.810038] ? _copy_from_user+0xdf/0x150 [ 212.814171] __x64_sys_sendfile64+0x15d/0x250 [ 212.818649] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 212.823219] ? do_syscall_64+0x9a/0x820 [ 212.827181] do_syscall_64+0x1b9/0x820 [ 212.831052] ? finish_task_switch+0x1d3/0x870 [ 212.835531] ? syscall_return_slowpath+0x5e0/0x5e0 [ 212.840444] ? syscall_return_slowpath+0x31d/0x5e0 [ 212.845362] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 212.850712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.855544] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.860715] RIP: 0033:0x455ab9 [ 212.863883] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.883120] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 212.890809] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 212.898059] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 212.905310] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 212.912561] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 212.919812] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000000b 05:10:34 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b300000000000000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003c80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001580)="bc5faadaf563e5deb7614e56e1028645fef846deea7b9df4d09305a75a14e0f9", 0x20}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x1ae, &(0x7f0000000240)=[{&(0x7f0000001480)=""/197}, {&(0x7f0000000140)=""/44}, {&(0x7f0000000180)=""/150}], 0x0, &(0x7f0000001400)=""/6, 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) 05:10:34 executing program 1: io_destroy(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000000c0)={0x4, 0x80, 0x1, 0x1}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 05:10:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(tnepres-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)='g', 0x1}], 0x1, &(0x7f0000000b00)}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000004b00)=[{{&(0x7f00000027c0)=@ipx, 0x80, &(0x7f0000002840), 0x0, &(0x7f0000004a00)=""/245, 0x46}}], 0x40000000000019e, 0x0, &(0x7f0000002880)={0x0, 0x1c9c380}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8002, 0x0) 05:10:34 executing program 4 (fault-call:2 fault-nth:12): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 213.170669] FAULT_INJECTION: forcing a failure. [ 213.170669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.182694] CPU: 1 PID: 13813 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 213.190052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.199397] Call Trace: [ 213.201987] dump_stack+0x1c9/0x2b4 [ 213.205619] ? dump_stack_print_info.cold.2+0x52/0x52 [ 213.210810] ? zap_class+0x740/0x740 [ 213.214535] should_fail.cold.4+0xa/0x1a [ 213.218606] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 213.223717] ? rcu_is_watching+0x8c/0x150 [ 213.227877] ? find_held_lock+0x36/0x1c0 [ 213.231964] ? check_same_owner+0x340/0x340 [ 213.236301] ? rcu_note_context_switch+0x730/0x730 [ 213.241261] __alloc_pages_nodemask+0x36e/0xdb0 [ 213.245942] ? default_file_splice_read+0x1da/0xb10 [ 213.250966] ? do_splice_to+0x12e/0x190 [ 213.254947] ? splice_direct_to_actor+0x270/0x8f0 [ 213.259811] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 213.264858] ? rcu_pm_notify+0xc0/0xc0 [ 213.268763] ? __kmalloc_node+0x33/0x70 [ 213.272749] ? __kmalloc_node+0x33/0x70 [ 213.276737] ? rcu_read_lock_sched_held+0x108/0x120 [ 213.281756] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 213.287306] alloc_pages_current+0x10c/0x210 [ 213.291720] push_pipe+0x400/0x7a0 [ 213.295260] ? __kmalloc_node+0x47/0x70 [ 213.299250] iov_iter_get_pages_alloc+0x866/0x1530 [ 213.304188] ? iov_iter_fault_in_readable+0x460/0x460 [ 213.309361] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 213.313767] ? is_bpf_text_address+0xd7/0x170 [ 213.318252] ? kernel_text_address+0x79/0xf0 [ 213.322651] ? __kernel_text_address+0xd/0x40 [ 213.327138] ? unwind_get_return_address+0x61/0xa0 [ 213.332058] ? __save_stack_trace+0x8d/0xf0 [ 213.336384] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 213.341384] ? iov_iter_pipe+0xc2/0x2f0 [ 213.345352] default_file_splice_read+0x1da/0xb10 [ 213.350183] ? do_splice_direct+0x2d4/0x420 [ 213.354490] ? do_sendfile+0x623/0xe20 [ 213.358365] ? __x64_sys_sendfile64+0x15d/0x250 [ 213.363030] ? do_syscall_64+0x1b9/0x820 [ 213.367091] ? iter_file_splice_write+0x1010/0x1010 [ 213.372095] ? rcu_is_watching+0x8c/0x150 [ 213.376229] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 213.380628] ? __lockdep_init_map+0x105/0x590 [ 213.385114] ? lockdep_init_map+0x9/0x10 [ 213.389168] ? __mutex_init+0x1f7/0x290 [ 213.393127] ? rcu_pm_notify+0xc0/0xc0 [ 213.397006] ? __ia32_sys_membarrier+0x150/0x150 [ 213.401759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.407283] ? fsnotify+0xbb4/0x14e0 [ 213.410992] ? init_wait_entry+0x1c0/0x1c0 [ 213.415218] ? fsnotify_first_mark+0x350/0x350 [ 213.419797] ? fsnotify+0x14e0/0x14e0 [ 213.423600] ? security_file_permission+0x1c6/0x240 [ 213.428607] ? rw_verify_area+0x118/0x360 [ 213.432741] ? iter_file_splice_write+0x1010/0x1010 [ 213.437744] do_splice_to+0x12e/0x190 [ 213.441539] splice_direct_to_actor+0x270/0x8f0 [ 213.446199] ? pipe_to_sendpage+0x400/0x400 [ 213.450513] ? do_splice_to+0x190/0x190 [ 213.454475] ? rw_verify_area+0x118/0x360 [ 213.458617] do_splice_direct+0x2d4/0x420 [ 213.462765] ? splice_direct_to_actor+0x8f0/0x8f0 [ 213.467601] ? rw_verify_area+0x118/0x360 [ 213.471737] do_sendfile+0x623/0xe20 [ 213.475445] ? do_compat_pwritev64+0x1c0/0x1c0 [ 213.480036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 213.485569] ? _copy_from_user+0xdf/0x150 [ 213.489708] __x64_sys_sendfile64+0x15d/0x250 [ 213.494193] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 213.498763] ? do_syscall_64+0x9a/0x820 [ 213.502729] do_syscall_64+0x1b9/0x820 [ 213.506604] ? syscall_slow_exit_work+0x500/0x500 [ 213.511434] ? syscall_return_slowpath+0x5e0/0x5e0 [ 213.516353] ? syscall_return_slowpath+0x31d/0x5e0 [ 213.521277] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 213.526634] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 213.531473] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.536645] RIP: 0033:0x455ab9 [ 213.539821] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 213.559187] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 213.566885] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 213.574139] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 213.581407] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 213.588663] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 213.596416] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000000c 05:10:34 executing program 4 (fault-call:2 fault-nth:13): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 213.709466] FAULT_INJECTION: forcing a failure. [ 213.709466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.721444] CPU: 0 PID: 13835 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 213.728814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.738168] Call Trace: [ 213.740760] dump_stack+0x1c9/0x2b4 [ 213.744392] ? dump_stack_print_info.cold.2+0x52/0x52 [ 213.749583] ? zap_class+0x740/0x740 [ 213.753305] should_fail.cold.4+0xa/0x1a [ 213.757368] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 213.762891] ? __schedule+0x884/0x1ed0 [ 213.766791] ? find_held_lock+0x36/0x1c0 [ 213.770873] ? check_same_owner+0x340/0x340 [ 213.775203] ? rcu_note_context_switch+0x730/0x730 [ 213.780159] __alloc_pages_nodemask+0x36e/0xdb0 [ 213.784833] ? default_file_splice_read+0x1da/0xb10 [ 213.789850] ? do_splice_to+0x12e/0x190 [ 213.793822] ? splice_direct_to_actor+0x270/0x8f0 [ 213.798671] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 213.803701] ? rcu_pm_notify+0xc0/0xc0 05:10:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x100) recvfrom$packet(r1, &(0x7f0000000040)=""/136, 0x88, 0x40000100, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="025cc83d6d345f8f762070") r2 = socket(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000007980)=[{{&(0x7f0000005fc0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000006300), 0x0, &(0x7f0000006340)=""/90, 0x5a}}, {{&(0x7f00000063c0)=@generic, 0x80, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x0, &(0x7f0000007b80)={0x77359400}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0xce, @empty, 0x2}, @in6={0xa, 0x4e23, 0xa8, @dev={0xfe, 0x80, [], 0x1a}, 0x3}, @in6={0xa, 0x4e23, 0x6, @loopback={0x0, 0x1}, 0x3}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x13}, 0x4}], 0x80) shutdown(r2, 0x0) [ 213.807605] ? __kmalloc_node+0x33/0x70 [ 213.811587] ? __kmalloc_node+0x33/0x70 [ 213.815569] ? rcu_read_lock_sched_held+0x108/0x120 [ 213.820594] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 213.826147] alloc_pages_current+0x10c/0x210 [ 213.830569] push_pipe+0x400/0x7a0 [ 213.834108] ? __kmalloc_node+0x47/0x70 [ 213.838100] iov_iter_get_pages_alloc+0x866/0x1530 [ 213.843050] ? iov_iter_fault_in_readable+0x460/0x460 [ 213.848244] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 213.852664] ? is_bpf_text_address+0xd7/0x170 [ 213.857174] ? kernel_text_address+0x79/0xf0 [ 213.861593] ? __kernel_text_address+0xd/0x40 [ 213.866096] ? unwind_get_return_address+0x61/0xa0 [ 213.871040] ? __save_stack_trace+0x8d/0xf0 [ 213.875387] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 213.880410] ? iov_iter_pipe+0xc2/0x2f0 [ 213.884402] default_file_splice_read+0x1da/0xb10 [ 213.889250] ? do_splice_direct+0x2d4/0x420 [ 213.893573] ? do_sendfile+0x623/0xe20 [ 213.897463] ? __x64_sys_sendfile64+0x15d/0x250 [ 213.902139] ? do_syscall_64+0x1b9/0x820 [ 213.906212] ? iter_file_splice_write+0x1010/0x1010 [ 213.911235] ? rcu_is_watching+0x8c/0x150 [ 213.915384] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 213.919793] ? __lockdep_init_map+0x105/0x590 [ 213.924295] ? lockdep_init_map+0x9/0x10 [ 213.928356] ? __mutex_init+0x1f7/0x290 [ 213.932325] ? rcu_pm_notify+0xc0/0xc0 [ 213.936223] ? __ia32_sys_membarrier+0x150/0x150 [ 213.940977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.946512] ? fsnotify+0xbb4/0x14e0 [ 213.950232] ? init_wait_entry+0x1c0/0x1c0 [ 213.954466] ? fsnotify_first_mark+0x350/0x350 [ 213.959052] ? fsnotify+0x14e0/0x14e0 [ 213.962868] ? security_file_permission+0x1c6/0x240 [ 213.967889] ? rw_verify_area+0x118/0x360 [ 213.972035] ? iter_file_splice_write+0x1010/0x1010 [ 213.977053] do_splice_to+0x12e/0x190 [ 213.980861] splice_direct_to_actor+0x270/0x8f0 [ 213.985530] ? pipe_to_sendpage+0x400/0x400 [ 213.989856] ? do_splice_to+0x190/0x190 [ 213.993832] ? rw_verify_area+0x118/0x360 [ 213.997981] do_splice_direct+0x2d4/0x420 [ 214.002138] ? splice_direct_to_actor+0x8f0/0x8f0 [ 214.006986] ? rw_verify_area+0x118/0x360 [ 214.011142] do_sendfile+0x623/0xe20 [ 214.014872] ? do_compat_pwritev64+0x1c0/0x1c0 [ 214.019462] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 214.024999] ? _copy_from_user+0xdf/0x150 [ 214.029151] __x64_sys_sendfile64+0x15d/0x250 [ 214.033646] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 214.038229] ? do_syscall_64+0x9a/0x820 [ 214.042208] do_syscall_64+0x1b9/0x820 [ 214.046095] ? finish_task_switch+0x1d3/0x870 [ 214.050594] ? syscall_return_slowpath+0x5e0/0x5e0 [ 214.055524] ? syscall_return_slowpath+0x31d/0x5e0 [ 214.060458] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 214.065827] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 214.070678] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.075861] RIP: 0033:0x455ab9 [ 214.079038] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 214.098448] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 05:10:35 executing program 6: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x4) 05:10:35 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) set_mempolicy(0x0, &(0x7f0000000000)=0x4, 0x3ff) 05:10:35 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x6f11d1eddf0225a0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xb6) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x81) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101180, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)={{0x80000001, 0x7ff}, {0x8, 0x3}, 0x7f, 0x6, 0x4}) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x4e, 0x100) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) fchown(r2, r3, r4) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000003c0)) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in=@rand_addr=0xfffffffffffff800, @in=@multicast2=0xe0000002, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x32, 0x0, r3}, {0x8, 0x8000, 0x9, 0x8000, 0x611, 0x2, 0xffffffff7fffffff, 0x3}, {0x9, 0x7ff, 0x10000, 0x1}, 0xffff, 0x6e6bbc, 0x0, 0x0, 0x3, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d3, 0x6c}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3504, 0x3, 0x1, 0x3ff, 0x7a41, 0x100000001, 0x100000001}}, 0xe8) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x8000, 0x3, 0x0, 0x3, 0x6, 0x2, 0x2b7, 0x38, 0x33, 0x2, 0x600000000000, 0x20, 0x1, 0x4, 0x4, 0x9}, [{0x60000000, 0x0, 0x849, 0x4, 0x9, 0x80000001, 0x3, 0x2}], "8341c7e7d16aa8ddf5d884c94bdb66012091c52c206211ee367a1e89f1157d24c1b7bd6be8a0462327e59ef5effdf1ddff80b0037303461af99642ed", [[], []]}, 0x294) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r7 = dup2(r1, r0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setgroups(0x2, &(0x7f0000000840)=[r5, r6]) write(r7, &(0x7f0000000880)="245e544dc7da538acb979840957e25f6715dfcbacbfd782ac0ad4792a37911d658aa5d350f835433eb8825a120ac2f0eab44c1d86fef0f0d2543d4510bdf77dbdebc5d0d025e1fc789bca6a205ed294f7934f2dfb68e3968874f3273cf0626c9", 0x60) ioctl$VT_RELDISP(r2, 0x5605) syz_open_dev$sg(&(0x7f0000000900)='/dev/sg#\x00', 0x6, 0x400) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0xfffffffffffffffc, 0x4) r9 = syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x200) accept$inet(r9, &(0x7f0000000980)={0x0, 0x0, @broadcast}, &(0x7f00000009c0)=0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000a00)=0x7, 0x4) fcntl$dupfd(r2, 0x0, r8) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000a40)=""/162) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000b00)=0x9) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000b40)={0x6, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x9, [{{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e23, @broadcast=0xffffffff}}, {{0x2, 0x4e22, @loopback=0x7f000001}}, {{0x2, 0x4e23, @broadcast=0xffffffff}}, {{0x2, 0x4e23, @broadcast=0xffffffff}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}}, {{0x2, 0x4e22, @multicast2=0xe0000002}}, {{0x2, 0x4e20, @broadcast=0xffffffff}}, {{0x2, 0x4e21, @multicast1=0xe0000001}}]}, 0x510) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001080)={0x0, @empty, @rand_addr}, &(0x7f00000010c0)=0xc) [ 214.106155] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 214.113421] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 214.120687] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 214.127951] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 214.135215] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000000d 05:10:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b70200002e9cfd06000000006858dd2200000004000000250000000800090000000000"], 0xffce}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 05:10:35 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000364000/0x2000)=nil, 0x2000) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x280000000, 0x40081) r3 = syz_open_dev$dmmidi(&(0x7f0000000a00)='/dev/dmmidi#\x00', 0x5, 0x121042) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e20, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x14}, 0xf0c}}, 0x8}, &(0x7f0000000b00)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000b40)={r4}, &(0x7f0000000b80)=0x8) 05:10:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b300000000000000e6000000000000000000000000000000", 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f9999c1192ad6e81630a3237b66dd9fe", 0x10}], 0x1, &(0x7f0000000140)}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000228, 0x0, &(0x7f0000000000)={0x77359400}) 05:10:35 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10040, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @reserved=0x1}, 0x10) sendto$unix(r0, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x0, 0x0) sendto$unix(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0, 0x0) 05:10:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x3, 0x1000, 0xa0, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) readahead(r1, 0x4, 0x101) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000080)={0x18, 0x5, 0x4, 0x8000}) 05:10:35 executing program 7: bpf$MAP_CREATE(0x1e02000000000000, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, [0xe]}, 0x2c) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x580, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000000c0)={0x7ffffffe, 0xffffffffffffffff, 0x4, @empty, 'bridge_slave_1\x00'}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x111a10, 0x0) poll(&(0x7f0000000040)=[{r1, 0x10}], 0x1, 0x0) 05:10:35 executing program 4 (fault-call:2 fault-nth:14): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:35 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000100)={0xf84, 0x4, 0x1}) socket$rds(0x15, 0x5, 0x0) ptrace$peekuser(0x3, r1, 0x9) ioctl$TCSETSF(r0, 0x5432, &(0x7f0000000080)) r3 = dup3(r0, r0, 0x80000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$TIOCCBRK(r0, 0x5428) socket$pptp(0x18, 0x1, 0x2) 05:10:35 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000040)=0xe8) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000440)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000500)={0x77, 0x7d, 0x2, {{0x0, 0x62, 0xffff, 0x2, {0x3c, 0x0, 0x4}, 0x80140000, 0xfffffffffffffff7, 0x6, 0x7, 0xd, "287d7bf32776626f786e657431", 0x16, "65746831295e76626f786e6574316574683188402f20", 0x5, '/proc', 0x7, 'ppp0.%#'}, 0x0, "", r1, r2, r3}}, 0x77) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x100000000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000000)={r4, 0xfffffffffffffff9, 0x4000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0x3}, 0x8) r6 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) [ 214.482801] FAULT_INJECTION: forcing a failure. [ 214.482801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.494746] CPU: 1 PID: 13894 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 214.502107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.511457] Call Trace: [ 214.514050] dump_stack+0x1c9/0x2b4 [ 214.517689] ? dump_stack_print_info.cold.2+0x52/0x52 [ 214.522889] ? find_held_lock+0x36/0x1c0 [ 214.526962] should_fail.cold.4+0xa/0x1a 05:10:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xffffffffffffffff) ioctl(r0, 0x0, &(0x7f0000000280)) clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200), &(0x7f0000000180)=[&(0x7f0000000040)='\x00', &(0x7f00000000c0)='trusted&\'proc(\x00', &(0x7f00000001c0)='selinux\x00']) accept$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) get_thread_area(&(0x7f0000000280)={0x2dbe2a18, 0xffffffffffffffff, 0x4000, 0x8, 0x338b, 0x100000000, 0x3, 0x8b, 0x7ff, 0x1f}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000080)) 05:10:35 executing program 1: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() fcntl$setown(r0, 0x8, r1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x400, 0x8}) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x20) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 05:10:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x8000) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) r2 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000900)=[{}]}) [ 214.531030] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 214.536137] ? kasan_check_read+0x11/0x20 [ 214.540281] ? rcu_is_watching+0x8c/0x150 [ 214.544424] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 214.548833] ? find_held_lock+0x36/0x1c0 [ 214.552909] ? check_same_owner+0x340/0x340 [ 214.557231] ? rcu_note_context_switch+0x730/0x730 [ 214.562169] __alloc_pages_nodemask+0x36e/0xdb0 [ 214.566839] ? default_file_splice_read+0x1da/0xb10 [ 214.571851] ? do_splice_to+0x12e/0x190 [ 214.575823] ? splice_direct_to_actor+0x270/0x8f0 [ 214.580668] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 214.585702] ? rcu_pm_notify+0xc0/0xc0 [ 214.589605] ? __kmalloc_node+0x33/0x70 [ 214.593586] ? __kmalloc_node+0x33/0x70 [ 214.597568] ? rcu_read_lock_sched_held+0x108/0x120 [ 214.602587] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 214.608132] alloc_pages_current+0x10c/0x210 [ 214.612541] push_pipe+0x400/0x7a0 [ 214.616080] ? __kmalloc_node+0x47/0x70 [ 214.620059] iov_iter_get_pages_alloc+0x866/0x1530 [ 214.624999] ? iov_iter_fault_in_readable+0x460/0x460 [ 214.630186] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 214.634601] ? is_bpf_text_address+0xd7/0x170 [ 214.639101] ? kernel_text_address+0x79/0xf0 [ 214.643510] ? __kernel_text_address+0xd/0x40 [ 214.648012] ? unwind_get_return_address+0x61/0xa0 [ 214.652954] ? __save_stack_trace+0x8d/0xf0 [ 214.657297] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 214.662322] ? iov_iter_pipe+0xc2/0x2f0 [ 214.666306] default_file_splice_read+0x1da/0xb10 [ 214.671151] ? do_splice_direct+0x2d4/0x420 [ 214.675473] ? do_sendfile+0x623/0xe20 [ 214.679363] ? __x64_sys_sendfile64+0x15d/0x250 [ 214.684038] ? do_syscall_64+0x1b9/0x820 [ 214.688103] ? iter_file_splice_write+0x1010/0x1010 [ 214.693118] ? kasan_check_read+0x11/0x20 [ 214.697253] ? rcu_is_watching+0x8c/0x150 [ 214.701387] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 214.705787] ? __lockdep_init_map+0x105/0x590 [ 214.710274] ? lockdep_init_map+0x9/0x10 [ 214.714325] ? __mutex_init+0x1f7/0x290 [ 214.718281] ? rcu_pm_notify+0xc0/0xc0 [ 214.722156] ? __ia32_sys_membarrier+0x150/0x150 [ 214.726900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.732427] ? fsnotify+0xbb4/0x14e0 [ 214.736135] ? init_wait_entry+0x1c0/0x1c0 [ 214.740355] ? fsnotify_first_mark+0x350/0x350 [ 214.744926] ? fsnotify+0x14e0/0x14e0 [ 214.748727] ? security_file_permission+0x1c6/0x240 [ 214.753732] ? rw_verify_area+0x118/0x360 [ 214.757869] ? iter_file_splice_write+0x1010/0x1010 [ 214.762876] do_splice_to+0x12e/0x190 [ 214.766670] splice_direct_to_actor+0x270/0x8f0 [ 214.771327] ? pipe_to_sendpage+0x400/0x400 [ 214.775639] ? do_splice_to+0x190/0x190 [ 214.779601] ? rw_verify_area+0x118/0x360 [ 214.783738] do_splice_direct+0x2d4/0x420 [ 214.787875] ? splice_direct_to_actor+0x8f0/0x8f0 [ 214.792710] ? rw_verify_area+0x118/0x360 [ 214.796850] do_sendfile+0x623/0xe20 [ 214.800564] ? do_compat_pwritev64+0x1c0/0x1c0 [ 214.805145] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 214.810680] ? _copy_from_user+0xdf/0x150 [ 214.814817] __x64_sys_sendfile64+0x15d/0x250 [ 214.819302] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 214.823875] ? do_syscall_64+0x9a/0x820 [ 214.827840] do_syscall_64+0x1b9/0x820 [ 214.831711] ? finish_task_switch+0x1d3/0x870 [ 214.836195] ? syscall_return_slowpath+0x5e0/0x5e0 [ 214.841113] ? syscall_return_slowpath+0x31d/0x5e0 [ 214.846046] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 214.851401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 214.856236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.861411] RIP: 0033:0x455ab9 [ 214.864581] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 214.883908] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 214.891602] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 214.898858] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 214.906131] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 214.913385] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 214.920638] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000000e 05:10:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x5e, "1cee9dc4e377269c90b9507ee962c6efd3e4befbd95dd875e7bc1da88918a0703c25ff501ea5df7075a5313da0a58699c8e36a3d10a16507dccbb0496f2f155ae1e3ecbb48061f7df8b178393b4130c46b3373c1a05cd90450353ad29105"}, &(0x7f0000000180)=0x66) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r2, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000cceff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000731ef4)={0x14, 0x27, 0x829, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) 05:10:36 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000240)) ioctl$BLKBSZGET(r0, 0x125e, &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc000, 0xffffffffffffffff) truncate(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=""/39, &(0x7f00000000c0)=0xfcf1) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xbe4f, 0x3, 0xffffffffffffffff, 0x8001}, {0x8000, 0x100000000, 0x5}]}) 05:10:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = timerfd_create(0x1, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000040)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) 05:10:36 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast1={0xff, 0x1, [], 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x7fffffff, 0x5}) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[{0x18, 0x29, 0xb, "01"}], 0x18}}], 0x1, 0x0) 05:10:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r3, 0xffcfa38c0ae681e9}}, 0x10) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="548138bb4382b4bd4d", 0x9}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0xfffffffffffffea8, &(0x7f0000000100)=[{&(0x7f0000588fa9)=""/87, 0x389}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) [ 215.057972] audit: type=1326 audit(1531717836.338:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13922 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455ab9 code=0x0 05:10:36 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f0000000040), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 05:10:36 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x28) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x44, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000006c0)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, &(0x7f0000000500)}) 05:10:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xff, 0x40) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0xa5, 0x22, 0x0, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x101000000, 0xa, 0x0, 0xffffffffffffffff, 0x4000}) 05:10:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f0000000280)) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e20, 0x7fff, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x4}, {0xa, 0x4e23, 0x10000000000000, @remote={0xfe, 0x80, [], 0xbb}}, 0xfff, [0x9, 0x7fffffff, 0x3, 0x1ff, 0x2, 0x8, 0x80, 0x2]}, 0x5c) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x54) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x1ff}, 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x20042, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, [0x1, 0x2, 0xfffffffffffffff9, 0x101, 0x100000001, 0x100, 0xffffffffffffff8f, 0xfffffffffffffffc, 0x3b1, 0x4, 0x3, 0x80, 0x80, 0x1, 0x2]}, &(0x7f00000003c0)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000400)={r4, 0x2, 0x0, 0x8}, 0x10) ioctl$KDDISABIO(r3, 0x4b37) 05:10:36 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000580)=0x104000000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x146) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0x9, 0x7}}, 0x28) [ 215.241454] binder: 13946:13950 transaction failed 29189/-22, size 24-8 line 2852 [ 215.291329] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.297747] binder: 13946:13950 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 215.327511] binder_alloc: binder_alloc_mmap_handler: 13946 20001000-20004000 already mapped failed -16 05:10:36 executing program 4 (fault-call:2 fault-nth:15): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0xf44d}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x0, 0x0, 0x8, 0x4, 'syz1\x00', 0x9}, 0x3, 0x101, 0x40, r2, 0x1, 0x1899, 'syz1\x00', &(0x7f0000000080)=['vboxnet0%\x00'], 0xa, [], [0x2, 0x9, 0x3, 0x1200000000000000]}) 05:10:36 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000140)={'bridge_slave_0\x00', @ifru_mtu}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x1024) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1}, &(0x7f00000011c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001200)={r1, @in6={{0xa, 0x4e24, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x7d58}}}, 0x84) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x100000000, 0x151b, 0x0, 0xfffffffffffffb71}, 0x10) [ 215.359477] binder: BINDER_SET_CONTEXT_MGR already set [ 215.367143] binder: 13946:13962 transaction failed 29189/-22, size 24-8 line 2852 [ 215.371591] binder: 13946:13950 ioctl 40046207 0 returned -16 [ 215.401554] binder: 13946:13962 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 215.409507] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.464291] FAULT_INJECTION: forcing a failure. [ 215.464291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.476229] CPU: 0 PID: 13973 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 215.483584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.492928] Call Trace: [ 215.495517] dump_stack+0x1c9/0x2b4 [ 215.499148] ? dump_stack_print_info.cold.2+0x52/0x52 [ 215.504338] ? find_held_lock+0x36/0x1c0 [ 215.508404] should_fail.cold.4+0xa/0x1a [ 215.512466] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 215.517569] ? kasan_check_read+0x11/0x20 [ 215.521713] ? rcu_is_watching+0x8c/0x150 [ 215.525857] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 215.530270] ? find_held_lock+0x36/0x1c0 [ 215.534347] ? check_same_owner+0x340/0x340 [ 215.538667] ? rcu_note_context_switch+0x730/0x730 [ 215.543603] __alloc_pages_nodemask+0x36e/0xdb0 [ 215.548270] ? default_file_splice_read+0x1da/0xb10 [ 215.553280] ? do_splice_to+0x12e/0x190 [ 215.557254] ? splice_direct_to_actor+0x270/0x8f0 [ 215.562100] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 215.567129] ? rcu_pm_notify+0xc0/0xc0 [ 215.571019] ? __kmalloc_node+0x33/0x70 [ 215.574994] ? __kmalloc_node+0x33/0x70 [ 215.578967] ? rcu_read_lock_sched_held+0x108/0x120 [ 215.583990] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 215.589527] alloc_pages_current+0x10c/0x210 [ 215.593944] push_pipe+0x400/0x7a0 [ 215.597501] ? __kmalloc_node+0x47/0x70 [ 215.601478] iov_iter_get_pages_alloc+0x866/0x1530 [ 215.606412] ? iov_iter_fault_in_readable+0x460/0x460 [ 215.611622] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 215.616035] ? is_bpf_text_address+0xd7/0x170 [ 215.620536] ? kernel_text_address+0x79/0xf0 [ 215.624957] ? __kernel_text_address+0xd/0x40 [ 215.629459] ? unwind_get_return_address+0x61/0xa0 [ 215.634395] ? __save_stack_trace+0x8d/0xf0 [ 215.638736] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 215.643756] ? iov_iter_pipe+0xc2/0x2f0 [ 215.647737] default_file_splice_read+0x1da/0xb10 [ 215.652583] ? do_splice_direct+0x2d4/0x420 [ 215.656906] ? do_sendfile+0x623/0xe20 [ 215.660793] ? __x64_sys_sendfile64+0x15d/0x250 [ 215.665462] ? do_syscall_64+0x1b9/0x820 [ 215.669540] ? iter_file_splice_write+0x1010/0x1010 [ 215.674550] ? kasan_check_read+0x11/0x20 [ 215.678679] ? rcu_is_watching+0x8c/0x150 [ 215.682817] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 215.687233] ? __lockdep_init_map+0x105/0x590 [ 215.691722] ? lockdep_init_map+0x9/0x10 [ 215.695769] ? __mutex_init+0x1f7/0x290 [ 215.699732] ? rcu_pm_notify+0xc0/0xc0 [ 215.703614] ? __ia32_sys_membarrier+0x150/0x150 [ 215.708363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 215.713883] ? fsnotify+0xbb4/0x14e0 [ 215.717579] ? init_wait_entry+0x1c0/0x1c0 [ 215.721793] ? fsnotify_first_mark+0x350/0x350 [ 215.726367] ? fsnotify+0x14e0/0x14e0 [ 215.730162] ? security_file_permission+0x1c6/0x240 [ 215.735170] ? rw_verify_area+0x118/0x360 [ 215.739311] ? iter_file_splice_write+0x1010/0x1010 [ 215.744309] do_splice_to+0x12e/0x190 [ 215.748093] splice_direct_to_actor+0x270/0x8f0 [ 215.752752] ? pipe_to_sendpage+0x400/0x400 [ 215.757070] ? do_splice_to+0x190/0x190 [ 215.761604] ? rw_verify_area+0x118/0x360 [ 215.765757] do_splice_direct+0x2d4/0x420 [ 215.769888] ? splice_direct_to_actor+0x8f0/0x8f0 [ 215.774988] ? rw_verify_area+0x118/0x360 [ 215.779121] do_sendfile+0x623/0xe20 [ 215.782821] ? do_compat_pwritev64+0x1c0/0x1c0 [ 215.787401] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 215.792919] ? _copy_from_user+0xdf/0x150 [ 215.797056] __x64_sys_sendfile64+0x15d/0x250 [ 215.801535] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 215.806102] ? do_syscall_64+0x9a/0x820 [ 215.810074] do_syscall_64+0x1b9/0x820 [ 215.813947] ? finish_task_switch+0x1d3/0x870 [ 215.818440] ? syscall_return_slowpath+0x5e0/0x5e0 [ 215.823371] ? syscall_return_slowpath+0x31d/0x5e0 [ 215.828307] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 215.833678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 215.838531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.843722] RIP: 0033:0x455ab9 [ 215.846904] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:10:37 executing program 7: r0 = socket$inet6(0xa, 0x1001000000000005, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000)=""/189, &(0x7f00000000c0)=0xbd) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="62726f757465000000000000000000000000000000000000000000000000000000000000000000000040000000ff070000000000000000000000000000000000000000000000010000000000000000000000000000000000000000153539d03030f01f9c695f9cb723bcfd3a1079330377fbd22ec13a23af511cc28c96cb465c81b32e8c5500000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x88) 05:10:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = accept4(r0, &(0x7f0000000280)=@ipx, &(0x7f0000000300)=0x80, 0x80000) connect$pptp(r1, &(0x7f0000000340)={0x18, 0x2, {0x1, @multicast2=0xe0000002}}, 0x1e) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x400000) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000000c0)="99baa3f12fb8b567ad2c156f266b06403405a1243e77b38c3bd68f8e716105c359dc97c9c2e8bcf2815926e6662ce28df6171cf84d9456f781f10836885f2d2de791a3c47642e2cd35fd0849775559fb116367b5e16e052994bf474a1bd09411813130558d240ed0e6a0d1a6797e0012b64c1bc6dc3a4685") ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x20, 0x0, "2816a4571c6bbb70df1c81b11a2353e14975cb2716f4f223b514787bfe127c49a1b0e438b8ac31b9ecdc7c5ae145a2400c4c67cf9bd89c5696b8057a04b3ad4e879650e67fbea27eceb721b7ec97041f"}, 0xd8) r3 = msgget$private(0x0, 0x200) msgrcv(r3, &(0x7f0000000400)={0x0, ""/4096}, 0x1008, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) fstat(r1, &(0x7f0000000380)) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 05:10:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100, 0x121240) fstat(r0, &(0x7f0000000240)) 05:10:37 executing program 5: r0 = msgget$private(0x0, 0x4020000201) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0xfffffffffffffff8, 0x0) msgsnd(r0, &(0x7f0000000340)={0x2}, 0x8, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x0) fcntl$setlease(r1, 0x400, 0x1) msgrcv(r0, &(0x7f0000000000)={0x0, ""/65}, 0x49, 0x0, 0x0) msgrcv(r0, &(0x7f0000000240)={0x0, ""/79}, 0x57, 0x0, 0x0) 05:10:37 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)=""/88) r1 = socket$inet6(0xa, 0x2001000000000002, 0x0) mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0x8000000000000000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) finit_module(r1, &(0x7f0000000040)='user\x00', 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}) write(r1, &(0x7f00000002c0)="362a8f361106334141ecb1a65fbd8c626ab524a22775634d3cbdc721cedf5ca1b5a1bb1b8f05fba0fd7ed0d0c996fe9468fb9c433b7519338ba4b8cfb43f96b1985b8e0d91e7664be4c476d5846282b53bdace98a708d0216bc6d3e4b5d410d4b4fb0e287a813066e4c64394997bdc5fc01ece6717047ef75944736180dbfca11b559fd4322e27a253c4cbf9f18482e375048a8f499d4f7b0b5b52f883c179f84a5e0f795eb65b32a9aa3dd3bb9e7b1f4253687c065fb96578e3f1d29d3de7e09a8493a6c57d01281ae567b2babf702a26836d7204589005f6142b3def1135a04e77d945c2430176699c2980026b1f38a7a41290936708af", 0xf8) close(r3) close(r2) 05:10:37 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)="77863f92fcabcc2c091acdbfe2f0388c925281bc1dce3f365746e896d3796c437828cc819c35b6c5210785b427a767fdd51760aa829c01370c177952671c9be0ffa0582cfabaf185a694af59e1688da16de7c946ae913fc5663903f3ef45f3f3a891de1e34ef944d14fa043df65939fe05a0c6838ce220a9091e5c237a7f60d26d8efa1beefaa03d0a61d14c9b3d5a7de65782", 0x93}, {&(0x7f0000000280)="85d4b3634520a7e3d85d8de4452d660a6dd64081c2af71e2606033db370cfaf4ad0176cf6ca3bc9c093ff0b609f8f71c006512d988b968e5f1e182f30641883d953adc4ece935d1b1b3e7db43990605cd4b54d538fd43c8799404ae77455ad29028d30c3fe53", 0x66}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000300)="e4aa23d18fdeb2654e61f8044560a5e63d43eb827a5cfa9bdbb3b0cef0cec3f25e2f92ef0b036c009b6c49379052a57ff3002f333bf7794778984bffcf99950bd1f19719216dd9b0d5fd1f62b415e1bc5d3bea789a809717", 0x58}, {&(0x7f0000000380)="549487579a0944589d62b9df631c48259e400f63e0125390e0838431fcb44165111a9bc9d6c2586dd6b5b1e33eedf5030c99c312aeab4bc4b635fea6ff568b", 0x3f}, {&(0x7f00000003c0)="9e7fd2c3938a224e61597401c62df60df48a0df0d48da828da8ac99e951ef5bb67955868fc69f1c5a48e8dbbdc1f9778bb3c62841d19aadd8fb0a5c0576dd6fd38883448a4ed6604d01ca5feb25bdd7d04c8dccd6133e60b3b1a56352d594bc0244a828f8e2337c24113395c1bf3d4f87b", 0x71}, {&(0x7f0000000440)="527654c574f159bf0d0a4698c2407ca663504c048e99724868e6143b88c3e65ce6df3bcf03b6ab0abaf60eb2fdbf7f93439071c3f889c4afc89b09a9e4df439f17d74584d3bc97abee57ab299b39bf1afe2622d347d8a3f0ac8e74f055f220737ed308fda0595bdcb55e0057ed64ccc3ec572b29a06203394bdb1f3a9a511a8ba6070ec6f40abe01e9babe72afc579a1fae9ec95b23480261bdf2ac2a431868bb48f8168872ef59bcd649c52b6dfff197e7114171deae6d10d651cc8cf69343fe63432247355b46158a1713d62158ccc43f47632b1bdc44297836a2c6a5999d8e382cf218a4f2291c903bf2959d32d89ddfe", 0xf2}, {&(0x7f0000000540)="0aff935a75050084630314c28248cf4adf2b9a47c90a8068aeafa9578ea78b9914a0ed45456ff4d6f0fa5bc83a721b0dd652809f932dda6dcbd63d81b55f4db88e3474c77a158d6fc83c5aa17f50261c850a64cf2a5f0911003d17d6f8fc826956629b4a113db8a42ee19a64003b690e56c2349e8c874124be46c0e366dd039aedac5dc7dd51ca498f7db67242df585b5ddc597c81c4736b3a69eab09677f8a6df157798b1bfb7ddd563db5b5e5824d60e4db4173d2c1f7e572c882095f9e81fca400e", 0xc3}, {&(0x7f0000000640)="15893a92c543df2bd202f59aa21ce3854fcb2ee26a330b023ea208d92439f34f4ea47dd726273a778fb82d68b063c4992269dbcbea2c5c6b6da51e82e4c42458f7facd1de3e11d5d6ba6f99d95c832f094fabcebf95b7cbfeb3a95ee6db95623e9a1f823ea122d75a7526829c546ad9cb345f20f792ea36c27d820def3f87f51ee0b587193b20ae2e94558f3a98ba9f4d4614d9313bfe92fa288e85e9844c1eb1d33028c322f694c4cc2f75ab021a85558d57be4aa87fdb4", 0xb8}], 0x9, &(0x7f0000003c00)=ANY=[@ANYBLOB="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"], 0x2280, 0x40}, 0x8004) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2c, 0x4, 0x0, {0x0, 0xffffffffffffff11, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) r1 = socket$inet(0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) sendmsg(r1, &(0x7f0000000900)={0x0, 0xfffffdc2, &(0x7f0000000800), 0x1, 0x0, 0x2db}, 0x8000) 05:10:37 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000001c0)=""/205) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001000ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x40800) socket$inet(0x2, 0x2, 0x3ff) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r3}}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)={0x400, 0x6, 0x6}) [ 215.866310] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 215.874026] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 215.881301] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 215.888572] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 215.895848] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 215.903126] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000000f 05:10:37 executing program 4 (fault-call:2 fault-nth:16): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 216.021168] FAULT_INJECTION: forcing a failure. [ 216.021168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.033276] CPU: 0 PID: 14010 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 216.040638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.049990] Call Trace: [ 216.052592] dump_stack+0x1c9/0x2b4 [ 216.056235] ? dump_stack_print_info.cold.2+0x52/0x52 [ 216.061438] ? find_held_lock+0x36/0x1c0 [ 216.065516] should_fail.cold.4+0xa/0x1a [ 216.069595] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 216.074704] ? kasan_check_read+0x11/0x20 [ 216.078849] ? rcu_is_watching+0x8c/0x150 [ 216.082997] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 216.087407] ? find_held_lock+0x36/0x1c0 [ 216.091482] ? check_same_owner+0x340/0x340 [ 216.095806] ? rcu_note_context_switch+0x730/0x730 [ 216.100744] __alloc_pages_nodemask+0x36e/0xdb0 [ 216.105410] ? default_file_splice_read+0x1da/0xb10 [ 216.110419] ? do_splice_to+0x12e/0x190 [ 216.114375] ? splice_direct_to_actor+0x270/0x8f0 [ 216.119218] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 216.124257] ? rcu_pm_notify+0xc0/0xc0 [ 216.128160] ? __kmalloc_node+0x33/0x70 [ 216.132141] ? __kmalloc_node+0x33/0x70 [ 216.136124] ? rcu_read_lock_sched_held+0x108/0x120 [ 216.141147] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 216.146700] alloc_pages_current+0x10c/0x210 [ 216.151120] push_pipe+0x400/0x7a0 [ 216.154666] ? __kmalloc_node+0x47/0x70 [ 216.158655] iov_iter_get_pages_alloc+0x866/0x1530 [ 216.163606] ? iov_iter_fault_in_readable+0x460/0x460 [ 216.168790] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 216.173187] ? is_bpf_text_address+0xd7/0x170 [ 216.177670] ? kernel_text_address+0x79/0xf0 [ 216.182072] ? __kernel_text_address+0xd/0x40 [ 216.186551] ? unwind_get_return_address+0x61/0xa0 [ 216.191471] ? __save_stack_trace+0x8d/0xf0 [ 216.195803] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 216.200809] ? iov_iter_pipe+0xc2/0x2f0 [ 216.204790] default_file_splice_read+0x1da/0xb10 [ 216.209612] ? do_splice_direct+0x2d4/0x420 [ 216.213914] ? do_sendfile+0x623/0xe20 [ 216.217782] ? __x64_sys_sendfile64+0x15d/0x250 [ 216.222432] ? do_syscall_64+0x1b9/0x820 [ 216.226483] ? iter_file_splice_write+0x1010/0x1010 [ 216.231495] ? kasan_check_read+0x11/0x20 [ 216.235644] ? rcu_is_watching+0x8c/0x150 [ 216.239793] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 216.244204] ? __lockdep_init_map+0x105/0x590 [ 216.248707] ? lockdep_init_map+0x9/0x10 [ 216.252772] ? __mutex_init+0x1f7/0x290 [ 216.256743] ? rcu_pm_notify+0xc0/0xc0 [ 216.260636] ? __ia32_sys_membarrier+0x150/0x150 [ 216.265397] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 216.270942] ? fsnotify+0xbb4/0x14e0 [ 216.274667] ? init_wait_entry+0x1c0/0x1c0 [ 216.278905] ? fsnotify_first_mark+0x350/0x350 [ 216.283493] ? fsnotify+0x14e0/0x14e0 [ 216.287311] ? security_file_permission+0x1c6/0x240 [ 216.292334] ? rw_verify_area+0x118/0x360 [ 216.296488] ? iter_file_splice_write+0x1010/0x1010 [ 216.301526] do_splice_to+0x12e/0x190 [ 216.305336] splice_direct_to_actor+0x270/0x8f0 [ 216.310014] ? pipe_to_sendpage+0x400/0x400 [ 216.314347] ? do_splice_to+0x190/0x190 [ 216.318329] ? rw_verify_area+0x118/0x360 [ 216.322482] do_splice_direct+0x2d4/0x420 [ 216.326636] ? splice_direct_to_actor+0x8f0/0x8f0 [ 216.331490] ? rw_verify_area+0x118/0x360 [ 216.335641] do_sendfile+0x623/0xe20 [ 216.339357] ? do_compat_pwritev64+0x1c0/0x1c0 [ 216.343956] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 216.349496] ? _copy_from_user+0xdf/0x150 [ 216.353650] __x64_sys_sendfile64+0x15d/0x250 [ 216.358150] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 216.362738] ? do_syscall_64+0x9a/0x820 [ 216.366720] do_syscall_64+0x1b9/0x820 [ 216.370608] ? finish_task_switch+0x1d3/0x870 [ 216.375109] ? syscall_return_slowpath+0x5e0/0x5e0 [ 216.380045] ? syscall_return_slowpath+0x31d/0x5e0 [ 216.384984] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 216.390361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 216.395206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 216.400381] RIP: 0033:0x455ab9 [ 216.403551] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:10:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0x80000004, 0x3) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000100)=0x7) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x35, "63c0329f457a0c467d0c19003e3cdbe92bc26d6406c67dc7bfb6d7f4b64e81b79db107d3adfdf32a12167b97c3e1b813809a6764ba"}, &(0x7f00000000c0)=0x59) 05:10:37 executing program 6: socketpair$inet6(0xa, 0x3, 0x9e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x3127, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x44}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x2}}}, &(0x7f00000001c0)=0x84) getsockopt$inet6_buf(r0, 0x29, 0x77, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000001280)) ioctl$FICLONE(r0, 0x40049409, r1) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000012c0)=""/14, &(0x7f0000001300)=0xe) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000001340)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0}, &(0x7f0000001400)=0xc) getgroups(0x6, &(0x7f0000001440)=[0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee00]) chown(&(0x7f0000001380)='./file0\x00', r6, r7) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000001480), &(0x7f00000014c0)=0x30) r8 = syz_open_dev$audion(&(0x7f0000001500)='/dev/audio#\x00', 0x2, 0x2000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001540)={r3, 0x7fffffff}, &(0x7f0000001580)=0x8) ioctl$TCSBRK(r8, 0x5409, 0x7) ioctl$KVM_DEASSIGN_DEV_IRQ(r8, 0x4040ae75, &(0x7f00000015c0)={0x2, 0xffffffff, 0x4, 0x300}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r8, 0xc1105518, &(0x7f0000001680)={{0x5, 0x0, 0x9, 0x401, 'syz1\x00', 0x5}, 0x3, 0x200, 0x5, r5, 0xa, 0x0, 'syz0\x00', &(0x7f0000001600)=['/proc/self/net/pfkey\x00', '\x00', '/dev/audio#\x00', 'ppp1/b&%eth1+user@\x00', '\x00', 'system\x00', 'keyring\x00', '/proc/self/net/pfkey\x00', '!{#proc:\x00', '/dev/audio#\x00'], 0x6f, [], [0x7, 0x1, 0x0, 0x7ff]}) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f00000017c0)) fcntl$setstatus(r8, 0x4, 0x800) ioprio_get$uid(0x3, r6) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000001800)=0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4}}, &(0x7f0000001940)=0xe8) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000001980)={r9, 0x77e93cea, 0x16f5, 0xb4}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000019c0)={r2, 0x4}, &(0x7f0000001a00)=0xc) connect$inet(r4, &(0x7f0000001a40)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000001a80)=[@in={0x2, 0x4e23, @rand_addr=0x55}, @in={0x2, 0x4e21}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in6={0xa, 0x4e22, 0x80, @empty, 0x3}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in={0x2, 0x4e20, @rand_addr=0x1fe7}], 0x7c) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000001b00)={0x81, 0x0, [0x7, 0x1, 0x962, 0x5]}) connect$rds(r4, &(0x7f0000001b80)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) 05:10:37 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000001c0)=""/205) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001000ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x40800) socket$inet(0x2, 0x2, 0x3ff) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r3}}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)={0x400, 0x6, 0x6}) 05:10:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x76, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0xfffffffffffffff9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}, [0x2600000000000000]}, 0x10) shutdown(r0, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x8000, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @multicast1=0xe0000001}, 0x262, 0x6, 0x3f, 0xf12, 0x9, &(0x7f0000000040)='syzkaller1\x00', 0x3, 0x5, 0x40fe}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl(r2, 0x20000000000000, &(0x7f0000000300)="f9dae8f9e079052e5a921545b2e5e1f8d9f83f0788a6e373831bfa6540e9e2b26df85430a5c8b4697d0d9c3ddc44ce9a641d42f73cb2a50348f8959eaebf585f8c8c5bb621cc77152dd04442c3fd7d427bdc00f50c905e2c63b1b0d208a9b22aecf28d9a847070371212312af45bcc4ae3acd4e7f2597669a9a48acd83a065ddbf8d9c7771714c2d67e45493d9dee603371c84b575e72a5b8cb6b3c7178255f2a1ff78b58c2936298738186c8501ed142312e38982e342d1123642ef2a07a11c9126c95c5db70a0cb9a4cf7a05bef67bd3feed15b74d40e0cde255115049b79863ab9d2d1046838ea2ee7c563531") 05:10:37 executing program 7: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x18000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="500000000e4b753c18a4ab56ff8a670cec90ce2072ec066ada689a30a1ca62f084753b10cc3902c3f5b4570d335bcaf3d6e0876ffbc44e215c5165c3466f88de350751d9748d4d9eb43624e45dbd82c0b0b29bc7"], &(0x7f00000003c0)=0x58) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x1}}, 0x6, 0x7bb}, &(0x7f00000004c0)=0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r2, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r2, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendmmsg(r2, &(0x7f000000d880)=[{{&(0x7f0000009040)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x80, &(0x7f0000009280)=[{&(0x7f00000091c0)="f8a7471d9fdb3d25bbfe0ba351489ce74b0a67aaf95a71b362f12886e83f0797d8a52e0cd1cbff3c980038389db5a3165f497bbad8af3039f645eea62de55f9b2c5f668d6d806034493d7c85ba1e375492deb84c013243cacecad7b3af72cecf3ae981a6a5825aefb0ed995290a52c31779d98cb1165922282d1fa3c9fa40924", 0x80}], 0x1, &(0x7f00000092c0)}}], 0x1, 0x0) 05:10:37 executing program 0: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @rand_addr}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40002400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000002800000225bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10000f00050004000b000f000800050001ee20cb16c4a1d16bd1a4602924bccf0000000800fa0000000000fb00db355737e2d1bd"], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 05:10:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000140)={0x94}) 05:10:37 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x40) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x9}, 0xf) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000200)) [ 216.422774] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 216.430465] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 216.437714] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 216.444963] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 216.452222] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 216.459994] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000010 05:10:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r1, @multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000000)=0x78) 05:10:38 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=0x0, &(0x7f0000000440)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000480)={r3, 0x2}, &(0x7f00000004c0)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000540)={0x15, 0x110, 0xfa00, {r4, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x3, 0x1, {"315b01fa234728515f9a50b64bce1704"}, 0x7, 0x1000, 0xffffffff}, @in6={0xa, 0x4e21, 0xfffffffffffffe01, @empty, 0x140000}}}, 0x118) open_by_handle_at(r0, &(0x7f0000000040)={0xac, 0x0, "29878c7a97be7dc3ba6b8308fcc3d6203edc69b1da178e0b8419d05527b99a054ea873de68e42af09f05c922041ec8f9d38303386dbb4a01b8a942d3bb99e36b58fbdcb7dd9d4cd2204f07fea69465eb78243051d6b0400fe7169ac2d555cffe560b19c251277975da03a25027bc26f1b3f42ac2ff0dd9e67d1f185a6048e09d9b1694306fa11e33ab1c14b06f460438cb8f5c9736b4f852362b98a71d8c7e6668a2a7ce"}, 0x1) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000380)={0x3, 0x7fffffff}) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000004c0600000035ddf9cd6e455559ffff68a8036fd897e7192d4cf7f384ff0000000000000000d2102475fa3b3dc09a983b942760"]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r5, 0x75c, 0x0, 0x0, 0x0, @ib={0x1b, 0x1f, 0x9, {"254bb1d1fe6e28df75608653129ccb6c"}, 0xea5, 0x1, 0x100000000}, @in6={0xa, 0x4e20, 0x1, @empty, 0x6050ccc3}}}, 0x118) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000006c0)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000700)={0x0, r6}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001940)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000001980)={0x1d, r7}, 0x10) bind$can_raw(r1, &(0x7f0000000000)={0x1d}, 0x10) 05:10:38 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x600210) pread64(r0, &(0x7f00000002c0)=""/65, 0x41, 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000161000)=[{&(0x7f0000d33000)="f5", 0x1}], 0x1, 0x0) 05:10:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x10db}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000e80200000003e807000000000000e4ff0000000000000095f8ff0000000000d38dd3c930b84fdd261a85c3ea7c046d333a894543bf115b03f49a29d2ee736e78953c3551221a37db19ab7eaf5fbf3f62bfe9a56811cecafbddce5825ae8627288ec91f0ece3a5613170021a767c46d6c75397e3eedacf517b4191f87775e4e7cfbc7c0"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000001c0)=ANY=[]) socketpair$inet6(0xa, 0xa, 0x7fffffff, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000180)="13c202d7296fe40993d97c31b54574e195cba7bbac890f4c63a94e243ad9206930ef8b477fb899ba99769e5c0714461b9b3e59ac283d3a4db17736b1b035ae6547bb3a6514a3f8a3464643316336a646dfd71727f71c59990544a7fde08364bad5d10adb840fdd30c247bbc369a33421452a75c71bdc8d1dd5bab8492097fff9bfd094e53c84bdb8306d14e9dbafa07f5ba8c25ba0c8240e08db7410d1d02181", &(0x7f00000002c0)=""/232}, 0x18) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0x3, 0x4) 05:10:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5, 0x10000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000022000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000043) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="656766660f388217c4e10a2af7660f7cf1c744240000400000c7442402a6e90000c7442406000000000f011c24c4e1fb1151b9c4c27d1c491a26836ad0003e0fc71c1fc4e27d20fbf289e9", 0x4b}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:10:38 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) writev(r1, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000140)=""/184, 0xb8) close(r0) 05:10:38 executing program 4 (fault-call:2 fault-nth:17): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:38 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000d002000030700293e9fed035a12530000000000000000000000180000001400110065727370616e300000000000000000000000000000000000"], 0x3c}, 0x1}, 0x0) 05:10:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmsg(r0, &(0x7f0000000c00)={&(0x7f0000000440)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000004c0)="31c63b76f665dc1172d9bb3de4dbbe840d6e709e2230df7348a46baaf04dc4119baf2a6b0befb1d6c6790f30dd09488a526e36b90bc16d87a994b73331751a99bb40bca58f94a663e44810a02cf6f4d30a7db8282ab4931fa3a3f29dec432ca34939651926550aa3242758960ffa49e8d4c2f1412839e310ded21304a1120eeadfa785a99b5fc26bfdfb0a8aa437a686cb8a0d8ed06cf60c149f6279e70dec27bc81c48cd0b5b45a9cb0634a46199a8f6adc0615810c2ff874f4552999f40652c2d88becc4c068b61643d16286195e53983f154c40ed274663f0e21ecfa47e5f7d7778f041", 0xe5}, {&(0x7f0000000680)="38404fcb22708d7fd9fbdcc8aa28b337e8cc5d5b267ef9bbd9af17ba03cd9cd993ffe3da965ca458895e050c9b418f904be1c3b6deaccaee0fc75a2241bbb447ca0ce3cc5204b57c5564628412d980dff9c61b02072596605c632aacf1e6621aea4986efd6b62aca8d7c87656935e897a077b8d3a012a669f538b1b10ec0c3d1ddbdf63daebe30a41903b3d74b03518363044b2d28c328a5fe9bcbbb610d", 0x9e}, {&(0x7f0000000740)="4d45d8d67c9a9a58495649f436c5b8f3dcdc5baaa236a33c30d878468b7270fc162ad8585e6ab964ea5deb6a6fb5b5373ffa859371ab105aa6bdde3c727a026b8cef8d48ffdd462a1026da6a6f486fcf9131fb27026e01a0989d8b4fd25bfcbeb17f2261278d9579d7a326fdfa9706ffb6e8910e94fc71331282eff038e1ad1adaa828f2567145cf139c3dce56641121780b8c", 0x93}, {&(0x7f00000005c0)="a8f7d6d526869a87e0599976e571ff0dfe86cff03d9ec6f8cb64d98a560a90d65605971da701e7", 0x27}, {&(0x7f0000000800)="a1bf9fe8544707fa0d0645d6c14c4b767f05c9df017c71f14a0ffc54b7fe5ccf11f90a7a33f5b87bd02b7663a94fd43f9f361a8129a02efb83413fc92e1fe23bb42849dd137c0b310bb2f76cd284c7237b343ce2fc0b07f2b534148a13ee84cb6b1cd824ecfcd6992a7746ad91a0713f058f9fb91d7644a1975cae23c20490c4bf585b66521ca26bf5f92e69ae1f65ab5e13495f0392ea12eb3109b8ac8305ce", 0xa0}, {&(0x7f00000008c0)="cc8d3c85cb3914876b22ab1a203f5108d350e29b49347abc355967b2cdb04c609b664bdc54ae96019def8905724511a58ecffe518b4a789792eb28299316cdc737bbdcee2941074a6f153cd3da75079ffc67c78fcfb27de64c68b58f08536a9c1ad9212c0063d6de92fa70ac1070d88a8bfc447bc500b6e7b65c91c51ae7501204acba98d91649d36e0160533feb5f5ddbce3012a2826ae0f3d185ea0b88866942fe4d7ba5e477d8a6a24d40f9621aaeee65df1ba2a19268162218c36b2a3d657ec3d1d2c232bc43b09bf07c236d630c9391f88d0e7d0320aff8", 0xda}, {&(0x7f00000009c0)="603411e24d96f7cb357545b15f61fa0e07e248235da7947adfcb11f495fa25102c113fac5821357f2c856a358752ade349bec1e7b72837dfbb6f754460e369368c903b6733aba840060298641a20c3d66782e78b5b21f9bd8865093dbf7b2cfb8075b09d941c17fe2ed27589be6d55977102e65ff932e3df5c2ae19fe8fb650f2ed733b81f1fc8ee1d642b54897265b0260e532085abe7b6297296e96182eb", 0x9f}, {&(0x7f0000000a80)="bd8ab233b3ee9aec0bd0c984f32be7292b08c81d904ee240d1ed1ffaf59ce8339885d6424ccd3d1028515a1e92977eb56f6110bf4d8e24d1aa7b9580a88a0ae09b22b99643ace616afa8d83ed86e633aea2f06457f3f43c40c42b89768994c4c34676d86c687b008dfa97a83594733de006a2b64763625c6b8b7857a8d81dc4abc0a920071239faceb7e0960687f", 0x8e}, {&(0x7f0000000600)="a7457c8e552d3c71e2b97ebf9b4132aeb5da9a0ba4240e78e5e6bcf2f183da759220db215022ede19e5e4687dc25539b27db42", 0x33}], 0x9, &(0x7f0000000ec0)=[{0x10, 0x10f, 0x4}, {0x30, 0x115, 0x8001, "037f416af05b657cddb3ec35b8af1870b24dc29316854e80e007"}, {0xc0, 0x119, 0x4, "f0243360736fef86d1883c64c07434d8ea875ded9f631981310579e565a363b5ac1dbefef7f34084fa7f7823471c5d3436c8775d3b38813d0adc9cf08d0e9ec2d322a0d2200c7ceae1798f87a8890e8ff0559a7ab925adb6dabe72e7cc975e34cf9d884b8afc34b2ff1819590ddfb1baf8bbd838ab92433bb6d8293272c09c4b094353bc656aad29b2f2db093d905d28c8ce7b3f656af9f8e08dc6413f53942b792bea17710dc43f5f28ef6f2e"}, {0x1010, 0x10f, 0xff800, "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"}, {0x30, 0x109, 0x7ff, "cb8514c9073d74077058499fdf10173951ec836f6f99cefc4db6927bd1b2"}, {0x30, 0x117, 0x2, "7896d8e5b0091a5953253a814463f8f43dcbd99923053780b1"}, {0xd8, 0x119, 0x10000, "9daf8e92195a779ddd5f28a14404e73c81cc812345b7d6fc5a8d4c8a399030dd8452b1395ca27dc86b4863f9b0aef51d6354ed48a6d311b658eb984b7e94420660470d5e0ba9d93b7f92d99e9abebd80ef220f84be4304949d72152e9e87ac04e430397822d71e76d14ed07934bc805661000ffd9f16c7dafcc88ac28f3029014b69c03b73140b2bf2e3b0184145f90baedf89b25a4fa3bb3c2a0e2e23718fcf673c210d9652365cbd0908e0eebfc77a19aa119a614356be868731d93e3383415c896f6062"}, {0xa0, 0x108, 0xe1, "4d994563271d3853b142799cab33b0b11411ab0c50223a04f00052b5a9f58089b5b6c0bf1e21dc3e9f4542be2e93c654c53a49207d3847daf764867d17f7c73f32ccae1299c6cfd371d83d0d8795c1b37ebe379ff95a067746dfcc1b614171b824d852b4d5254f9a71076a9dbee4819a785c66e69a94323046a85109af59f22099ed3d5addb7196ce647fe0e0a"}, {0x98, 0x0, 0x1f, "843e9764d99c00d7dfafebfb3e67a32ca19a860044190e54d17d86214b36e53ed3831ad55dcbc26bed8462e942d017803b716a8cc1d677adf9cb23c3484325b8587897e884e6db06c2cf57f3c30b8b7617cbd6ea6c78caed57ff828b1818124b0339d869ad91fdc0d2c3dbe1a8cc9679452e356a6ac83a6004794e70c04a92de55bb4ce4244d6e87"}], 0x1380}, 0x20004010) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x3db}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e20, 0x74c, @remote={0xfe, 0x80, [], 0xbb}, 0xfff}}, 0x100000000, 0x9, 0x20, 0x7}, &(0x7f0000000240)=0x98) sendmsg$alg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="21000001006aa5ccde6f8c7989b289bb095a65b1cfe5d8d9b1d8be8c310b579483ddd07090103cfb3ba7979e1d0417defec0447ae208800e703cc9bb1be50602cd00ae5268d06c521a59eadbf341501fde3677fdb193b3fc29195fdbb28cf0372ce0023086d3d03bd39a54ec596e2fcd054062f227a4f5672b8b3896a012ec2c0576b9a8ea94d3d785fbde287758638dbb5de517d66c0000000000000000000000", 0x9f}], 0x10000000000002ce, &(0x7f0000000540), 0xfffffffffffffedc, 0x10}, 0x8001) recvfrom(r2, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc={0x10}, 0x709000) listen(r0, 0x7ff) [ 217.078671] FAULT_INJECTION: forcing a failure. [ 217.078671] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.090639] CPU: 1 PID: 14059 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 217.098004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.107362] Call Trace: [ 217.109961] dump_stack+0x1c9/0x2b4 [ 217.113598] ? dump_stack_print_info.cold.2+0x52/0x52 [ 217.118800] ? find_held_lock+0x36/0x1c0 [ 217.122873] should_fail.cold.4+0xa/0x1a [ 217.126932] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 217.132041] ? kasan_check_read+0x11/0x20 [ 217.136182] ? rcu_is_watching+0x8c/0x150 [ 217.140318] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 217.144721] ? find_held_lock+0x36/0x1c0 [ 217.148790] ? check_same_owner+0x340/0x340 [ 217.153102] ? rcu_note_context_switch+0x730/0x730 [ 217.158040] __alloc_pages_nodemask+0x36e/0xdb0 [ 217.162698] ? default_file_splice_read+0x1da/0xb10 [ 217.167699] ? do_splice_to+0x12e/0x190 [ 217.171662] ? splice_direct_to_actor+0x270/0x8f0 [ 217.176493] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 217.181510] ? rcu_pm_notify+0xc0/0xc0 [ 217.185388] ? __kmalloc_node+0x33/0x70 [ 217.189355] ? __kmalloc_node+0x33/0x70 [ 217.193319] ? rcu_read_lock_sched_held+0x108/0x120 [ 217.198328] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 217.203857] alloc_pages_current+0x10c/0x210 [ 217.208254] push_pipe+0x400/0x7a0 [ 217.211778] ? __kmalloc_node+0x47/0x70 [ 217.215775] iov_iter_get_pages_alloc+0x866/0x1530 [ 217.220704] ? iov_iter_fault_in_readable+0x460/0x460 [ 217.225881] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 217.230284] ? is_bpf_text_address+0xd7/0x170 [ 217.234767] ? kernel_text_address+0x79/0xf0 [ 217.239165] ? __kernel_text_address+0xd/0x40 [ 217.243662] ? unwind_get_return_address+0x61/0xa0 [ 217.248582] ? __save_stack_trace+0x8d/0xf0 [ 217.252904] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 217.257915] ? iov_iter_pipe+0xc2/0x2f0 [ 217.261881] default_file_splice_read+0x1da/0xb10 [ 217.266712] ? do_splice_direct+0x2d4/0x420 [ 217.271034] ? do_sendfile+0x623/0xe20 [ 217.274906] ? __x64_sys_sendfile64+0x15d/0x250 [ 217.279563] ? do_syscall_64+0x1b9/0x820 [ 217.283619] ? iter_file_splice_write+0x1010/0x1010 [ 217.288627] ? kasan_check_read+0x11/0x20 [ 217.292762] ? rcu_is_watching+0x8c/0x150 [ 217.296894] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 217.301292] ? __lockdep_init_map+0x105/0x590 [ 217.305777] ? lockdep_init_map+0x9/0x10 [ 217.309826] ? __mutex_init+0x1f7/0x290 [ 217.313786] ? rcu_pm_notify+0xc0/0xc0 [ 217.317664] ? __ia32_sys_membarrier+0x150/0x150 [ 217.322410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 217.327933] ? fsnotify+0xbb4/0x14e0 [ 217.331641] ? init_wait_entry+0x1c0/0x1c0 [ 217.335861] ? fsnotify_first_mark+0x350/0x350 [ 217.340440] ? fsnotify+0x14e0/0x14e0 [ 217.344240] ? security_file_permission+0x1c6/0x240 [ 217.349245] ? rw_verify_area+0x118/0x360 [ 217.353379] ? iter_file_splice_write+0x1010/0x1010 [ 217.358382] do_splice_to+0x12e/0x190 [ 217.362173] splice_direct_to_actor+0x270/0x8f0 [ 217.366832] ? pipe_to_sendpage+0x400/0x400 [ 217.371145] ? do_splice_to+0x190/0x190 [ 217.375108] ? rw_verify_area+0x118/0x360 [ 217.379247] do_splice_direct+0x2d4/0x420 [ 217.383384] ? splice_direct_to_actor+0x8f0/0x8f0 [ 217.388218] ? rw_verify_area+0x118/0x360 [ 217.392352] do_sendfile+0x623/0xe20 [ 217.396060] ? do_compat_pwritev64+0x1c0/0x1c0 [ 217.400636] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 217.406161] ? _copy_from_user+0xdf/0x150 [ 217.410300] __x64_sys_sendfile64+0x15d/0x250 [ 217.414787] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 217.419356] ? do_syscall_64+0x9a/0x820 [ 217.423324] do_syscall_64+0x1b9/0x820 [ 217.427196] ? finish_task_switch+0x1d3/0x870 [ 217.431682] ? syscall_return_slowpath+0x5e0/0x5e0 [ 217.436598] ? syscall_return_slowpath+0x31d/0x5e0 [ 217.441524] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 217.446877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 217.451713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.456885] RIP: 0033:0x455ab9 [ 217.460058] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:10:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000028c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003940)="48107936edbbc8470fd3bd7d3faf24211f88c05f85353b1bcef5de3280f2687c2620032770501ef8a908213c16f3b17383193cefab9cd87a0e4958fa53ac2576bdf6e4aa2b73a8ae9ddad19092065a07a0df23aa43a96ad5163f8c10c3516fff9e65261d4d15fc36fc66a9b264b3bed5", 0x70}], 0x1, &(0x7f0000000640)}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000005a80)=""/4096, 0x20005e83}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 217.479393] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 217.487087] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 217.494345] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 217.501602] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 217.508858] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 217.516112] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000011 05:10:38 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="020226bd7000fbdbdf250d00000024000100080004004e21000008000200df000000080002000000000008000900420000000800060006000000080006004ccff667"], 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x7}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r5, 0x1, 0x3, 0x3f, 0x1ff, 0x5}, 0x14) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0xe3738170903add) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000340)={0x3003}) sendmmsg(r3, &(0x7f0000000000), 0x4000000000000fe, 0x0) 05:10:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x200) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0b008000e40064b835594ffbb3bc5c"], &(0x7f0000000180)=0x13) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x3}, 0x8) getsockname$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$unix(r1, &(0x7f0000001500)={&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000002c0)="6a84dd2765e0fc1f473b1ada1323b342cb130011a4a5fb9d90137784ba7d240b410e017bc1a4ed729b8a91695fa21a5c60d76291e5047e38c0f183ac6fa5b8a99446074c2628122601b84ae4ab3e9da44c18dc222b8c9416e54aa8b825c217a08e7a3eaf5cce184ed794be9c4842a8eb7ac44c9a4788a9366086314c92de4b653dbdde67af5e68a1306692a583554d27837abf8b490b1ab6e7a2a3c73299a8aea2f8ced392f4b66593dbcbbb5fce7282b05b9babd59fbbbf2236d366beedc7a5cfaf9a22a4bf7635c5f190745366d34313b8cf8a8209a57905f405600600e2280c6ce143628cd965381761b9d6837216046787080f5d", 0xf6}, {&(0x7f00000003c0)="3bd1ce15dcc88747760568babd817d23993f6fcd9246647e5fa552c0b55bbcbfc0f787ddd0955b037665b3db241111b0ded49809204726f8ae7cb2438704e35858ddb975a1585c9c51bf377ad9876fcde12110126439fd52226514ac60625be5686c9ac0a4f842f005d306b9b1567c0dc5eec6af4c216e765798c5b3a3edd1eb4415544ae2bb3ad859c4cae804c02bdd1c8ae6a0948d52c140", 0x99}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="7c5a9d0360b945500e315547dc2d6783007d94e4ffa806cdbede6a6aed8e91dbc903a40f07c8826d0b0ac6345698f1cd3f3e1a", 0x33}], 0x4, 0x0, 0x0, 0x80}, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f00000015c0)='./file0\x00') perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0xa000003ff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000001540)={'filter\x00', 0x4}, 0x68) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000001600)={{0xff, 0x5}, 'port0\x00', 0x5, 0xa, 0x5, 0x9237, 0x10000, 0xbed, 0x5, 0x0, 0x6, 0x3}) 05:10:38 executing program 4 (fault-call:2 fault-nth:18): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:38 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents64(r0, &(0x7f0000000100)=""/81, 0x4a) getdents(r0, &(0x7f0000000500)=""/4096, 0x1000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000001500)=""/4096) [ 217.702612] xprt_adjust_timeout: rq_timeout = 0! [ 217.743412] xprt_adjust_timeout: rq_timeout = 0! [ 217.755765] FAULT_INJECTION: forcing a failure. [ 217.755765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.767720] CPU: 1 PID: 14093 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 217.775076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.784424] Call Trace: [ 217.787014] dump_stack+0x1c9/0x2b4 [ 217.790645] ? dump_stack_print_info.cold.2+0x52/0x52 [ 217.795846] ? zap_class+0x740/0x740 [ 217.799577] should_fail.cold.4+0xa/0x1a [ 217.803650] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 217.808756] ? rcu_is_watching+0x8c/0x150 [ 217.812902] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 217.817317] ? find_held_lock+0x36/0x1c0 [ 217.821398] ? check_same_owner+0x340/0x340 [ 217.825721] ? rcu_note_context_switch+0x730/0x730 [ 217.830663] __alloc_pages_nodemask+0x36e/0xdb0 [ 217.835336] ? default_file_splice_read+0x1da/0xb10 [ 217.840353] ? do_splice_to+0x12e/0x190 [ 217.844326] ? splice_direct_to_actor+0x270/0x8f0 [ 217.849171] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 217.854201] ? rcu_pm_notify+0xc0/0xc0 [ 217.858093] ? __kmalloc_node+0x33/0x70 [ 217.862072] ? __kmalloc_node+0x33/0x70 [ 217.866055] ? rcu_read_lock_sched_held+0x108/0x120 [ 217.871080] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 217.876631] alloc_pages_current+0x10c/0x210 [ 217.881048] push_pipe+0x400/0x7a0 [ 217.884598] ? __kmalloc_node+0x47/0x70 [ 217.888594] iov_iter_get_pages_alloc+0x866/0x1530 05:10:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x3, 0x7f, 0x40, 0x30, r0, 0x3fa9}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x37}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 05:10:39 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x19) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) [ 217.893541] ? iov_iter_fault_in_readable+0x460/0x460 [ 217.898733] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 217.903157] ? is_bpf_text_address+0xd7/0x170 [ 217.907659] ? kernel_text_address+0x79/0xf0 [ 217.912073] ? __kernel_text_address+0xd/0x40 [ 217.916568] ? unwind_get_return_address+0x61/0xa0 [ 217.921508] ? __save_stack_trace+0x8d/0xf0 [ 217.925855] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 217.930879] ? iov_iter_pipe+0xc2/0x2f0 [ 217.934868] default_file_splice_read+0x1da/0xb10 [ 217.939715] ? do_splice_direct+0x2d4/0x420 05:10:39 executing program 0: prctl$intptr(0xf, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x41) ioctl(r0, 0x6, &(0x7f0000000040)="429867f1a7545a936e5625a31eb967708950bd5f73bef2946787991de8be8bdc8cfd4ae291") [ 217.944039] ? do_sendfile+0x623/0xe20 [ 217.947931] ? __x64_sys_sendfile64+0x15d/0x250 [ 217.952603] ? do_syscall_64+0x1b9/0x820 [ 217.956684] ? iter_file_splice_write+0x1010/0x1010 [ 217.961709] ? rcu_is_watching+0x8c/0x150 [ 217.965861] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 217.970284] ? __lockdep_init_map+0x105/0x590 [ 217.974786] ? lockdep_init_map+0x9/0x10 [ 217.978851] ? __mutex_init+0x1f7/0x290 [ 217.982821] ? rcu_pm_notify+0xc0/0xc0 [ 217.986712] ? __ia32_sys_membarrier+0x150/0x150 [ 217.991473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 217.997011] ? fsnotify+0xbb4/0x14e0 [ 218.000739] ? init_wait_entry+0x1c0/0x1c0 [ 218.004983] ? fsnotify_first_mark+0x350/0x350 [ 218.009570] ? fsnotify+0x14e0/0x14e0 [ 218.013390] ? security_file_permission+0x1c6/0x240 [ 218.018414] ? rw_verify_area+0x118/0x360 [ 218.022575] ? iter_file_splice_write+0x1010/0x1010 [ 218.027601] do_splice_to+0x12e/0x190 [ 218.031412] splice_direct_to_actor+0x270/0x8f0 [ 218.036092] ? pipe_to_sendpage+0x400/0x400 [ 218.040424] ? do_splice_to+0x190/0x190 [ 218.044405] ? rw_verify_area+0x118/0x360 [ 218.048561] do_splice_direct+0x2d4/0x420 [ 218.052716] ? splice_direct_to_actor+0x8f0/0x8f0 [ 218.057570] ? rw_verify_area+0x118/0x360 [ 218.061728] do_sendfile+0x623/0xe20 [ 218.065458] ? do_compat_pwritev64+0x1c0/0x1c0 [ 218.070055] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 218.075597] ? _copy_from_user+0xdf/0x150 [ 218.079753] __x64_sys_sendfile64+0x15d/0x250 [ 218.084255] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 218.088845] ? do_syscall_64+0x9a/0x820 [ 218.092830] do_syscall_64+0x1b9/0x820 [ 218.096722] ? syscall_slow_exit_work+0x500/0x500 [ 218.101573] ? syscall_return_slowpath+0x5e0/0x5e0 [ 218.106508] ? syscall_return_slowpath+0x31d/0x5e0 [ 218.111450] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 218.116822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.121676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.126866] RIP: 0033:0x455ab9 [ 218.130051] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 218.149471] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 218.157181] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 218.164445] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 218.171711] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 218.178978] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 218.186244] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000012 05:10:39 executing program 3: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x32031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/34) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) 05:10:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000180)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4, &(0x7f0000001580)=""/231, 0xe7, 0x1000}, 0x10000) r3 = accept4(r0, &(0x7f0000001680)=@xdp, &(0x7f0000001700)=0x80, 0x80000) bind$xdp(r1, &(0x7f0000001740)={0x2c, 0xa38e68104318081f, r2, 0xf, r3}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) write$P9_RVERSION(r1, &(0x7f0000001780)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.u'}, 0x15) fstat(0xffffffffffffffff, &(0x7f00000000c0)) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) 05:10:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000000)=0x369) 05:10:39 executing program 0: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[]}, 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x21}, &(0x7f00000001c0)=0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0), 0x1000) ioctl(r0, 0x2c260410c, &(0x7f0000000280)="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") recvmsg(r0, &(0x7f0000002800)={&(0x7f00000000c0)=@in={0x0, 0x0, @loopback}, 0x80, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/212, 0xd4}, {&(0x7f0000000040)}, {&(0x7f00000014c0)=""/100, 0x64}, {&(0x7f0000001540)=""/26, 0x1a}, {&(0x7f0000001580)=""/184, 0xb8}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001740)=""/17, 0x11}], 0x7, &(0x7f0000001800)=""/4096, 0x1000, 0x2}, 0x100) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x7fff, 0x4) 05:10:39 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x406, r0) msgget$private(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x37, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 05:10:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000000008912, &(0x7f0000000280)="024a903d6d345f8f762070") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x803, 0x6) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x80000000000001d}, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)="53859de2", 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0x48) 05:10:39 executing program 4 (fault-call:2 fault-nth:19): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:39 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/106, 0x6a}, 0x4bd7cdf5e6adf469) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x648100) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x7, 0x9, 0x6, 0x7fff, 0x7fffffff}, 0x14) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x14a4, {{0xa, 0x4e24, 0x2, @empty, 0x8000}}}, 0x88) r2 = getgid() setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xe50, 0x4) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xfffffffffffffffe, 0x800) renameat2(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x2) prctl$setmm(0x23, 0x1, &(0x7f0000ffc000/0x4000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) [ 218.721408] FAULT_INJECTION: forcing a failure. [ 218.721408] name failslab, interval 1, probability 0, space 0, times 0 [ 218.732720] CPU: 0 PID: 14128 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 218.740084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.749427] Call Trace: [ 218.752014] dump_stack+0x1c9/0x2b4 [ 218.755637] ? dump_stack_print_info.cold.2+0x52/0x52 [ 218.760815] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 218.765217] should_fail.cold.4+0xa/0x1a [ 218.769267] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 218.774363] ? kasan_check_read+0x11/0x20 [ 218.778496] ? rcu_is_watching+0x8c/0x150 [ 218.782635] ? find_held_lock+0x36/0x1c0 [ 218.786705] ? check_same_owner+0x340/0x340 [ 218.791030] ? rcu_note_context_switch+0x730/0x730 [ 218.795947] __should_failslab+0x124/0x180 [ 218.800167] should_failslab+0x9/0x14 [ 218.803952] __kmalloc+0x2c8/0x760 [ 218.807477] ? __kmalloc_node+0x33/0x70 [ 218.811435] ? __kmalloc_node+0x33/0x70 [ 218.815398] ? rw_copy_check_uvector+0x361/0x3e0 [ 218.820138] ? rcu_read_lock_sched_held+0x108/0x120 [ 218.825141] rw_copy_check_uvector+0x361/0x3e0 [ 218.829718] import_iovec+0xcf/0x470 [ 218.833421] ? dup_iter+0x270/0x270 [ 218.837040] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 218.842560] ? iov_iter_get_pages_alloc+0x3ab/0x1530 [ 218.847651] vfs_readv+0xf5/0x1c0 [ 218.851093] ? compat_rw_copy_check_uvector+0x440/0x440 [ 218.856444] ? is_bpf_text_address+0xd7/0x170 [ 218.860929] ? kernel_text_address+0x79/0xf0 [ 218.865322] ? __kernel_text_address+0xd/0x40 [ 218.869803] ? unwind_get_return_address+0x61/0xa0 [ 218.874725] ? __save_stack_trace+0x8d/0xf0 [ 218.879046] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 218.884056] default_file_splice_read+0x526/0xb10 [ 218.888884] ? do_splice_direct+0x2d4/0x420 [ 218.893187] ? do_sendfile+0x623/0xe20 [ 218.897060] ? __x64_sys_sendfile64+0x15d/0x250 [ 218.901719] ? do_syscall_64+0x1b9/0x820 [ 218.905772] ? iter_file_splice_write+0x1010/0x1010 [ 218.910775] ? rcu_is_watching+0x8c/0x150 [ 218.914907] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 218.919308] ? lockdep_init_map+0x9/0x10 [ 218.923359] ? __mutex_init+0x1f7/0x290 [ 218.927314] ? rcu_pm_notify+0xc0/0xc0 [ 218.931188] ? __ia32_sys_membarrier+0x150/0x150 [ 218.935931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.941453] ? fsnotify+0xbb4/0x14e0 [ 218.945177] ? rw_verify_area+0x118/0x360 [ 218.949315] ? iter_file_splice_write+0x1010/0x1010 [ 218.954330] do_splice_to+0x12e/0x190 [ 218.958120] splice_direct_to_actor+0x270/0x8f0 [ 218.962777] ? pipe_to_sendpage+0x400/0x400 [ 218.967086] ? do_splice_to+0x190/0x190 [ 218.971047] ? rw_verify_area+0x118/0x360 [ 218.975181] do_splice_direct+0x2d4/0x420 [ 218.979321] ? splice_direct_to_actor+0x8f0/0x8f0 [ 218.984152] ? rw_verify_area+0x118/0x360 [ 218.988288] do_sendfile+0x623/0xe20 [ 218.991992] ? do_compat_pwritev64+0x1c0/0x1c0 [ 218.996567] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 219.002091] ? _copy_from_user+0xdf/0x150 [ 219.006225] __x64_sys_sendfile64+0x15d/0x250 [ 219.010712] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 219.015278] ? do_syscall_64+0x9a/0x820 [ 219.019240] do_syscall_64+0x1b9/0x820 [ 219.023110] ? finish_task_switch+0x1d3/0x870 [ 219.027594] ? syscall_return_slowpath+0x5e0/0x5e0 [ 219.032512] ? syscall_return_slowpath+0x31d/0x5e0 [ 219.037431] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 219.042787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 219.047621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.052792] RIP: 0033:0x455ab9 [ 219.055959] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.075250] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 219.082945] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 219.090199] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 219.097449] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 219.104700] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 219.111952] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000013 05:10:40 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x1, @empty, 0x4e21, 0x3, 'nq\x00', 0x1a, 0xddf, 0x1d}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001440)={{{@in, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000001540)=0xe8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r2, 0x8d, "c2e5dc", "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"}}, 0x110) getpeername$inet(r0, &(0x7f00000000c0)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x4, 'veth1_to_team\x00'}, 0xfffffffffffffcee) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80, 0xffffffff}, 0x7}, 0x20, 0x0, 0x0) ioctl(r1, 0x800000000008982, &(0x7f0000000000)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000400)={0x0, r0}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000440)=""/4096) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x3f) 05:10:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="025cc83d6d345f8f762070") sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x1d}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[]}, 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) recvfrom$inet6(r0, &(0x7f0000000180)=""/191, 0xbf, 0x40002100, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x15}, 0x5}, 0x1c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000140)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000300)="314605386616e57f1683baa6bb7f443ffe29ad3c13eea25a159e3da6fa290351f17b", 0x22}], 0x1, &(0x7f00000017c0)}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:10:40 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x280000, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') sendmsg$key(r0, &(0x7f0000f56000)={0x200000000000000, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="020400000300000000000000000000000100170000000000e7f99ce5b3f7c7e2578e88de55b91e34967a781c34b3aca2193cba54d55a90e6510b529de4bb76d74f43b0fef852ffbb3027847037747198c9b57d49dcebd91a6d0096ebb480f5342491a1a1773cd244430db6c2a359fe22f9017b02eff23f2313d65479a2"], 0x18}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) getsockname$inet(r2, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)={0x303, 0x33}, 0x4) 05:10:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[], 0x0) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r4, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c607c93d6d345f40000070") r6 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000006000)) 05:10:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = dup2(r0, r0) sendmsg$alg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="cac4c84038c9ad4e60d7bcb72e31fb855d8854a07571eb0050ca480375e33817ecd9e93f7c8ef60e85ce9e4ecfd38903562f3957006b4112c9f8bbf6b9903aa48d0ebe31d2c54ccab9b82d986ec98c10c1b2356751e95b4c61", 0x59}, {&(0x7f0000000300)="4cfb35e68d958c57a410f4a87e7fbf53cc32e5ee88b825bb79773070654023683430ebe881c7256e63ea6dede058ec3b57ed5e1e1bda74f3bb5186c3eac9094668f26b6386773d73a0b11e9802d761601e1f271042cbeff77b03ffed9a2145a253e8a25972ab59b721c58b7f54a8b6e109a1500dc6e9d860c1bf3317ad141d88aa5395c5f0b5bdf789b8a910ebbb9cc21810a91c1c0cc5ef5dfb316cbbcf299a5943512f5a2af9cf959b", 0xaa}, {&(0x7f00000003c0)="79e450b55ca3fe231c75ecdd248ac121cb96b3997f2486ec524bb9af81bb50f77916e071cda4e7fad6a284710623b1803e5085156d8e5e1bb3dadd7406000b14db3e37d09958ce5a23eeed6f0bd766dee6ddd6e4cbf7c8d03ce1b92c88a965991d168e8d7b055083faddf40c610d277be8f8d1d49ac4422032f042d25bbeab5eb093dbc5d619f0030f1782b5f1c6e11b61872cc2d488fd25ad0819747d7c4e31dfc6fe0055f7559323c8ddf8e1178f32bf2fc3de6c1220f223759363684d5ad719b18465e45bd9e6b8ed08e4ae4ff861cb23683b97244c52ead28afb9a8db6780227b8e022", 0xe5}, {&(0x7f00000004c0)="97082817ae7b897eeb4aebb15b7a83e3e9597f874b800d86494c6bfea118b178c3ef8db4a446214354afb9c434acf3efd2e08192c1ae9ee27d2c8cec1355e252393e1ae747e1c4735b4b47f0490048eeec416f64ab5b569116439f393621540c48ea9ccc295194b3442fa54cffb71b352824e7b72da7d485b43fbd998e12fcf34d2ec5355aa2f99565e9e75f91035f3e686fd3c63488ef033500b69620a46d4e4576612a9ad3c600be28a84fd27e675394901ed5", 0xb4}, {&(0x7f0000000580)="b713abd519b4c4309d140de6603d81c566d79b9347704afb8bdde329af1f8209d5c00eb27e828f105201a9aa49300cda98bdc0173d19b995d0445baddd5c6bce1c3cd9b9b85fc029f543672d5ec6454d2150a1420b6e21d38d5f3a0f459cb8609a2281c3ab4cd07aa19425b54876034e80fa206a920e5189ba0aea6e4945d669d1a198fc669aced5", 0x88}, {&(0x7f0000000640)="b6", 0x1}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18, 0x81}, 0x4000001) r2 = accept$alg(r0, 0x0, 0x0) r3 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x1, 0x73e0) sendmmsg$alg(0xffffffffffffff9c, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="0047ce3f8e482ad78745cda90aa9992b6dd7dd6115c9e94960604ca6931999131c2b9d5e5907b0d0f87a534214b0c1c92c25d1b9554e14505f7f096917863f7951", 0x41}, {&(0x7f0000000080)="f80f3a43688aad9f45342e402d9ba26de4c0182695bb908263f7ad74a6d4d698300fc68fed3e0089c1fcaa1cdb34f60f8e6328c04266bb6d77de14272cec7d0cf400cb1333c7", 0x46}, {&(0x7f0000000180)="d156d72c1763204208f0445f7b5d8af62d33d64ccec084b51bab01dc0ca1233acbf745ea7aa4c399526102423862f18300c6423900f6beb86bd33f3d627b8691af8a17e0b02f777d573572c0328aab778ca864c93fe0e3f6964cd4bd651dd4d07a58bb0ac0555fbc622db351c79b8e3143", 0x71}], 0x3, 0x0, 0x0, 0x4014}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000780)={0x0, 0xeb}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000800)={r4, 0x101}, 0x8) sendfile(r2, r3, &(0x7f00007ed000)=0x1000000000006, 0x2000) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x3f) 05:10:40 executing program 4 (fault-call:2 fault-nth:20): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:40 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x400000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x3, 0x1, 0x100000000, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 05:10:40 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) ioctl$int_out(r0, 0xc1004111, &(0x7f0000000040)) 05:10:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x47, 0xfffffffffffffffa}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x280080, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)={0x303, 0x33}, 0x4) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000080)=')mime_type}security$\x00', 0x2) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x7f, 0x0, 0xfffffffffffffeff, 0xdfa, 0x7ff, 0x1, 0x8100000000000, 0x6, 0x6, 0x2}) socket$nl_crypto(0x10, 0x3, 0x15) [ 219.342391] *** Guest State *** [ 219.345826] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 219.354754] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 219.363624] CR3 = 0x0000000000000000 [ 219.367384] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 219.373392] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 219.379414] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 219.380969] FAULT_INJECTION: forcing a failure. [ 219.380969] name failslab, interval 1, probability 0, space 0, times 0 [ 219.386112] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 219.386133] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.386156] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.386172] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.386192] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.386208] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.397607] CPU: 0 PID: 14172 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 219.397616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.397625] Call Trace: [ 219.405603] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 219.413543] dump_stack+0x1c9/0x2b4 [ 219.413564] ? dump_stack_print_info.cold.2+0x52/0x52 [ 219.421530] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 219.429456] ? __mutex_lock+0x7e8/0x1820 [ 219.429482] should_fail.cold.4+0xa/0x1a [ 219.437438] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 219.445370] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 219.445387] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 219.452737] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 219.463543] ? graph_lock+0x170/0x170 [ 219.463561] ? is_bpf_text_address+0xd7/0x170 [ 219.466131] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 219.474067] ? find_held_lock+0x36/0x1c0 [ 219.474087] ? __lock_is_held+0xb5/0x140 [ 219.477701] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 219.482863] ? check_same_owner+0x340/0x340 [ 219.482879] ? rw_copy_check_uvector+0x361/0x3e0 [ 219.490832] Interruptibility = 00000000 ActivityState = 00000000 [ 219.494855] ? import_iovec+0xcf/0x470 [ 219.494866] ? vfs_readv+0xf5/0x1c0 [ 219.494883] ? rcu_note_context_switch+0x730/0x730 [ 219.498925] *** Host State *** [ 219.506877] ? do_splice_direct+0x2d4/0x420 [ 219.506887] ? do_sendfile+0x623/0xe20 [ 219.506904] __should_failslab+0x124/0x180 [ 219.511993] RIP = 0xffffffff811f4664 RSP = 0xffff88019b757350 [ 219.516374] should_failslab+0x9/0x14 [ 219.516393] kmem_cache_alloc_node_trace+0x26f/0x770 [ 219.524355] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 219.528122] __kmalloc_node+0x33/0x70 [ 219.528141] kvmalloc_node+0x65/0xf0 [ 219.532625] FSBase=00007fb625000700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 219.538995] seq_read+0xa47/0x1540 [ 219.539018] ? fsnotify_first_mark+0x350/0x350 [ 219.543068] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 219.547090] ? __fsnotify_parent+0xcc/0x420 [ 219.547104] ? rcu_read_lock_sched_held+0x108/0x120 [ 219.547122] ? seq_file_path+0x30/0x30 [ 219.554556] CR0=0000000080050033 CR3=00000001c9a0b000 CR4=00000000001426e0 [ 219.558844] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 219.558861] ? _copy_from_user+0xdf/0x150 [ 219.563603] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 219.569800] ? security_file_permission+0x1be/0x240 [ 219.569818] ? seq_file_path+0x30/0x30 [ 219.573690] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 219.577280] proc_reg_read+0x10a/0x190 [ 219.577299] do_iter_read+0x4a3/0x660 [ 219.582212] *** Control State *** [ 219.585385] vfs_readv+0x175/0x1c0 [ 219.585403] ? compat_rw_copy_check_uvector+0x440/0x440 [ 219.589717] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 219.593586] ? __kernel_text_address+0xd/0x40 [ 219.593605] ? unwind_get_return_address+0x61/0xa0 [ 219.597832] EntryControls=0000d1ff ExitControls=0023efff [ 219.603786] ? __save_stack_trace+0x8d/0xf0 [ 219.603813] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 219.607598] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 219.612668] default_file_splice_read+0x526/0xb10 [ 219.612686] ? do_splice_direct+0x2d4/0x420 [ 219.619071] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 219.622836] ? do_sendfile+0x623/0xe20 [ 219.622849] ? __x64_sys_sendfile64+0x15d/0x250 [ 219.622866] ? do_syscall_64+0x1b9/0x820 [ 219.626563] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 219.634333] ? iter_file_splice_write+0x1010/0x1010 [ 219.634351] ? kasan_check_read+0x11/0x20 [ 219.637878] reason=80000021 qualification=0000000000000000 [ 219.642426] ? rcu_is_watching+0x8c/0x150 [ 219.642439] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 219.642460] ? lockdep_init_map+0x9/0x10 [ 219.648322] IDTVectoring: info=00000000 errcode=00000000 [ 219.652623] ? __mutex_init+0x1f7/0x290 [ 219.652639] ? rcu_pm_notify+0xc0/0xc0 [ 219.652657] ? __ia32_sys_membarrier+0x150/0x150 [ 219.657656] TSC Offset = 0xffffff8768754526 [ 219.661515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 219.661525] ? fsnotify+0xbb4/0x14e0 [ 219.661567] ? rw_verify_area+0x118/0x360 [ 219.668546] TPR Threshold = 0x00 [ 219.674053] ? iter_file_splice_write+0x1010/0x1010 [ 219.674073] do_splice_to+0x12e/0x190 [ 219.678205] EPT pointer = 0x00000001be16a01e [ 219.684844] splice_direct_to_actor+0x270/0x8f0 [ 219.684861] ? pipe_to_sendpage+0x400/0x400 [ 219.802153] *** Guest State *** [ 219.808338] ? do_splice_to+0x190/0x190 [ 219.808359] ? rw_verify_area+0x118/0x360 [ 219.808378] do_splice_direct+0x2d4/0x420 [ 219.808399] ? splice_direct_to_actor+0x8f0/0x8f0 [ 219.808421] ? rw_verify_area+0x118/0x360 [ 219.812569] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 219.816945] do_sendfile+0x623/0xe20 [ 219.816968] ? do_compat_pwritev64+0x1c0/0x1c0 [ 219.821034] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 219.826447] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 219.826466] ? _copy_from_user+0xdf/0x150 [ 219.830426] CR3 = 0x0000000000000000 [ 219.834289] __x64_sys_sendfile64+0x15d/0x250 [ 219.834306] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 219.839046] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 219.843339] ? do_syscall_64+0x9a/0x820 [ 219.843360] do_syscall_64+0x1b9/0x820 [ 219.848880] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 219.852557] ? syscall_slow_exit_work+0x500/0x500 [ 219.852571] ? syscall_return_slowpath+0x5e0/0x5e0 [ 219.852589] ? syscall_return_slowpath+0x31d/0x5e0 [ 219.856723] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 219.860059] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 219.860078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 219.865078] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 219.868848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.868862] RIP: 0033:0x455ab9 [ 219.873266] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.877878] Code: 1d ba fb ff [ 219.882222] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.885448] c3 66 2e 0f 1f 84 [ 219.889444] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.893538] 00 00 00 00 00 66 [ 219.897714] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.902505] 90 48 89 f8 48 89 [ 219.906676] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 219.915459] f7 48 89 d6 48 89 [ 219.919192] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 219.923725] ca 4d 89 c2 4d 89 [ 219.932584] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 219.938066] c8 4c 8b 4c 24 08 [ 219.942235] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 219.945898] 0f 05 <48> 3d 01 f0 ff [ 219.950423] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 219.954950] ff 0f 83 eb b9 fb [ 219.960936] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 219.964865] ff c3 66 2e 0f 1f [ 219.968771] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 219.974695] 84 00 00 00 00 [ 219.974726] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 [ 219.979557] Interruptibility = 00000000 ActivityState = 00000000 [ 219.984442] ORIG_RAX: 0000000000000028 [ 219.984452] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 219.984460] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 219.984472] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 219.989388] *** Host State *** [ 219.996016] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 219.996025] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000014 [ 220.199185] RIP = 0xffffffff811f4664 RSP = 0xffff88019b757350 [ 220.205203] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 220.211630] FSBase=00007fb625000700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 220.219459] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 220.225373] CR0=0000000080050033 CR3=00000001c9a0b000 CR4=00000000001426e0 [ 220.232429] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 220.239149] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 220.245229] *** Control State *** [ 220.248704] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 220.255404] EntryControls=0000d1ff ExitControls=0023efff [ 220.260876] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 220.267834] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 220.274519] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 220.281135] reason=80000021 qualification=0000000000000000 [ 220.287475] IDTVectoring: info=00000000 errcode=00000000 05:10:41 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0x1, 0xd0d, 0x4, 0x100000b, 0x5}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc, &(0x7f0000000100), &(0x7f0000000040)=0x4) 05:10:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(des3_ede))\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0x3d3cf8772076e93b, 0x0) sendmsg$unix(r1, &(0x7f0000002940)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000002c0)="cc57396f428686cc04ae0289012054d6319bdedadbfc6078e82a4cc176827e8ee08bef95f988abfd7fbbf96e51eea08cc52b2b00f4b121d5eb504c0fd8c01ebb80903050a8", 0x45}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000480)="4ef0b10603cd3f2af580b09e340e5eeb1e2ab88e8c683c3828904b80b99f2bf1a681c266f821bd5e3c5b3da3b5c9f0283af40b7810fddcaa910cd43d0693651c21c2cdf6200bc1840baf364293cbf8d9e29b699e788792f29a1939606a014a1cd607865cbb0d81b9c2ab7c10d0c8305371d987ddadf943c528b676ae22d15d4b34db8a6e", 0x84}, {&(0x7f00000017c0)="65ab5970aba089c1cd74c8f075cc0e9bbbd0d8ec6a23ec12c0a8ae358cd64a371656415ab49758c25ae473fedde7dce15a708d420c26c6831ac38a53eac1705987d6260f3d3f122110922dc0bfc08de503e9b38a63b0295776166c615c6bd5845fde302e8166675e881ad4763d1380f4b49f58e433e69c7f49b09e6282a40e0e0119d8e51e7119d356e045d32d52ab4d31f5c3f94a03f96c6fcfc4d25af84af43dea6cd5e112d6e781f2b26d17bcb62cc19735a11a0271c6ed91e75213c50e9e8402be9d6fc5ddfa79c3212cd7060e4c8db16dd5b6fa497a268751e688c0e0448f788db3050e73e14e0510", 0xeb}, {&(0x7f0000000340)="2834e33e8d86f8b6b864ffb1", 0xc}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f0000000380)="1bfa1b6064e7b35c7e69c341b70f7a340e29af4a0a6ac058c7312654610562007dcc1760f0442effa7aad0df36f0a969c0a4b21757362880e4895b152b85ce", 0x3f}, {&(0x7f0000000540)="d7d3be830d2f14a485411163191460", 0xf}], 0x8, &(0x7f0000000580)=[@rights={0x28, 0x1, 0x1, [r0, r0, r1, r0, r0]}], 0x28, 0x4000005}, 0x40001) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{}, 0x0, 0x0, 0x0, 0x0, "d30991fde9118c90"}, 0x10}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000780)={&(0x7f00000003c0)=@l2, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/100, 0x64}], 0x1, &(0x7f0000000680)=""/235, 0xeb}, 0x0) 05:10:41 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xffffffff) ioctl(r0, 0x800000000000937e, &(0x7f0000000180)="01000000000000001801000004000000fc232ff41cd849832f") fcntl$dupfd(r0, 0x406, r0) 05:10:41 executing program 7: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) eventfd(0x0) unshare(0x80040400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 220.292957] TSC Offset = 0xffffff872c0dc71a [ 220.297292] TPR Threshold = 0x00 [ 220.300698] EPT pointer = 0x00000001d960201e 05:10:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000001000000000000009804eda3ab3ef81f1f346397978d1c5bbc28993093e42c171236e75095b830e4ce2e0451406ec7fca1592023416feeba40d92766e1997f2b0494134505b05307cb93934416f3e4c5b26d8025a72418ac0569c131e32252f5ebab2091fcf4d442dda56bed7b067944faf882700df62085beed3aecd785dd62057348d6b8f8629cab2a2ea652b6a5b8d76802507b700943dcca2d48b478b91ca21d9154da9e35e4c096514784f6b727259b6e7a33b7155575841298475a6e3d26609e355a03e9b5b9"], 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r2, r1) 05:10:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="64660f976833660f013b8fe978e18b7f0000000f20d1b9800000c00f3235002000000f300f011ac4e2f9249ab557b9ac670f01c8c4c3815dfc59b8060000800f23d80f21f835800000600f23f8", 0x4d}], 0x1, 0x0, &(0x7f0000000180), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000008000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x3, r3, 0x1}) 05:10:41 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback=0x7f000001, 0x0, 0x3c}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}}}, 0xe8) socket$inet6(0xa, 0xf, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa62699282810c86dd60d8652b00040600fe8000000000000000000000000000aafe8000000000000000000000000000aa000000009d29619c54bd0873c667b0bfd3d8699100775b5b1064a600c2138641989f8e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 05:10:41 executing program 7: mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x302, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 05:10:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x81, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/161}, 0x18) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x108) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x40) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x148}, 0x1}, 0x20000000) 05:10:41 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x6, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x44) dup3(r0, r0, 0x200000000080000) 05:10:41 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000040)="78a977c96dde41c5d20cc0ae09ca3e7ac897f5d6a18c9498bfbf5b3f78f4fea962e5cff2d531e4dd8bd5647d7f4ae155b44006f6c00ea149e0bc19970f5cdcdcab41aa59b0dfbd13edf1baefe5dd298cc194b011c19c598fbcd0534d1aef56fe8c083970c513e0e4843ec66c92334819d8b4c3d670f5ac693c8227a617f828ff6a1aac8a66fd97559889c6b418c146a766d29dea9b60b308330f572d6468164fff99e6a189779c99d9570b8513ad830223ae19034f07cf6c0a3ba2b03f542334afe46f0a27363307dfe01cb175485fbdb0d30cb9497350cc1c9b297bb1f545965d6fe8234e3de826", 0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) mq_notify(r0, &(0x7f0000000180)={0x0, 0x41, 0x4, @tid=r1}) 05:10:41 executing program 4 (fault-call:2 fault-nth:21): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x1d, &(0x7f0000000000), 0x4) close(r3) dup3(r1, r2, 0x0) 05:10:41 executing program 6: r0 = socket(0x3, 0x8000000806, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x3) getsockopt(r0, 0x0, 0x53, &(0x7f0000000140)=""/8, &(0x7f0000000000)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) 05:10:41 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x14) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x4001) shutdown(r1, 0xfffffffffffffffe) [ 220.586827] FAULT_INJECTION: forcing a failure. [ 220.586827] name failslab, interval 1, probability 0, space 0, times 0 [ 220.598130] CPU: 1 PID: 14228 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 220.605492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.614844] Call Trace: [ 220.617443] dump_stack+0x1c9/0x2b4 [ 220.621087] ? dump_stack_print_info.cold.2+0x52/0x52 [ 220.626289] ? lock_downgrade+0x8f0/0x8f0 [ 220.630460] should_fail.cold.4+0xa/0x1a 05:10:41 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000ff0)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) ppoll(&(0x7f0000000ff0)=[{r0}], 0x1, &(0x7f0000002ff0), &(0x7f0000001000), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) [ 220.634537] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 220.639648] ? __local_bh_enable_ip+0x161/0x230 [ 220.644331] ? _raw_spin_unlock_bh+0x30/0x40 [ 220.648747] ? release_sock+0x1ec/0x2c0 [ 220.652730] ? rcu_is_watching+0x8c/0x150 [ 220.656885] ? __local_bh_enable_ip+0x161/0x230 [ 220.661558] ? __release_sock+0x3a0/0x3a0 [ 220.665717] ? find_held_lock+0x36/0x1c0 [ 220.669807] ? check_same_owner+0x340/0x340 [ 220.674138] ? rcu_note_context_switch+0x730/0x730 [ 220.679086] __should_failslab+0x124/0x180 [ 220.683332] should_failslab+0x9/0x14 05:10:41 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, &(0x7f00000001c0)=""/105, 0x1c) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9205, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000c40)=[0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xee00]) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000d80)=0xe8) getresgid(&(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40)=0x0) fstat(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) lstat(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getgid() stat(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f00000023c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) sendmmsg$unix(r1, &(0x7f0000002b40)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)="355912cd4ffc4c6baa2e4acb90ef588678c908b0ba312246bb70ef286c19a9486ca3e7e3d9b24fbae60026424dc9d8c8c88654d933bdac1d8d2859c0eec051b079063bf3a8872d0aa44c2467e188f4a1f3a6d81e3506c4b6491c9b4c470f4e70892ce7fa9df96315dc1d1ce86a15b6c6f0bfc3934c19af0e73a393cfdae8fc85bd80eecc10663d00e6707395a7c8639459656d9b4341d39aa711c23c9adf2ea810c33a0fdc965ca4db94f50bdf22347672aa6fcc4b2d66f18dfa64b305e9", 0xbe}, {&(0x7f0000000140)="51e4f2164657dbcda1a230481e84fbd4d3d06813035fb287cafe9c99e45bd88885ffc7c26c801e6acfc07fdf9d31d41ea439eb72d668ea6a9105bf6eee3a3d2fdde1c897190aa2201942f119322d58a3cc029689c9b90c620daf5cf9cc425d2b113b3a43634a9853284586a9c33f5c9806749ac907637284827e4d3ba67fa6", 0x7f}, {&(0x7f00000002c0)="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", 0xfc}], 0x3, &(0x7f00000007c0)=[@cred={0x20, 0x1, 0x2, r0, r3, r4}, @cred={0x20, 0x1, 0x2, r0, r5, r6}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r2, r2, r1, r2]}, @rights={0x20, 0x1, 0x1, [r2, r1, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r2, r1]}, @cred={0x20, 0x1, 0x2, r0, r7, r8}], 0xd0, 0x4000}, {&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000940)="1fa7dd42ada654bc16846005829aea7e3e9504faaa5cfcb468b002983125a34738c86d91d78d49d6", 0x28}, {&(0x7f0000000980)="194e90164638af73ab1a573f5519480fad283a8f680ceee266f8868e433f9e05a393fda19ad02f689bc3f65a2bf1e67364eca9385f41c8abde373e5239ccf2da199dcd24ec68b8a8ce170c14cc7c1247a9d27b4abf0bbaf7f25d71a47201f29c0543025a4f78ddf3366bc62fefdef0a9419fc02fb6e097728d3897544107027fb3584bcf39cec22f61b2bfc07ef60340a178962d6219308d91ed90", 0x9b}, {&(0x7f0000000a40)="114fbb0b0840441d68bed82d4bc056e05dcffb10dd55d67d6704ba6eb84831d8252e03e12e727ad37e7bfd6efa1035513a1f13053ebcd7a4bd34428368a432dbb7c0ddd2423735f0080a2a2bca89ed8a56427d1aa4d87fa0a68459ba653e6f5570b949414521e4b15e72a547d92472cbf9790e819862387e9d4f3e2a071b5f0247e08ec942da24ae2979bdfb6584e0106e3a35ecfa3ca84588c367d65de07c1acb2f4395aef994cd4d1a63778d", 0xad}], 0x3, &(0x7f0000000f80)=[@cred={0x20, 0x1, 0x2, r0, r9, r10}, @cred={0x20, 0x1, 0x2, r0, r11, r12}, @cred={0x20, 0x1, 0x2, r0, r13, r14}], 0x60}, {&(0x7f0000001000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="a9913fa122011b28cb170bd403964c1356da58640187790c2b292954084d923834dc7c93ab9f0cb3217ae6603e224524edbc220bb3d6700976c2afa43ed053d4d3ca74afcab55da6b20ae866d5e30cbd1b59f599ce2d50977b2536451bcfeaa79b9b647b7076bcfc22fb0d1a35c10e5d7b8934b1476b0fdb68109f78c35b7908865e137fba8c261ba5aaf667f25cee77ebb2610dd421644f36009e611e37b3983b5adfccc0735e0542c0b7ea6926b31aaa5df58aa40ec9ea57a149529ce31008a236c1c816e9dd7da8730cfe3b363f54563338d5e6a22bd0d33c72930efa", 0xde}, {&(0x7f0000002180)="4e1700c5883b68ddb32101ee98b4056573fb1c0e0e754c4f81cc1fb32c67483363afcb87ae2402bc3352b8b2da45a4ca016b4381c4bbc3f73be118b95aa301c397d3bf26beb9fe674e7392c04ab5c51d893dbe5a548062bc4cc4e4203472873670723eb05ded", 0x66}], 0x3, &(0x7f0000002400)=[@rights={0x20, 0x1, 0x1, [r1, r1, r2, r2]}, @rights={0x28, 0x1, 0x1, [r15, r2, r2, r2, r2]}, @cred={0x20, 0x1, 0x2, r0, r16, r17}, @rights={0x30, 0x1, 0x1, [r1, r2, r2, r2, r1, r2, r2, r1]}, @cred={0x20, 0x1, 0x2, r0, r18, r19}], 0xb8, 0x4000000}, {&(0x7f00000024c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002540)="751367add33f2de1eb048ad7b085e036a53ea998885b9ba8c07f9b40caad3e252d1ddfd17564453aeeb674d65fa57b367636c43c612d595164bf56182052f25051c388444dc39aa7ae7658e1212dafd800a8f82ec30dd19bf99aecdef3d63f3774371c6805ed5d371788febb412df34a8641491b439fe4e039dd1d0b0cd548dde7d6cbc51ab69e1e180d6565e8f66f396d7c1088bcbc9ba491bc", 0x9a}, {&(0x7f0000002600)="edc2a901da17af0cbad5ab277a022902c3de9dc37310887939d439e61550ed47326075203a54d2f70576b2ad315563f52dffc033d76f2a89e1b431388ea83335ae5cfad2a4f9002e1b280f3656ffc200db6ffc2ec44cc3dc7019511c42f40d342bb7e331877b6e6e5321024f8bcf181171fae4553dacd430c4bc1dab8a5e118813e7c4348cd8777f7f2a866c7bfdf22f4ec4f7a573441ea559b0cd23ed0fb8626f13aae1a97252d24bd779a9d331de0a45889a26b3008e10f371c657da002f0bbc66d17ada6bec7af27ed0c8d6dab2a63897d802ce", 0xd5}, {&(0x7f0000002700)="4327bfebc5858b1bbe06f6f311d4c4ffa36fc301a12dfec23d3f7e5d7f4e59157c23079b0091be9a6feee24d87f2f91d1d3f2fea1d859aacdbc812e007c5de1b14f0e5c10afce13b0962d5300290faa7885167ec9c1dbf1ea14aec5a8fc8f4bbb3251a17fd63f2ff8911919972cfb16131c7df93e2eafdc012d3f11ab78c17e5a889aa27ec2912a6d1b3f7467052c3152159590ca6fd6ff1ab9bed76aecfcd3a791125ea47120838bc589c4bf56c47d3fc3be1a51be7571a10946ea00bd3ad1f7e2a664b859019b92978e44de98983f4c39870b0007837d1499287f0c85a8d21650baf0ba6789206f6de9223103a1bae624f2153b15b64", 0xf7}], 0x3, &(0x7f0000002840)=[@rights={0x38, 0x1, 0x1, [r1, r2, r1, r2, r1, r2, r1, r1, r2]}, @rights={0x20, 0x1, 0x1, [r1, r2, r2, r1]}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r2, r2]}], 0x98, 0x40}, {&(0x7f0000002900)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002980)="15ea27364726793bca2a7692c9416694b9d56ac4392f0ac858e77f81ca06efe03a1dee6383249f85d2aed57df2f4cf3b24a07e34d2a1ef521469af51baba80db3d4ff5924021f6ebb7240b100db103a2c53fefc4d21c9c75fe65bc19cf236597d1b4b06d1933c31b8dc86c8e404505d4db3aa6399ca284521a9498741212364d6065ddea8df2f5866cfc0175b87844c8fb75860dff967591a478f1c2e761bc0f4c721f6dcddd106cedebc754d029502f03839f5cfaa18e3aa169424a1c304a3d53731d7590e7ea345cd18e0f63d6dc9a6c4b384a72e8983f8e", 0xd9}], 0x1, &(0x7f0000002ac0)=[@rights={0x20, 0x1, 0x1, [r1, r2, r2]}, @rights={0x18, 0x1, 0x1, [r2]}, @rights={0x30, 0x1, 0x1, [r2, r2, r2, r2, r2, r1, r1, r2]}], 0x68, 0x4040}], 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 05:10:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/189, 0xbd}], 0x1) r1 = dup2(r0, r0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000080)=0x1) [ 220.687139] kmem_cache_alloc_node+0x272/0x780 [ 220.691732] ? find_held_lock+0x36/0x1c0 [ 220.695810] __alloc_skb+0x119/0x790 [ 220.699537] ? skb_scrub_packet+0x580/0x580 [ 220.703868] ? rcu_is_watching+0x8c/0x150 [ 220.708022] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 220.712445] ? default_file_splice_read+0x850/0xb10 [ 220.717470] ? splice_direct_to_actor+0x270/0x8f0 [ 220.722320] ? do_splice_direct+0x2d4/0x420 [ 220.726643] ? do_sendfile+0x623/0xe20 [ 220.730543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 05:10:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000005, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2900000006000000000000000000000000e7ff00000000000000000000000000000000000000000000"], 0x29) [ 220.736093] ? netlink_autobind.isra.34+0x240/0x330 [ 220.741124] netlink_sendmsg+0xb29/0xfd0 [ 220.745212] ? do_raw_spin_lock+0xc1/0x200 [ 220.749472] ? netlink_unicast+0x760/0x760 05:10:42 executing program 7: futex(&(0x7f000000cffc)=0x2000000000000004, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f0000000080), 0x23) [ 220.749496] ? check_same_owner+0x340/0x340 05:10:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) r3 = geteuid() r4 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="60763e975dd3b01a61b85cd344392cc30263535a1c42b08fc5c8b63fe94269db5f193db167522cd316225ea42e451792c0096b4148216af95c70db1aa6a41213e8663f9ec7deba082c13a0b495291a", 0x4f, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r3, r4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xd3c, 0x2}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 220.749514] ? security_socket_sendmsg+0x94/0xc0 [ 220.749529] ? netlink_unicast+0x760/0x760 [ 220.749547] sock_sendmsg+0xd5/0x120 [ 220.749563] kernel_sendmsg+0x43/0x50 [ 220.749583] sock_no_sendpage+0x1d2/0x290 05:10:42 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) move_pages(r3, 0x5, &(0x7f0000000200)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0], 0x2) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007f5300fe01b2a4a280930a06000493a8430891000000390009000a000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 05:10:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x20, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="f2a766ba610066ed48b813c4830f000000000f23d00f21f835300000000f23f866ba2000edc441175d392e67450f01cb0fc72cbe67400f001066ba4100b0a8ee36420f015900", 0x46}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 220.749601] ? sock_kfree_s+0x60/0x60 [ 220.749619] ? do_splice_direct+0x2d4/0x420 [ 220.749631] ? do_sendfile+0x623/0xe20 05:10:42 executing program 4 (fault-call:2 fault-nth:22): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:42 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000140), 0x8402) [ 220.749645] ? __x64_sys_sendfile64+0x15d/0x250 [ 220.749660] ? do_syscall_64+0x1b9/0x820 [ 220.749685] ? iter_file_splice_write+0x1010/0x1010 [ 220.749704] kernel_sendpage+0x93/0xf0 [ 220.749718] ? sock_kfree_s+0x60/0x60 [ 220.749734] sock_sendpage+0x8c/0xc0 05:10:42 executing program 4 (fault-call:2 fault-nth:23): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:42 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005e40)='/dev/cuse\x00', 0x20000, 0x0) r1 = getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000005ec0)=0x0) sendmsg$nl_generic(r0, &(0x7f00000062c0)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006280)={&(0x7f0000005f00)={0x374, 0x35, 0x200, 0x70bd26, 0x25dfdbfd, {0x20}, [@generic="8c2c29f67d3eee595553e5dc701d9cf3166b3b41220948872ce514e196e2fe68e8342cbd8742dc6001d9ff35814b060a7e3ca21c9743d95e40212b8e18c0078db6a62b622dc6cf28a273e1b76a3853cd062c1b9a650f87e29e04d791faa849ddbc69ece75ba29a97f28c76ef0df583f8c15bcd189c7540a0b6196db61f670408c3016eb4995d018322236b505ca20a54b9e44ee64334d12f355de26aec181b183c00dc4f", @generic="aa13304e921d3d303fe0b976a3ba10de6f6827d40cc646a7917de4cad7116559d7885f659aaadfe275e0", @nested={0x80, 0x11, [@typed={0x10, 0x1b, @str='eth1%bdev\x00'}, @typed={0x4, 0x3c}, @typed={0x8, 0x54, @u32=0x7}, @typed={0x8, 0xe, @u32=0x6}, @typed={0x58, 0x90, @binary="8daad39ff5b962e9e441e725cf0fc16a4b8886dacaf36b26c9903f1ec4b5e26a987a5383ea6fac74637fd0bd5ed7994ebf116dab4f30c984134efb5e0f4b66b56c6cb96143ca900fb1a58b2624c20d1c18ee718d"}]}, @nested={0xc, 0x8c, [@typed={0x8, 0x48, @str='%\x00'}]}, @nested={0x178, 0x55, [@typed={0x8, 0x4, @pid=r1}, @typed={0xe8, 0x38, @binary="944c0481723fa69108916c8815bd03118374f61f136314733734293570ba29a7122fc0520dc505e6547953d83870240cd8102bae373d36627ef98620adc38fce334366687e8135100957f1b74d269ed34064eccb7b605b4df2d0b6f4f0d34ecad94a11ffc56549ad58db0928ec97233a1124d8ddd02493656759437a8993e15306c164662c8389e041cdb1e4db7f4ae4bb292632ce0091575d9236cfe93f720e145fb2439b78680364c578b58eab9aa8861c6af0bf19fb0261d1f1ad8ec3a9cbf67523923b6e248caa4249d675b369033949dae3f256258607352d32504968388b"}, @generic="28501859c8e4907b71123ed68d803f5a7f9aea94afe7462eca7cbb9a2edafe8da4e3153687cd4f443b949d98d320c3f48f68", @generic="645e84258afea4c89ce2ac3f7a671c3738a3ddcfcdbbadc9359a10afb0d0599f39c7391b6d42544135f3969b50584f9e7ed6d5ca85ed3ae16392f986bcb274f0c3ce95715e050d3c6839f892c207eccbd69b"]}, @typed={0x8, 0x66, @pid=r2}, @nested={0x84, 0x13, [@generic="e62a905f5bf9990f60bf19bb43c312f5a7cffc234610e320694296aa3dfed04d9e81f639b3315eb56378349270164193f181adb836d9816598fb8d4d0b5de7403f7433e756ee7bc44d837c0cb4dab70ab80a7de6f6f6cad0b03fa7d42902d91a01b60b07f09faf81b53ab914adefa95aef8728b1a787f5fe27c043075ba1ce3b"]}]}, 0x374}, 0x1}, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xfffffffffffffffc) syz_emit_ethernet(0x62, &(0x7f00000001c0)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [{[], {0x8100, 0x538, 0x4, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, "c11dca", 0x28, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@mcast1={0xff, 0x1, [], 0x1}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "9e26dd", 0x0, "db41a9"}}}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x1]}) geteuid() 05:10:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000000000000400000000000000000000000000000000002a"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x200000, 0x1}) [ 220.749748] ? kernel_sendpage+0xf0/0xf0 [ 220.749762] pipe_to_sendpage+0x2d0/0x400 [ 220.749780] ? generic_pipe_buf_nosteal+0x10/0x10 [ 220.749796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 220.749811] ? splice_from_pipe_next.part.9+0x296/0x340 [ 220.749833] __splice_from_pipe+0x38e/0x7c0 [ 220.749850] ? generic_pipe_buf_nosteal+0x10/0x10 [ 220.749872] splice_from_pipe+0x1ea/0x340 [ 220.749889] ? generic_pipe_buf_nosteal+0x10/0x10 [ 220.749904] ? splice_shrink_spd+0xd0/0xd0 [ 220.749929] generic_splice_sendpage+0x3c/0x50 [ 220.749944] ? splice_from_pipe+0x340/0x340 [ 220.749959] direct_splice_actor+0x128/0x190 [ 220.749977] splice_direct_to_actor+0x318/0x8f0 [ 220.749993] ? pipe_to_sendpage+0x400/0x400 [ 220.750012] ? do_splice_to+0x190/0x190 [ 220.750029] ? rw_verify_area+0x118/0x360 [ 220.750053] do_splice_direct+0x2d4/0x420 [ 220.750072] ? splice_direct_to_actor+0x8f0/0x8f0 [ 220.750092] ? rw_verify_area+0x118/0x360 [ 220.750109] do_sendfile+0x623/0xe20 [ 220.750131] ? do_compat_pwritev64+0x1c0/0x1c0 [ 220.750154] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 220.750170] ? _copy_from_user+0xdf/0x150 [ 220.750188] __x64_sys_sendfile64+0x15d/0x250 [ 220.750204] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 220.750221] ? do_syscall_64+0x9a/0x820 [ 220.750243] do_syscall_64+0x1b9/0x820 [ 220.750257] ? finish_task_switch+0x1d3/0x870 [ 220.750271] ? syscall_return_slowpath+0x5e0/0x5e0 [ 220.750285] ? syscall_return_slowpath+0x31d/0x5e0 [ 220.750305] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 220.750323] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.750345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.750355] RIP: 0033:0x455ab9 [ 220.750359] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 220.750621] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 220.750637] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 220.750645] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 220.750654] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 220.750662] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 220.750671] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000015 [ 220.989687] FAULT_INJECTION: forcing a failure. [ 220.989687] name failslab, interval 1, probability 0, space 0, times 0 [ 220.989706] CPU: 1 PID: 14275 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 220.989714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.989719] Call Trace: [ 220.989739] dump_stack+0x1c9/0x2b4 [ 220.989761] ? dump_stack_print_info.cold.2+0x52/0x52 [ 220.989781] ? kernel_text_address+0x79/0xf0 [ 220.989803] should_fail.cold.4+0xa/0x1a [ 220.989823] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 220.989846] ? save_stack+0xa9/0xd0 [ 220.989862] ? save_stack+0x43/0xd0 [ 220.989877] ? kasan_kmalloc+0xc4/0xe0 [ 220.989897] ? find_held_lock+0x36/0x1c0 [ 220.989930] ? check_same_owner+0x340/0x340 [ 220.989954] ? rcu_note_context_switch+0x730/0x730 [ 220.989976] __should_failslab+0x124/0x180 [ 220.989996] should_failslab+0x9/0x14 [ 220.990019] kmem_cache_alloc_node_trace+0x26f/0x770 [ 220.990049] __kmalloc_node_track_caller+0x33/0x70 [ 220.990069] __kmalloc_reserve.isra.40+0x3a/0xe0 [ 220.990086] __alloc_skb+0x155/0x790 [ 220.990103] ? skb_scrub_packet+0x580/0x580 [ 220.990120] ? rcu_is_watching+0x8c/0x150 [ 220.990134] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 220.990151] ? default_file_splice_read+0x850/0xb10 [ 220.990167] ? splice_direct_to_actor+0x270/0x8f0 [ 220.990181] ? do_splice_direct+0x2d4/0x420 [ 220.990193] ? do_sendfile+0x623/0xe20 [ 220.990212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 220.990227] ? netlink_autobind.isra.34+0x240/0x330 [ 220.990247] netlink_sendmsg+0xb29/0xfd0 [ 220.990259] ? do_raw_spin_lock+0xc1/0x200 [ 220.990280] ? netlink_unicast+0x760/0x760 [ 220.990299] ? check_same_owner+0x340/0x340 [ 220.990314] ? security_socket_sendmsg+0x94/0xc0 [ 220.990327] ? netlink_unicast+0x760/0x760 [ 220.990343] sock_sendmsg+0xd5/0x120 [ 220.990359] kernel_sendmsg+0x43/0x50 [ 220.990378] sock_no_sendpage+0x1d2/0x290 [ 220.990394] ? sock_kfree_s+0x60/0x60 [ 220.990409] ? do_splice_direct+0x2d4/0x420 [ 220.990421] ? do_sendfile+0x623/0xe20 [ 220.990434] ? __x64_sys_sendfile64+0x15d/0x250 [ 220.990449] ? do_syscall_64+0x1b9/0x820 [ 220.990473] ? iter_file_splice_write+0x1010/0x1010 [ 220.990490] kernel_sendpage+0x93/0xf0 [ 220.990510] ? sock_kfree_s+0x60/0x60 [ 220.990527] sock_sendpage+0x8c/0xc0 [ 220.990539] ? kernel_sendpage+0xf0/0xf0 [ 220.990549] pipe_to_sendpage+0x2d0/0x400 [ 220.990565] ? generic_pipe_buf_nosteal+0x10/0x10 [ 220.990579] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 220.990595] ? splice_from_pipe_next.part.9+0x296/0x340 [ 220.990616] __splice_from_pipe+0x38e/0x7c0 [ 220.990631] ? generic_pipe_buf_nosteal+0x10/0x10 [ 220.990652] splice_from_pipe+0x1ea/0x340 [ 220.990669] ? generic_pipe_buf_nosteal+0x10/0x10 [ 220.990684] ? splice_shrink_spd+0xd0/0xd0 [ 220.990710] generic_splice_sendpage+0x3c/0x50 [ 220.990724] ? splice_from_pipe+0x340/0x340 [ 220.990741] direct_splice_actor+0x128/0x190 [ 220.990759] splice_direct_to_actor+0x318/0x8f0 [ 220.990776] ? pipe_to_sendpage+0x400/0x400 [ 220.990797] ? do_splice_to+0x190/0x190 [ 220.990814] ? rw_verify_area+0x118/0x360 [ 220.990833] do_splice_direct+0x2d4/0x420 [ 220.990851] ? splice_direct_to_actor+0x8f0/0x8f0 [ 220.990869] ? rw_verify_area+0x118/0x360 [ 220.990886] do_sendfile+0x623/0xe20 [ 220.990909] ? do_compat_pwritev64+0x1c0/0x1c0 [ 220.990933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 220.990949] ? _copy_from_user+0xdf/0x150 [ 220.990967] __x64_sys_sendfile64+0x15d/0x250 [ 220.990983] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 220.991001] ? do_syscall_64+0x9a/0x820 [ 220.991029] do_syscall_64+0x1b9/0x820 [ 220.991047] ? syscall_slow_exit_work+0x500/0x500 [ 220.991066] ? syscall_return_slowpath+0x5e0/0x5e0 [ 220.991083] ? syscall_return_slowpath+0x31d/0x5e0 [ 220.991105] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 220.991125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.991147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.991159] RIP: 0033:0x455ab9 [ 220.991163] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 220.991419] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 220.991434] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 220.991442] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 220.991449] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 220.991457] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 220.991465] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000016 [ 221.229317] FAULT_INJECTION: forcing a failure. [ 221.229317] name failslab, interval 1, probability 0, space 0, times 0 [ 221.229336] CPU: 0 PID: 14295 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 221.229344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.229349] Call Trace: [ 221.229369] dump_stack+0x1c9/0x2b4 [ 221.229389] ? dump_stack_print_info.cold.2+0x52/0x52 [ 221.229411] ? trace_hardirqs_on+0x10/0x10 [ 221.229431] should_fail.cold.4+0xa/0x1a [ 221.229452] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 221.229469] ? debug_check_no_obj_freed+0x30b/0x595 [ 221.229484] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 221.229512] ? kasan_check_read+0x11/0x20 [ 221.229526] ? rcu_is_watching+0x8c/0x150 [ 221.229541] ? rcu_pm_notify+0xc0/0xc0 [ 221.229559] ? find_held_lock+0x36/0x1c0 [ 221.229593] ? check_same_owner+0x340/0x340 [ 221.229609] ? rcu_note_context_switch+0x730/0x730 [ 221.229623] ? find_held_lock+0x36/0x1c0 [ 221.229641] __should_failslab+0x124/0x180 [ 221.229658] should_failslab+0x9/0x14 [ 221.229673] kmem_cache_alloc_node_trace+0x26f/0x770 [ 221.229688] ? lock_downgrade+0x8f0/0x8f0 [ 221.229712] __kmalloc_node+0x33/0x70 [ 221.229730] kvmalloc_node+0x65/0xf0 [ 221.229747] iov_iter_get_pages_alloc+0x7da/0x1530 [ 221.229762] ? trace_hardirqs_on+0xd/0x10 [ 221.229784] ? iov_iter_fault_in_readable+0x460/0x460 [ 221.229802] ? free_obj_work+0xbb0/0xbb0 [ 221.229818] ? free_unref_page+0x6e3/0x9a0 [ 221.229836] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 221.229852] ? trace_hardirqs_on+0xd/0x10 [ 221.229869] ? mark_free_pages+0x3b0/0x3b0 [ 221.229887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 221.229907] ? sock_sendmsg+0x5a/0x120 [ 221.229925] ? kernel_sendmsg+0x43/0x50 [ 221.229943] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 221.229957] ? iov_iter_pipe+0xc2/0x2f0 [ 221.229980] default_file_splice_read+0x1da/0xb10 [ 221.229994] ? do_splice_direct+0x2d4/0x420 [ 221.230006] ? do_sendfile+0x623/0xe20 [ 221.230020] ? __x64_sys_sendfile64+0x15d/0x250 [ 221.230035] ? do_syscall_64+0x1b9/0x820 [ 221.230059] ? iter_file_splice_write+0x1010/0x1010 [ 221.230074] ? __put_page+0x136/0x190 [ 221.230090] ? __put_compound_page+0xe0/0xe0 [ 221.230108] ? sock_kfree_s+0x60/0x60 [ 221.230129] ? generic_pipe_buf_release+0x1de/0x2b0 [ 221.230144] ? anon_pipe_buf_release+0x530/0x530 [ 221.230164] ? generic_pipe_buf_nosteal+0x10/0x10 [ 221.230179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 221.230195] ? splice_from_pipe_next.part.9+0x296/0x340 [ 221.230212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 221.230225] ? fsnotify+0xbb4/0x14e0 [ 221.230248] ? fsnotify_first_mark+0x350/0x350 [ 221.230264] ? fsnotify+0x14e0/0x14e0 [ 221.230280] ? splice_from_pipe+0x1f5/0x340 [ 221.230296] ? generic_pipe_buf_nosteal+0x10/0x10 [ 221.230312] ? splice_shrink_spd+0xd0/0xd0 [ 221.230332] ? security_file_permission+0x1c6/0x240 [ 221.230349] ? rw_verify_area+0x118/0x360 [ 221.230366] ? iter_file_splice_write+0x1010/0x1010 [ 221.230382] do_splice_to+0x12e/0x190 [ 221.230402] splice_direct_to_actor+0x270/0x8f0 [ 221.230419] ? pipe_to_sendpage+0x400/0x400 [ 221.230440] ? do_splice_to+0x190/0x190 [ 221.230457] ? rw_verify_area+0x118/0x360 [ 221.230475] do_splice_direct+0x2d4/0x420 [ 221.230502] ? splice_direct_to_actor+0x8f0/0x8f0 [ 221.230522] ? rw_verify_area+0x118/0x360 [ 221.230541] do_sendfile+0x623/0xe20 [ 221.230565] ? do_compat_pwritev64+0x1c0/0x1c0 [ 221.230591] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 221.230606] ? _copy_from_user+0xdf/0x150 [ 221.230624] __x64_sys_sendfile64+0x15d/0x250 [ 221.230641] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 221.230656] ? do_syscall_64+0x9a/0x820 [ 221.230674] do_syscall_64+0x1b9/0x820 [ 221.230686] ? finish_task_switch+0x1d3/0x870 [ 221.230702] ? syscall_return_slowpath+0x5e0/0x5e0 [ 221.230718] ? syscall_return_slowpath+0x31d/0x5e0 [ 221.230740] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 221.230760] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 221.230783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.230793] RIP: 0033:0x455ab9 [ 221.230797] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 222.229744] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 222.237436] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 222.244692] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 222.251940] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 222.259189] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 222.266440] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000017 05:10:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000007, 0x0, r1, &(0x7f0000000140)}]) 05:10:43 executing program 2: msgsnd(0x0, &(0x7f0000000040), 0x8, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) msgrcv(0x0, &(0x7f00000002c0)={0x0, ""/126}, 0x86, 0x2, 0x3800) 05:10:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x7}, 0x8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000280)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x210) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) 05:10:43 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = shmget(0x3, 0x4000, 0x11, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x1c4, 0x0, 0xa4a3ad41a879dddd) 05:10:43 executing program 6: r0 = syz_open_dev$amidi(&(0x7f00000010c0)='/dev/amidi#\x00', 0x5, 0x20000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001080)=[{0x3, 0x40}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000001800)=[{&(0x7f0000001140)=""/178, 0xb2}, {&(0x7f0000001200)=""/245, 0xf5}, {&(0x7f0000001740)=""/148, 0x94}, {&(0x7f0000001680)=""/157, 0x9d}, {&(0x7f0000001540)=""/142, 0xfe96}], 0x5) readv(r1, &(0x7f0000001440)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) getdents64(r1, &(0x7f0000001300)=""/130, 0x82) 05:10:43 executing program 4 (fault-call:2 fault-nth:24): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:43 executing program 1: sysfs$1(0x1, &(0x7f0000000000)='wlan0vmnet0vboxnet0wlan0proc\x00') r0 = gettid() setpgid(0x0, r0) 05:10:43 executing program 7: r0 = inotify_init() r1 = open(&(0x7f00009e1000)='./file0\x00', 0x20000, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0xc0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000002c0)) r3 = inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_rm_watch(r0, r3) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file1\x00') [ 222.375387] FAULT_INJECTION: forcing a failure. [ 222.375387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.387281] CPU: 1 PID: 14309 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 222.394642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.403991] Call Trace: [ 222.406581] dump_stack+0x1c9/0x2b4 [ 222.410224] ? dump_stack_print_info.cold.2+0x52/0x52 [ 222.415425] ? find_held_lock+0x36/0x1c0 [ 222.419506] should_fail.cold.4+0xa/0x1a 05:10:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2) 05:10:43 executing program 6: r0 = socket$inet6(0xa, 0x2000000000000003, 0x0) ioctl(r0, 0x100000000008912, &(0x7f0000000280)="f75cc83d5dea7d050036e4") r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x10d, 0xa, &(0x7f0000000040)={0x9}, 0xc) [ 222.423570] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 222.428662] ? kasan_check_read+0x11/0x20 [ 222.432807] ? rcu_is_watching+0x8c/0x150 [ 222.436959] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 222.441380] ? find_held_lock+0x36/0x1c0 [ 222.445465] ? check_same_owner+0x340/0x340 [ 222.449794] ? rcu_note_context_switch+0x730/0x730 [ 222.454737] __alloc_pages_nodemask+0x36e/0xdb0 [ 222.459416] ? default_file_splice_read+0x1da/0xb10 [ 222.464439] ? do_splice_to+0x12e/0x190 [ 222.468419] ? splice_direct_to_actor+0x270/0x8f0 05:10:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$rds(0xa, 0x2, 0x88) sendmsg$rds(r1, &(0x7f0000017000)={&(0x7f0000015ff3)={0x2, 0x4e21}, 0x10, &(0x7f000000d000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="580000000000000014010000080000000000000000000000", @ANYPTR=&(0x7f0000005ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000001eff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440000000000000014010000060000000000000000000000", @ANYPTR=&(0x7f000001bff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000009ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000014000000000000000000000001000000480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f000000f000)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000001e000)=ANY=[@ANYPTR=&(0x7f0000012000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0103000000000000"], @ANYBLOB="0100000000000000005f100000000000000000000000000000000b00000000ee9670475f0000001401000009deffffff0000000000", @ANYPTR=&(0x7f0000012ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000001cff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xba}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x2e, 0x4, 0x0, {0x3, 0x3, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) [ 222.473274] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 222.478313] ? rcu_pm_notify+0xc0/0xc0 [ 222.482214] ? __kmalloc_node+0x33/0x70 [ 222.486196] ? __kmalloc_node+0x33/0x70 [ 222.490181] ? rcu_read_lock_sched_held+0x108/0x120 [ 222.495205] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 222.500758] alloc_pages_current+0x10c/0x210 [ 222.505185] push_pipe+0x400/0x7a0 [ 222.508733] ? __kmalloc_node+0x47/0x70 [ 222.512729] iov_iter_get_pages_alloc+0x866/0x1530 [ 222.517669] ? trace_hardirqs_on+0xd/0x10 05:10:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0x3000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x4) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01a2e30000000000ff0000000004008000009a"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:10:43 executing program 0: r0 = socket$unix(0x1, 0x4000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x1) socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f00000003c0)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x42) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) removexattr(&(0x7f0000000080)="e91f7189591e9233614b00", &(0x7f0000000180)=@random={'system.', 'vmnet1#]vmnet0)wlan0nodev!user$lo+\x00'}) r3 = semget$private(0x0, 0x6, 0x8) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000000000)=""/83) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) [ 222.521836] ? iov_iter_fault_in_readable+0x460/0x460 [ 222.527036] ? free_obj_work+0xbb0/0xbb0 [ 222.531104] ? free_unref_page+0x6e3/0x9a0 [ 222.535349] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 222.540377] ? trace_hardirqs_on+0xd/0x10 [ 222.544534] ? mark_free_pages+0x3b0/0x3b0 [ 222.548778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 222.554466] ? sock_sendmsg+0x5a/0x120 [ 222.558357] ? kernel_sendmsg+0x43/0x50 [ 222.562340] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 222.567364] ? iov_iter_pipe+0xc2/0x2f0 [ 222.571348] default_file_splice_read+0x1da/0xb10 [ 222.576196] ? do_splice_direct+0x2d4/0x420 [ 222.580520] ? do_sendfile+0x623/0xe20 [ 222.584411] ? __x64_sys_sendfile64+0x15d/0x250 [ 222.589080] ? do_syscall_64+0x1b9/0x820 [ 222.593154] ? iter_file_splice_write+0x1010/0x1010 [ 222.598183] ? __put_page+0x136/0x190 [ 222.601986] ? __put_compound_page+0xe0/0xe0 [ 222.606391] ? sock_kfree_s+0x60/0x60 [ 222.610182] ? generic_pipe_buf_release+0x1de/0x2b0 [ 222.615184] ? anon_pipe_buf_release+0x530/0x530 [ 222.619934] ? generic_pipe_buf_nosteal+0x10/0x10 [ 222.624766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 222.630289] ? splice_from_pipe_next.part.9+0x296/0x340 [ 222.635649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 222.641168] ? fsnotify+0xbb4/0x14e0 [ 222.644876] ? fsnotify_first_mark+0x350/0x350 [ 222.649444] ? fsnotify+0x14e0/0x14e0 [ 222.653242] ? splice_from_pipe+0x1f5/0x340 [ 222.657550] ? generic_pipe_buf_nosteal+0x10/0x10 [ 222.662387] ? splice_shrink_spd+0xd0/0xd0 [ 222.666610] ? security_file_permission+0x1c6/0x240 [ 222.671621] ? rw_verify_area+0x118/0x360 [ 222.675756] ? iter_file_splice_write+0x1010/0x1010 [ 222.680756] do_splice_to+0x12e/0x190 [ 222.684544] splice_direct_to_actor+0x270/0x8f0 [ 222.689199] ? pipe_to_sendpage+0x400/0x400 [ 222.693521] ? do_splice_to+0x190/0x190 [ 222.697481] ? rw_verify_area+0x118/0x360 [ 222.701613] do_splice_direct+0x2d4/0x420 [ 222.705746] ? splice_direct_to_actor+0x8f0/0x8f0 [ 222.710574] ? rw_verify_area+0x118/0x360 [ 222.714706] do_sendfile+0x623/0xe20 [ 222.718411] ? do_compat_pwritev64+0x1c0/0x1c0 [ 222.722987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 222.728510] ? _copy_from_user+0xdf/0x150 [ 222.732644] __x64_sys_sendfile64+0x15d/0x250 [ 222.737124] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 222.741693] ? do_syscall_64+0x9a/0x820 [ 222.745655] do_syscall_64+0x1b9/0x820 [ 222.749524] ? syscall_slow_exit_work+0x500/0x500 [ 222.754352] ? syscall_return_slowpath+0x5e0/0x5e0 [ 222.759274] ? syscall_return_slowpath+0x31d/0x5e0 [ 222.764193] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 222.769552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 222.774393] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.779564] RIP: 0033:0x455ab9 [ 222.782732] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 222.801959] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 222.809648] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 222.816901] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 05:10:44 executing program 6: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000595ff8)=0x3) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x8) mmap(&(0x7f00004be000/0x2000)=nil, 0x2000, 0x3000001, 0x1010, r0, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f00000011c0)="ec", 0x1}], 0x1) write(r0, &(0x7f0000001540)="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", 0xfffffff5) close(r0) [ 222.824153] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 222.831406] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 222.838665] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000018 05:10:44 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84800) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x8, 0xd550, 0x400, 0x7}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x1d}, 0x10, &(0x7f0000000680)={&(0x7f0000000440)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x10001}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "653d334dd026fc5a"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x1d}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}, 0x1}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e20, @rand_addr=0xfff}, @in6={0xa, 0x4e23, 0xceab, @loopback={0x0, 0x1}, 0x1ff}], 0x4c) 05:10:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="2b00000000001b207f5c5eeb0800450000180000000000009078ac2314aaac1414aa34208100001a000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], &(0x7f0000000000)) 05:10:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80044501, &(0x7f0000000100)=""/202) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000000, 0x200000) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 05:10:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) dup3(r1, r0, 0x80000) 05:10:44 executing program 4 (fault-call:2 fault-nth:25): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:44 executing program 7: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) waitid(0x1, r2, &(0x7f00000001c0), 0x5, &(0x7f0000000200)) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendfile(r1, r1, &(0x7f00000002c0), 0xc773) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3ff, 0xa0202) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000140)) io_setup(0x8, &(0x7f00000009c0)=0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000300)={@reserved=0x1}) io_submit(r4, 0x1, &(0x7f0000000980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)}]) 05:10:44 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e05c7e0c200006002e00fd0600000000000400000025"], 0x20}, 0x1}, 0x0) 05:10:44 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = userfaultfd(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000000c0)=0x580115) fsetxattr(r0, &(0x7f0000000040)=@random={'osx.', "2b766d6e657431a000"}, &(0x7f0000000080)='GPL-)\x00', 0x6, 0x0) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="c6b4cc17be8c305b8b12a46b2644d67c9f13684595245a5f6c5b79934335503c7afa44398c66877e5c113709d95016d1f438529410178178c3035cc15e07fcd492ce09fa8198ab1ff1552b053e1bd0d766b34ef0c94c2580f4ff947df82075d121a0ccd47a32c0214af38860e5d64745aa21384a1862146966fb532c8e5c5b2829480a009efd8b80603f50e52d7b2b319a1f9270eb2706a39ada1c58ab5f460eb3cceb73b5d12cea8fc4ba445bed058a5c09581acec9d86631ab5d2dd128ce70ede7538471e0c5b0d34a6f32df21d06b0a59ff50143efc8022fd", 0xda}, {&(0x7f0000000200)="7243980045b6186d3d1cb769219a3a0b0abcfbbac42fd7277b2252c32cc6372d9742f5629cda21033fd657c28d34804bed23d623d75d0965a18541481dd2b90a3ec42f71dc531c9c54ec51bfc783ab782d29d6dab417931d9197ec9b2cdf135bb7f35466d9c4a45cd0b3c7c1cde6370ca5cd12230ac5d5e8da9d4920685112dcd94ad51a4ab7806b8bf3c8d6763a95f2ede143c40f09c6ef06789907d1ca75ef20", 0xa1}, {&(0x7f00000002c0)="0cefa999b6822853afa38ee0", 0xc}, {&(0x7f0000000300)="32e353300a56ae6eaed01c7ddd9af1fc7c", 0x11}], 0x4, 0x0) 05:10:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001000)={{{@in, @in, 0x4e21, 0x8, 0x4e23, 0x771f6dc, 0x0, 0x20, 0x80, 0xc, 0x0, r1}, {0x6, 0xc6bd, 0x100, 0x7f, 0x5, 0x10000, 0x2, 0x2}, {0x8, 0x0, 0x0, 0x9}, 0xfff, 0x0, 0x2, 0x1, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x4d4, 0x32}, 0x2, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x3505, 0x3, 0x1, 0x6, 0x2, 0x6238, 0x1}}, 0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) socketpair$inet6(0xa, 0x8000a, 0x3f, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) recvfrom$inet(r0, &(0x7f0000000380)=""/248, 0xf8, 0x40000000, &(0x7f0000000000)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000140)="c3401c344654f3c7d9b4679a7a5d399aa4eedc3d6bd8ebd65c856a27d61144adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c90f502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c", 0x62, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) 05:10:44 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x201) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, r1, {0xffff, 0xa}, {0xe, 0xfff3}, {0xfffb, 0xe}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x1) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000300)=0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x50610000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@mpls_delroute={0x48, 0x19, 0x200, 0x70bd2c, 0x25dfdbff, {0x1c, 0x20, 0xb4, 0x2, 0xfe, 0x6, 0x0, 0x5, 0x2a00}, [@RTA_TTL_PROPAGATE={0x8, 0x1a, 0xfb23}, @RTA_OIF={0x8, 0x4, r1}, @RTA_DST={0x8, 0x1, [{0x7, 0x4, 0x377, 0x33}]}, @RTA_OIF={0x8, 0x4, r1}, @RTA_DST={0xc, 0x1, [{0x8, 0x0, 0x3f, 0xb77}, {0xe2a, 0x53a8c57e, 0x3, 0xfffffffffffffffd}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x26e8c70c15293778}, 0x4048005) r2 = socket$inet6(0xa, 0x6, 0x2) write$P9_RREAD(r0, &(0x7f0000000480)={0x79, 0x75, 0x1, {0x6e, "ff8f9b0495afb8ea513d8ee12e0d86292f93de2b287a697942a3e48cca344045496a02929b9cade7e921ef296dd17469343dde78b6d5e2e7be7a390179d71062b127da5c946a79d427814295a1e2e736eb01176e1b9abd6a67b836e685813e6b795410727e0009f357b6704ac70c"}}, 0x79) getsockname(r2, &(0x7f0000000500)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000005c0)={{0x4, 0x7}, 0x2}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, [0x7, 0x10001, 0x6, 0x400, 0x1, 0x3, 0x3, 0x8000, 0x0, 0x7f, 0x0, 0xffffffffffffff9c, 0x7ff, 0x8, 0x7]}, &(0x7f0000000700)=0x100) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000740)={r4, 0xc239}, 0x8) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000780)) getsockname$unix(r0, &(0x7f00000007c0), &(0x7f0000000840)=0x6e) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000880)=0x1) fcntl$getownex(r0, 0x10, &(0x7f00000008c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000980)={{0xa, 0x1, 0x773, 0x2, '\x00', 0x6}, 0x5, 0x303, 0x2, r5, 0x6, 0x1, 'syz1\x00', &(0x7f0000000900)=["ae656d30766d6e65743100", '@\x00', '/dev/snd/pcmC#D#c\x00', '/dev/snd/pcmC#D#c\x00', '/dev/snd/pcmC#D#c\x00', '(mime_type\x00'], 0x4e, [], [0x3ff, 0x8, 0x1]}) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000ac0)=""/232) ioctl$KDSETMODE(r0, 0x4b3a, 0x4) r6 = syz_open_dev$sndpcmp(&(0x7f0000000bc0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x521440) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000c00)={r4, 0x7fffffff}, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000c40)={{0xb7, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e23, 0x2, 'dh\x00', 0x6, 0x8000, 0x7c}, {@loopback=0x7f000001, 0x4e21, 0x6, 0x18, 0x5, 0x2}}, 0x44) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000cc0)={r4, 0x0, 0x1ff, 0x59d5}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000d00)={r4, 0x9}, 0x8) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/qat_adf_ctl\x00', 0x101c01, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000d80)={r4, 0x1}, &(0x7f0000000dc0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000e00)={r8, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000e40)={r8, 0x3}, &(0x7f0000000e80)=0x8) sysfs$3(0x3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000ec0)={r4, 0x0, 0x30}, 0xc) [ 223.096384] FAULT_INJECTION: forcing a failure. [ 223.096384] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.108313] CPU: 1 PID: 14386 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 223.115682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.125043] Call Trace: [ 223.127647] dump_stack+0x1c9/0x2b4 [ 223.131294] ? dump_stack_print_info.cold.2+0x52/0x52 [ 223.136498] ? find_held_lock+0x36/0x1c0 [ 223.140578] should_fail.cold.4+0xa/0x1a [ 223.144655] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 223.149772] ? kasan_check_read+0x11/0x20 [ 223.153922] ? rcu_is_watching+0x8c/0x150 [ 223.158072] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 223.162488] ? find_held_lock+0x36/0x1c0 [ 223.166575] ? check_same_owner+0x340/0x340 [ 223.170898] ? rcu_note_context_switch+0x730/0x730 [ 223.175830] __alloc_pages_nodemask+0x36e/0xdb0 [ 223.180484] ? default_file_splice_read+0x1da/0xb10 [ 223.185481] ? do_splice_to+0x12e/0x190 [ 223.189439] ? splice_direct_to_actor+0x270/0x8f0 [ 223.194268] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 223.199275] ? rcu_pm_notify+0xc0/0xc0 [ 223.203150] ? __kmalloc_node+0x33/0x70 [ 223.207107] ? __kmalloc_node+0x33/0x70 [ 223.211066] ? rcu_read_lock_sched_held+0x108/0x120 [ 223.216066] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 223.221591] alloc_pages_current+0x10c/0x210 [ 223.226010] push_pipe+0x400/0x7a0 [ 223.229540] ? __kmalloc_node+0x47/0x70 [ 223.233503] iov_iter_get_pages_alloc+0x866/0x1530 [ 223.238415] ? trace_hardirqs_on+0xd/0x10 [ 223.242551] ? iov_iter_fault_in_readable+0x460/0x460 [ 223.247728] ? free_obj_work+0xbb0/0xbb0 [ 223.251772] ? free_unref_page+0x6e3/0x9a0 [ 223.255992] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 223.260995] ? trace_hardirqs_on+0xd/0x10 [ 223.265135] ? mark_free_pages+0x3b0/0x3b0 [ 223.269353] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 223.274872] ? sock_sendmsg+0x5a/0x120 [ 223.278741] ? kernel_sendmsg+0x43/0x50 [ 223.282702] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 223.287698] ? iov_iter_pipe+0xc2/0x2f0 [ 223.291658] default_file_splice_read+0x1da/0xb10 [ 223.296483] ? do_splice_direct+0x2d4/0x420 [ 223.300787] ? do_sendfile+0x623/0xe20 [ 223.304664] ? __x64_sys_sendfile64+0x15d/0x250 [ 223.309318] ? do_syscall_64+0x1b9/0x820 [ 223.313370] ? iter_file_splice_write+0x1010/0x1010 [ 223.318369] ? __put_page+0x136/0x190 [ 223.322153] ? __put_compound_page+0xe0/0xe0 [ 223.326546] ? sock_kfree_s+0x60/0x60 [ 223.330332] ? generic_pipe_buf_release+0x1de/0x2b0 [ 223.335333] ? anon_pipe_buf_release+0x530/0x530 [ 223.340073] ? generic_pipe_buf_nosteal+0x10/0x10 [ 223.344898] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 223.350421] ? splice_from_pipe_next.part.9+0x296/0x340 [ 223.355772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 223.361290] ? fsnotify+0xbb4/0x14e0 [ 223.364993] ? fsnotify_first_mark+0x350/0x350 [ 223.369575] ? fsnotify+0x14e0/0x14e0 [ 223.373361] ? splice_from_pipe+0x1f5/0x340 [ 223.377664] ? generic_pipe_buf_nosteal+0x10/0x10 [ 223.382488] ? splice_shrink_spd+0xd0/0xd0 [ 223.386710] ? security_file_permission+0x1c6/0x240 [ 223.391707] ? rw_verify_area+0x118/0x360 [ 223.395836] ? iter_file_splice_write+0x1010/0x1010 [ 223.400837] do_splice_to+0x12e/0x190 [ 223.404626] splice_direct_to_actor+0x270/0x8f0 [ 223.409279] ? pipe_to_sendpage+0x400/0x400 [ 223.413586] ? do_splice_to+0x190/0x190 [ 223.417544] ? rw_verify_area+0x118/0x360 [ 223.421676] do_splice_direct+0x2d4/0x420 [ 223.425819] ? splice_direct_to_actor+0x8f0/0x8f0 [ 223.430645] ? rw_verify_area+0x118/0x360 [ 223.434778] do_sendfile+0x623/0xe20 [ 223.438478] ? do_compat_pwritev64+0x1c0/0x1c0 [ 223.443048] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 223.448570] ? _copy_from_user+0xdf/0x150 [ 223.452705] __x64_sys_sendfile64+0x15d/0x250 [ 223.457198] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 223.461776] ? do_syscall_64+0x9a/0x820 [ 223.465737] do_syscall_64+0x1b9/0x820 [ 223.469610] ? finish_task_switch+0x1d3/0x870 [ 223.474090] ? syscall_return_slowpath+0x5e0/0x5e0 [ 223.479007] ? syscall_return_slowpath+0x31d/0x5e0 [ 223.483928] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 223.489276] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 223.494108] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.499281] RIP: 0033:0x455ab9 [ 223.502449] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 223.521665] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 223.529444] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 223.536695] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 05:10:44 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x4000) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f00000002c0)={0xa0, 0xfffffffffffffffe, 0x7, {{0x4, 0x2, 0x1f, 0x9, 0x9, 0x4, {0x5, 0x4, 0x7ff, 0x1, 0x400, 0x3, 0x5, 0x5, 0x4, 0x81, 0x51, r3, r4, 0xffff, 0x7f}}}}, 0xa0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x6e, 0x3, 0xfffffffffffffffc}) [ 223.543945] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 223.551196] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 223.558448] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000019 05:10:44 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) ioctl$TCSBRKP(r0, 0x5425, 0x293) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0x88, @time, 0x0, {0x5, 0x5}, 0x8, 0x0, 0x7b5}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x8, 0x0, 0x4, 0x3, '\x00', 0x7f}, 0x401, 0x20000038, 0x10000, r1, 0x4, 0x7fffffff, 'syz1\x00', &(0x7f0000000040)=['self.$-mime_type', 'lovmnet1:\x00', '&vboxnet1*securitybdev@\x00', "21b000"], 0x35, [], [0xff, 0x2, 0x100, 0x4]}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x7, 0x2}) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x161002, 0x0) 05:10:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f00000002c0)=""/185, 0xfffffdb0, 0x0, 0x0, 0xfffffffffffffee8) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00006d8fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000080)=""/179) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) 05:10:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0xc) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000140)=0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) recvmmsg(r0, &(0x7f00000055c0)=[{{&(0x7f00000004c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1, &(0x7f00000006c0)=""/87, 0x57}}], 0x1, 0x0, &(0x7f0000005740)) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x0) ioctl$KVM_NMI(r4, 0xae9a) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f0000000000)={r2}, &(0x7f00000001c0)=0x256) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f00000000c0), 0xd8, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30, 0xfffffffffffffffe}], 0x1, 0x1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$TIOCCBRK(r5, 0x5428) unshare(0x2000300) 05:10:45 executing program 4 (fault-call:2 fault-nth:26): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:45 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000005c0), 0x4) ioctl(r0, 0x8916, &(0x7f0000000100)="0000ed62f8a475c3da8a2e") getsockname(r0, &(0x7f0000000040)=@l2, &(0x7f00000000c0)=0x80) 05:10:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') getdents64(r0, &(0x7f0000000000)=""/78, 0x4e) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 05:10:45 executing program 3: setrlimit(0x7, &(0x7f0000000000)={0x14, 0x88}) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0x14000) inotify_init1(0x0) 05:10:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) [ 223.868486] FAULT_INJECTION: forcing a failure. [ 223.868486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.880475] CPU: 0 PID: 14432 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 223.887840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.897199] Call Trace: [ 223.899805] dump_stack+0x1c9/0x2b4 [ 223.903451] ? dump_stack_print_info.cold.2+0x52/0x52 [ 223.908658] ? zap_class+0x740/0x740 [ 223.912393] should_fail.cold.4+0xa/0x1a [ 223.916474] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 223.921590] ? rcu_is_watching+0x8c/0x150 [ 223.925747] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 223.930174] ? find_held_lock+0x36/0x1c0 [ 223.934271] ? check_same_owner+0x340/0x340 [ 223.938604] ? rcu_note_context_switch+0x730/0x730 [ 223.943554] __alloc_pages_nodemask+0x36e/0xdb0 [ 223.948233] ? default_file_splice_read+0x1da/0xb10 [ 223.953267] ? do_splice_to+0x12e/0x190 [ 223.957255] ? splice_direct_to_actor+0x270/0x8f0 [ 223.962119] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 223.967162] ? rcu_pm_notify+0xc0/0xc0 [ 223.971071] ? __kmalloc_node+0x33/0x70 [ 223.975054] ? __kmalloc_node+0x33/0x70 [ 223.979038] ? rcu_read_lock_sched_held+0x108/0x120 [ 223.984068] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 223.989625] alloc_pages_current+0x10c/0x210 [ 223.994047] push_pipe+0x400/0x7a0 [ 223.997592] ? __kmalloc_node+0x47/0x70 [ 224.001583] iov_iter_get_pages_alloc+0x866/0x1530 [ 224.006524] ? trace_hardirqs_on+0xd/0x10 [ 224.010695] ? iov_iter_fault_in_readable+0x460/0x460 05:10:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") ioctl$TIOCSCTTY(r0, 0x540e, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="6c6f67696e7569640039dad3c444de4a35f0fd223db6aa1e2fdd63c9f35f389e4669e0af6522c225bbb645ae9e0f46c87cd44db4919c1a34ab1d00bb4157f79b23912e9b96566ebf23618dfdd331fcacfeccdb938974f48d420c49e5b37f94bdb651b9c102659034f4192f") sendfile(r0, r1, &(0x7f0000000080), 0x1) 05:10:45 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") read(r0, &(0x7f0000000040)=""/230, 0x20000126) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="e28ca0589ae8c2dd4b84dd9eb8182fa8e94df588b9af0e5781dadf5e084d930f3cb32baf54423c3c2e1a7f6d58b733f30345206cf80dc9beaceeab07ac1a365060f7077c947fbc83badbbd34f039e7228ecd423d", 0x54}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x168, 0x1}, 0x15) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)=',') 05:10:45 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_buf(r0, 0x29, 0xb, &(0x7f0000c86000), &(0x7f0000000000)=0x15c) 05:10:45 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) exit_group(0x3) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 05:10:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, &(0x7f0000da8ffc), 0x0) shutdown(r2, 0x1) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x0, 0x8001}, 0xc) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'vcan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}) [ 224.015897] ? free_obj_work+0xbb0/0xbb0 [ 224.019971] ? free_unref_page+0x6e3/0x9a0 [ 224.024218] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 224.029250] ? trace_hardirqs_on+0xd/0x10 [ 224.033417] ? mark_free_pages+0x3b0/0x3b0 [ 224.037665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 224.043210] ? sock_sendmsg+0x5a/0x120 [ 224.047112] ? kernel_sendmsg+0x43/0x50 [ 224.051097] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 224.056121] ? iov_iter_pipe+0xc2/0x2f0 [ 224.060108] default_file_splice_read+0x1da/0xb10 [ 224.064956] ? do_splice_direct+0x2d4/0x420 05:10:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x25, &(0x7f0000000180)=ANY=[@ANYBLOB="03fbd954"], 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0x10) 05:10:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ip6_vti0\x00', 0xc000}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000300)="740700043a73e400a28e8c8e9d30919e775823f174b1e362c9", 0x19) [ 224.069288] ? do_sendfile+0x623/0xe20 [ 224.073179] ? __x64_sys_sendfile64+0x15d/0x250 [ 224.077856] ? do_syscall_64+0x1b9/0x820 [ 224.081934] ? iter_file_splice_write+0x1010/0x1010 [ 224.086954] ? __put_page+0x136/0x190 [ 224.090763] ? __put_compound_page+0xe0/0xe0 [ 224.095183] ? sock_kfree_s+0x60/0x60 [ 224.098996] ? generic_pipe_buf_release+0x1de/0x2b0 [ 224.104015] ? anon_pipe_buf_release+0x530/0x530 [ 224.108784] ? generic_pipe_buf_nosteal+0x10/0x10 [ 224.113635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 224.114896] tmpfs: Bad mount option ,1a [ 224.114896] 15 bond0 3 0 01005e000001 [ 224.114896] 21 veth1_to_bridge 1 0 333300000001 [ 224.114896] 21 veth1_to_bridge 1 0 01005e000001 [ 224.114896] 21 veth1_to_bridge 1 0 3333ff4596f2 [ 224.114896] 21 veth1_to_bridge 1 0 3333ff00001c [ 224.114896] 27 veth0_to_team 1 0 333300000001 [ 224.114896] 27 veth0_to_team 1 0 01005e0⌠XšèÂÝK„Ýž¸/¨éMõˆ¹¯WÚß^M“<³+¯TB<<.mX·3óE lø ɾ¬î«¬6P`÷|”¼ƒºÛ½4ð9ç"ŽÍB [ 224.119176] ? splice_from_pipe_next.part.9+0x296/0x340 [ 224.119197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 224.119211] ? fsnotify+0xbb4/0x14e0 [ 224.119237] ? fsnotify_first_mark+0x350/0x350 [ 224.119258] ? fsnotify+0x14e0/0x14e0 [ 224.119272] ? splice_from_pipe+0x1f5/0x340 [ 224.119323] ? generic_pipe_buf_nosteal+0x10/0x10 [ 224.200090] ? splice_shrink_spd+0xd0/0xd0 [ 224.204341] ? security_file_permission+0x1c6/0x240 [ 224.209365] ? rw_verify_area+0x118/0x360 [ 224.213515] ? iter_file_splice_write+0x1010/0x1010 05:10:45 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/48) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1004000000016) [ 224.218537] do_splice_to+0x12e/0x190 [ 224.222350] splice_direct_to_actor+0x270/0x8f0 [ 224.227025] ? pipe_to_sendpage+0x400/0x400 [ 224.231381] ? do_splice_to+0x190/0x190 [ 224.235365] ? rw_verify_area+0x118/0x360 [ 224.239521] do_splice_direct+0x2d4/0x420 [ 224.243679] ? splice_direct_to_actor+0x8f0/0x8f0 [ 224.248532] ? rw_verify_area+0x118/0x360 [ 224.252687] do_sendfile+0x623/0xe20 [ 224.256416] ? do_compat_pwritev64+0x1c0/0x1c0 [ 224.261016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 05:10:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x4b, "3746b50e61281beca8764ffbca574a52d8cfc625628b7fb8aa52942b64d8bb4d", "877110380a0cac461cd918fc94707c918aed307b2c7f9935528cdb881ae8feba", "613109b5c3582268f928717724fd9a383aed863138032ab943bc039f5bfc586d", "233f874965c94dbf8dd1c739d366d8d1b3d6a2d8ae4b62ece235af21006d3159", "691a14f8fe2bf2d29bd68e89ebccbf560e002269f28e0ddeb9571d3bd1a7e77a", "54c5d3b3e53ce51ad3e23dae"}}) [ 224.266558] ? _copy_from_user+0xdf/0x150 [ 224.270713] __x64_sys_sendfile64+0x15d/0x250 [ 224.275217] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 224.279808] ? do_syscall_64+0x9a/0x820 [ 224.283786] do_syscall_64+0x1b9/0x820 [ 224.287674] ? finish_task_switch+0x1d3/0x870 [ 224.292178] ? syscall_return_slowpath+0x5e0/0x5e0 [ 224.297115] ? syscall_return_slowpath+0x31d/0x5e0 [ 224.302055] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 224.307436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 224.312292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.317484] RIP: 0033:0x455ab9 [ 224.320670] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.340073] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 224.347789] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 224.355064] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 224.362335] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 224.369599] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 224.376861] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000001a 05:10:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000200)='o', 0x1, 0xfffffffffffffffb) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000080)=0x5) keyctl$set_timeout(0xf, r0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x7, 0x0, 0x8, 0x6, 0x480, 0x5, 0x2, 0x401, 0x3, 0x800, 0x1, 0xf24, 0x7f}, {0x7, 0x4, 0x37, 0x3, 0x7ff, 0xc3, 0x1ff, 0x800, 0x7b50, 0xf656, 0x101, 0x3}, {0x7a, 0x4, 0x4, 0x8, 0x1, 0x6, 0x5, 0x0, 0x100000001, 0x1000, 0x3, 0xfffffffffffffffd, 0x4}], 0x7}) 05:10:46 executing program 2: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=@req3, 0xfe1e) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x100, 0x4) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1a0) 05:10:46 executing program 3: socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$alg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4}], 0x18}, 0x0) 05:10:46 executing program 4 (fault-call:2 fault-nth:27): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x123000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xb) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5c, 0x1000000a400) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000180)) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x13002, 0x1000, 0x0, 0x6, 0x401}) 05:10:46 executing program 7: r0 = getpgid(0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8b2b, &(0x7f0000000100)={'veth1_to_bridge\x00', @ifru_map}) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, r4) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r1, 0x4, 0x2000) read(r1, &(0x7f0000000000)=""/126, 0x7e) dup2(r1, r3) 05:10:46 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = userfaultfd(0xa07fe) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001bd000/0x4000)=nil, 0x4000}}) 05:10:46 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) write$binfmt_aout(r0, &(0x7f0000000e80)={{0x11, 0x0, 0x0, 0x14000000}}, 0xfdef) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8000, 0x420200) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) 05:10:46 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x12, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x3ed042665fd35a34) [ 224.977165] FAULT_INJECTION: forcing a failure. [ 224.977165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.989129] CPU: 0 PID: 14500 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 224.996492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.005850] Call Trace: [ 225.008453] dump_stack+0x1c9/0x2b4 [ 225.012094] ? dump_stack_print_info.cold.2+0x52/0x52 [ 225.017295] ? find_held_lock+0x36/0x1c0 [ 225.021379] should_fail.cold.4+0xa/0x1a [ 225.025455] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 225.030573] ? kasan_check_read+0x11/0x20 [ 225.031992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.034721] ? rcu_is_watching+0x8c/0x150 [ 225.034738] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 225.034762] ? find_held_lock+0x36/0x1c0 [ 225.034792] ? check_same_owner+0x340/0x340 [ 225.034810] ? rcu_note_context_switch+0x730/0x730 [ 225.063106] __alloc_pages_nodemask+0x36e/0xdb0 [ 225.066448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:10:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3eb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0x2000003fe, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 225.067777] ? default_file_splice_read+0x1da/0xb10 [ 225.067796] ? do_splice_to+0x12e/0x190 [ 225.067811] ? splice_direct_to_actor+0x270/0x8f0 [ 225.067832] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 225.067858] ? rcu_pm_notify+0xc0/0xc0 [ 225.097435] ? __kmalloc_node+0x33/0x70 [ 225.101408] ? __kmalloc_node+0x33/0x70 [ 225.105371] ? rcu_read_lock_sched_held+0x108/0x120 [ 225.110377] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 225.115911] alloc_pages_current+0x10c/0x210 [ 225.120309] push_pipe+0x400/0x7a0 [ 225.123836] ? __kmalloc_node+0x47/0x70 [ 225.127799] iov_iter_get_pages_alloc+0x866/0x1530 [ 225.132712] ? trace_hardirqs_on+0xd/0x10 [ 225.136847] ? iov_iter_fault_in_readable+0x460/0x460 [ 225.142028] ? free_obj_work+0xbb0/0xbb0 [ 225.146076] ? free_unref_page+0x6e3/0x9a0 [ 225.150298] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 225.155299] ? trace_hardirqs_on+0xd/0x10 [ 225.159430] ? mark_free_pages+0x3b0/0x3b0 [ 225.163648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 225.169174] ? sock_sendmsg+0x5a/0x120 [ 225.173047] ? kernel_sendmsg+0x43/0x50 [ 225.177004] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 225.182009] ? iov_iter_pipe+0xc2/0x2f0 [ 225.185975] default_file_splice_read+0x1da/0xb10 [ 225.190800] ? do_splice_direct+0x2d4/0x420 [ 225.195103] ? do_sendfile+0x623/0xe20 [ 225.198973] ? __x64_sys_sendfile64+0x15d/0x250 [ 225.203626] ? do_syscall_64+0x1b9/0x820 [ 225.207677] ? iter_file_splice_write+0x1010/0x1010 [ 225.212679] ? __put_page+0x136/0x190 [ 225.216463] ? __put_compound_page+0xe0/0xe0 [ 225.220854] ? sock_kfree_s+0x60/0x60 [ 225.224641] ? generic_pipe_buf_release+0x1de/0x2b0 [ 225.229641] ? anon_pipe_buf_release+0x530/0x530 [ 225.234385] ? generic_pipe_buf_nosteal+0x10/0x10 [ 225.239210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 225.244731] ? splice_from_pipe_next.part.9+0x296/0x340 [ 225.250078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 225.255598] ? fsnotify+0xbb4/0x14e0 [ 225.259301] ? fsnotify_first_mark+0x350/0x350 [ 225.263885] ? fsnotify+0x14e0/0x14e0 [ 225.267672] ? splice_from_pipe+0x1f5/0x340 [ 225.271979] ? generic_pipe_buf_nosteal+0x10/0x10 [ 225.276806] ? splice_shrink_spd+0xd0/0xd0 [ 225.281031] ? security_file_permission+0x1c6/0x240 [ 225.286038] ? rw_verify_area+0x118/0x360 [ 225.290173] ? iter_file_splice_write+0x1010/0x1010 [ 225.295174] do_splice_to+0x12e/0x190 [ 225.298964] splice_direct_to_actor+0x270/0x8f0 [ 225.303618] ? pipe_to_sendpage+0x400/0x400 [ 225.307935] ? do_splice_to+0x190/0x190 [ 225.311895] ? rw_verify_area+0x118/0x360 [ 225.316035] do_splice_direct+0x2d4/0x420 [ 225.320171] ? splice_direct_to_actor+0x8f0/0x8f0 [ 225.325001] ? rw_verify_area+0x118/0x360 [ 225.329137] do_sendfile+0x623/0xe20 [ 225.332846] ? do_compat_pwritev64+0x1c0/0x1c0 [ 225.337418] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 225.342940] ? _copy_from_user+0xdf/0x150 [ 225.347073] __x64_sys_sendfile64+0x15d/0x250 [ 225.351554] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 225.356121] ? do_syscall_64+0x9a/0x820 [ 225.360103] do_syscall_64+0x1b9/0x820 [ 225.363995] ? finish_task_switch+0x1d3/0x870 [ 225.368480] ? syscall_return_slowpath+0x5e0/0x5e0 [ 225.373396] ? syscall_return_slowpath+0x31d/0x5e0 [ 225.378315] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 225.383665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.388493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.393665] RIP: 0033:0x455ab9 [ 225.396835] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.416067] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 05:10:46 executing program 6: timer_create(0x0, &(0x7f0000000180)={0x0, 0x3b, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000300)}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000001000)={{}, {0x77359400}}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000000c0)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) recvfrom$inet(r0, &(0x7f0000000000)=""/21, 0x15, 0x40, 0x0, 0x0) [ 225.423761] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 225.431016] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 225.438271] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 225.445522] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 225.452776] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000001b 05:10:46 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2400) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xea}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x5, 0x0, 0x1}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x40e67410, 0x101800) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000240)) getsockname(r2, &(0x7f0000000280)=@nfc, &(0x7f0000000300)=0x80) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000400)={0x6947, {0x2, 0x4e24, @rand_addr=0x4}, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x20, 0x6, 0x100000001, 0x3f, 0x10001, &(0x7f00000003c0)='veth0_to_bond\x00', 0x3, 0x908f}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) chown(&(0x7f0000000480)='./file0\x00', r4, r5) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4201000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xec, r6, 0x1, 0x70bd28, 0x25dfdbfe, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x30}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x63}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9cc}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x48004}, 0x80) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000880)) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000008c0)=0xc87) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000900)=0x10001) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000940)={'vcan0\x00', r3}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000980)={@empty, @dev={0xac, 0x14, 0x14, 0x1e}, 0x1, 0x2, [@broadcast=0xffffffff, @empty]}, 0x18) syz_open_pts(r2, 0x400) getpid() setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000009c0)={@in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0xffffffff, 0x100000000, 0x6, "0f5b3dd984fa4898d9aa07399877ef3606448320bae7e776fe2a1803bab6180eb57679a6da34e7c40791f0a78f2d4f3438e4802efd55a008001bb779374d582edb2822b63d251358a94ba3a77773a7a7"}, 0xd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000b40)={0x4, 0x820f, 0x0, 0x0, r1}, 0x10) r7 = msgget$private(0x0, 0x102) msgrcv(r7, &(0x7f0000000b80)={0x0, ""/36}, 0x2c, 0x3, 0x2800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000bc0)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000c40)={0x7, 0x8, 0xfa00, {r8, 0xfffffffffffffff7}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c80)) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000d00)={0x1, 0x9, &(0x7f0000000cc0)="be65bda4c6f7e0def9"}) 05:10:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x8, {0x2, 0x4e24}, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e22}, 0x120, 0x8000, 0x100000001, 0xf39, 0x3, &(0x7f0000000080), 0x5, 0x9, 0x1}) ioctl(r0, 0x8912, &(0x7f00000002c0)="1d5cc83d6d345f8f7600709b876b2f0d5320722deec38f7d7be7a962f46658132aa2aa4985a3cba7851d75edcc63c0d09afc2a4913f6861da836978b9f6aab1ba07892d080050500fe7f86e819b9c2553d04d3c459014b8265d4464cfc3d466df7788a7f6d122fcf9973dc9191f5ba3ba5e0922bc6c50fa42e50c4aaa9fba2c5814ea02f66206cefc0e4d2a905abb6060fa2986f0c804c0c33bb147e0e048d647ebf45c430f9c58e3e979ca7dbe785fdcfd8a0d9170fc0c416ae23ebe851128665c1b751327017188aa31b6a") getsockopt$bt_hci(r0, 0x0, 0x32, &(0x7f0000000100)=""/241, &(0x7f0000000040)=0xf1) 05:10:46 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x48000, 0x8) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x2) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00005feffc), 0x4) sendto$unix(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001, 0x0, 0x4, [@rand_addr, @multicast2=0xe0000002, @multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}]}, 0x20) close(r0) 05:10:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0x100000a1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) recvfrom$inet(r0, &(0x7f0000000080)=""/218, 0xda, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) shutdown(r0, 0x1) [ 225.544390] skbuff: bad partial csum: csum=5120/0 len=3712 [ 225.579964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:10:46 executing program 4 (fault-call:2 fault-nth:28): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:46 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="f0", 0x1}]}, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000600)}, 0x0) 05:10:46 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x8000, 0x4) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r1) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x18) [ 225.694532] FAULT_INJECTION: forcing a failure. [ 225.694532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.706560] CPU: 1 PID: 14551 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 225.713922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.723275] Call Trace: [ 225.725875] dump_stack+0x1c9/0x2b4 [ 225.729514] ? dump_stack_print_info.cold.2+0x52/0x52 [ 225.734709] ? find_held_lock+0x36/0x1c0 [ 225.738778] should_fail.cold.4+0xa/0x1a [ 225.742834] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 225.747936] ? kasan_check_read+0x11/0x20 [ 225.752076] ? rcu_is_watching+0x8c/0x150 [ 225.756214] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 225.760625] ? find_held_lock+0x36/0x1c0 [ 225.764686] ? check_same_owner+0x340/0x340 [ 225.768998] ? rcu_note_context_switch+0x730/0x730 [ 225.773929] __alloc_pages_nodemask+0x36e/0xdb0 [ 225.778586] ? default_file_splice_read+0x1da/0xb10 [ 225.783636] ? do_splice_to+0x12e/0x190 [ 225.787595] ? splice_direct_to_actor+0x270/0x8f0 [ 225.792431] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 225.797455] ? rcu_pm_notify+0xc0/0xc0 [ 225.801335] ? __kmalloc_node+0x33/0x70 [ 225.805292] ? __kmalloc_node+0x33/0x70 [ 225.809253] ? rcu_read_lock_sched_held+0x108/0x120 [ 225.814257] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 225.819782] alloc_pages_current+0x10c/0x210 [ 225.824180] push_pipe+0x400/0x7a0 [ 225.827703] ? __kmalloc_node+0x47/0x70 [ 225.831667] iov_iter_get_pages_alloc+0x866/0x1530 [ 225.836582] ? trace_hardirqs_on+0xd/0x10 [ 225.840723] ? iov_iter_fault_in_readable+0x460/0x460 [ 225.845901] ? free_obj_work+0xbb0/0xbb0 [ 225.849949] ? free_unref_page+0x6e3/0x9a0 [ 225.854172] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 225.859173] ? trace_hardirqs_on+0xd/0x10 [ 225.863308] ? mark_free_pages+0x3b0/0x3b0 [ 225.867531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 225.873056] ? sock_sendmsg+0x5a/0x120 [ 225.876928] ? kernel_sendmsg+0x43/0x50 [ 225.880906] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 225.885908] ? iov_iter_pipe+0xc2/0x2f0 [ 225.889882] default_file_splice_read+0x1da/0xb10 [ 225.894711] ? do_splice_direct+0x2d4/0x420 [ 225.899021] ? do_sendfile+0x623/0xe20 [ 225.902896] ? __x64_sys_sendfile64+0x15d/0x250 [ 225.907554] ? do_syscall_64+0x1b9/0x820 [ 225.911609] ? iter_file_splice_write+0x1010/0x1010 [ 225.916612] ? __put_page+0x136/0x190 [ 225.920406] ? __put_compound_page+0xe0/0xe0 [ 225.924803] ? sock_kfree_s+0x60/0x60 [ 225.928598] ? generic_pipe_buf_release+0x1de/0x2b0 [ 225.933603] ? anon_pipe_buf_release+0x530/0x530 [ 225.938346] ? generic_pipe_buf_nosteal+0x10/0x10 [ 225.943171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 225.948696] ? splice_from_pipe_next.part.9+0x296/0x340 [ 225.954047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 225.959578] ? fsnotify+0xbb4/0x14e0 [ 225.963293] ? fsnotify_first_mark+0x350/0x350 [ 225.967858] ? fsnotify+0x14e0/0x14e0 [ 225.971643] ? splice_from_pipe+0x1f5/0x340 [ 225.975961] ? generic_pipe_buf_nosteal+0x10/0x10 [ 225.980801] ? splice_shrink_spd+0xd0/0xd0 [ 225.985032] ? security_file_permission+0x1c6/0x240 [ 225.990039] ? rw_verify_area+0x118/0x360 [ 225.994184] ? iter_file_splice_write+0x1010/0x1010 [ 225.999188] do_splice_to+0x12e/0x190 [ 226.002978] splice_direct_to_actor+0x270/0x8f0 [ 226.007630] ? pipe_to_sendpage+0x400/0x400 [ 226.011940] ? do_splice_to+0x190/0x190 [ 226.015898] ? rw_verify_area+0x118/0x360 [ 226.020036] do_splice_direct+0x2d4/0x420 [ 226.024170] ? splice_direct_to_actor+0x8f0/0x8f0 [ 226.028996] ? rw_verify_area+0x118/0x360 [ 226.033134] do_sendfile+0x623/0xe20 [ 226.036838] ? do_compat_pwritev64+0x1c0/0x1c0 [ 226.041409] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 226.046931] ? _copy_from_user+0xdf/0x150 [ 226.051067] __x64_sys_sendfile64+0x15d/0x250 [ 226.055554] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 226.060120] ? do_syscall_64+0x9a/0x820 [ 226.064083] do_syscall_64+0x1b9/0x820 [ 226.067952] ? finish_task_switch+0x1d3/0x870 [ 226.072430] ? syscall_return_slowpath+0x5e0/0x5e0 [ 226.077343] ? syscall_return_slowpath+0x31d/0x5e0 [ 226.082264] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 226.087614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.092443] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.097613] RIP: 0033:0x455ab9 [ 226.100783] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.120015] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 226.127712] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 226.134966] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 226.142218] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 226.149471] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 226.157244] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000001c 05:10:47 executing program 4 (fault-call:2 fault-nth:29): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:47 executing program 2: perf_event_open(&(0x7f0000940000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) 05:10:47 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x10102) r0 = syz_open_dev$sndtimer(&(0x7f0000002200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000009680)=""/15) [ 226.257488] FAULT_INJECTION: forcing a failure. [ 226.257488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 226.269445] CPU: 0 PID: 14565 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 226.276816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.286176] Call Trace: [ 226.288790] dump_stack+0x1c9/0x2b4 [ 226.292433] ? dump_stack_print_info.cold.2+0x52/0x52 [ 226.297642] ? find_held_lock+0x36/0x1c0 [ 226.301724] should_fail.cold.4+0xa/0x1a [ 226.305797] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 226.310909] ? kasan_check_read+0x11/0x20 [ 226.315064] ? rcu_is_watching+0x8c/0x150 [ 226.319218] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 226.323637] ? find_held_lock+0x36/0x1c0 [ 226.327720] ? check_same_owner+0x340/0x340 [ 226.332050] ? rcu_note_context_switch+0x730/0x730 [ 226.337004] __alloc_pages_nodemask+0x36e/0xdb0 [ 226.341681] ? default_file_splice_read+0x1da/0xb10 [ 226.346787] ? do_splice_to+0x12e/0x190 [ 226.350767] ? splice_direct_to_actor+0x270/0x8f0 [ 226.355619] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 226.360670] ? rcu_pm_notify+0xc0/0xc0 [ 226.364592] ? __kmalloc_node+0x33/0x70 [ 226.368570] ? __kmalloc_node+0x33/0x70 [ 226.372552] ? rcu_read_lock_sched_held+0x108/0x120 [ 226.377578] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 226.383127] alloc_pages_current+0x10c/0x210 [ 226.387545] push_pipe+0x400/0x7a0 [ 226.391612] ? __kmalloc_node+0x47/0x70 [ 226.395604] iov_iter_get_pages_alloc+0x866/0x1530 [ 226.400547] ? trace_hardirqs_on+0xd/0x10 [ 226.404714] ? iov_iter_fault_in_readable+0x460/0x460 [ 226.409908] ? free_obj_work+0xbb0/0xbb0 [ 226.413974] ? free_unref_page+0x6e3/0x9a0 [ 226.418213] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 226.423236] ? trace_hardirqs_on+0xd/0x10 [ 226.427386] ? mark_free_pages+0x3b0/0x3b0 [ 226.431628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.437166] ? sock_sendmsg+0x5a/0x120 [ 226.441059] ? kernel_sendmsg+0x43/0x50 [ 226.445034] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 226.450059] ? iov_iter_pipe+0xc2/0x2f0 [ 226.454039] default_file_splice_read+0x1da/0xb10 [ 226.458886] ? do_splice_direct+0x2d4/0x420 [ 226.463220] ? do_sendfile+0x623/0xe20 [ 226.467107] ? __x64_sys_sendfile64+0x15d/0x250 [ 226.471779] ? do_syscall_64+0x1b9/0x820 [ 226.475855] ? iter_file_splice_write+0x1010/0x1010 [ 226.480875] ? __put_page+0x136/0x190 [ 226.484678] ? __put_compound_page+0xe0/0xe0 [ 226.489089] ? sock_kfree_s+0x60/0x60 [ 226.492896] ? generic_pipe_buf_release+0x1de/0x2b0 [ 226.497912] ? anon_pipe_buf_release+0x530/0x530 [ 226.502671] ? generic_pipe_buf_nosteal+0x10/0x10 [ 226.507515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.513064] ? splice_from_pipe_next.part.9+0x296/0x340 [ 226.518433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.523970] ? fsnotify+0xbb4/0x14e0 [ 226.527694] ? fsnotify_first_mark+0x350/0x350 [ 226.532279] ? fsnotify+0x14e0/0x14e0 [ 226.536086] ? splice_from_pipe+0x1f5/0x340 [ 226.540413] ? generic_pipe_buf_nosteal+0x10/0x10 [ 226.545246] ? splice_shrink_spd+0xd0/0xd0 [ 226.549465] ? security_file_permission+0x1c6/0x240 [ 226.554464] ? rw_verify_area+0x118/0x360 [ 226.558593] ? iter_file_splice_write+0x1010/0x1010 [ 226.563599] do_splice_to+0x12e/0x190 [ 226.567392] splice_direct_to_actor+0x270/0x8f0 [ 226.572048] ? pipe_to_sendpage+0x400/0x400 [ 226.576367] ? do_splice_to+0x190/0x190 [ 226.580332] ? rw_verify_area+0x118/0x360 [ 226.584475] do_splice_direct+0x2d4/0x420 [ 226.588627] ? splice_direct_to_actor+0x8f0/0x8f0 [ 226.593454] ? rw_verify_area+0x118/0x360 [ 226.597583] do_sendfile+0x623/0xe20 [ 226.601288] ? do_compat_pwritev64+0x1c0/0x1c0 [ 226.605858] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 226.611380] ? _copy_from_user+0xdf/0x150 [ 226.615510] __x64_sys_sendfile64+0x15d/0x250 [ 226.619989] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 226.624569] ? do_syscall_64+0x9a/0x820 [ 226.628555] do_syscall_64+0x1b9/0x820 [ 226.632454] ? syscall_return_slowpath+0x5e0/0x5e0 [ 226.637389] ? syscall_return_slowpath+0x31d/0x5e0 [ 226.642334] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 226.647709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.652567] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.657757] RIP: 0033:0x455ab9 [ 226.660938] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.680221] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 226.687940] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 226.695200] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 226.702458] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 05:10:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000140)=""/206) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/mixer\x00', 0x0, 0x0) ioctl(r1, 0x3, &(0x7f0000000a80)="d013dede3ddb614495db181c765cfe80a4e3c517373f68bd1e254a7bb819f96114f3ff2d230753") mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) ioctl$VHOST_GET_FEATURES(r2, 0x80044d76, &(0x7f0000000100)) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xffffff94) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000a40)={&(0x7f00000002c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f00000008c0)=""/191, 0xbf}], 0x7, &(0x7f0000000a00)=""/9, 0x9, 0x7fff}, 0x2) write$binfmt_aout(r3, &(0x7f0000000580)={{}, "", [[]]}, 0x120) 05:10:48 executing program 0: socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730407000000000000820f7c4000", 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r0) [ 226.709722] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 226.716970] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000001d 05:10:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000080)={{0x3, 0xf04}, 'port0\x00', 0x2, 0x10, 0x10000, 0x81, 0x100000000, 0x9, 0xffffffff80000001, 0x0, 0x2, 0x6}) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x2e5, &(0x7f0000009ff0)=[{&(0x7f0000000140)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x1c}], 0x0, 0x0, 0x380}, 0x0) 05:10:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0xab, "f37313ed4f2f89dcec545d63360c9289f16c6496f14a23f34ee0058cf86690d10483fa428273667f91fc3b60c22db979dd004312f90426b552dc29606e96f67c10778c1bd0a5e479fc7d8cee2b18141e8b628e9f443e8307f6dfcae5dccdd30160adab0b73618180021e0e209a26079abb80ae06c0276741e752bf9bfb25f096a7f50ccac479b15f4321809318040f400557946b92705558815832fbd4c2932b8d71f8ba23842f60488c10"}, &(0x7f0000000040)=0xcf) pwritev(r2, &(0x7f00000000c0), 0x10000000000000b0, 0x0) 05:10:48 executing program 6: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xa788a92, 0x80041) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) r1 = userfaultfd(0x0) read(r1, &(0x7f00000000c0)=""/128, 0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={{r2, r3/1000+10000}, {0x0, 0x7530}}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x3, 0x19) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 05:10:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000001e00fb034d564bc4a9dfbb2bbc7000000000010ab267d3eca757d57bcc19f4a42e68ec53b0a115d9dbc2dba000bf98f8000000"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000073]}) 05:10:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xe400, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x10001}, 0x10) 05:10:48 executing program 4 (fault-call:2 fault-nth:30): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 226.835523] FAULT_INJECTION: forcing a failure. [ 226.835523] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 226.847476] CPU: 0 PID: 14596 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 226.854844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.864196] Call Trace: [ 226.866779] dump_stack+0x1c9/0x2b4 [ 226.870394] ? dump_stack_print_info.cold.2+0x52/0x52 [ 226.875571] ? zap_class+0x740/0x740 [ 226.879274] should_fail.cold.4+0xa/0x1a [ 226.883322] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 226.888410] ? rcu_is_watching+0x8c/0x150 [ 226.892543] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 226.896939] ? find_held_lock+0x36/0x1c0 [ 226.900997] ? check_same_owner+0x340/0x340 [ 226.905313] ? rcu_note_context_switch+0x730/0x730 [ 226.910237] __alloc_pages_nodemask+0x36e/0xdb0 [ 226.914891] ? default_file_splice_read+0x1da/0xb10 [ 226.919890] ? do_splice_to+0x12e/0x190 [ 226.923936] ? splice_direct_to_actor+0x270/0x8f0 [ 226.928768] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 226.933778] ? rcu_pm_notify+0xc0/0xc0 [ 226.937655] ? __kmalloc_node+0x33/0x70 [ 226.941613] ? __kmalloc_node+0x33/0x70 [ 226.945586] ? rcu_read_lock_sched_held+0x108/0x120 [ 226.950597] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 226.956125] alloc_pages_current+0x10c/0x210 [ 226.960521] push_pipe+0x400/0x7a0 [ 226.964047] ? __kmalloc_node+0x47/0x70 [ 226.968021] iov_iter_get_pages_alloc+0x866/0x1530 [ 226.972937] ? trace_hardirqs_on+0xd/0x10 [ 226.977075] ? iov_iter_fault_in_readable+0x460/0x460 [ 226.982253] ? free_obj_work+0xbb0/0xbb0 [ 226.986300] ? free_unref_page+0x6e3/0x9a0 [ 226.990523] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 226.995528] ? trace_hardirqs_on+0xd/0x10 [ 226.999663] ? mark_free_pages+0x3b0/0x3b0 [ 227.003894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.009425] ? sock_sendmsg+0x5a/0x120 [ 227.013306] ? kernel_sendmsg+0x43/0x50 [ 227.017271] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 227.022357] ? iov_iter_pipe+0xc2/0x2f0 [ 227.026322] default_file_splice_read+0x1da/0xb10 [ 227.031159] ? __schedule+0x884/0x1ed0 [ 227.035034] ? __x64_sys_sendfile64+0x15d/0x250 [ 227.039685] ? do_syscall_64+0x1b9/0x820 [ 227.043737] ? iter_file_splice_write+0x1010/0x1010 [ 227.048740] ? __put_page+0x136/0x190 [ 227.052526] ? __put_compound_page+0xe0/0xe0 [ 227.056924] ? sock_kfree_s+0x60/0x60 [ 227.060714] ? generic_pipe_buf_release+0x1de/0x2b0 [ 227.065721] ? anon_pipe_buf_release+0x530/0x530 [ 227.070463] ? generic_pipe_buf_nosteal+0x10/0x10 [ 227.075289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.080819] ? splice_from_pipe_next.part.9+0x296/0x340 [ 227.086169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.091697] ? fsnotify+0xbb4/0x14e0 [ 227.095401] ? fsnotify_first_mark+0x350/0x350 [ 227.099967] ? fsnotify+0x14e0/0x14e0 [ 227.103756] ? splice_from_pipe+0x1f5/0x340 [ 227.108063] ? generic_pipe_buf_nosteal+0x10/0x10 [ 227.112890] ? splice_shrink_spd+0xd0/0xd0 [ 227.117113] ? security_file_permission+0x1c6/0x240 [ 227.122116] ? rw_verify_area+0x118/0x360 [ 227.126247] ? iter_file_splice_write+0x1010/0x1010 [ 227.131250] do_splice_to+0x12e/0x190 [ 227.135039] splice_direct_to_actor+0x270/0x8f0 [ 227.139694] ? pipe_to_sendpage+0x400/0x400 [ 227.144008] ? do_splice_to+0x190/0x190 [ 227.147973] ? rw_verify_area+0x118/0x360 [ 227.152112] do_splice_direct+0x2d4/0x420 [ 227.156248] ? splice_direct_to_actor+0x8f0/0x8f0 [ 227.161079] ? rw_verify_area+0x118/0x360 [ 227.165213] do_sendfile+0x623/0xe20 [ 227.168916] ? do_compat_pwritev64+0x1c0/0x1c0 [ 227.173491] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 227.179014] ? _copy_from_user+0xdf/0x150 [ 227.183151] __x64_sys_sendfile64+0x15d/0x250 [ 227.187632] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 227.192200] ? do_syscall_64+0x9a/0x820 [ 227.196164] do_syscall_64+0x1b9/0x820 [ 227.200039] ? finish_task_switch+0x1d3/0x870 [ 227.204521] ? syscall_return_slowpath+0x5e0/0x5e0 [ 227.209435] ? syscall_return_slowpath+0x31d/0x5e0 [ 227.214354] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 227.219707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 227.224541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.229715] RIP: 0033:0x455ab9 [ 227.232896] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.252167] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 227.259859] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 227.267110] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 227.274373] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 05:10:48 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) fdatasync(r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x40200, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f0000000040), 0x3, 0x0, &(0x7f0000000000), &(0x7f0000f44ffc), 0x1) futex(&(0x7f0000000140)=0x7fff, 0xc, 0x2, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)=0x2, 0x3) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0xffffffffbfe40d05}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0xfffffffffffffffe}, 0x8) 05:10:48 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x0, 0x0) poll(&(0x7f0000000380)=[{r0}], 0x1, 0xfff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x4e20, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x2d}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0x8}], 0x58) io_setup(0x9, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0}]) [ 227.281625] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 227.288877] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000001e 05:10:48 executing program 4 (fault-call:2 fault-nth:31): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:48 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000011c0)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) [ 227.378388] Unknown ioctl -1072125377 [ 227.404673] FAULT_INJECTION: forcing a failure. [ 227.404673] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.416650] CPU: 1 PID: 14611 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 227.424016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.433377] Call Trace: [ 227.435981] dump_stack+0x1c9/0x2b4 [ 227.439614] ? dump_stack_print_info.cold.2+0x52/0x52 [ 227.444804] ? find_held_lock+0x36/0x1c0 [ 227.448870] should_fail.cold.4+0xa/0x1a [ 227.452931] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 227.458050] ? kasan_check_read+0x11/0x20 [ 227.462187] ? rcu_is_watching+0x8c/0x150 [ 227.466320] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 227.470720] ? find_held_lock+0x36/0x1c0 [ 227.474785] ? check_same_owner+0x340/0x340 [ 227.479096] ? rcu_note_context_switch+0x730/0x730 [ 227.484030] __alloc_pages_nodemask+0x36e/0xdb0 [ 227.488691] ? default_file_splice_read+0x1da/0xb10 [ 227.493691] ? do_splice_to+0x12e/0x190 [ 227.497663] ? splice_direct_to_actor+0x270/0x8f0 [ 227.502500] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 227.507525] ? rcu_pm_notify+0xc0/0xc0 [ 227.511410] ? __kmalloc_node+0x33/0x70 [ 227.515369] ? __kmalloc_node+0x33/0x70 [ 227.519334] ? rcu_read_lock_sched_held+0x108/0x120 [ 227.524341] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 227.529879] alloc_pages_current+0x10c/0x210 [ 227.534278] push_pipe+0x400/0x7a0 [ 227.537802] ? __kmalloc_node+0x47/0x70 [ 227.541783] iov_iter_get_pages_alloc+0x866/0x1530 [ 227.546703] ? trace_hardirqs_on+0xd/0x10 [ 227.550856] ? iov_iter_fault_in_readable+0x460/0x460 [ 227.556046] ? free_obj_work+0xbb0/0xbb0 [ 227.560098] ? free_unref_page+0x6e3/0x9a0 [ 227.564335] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 227.569340] ? trace_hardirqs_on+0xd/0x10 [ 227.573477] ? mark_free_pages+0x3b0/0x3b0 [ 227.577712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.583235] ? sock_sendmsg+0x5a/0x120 [ 227.587121] ? kernel_sendmsg+0x43/0x50 [ 227.591935] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 227.596942] ? iov_iter_pipe+0xc2/0x2f0 [ 227.600910] default_file_splice_read+0x1da/0xb10 [ 227.605742] ? __schedule+0x884/0x1ed0 [ 227.609619] ? __x64_sys_sendfile64+0x15d/0x250 [ 227.614274] ? do_syscall_64+0x1b9/0x820 [ 227.618332] ? iter_file_splice_write+0x1010/0x1010 [ 227.623334] ? __put_page+0x136/0x190 [ 227.627124] ? __put_compound_page+0xe0/0xe0 [ 227.631525] ? sock_kfree_s+0x60/0x60 [ 227.635318] ? generic_pipe_buf_release+0x1de/0x2b0 [ 227.640319] ? anon_pipe_buf_release+0x530/0x530 [ 227.645068] ? generic_pipe_buf_nosteal+0x10/0x10 [ 227.649913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.655437] ? splice_from_pipe_next.part.9+0x296/0x340 [ 227.660795] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.666316] ? fsnotify+0xbb4/0x14e0 [ 227.670035] ? fsnotify_first_mark+0x350/0x350 [ 227.674607] ? fsnotify+0x14e0/0x14e0 [ 227.678394] ? splice_from_pipe+0x1f5/0x340 [ 227.682703] ? generic_pipe_buf_nosteal+0x10/0x10 [ 227.687532] ? splice_shrink_spd+0xd0/0xd0 [ 227.691758] ? security_file_permission+0x1c6/0x240 [ 227.696766] ? rw_verify_area+0x118/0x360 [ 227.700901] ? iter_file_splice_write+0x1010/0x1010 [ 227.705907] do_splice_to+0x12e/0x190 [ 227.709699] splice_direct_to_actor+0x270/0x8f0 [ 227.714359] ? pipe_to_sendpage+0x400/0x400 [ 227.718675] ? do_splice_to+0x190/0x190 [ 227.722640] ? rw_verify_area+0x118/0x360 [ 227.726779] do_splice_direct+0x2d4/0x420 [ 227.730915] ? splice_direct_to_actor+0x8f0/0x8f0 [ 227.735759] ? rw_verify_area+0x118/0x360 [ 227.739898] do_sendfile+0x623/0xe20 [ 227.743616] ? do_compat_pwritev64+0x1c0/0x1c0 [ 227.748196] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 227.753719] ? _copy_from_user+0xdf/0x150 [ 227.757865] __x64_sys_sendfile64+0x15d/0x250 [ 227.767060] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 227.771659] ? do_syscall_64+0x9a/0x820 [ 227.775630] do_syscall_64+0x1b9/0x820 [ 227.779504] ? syscall_slow_exit_work+0x500/0x500 [ 227.784337] ? syscall_return_slowpath+0x5e0/0x5e0 [ 227.789263] ? syscall_return_slowpath+0x31d/0x5e0 [ 227.794187] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 227.799548] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 227.804384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.809561] RIP: 0033:0x455ab9 [ 227.812742] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.832089] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 227.839786] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 227.847042] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 05:10:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200)=0x9f, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000017e830736aad40ad63079f9539800000000000500000000000000000000000000000000000000000000005b62bae181ff73ed6c9b0d75659c4162ff12e93944825bd4700f6677a922452f00e2f911c59e97147c"], 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cpuset\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x81, 0x100000000, 0xfffffffffffffffa, 0x80000001}, 0x8) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x100000000}, 0xb) sendfile(r1, r2, &(0x7f0000000080), 0x50000000000443) 05:10:49 executing program 6: r0 = socket(0x15, 0x80005, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000300)="025cc83d6d345f8f762070") setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000003c0)={@nfc={0x27}, {&(0x7f0000000340)=""/72, 0x48}, &(0x7f00000001c0)}, 0xa0) [ 227.854296] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 227.861549] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 227.868801] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 000000000000001f 05:10:49 executing program 7: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x20080, 0x0) dup3(r0, r1, 0x80000) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x410000) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0xfff, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x400000) fdatasync(r2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85512, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x8000000000000000, '\x00', 0x1}) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000100)=""/152) 05:10:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x20) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x20002) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x80000001) 05:10:49 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000004c0)="b9800000c00f3235004000000f300f091e0fc76ff50f060ff369002e0f01c866b8bc008ec8b9800000c00f3235000100000f3066ba4300ed", 0x38}], 0x1, 0x0, &(0x7f0000000100)=[@cr4={0x1, 0x4000}, @cstype0={0x4, 0x9}], 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x0, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}, 0x1}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3ff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:10:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x7) lseek(r1, 0x0, 0x3) accept$packet(r1, 0x0, &(0x7f0000000080)) 05:10:49 executing program 4 (fault-call:2 fault-nth:32): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000004c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r2, 0x3}}, 0x18) r3 = dup(r1) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x3, r4}, &(0x7f0000000140)=0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530002000008000", &(0x7f0000000280)=ANY=[@ANYBLOB="0700000000000000000000400000000100000000f9ffffff0000010000000000000000000000000000000000a0"]}) 05:10:49 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000300)=""/148, 0x94}], 0x218, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 228.099087] *** Guest State *** [ 228.102495] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 228.111415] CR4: actual=0x0000000000006040, shadow=0x0000000000004000, gh_mask=ffffffffffffe871 [ 228.121052] CR3 = 0x0000000000000000 [ 228.124834] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 228.130840] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 228.136852] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 228.138243] FAULT_INJECTION: forcing a failure. [ 228.138243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 228.143552] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 228.143572] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 228.143591] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 228.143613] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 228.155460] CPU: 0 PID: 14645 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 228.163432] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 228.171335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.171341] Call Trace: [ 228.171366] dump_stack+0x1c9/0x2b4 [ 228.171388] ? dump_stack_print_info.cold.2+0x52/0x52 [ 228.179359] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 228.187278] ? find_held_lock+0x36/0x1c0 [ 228.187306] should_fail.cold.4+0xa/0x1a [ 228.194652] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 228.202589] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 228.202609] ? kasan_check_read+0x11/0x20 [ 228.211958] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 228.214496] ? rcu_is_watching+0x8c/0x150 [ 228.214523] ? find_held_lock+0x36/0x1c0 [ 228.218138] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 228.223309] ? check_same_owner+0x340/0x340 [ 228.223326] ? rcu_note_context_switch+0x730/0x730 [ 228.231311] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 228.235320] __alloc_pages_nodemask+0x36e/0xdb0 [ 228.235338] ? default_file_splice_read+0x1da/0xb10 [ 228.239385] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 228.247316] ? do_splice_to+0x12e/0x190 [ 228.247330] ? splice_direct_to_actor+0x270/0x8f0 [ 228.247349] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 228.252436] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 228.256561] ? rcu_pm_notify+0xc0/0xc0 [ 228.256582] ? __kmalloc_node+0x33/0x70 [ 228.264535] Interruptibility = 00000000 ActivityState = 00000000 [ 228.268645] ? __kmalloc_node+0x33/0x70 [ 228.268661] ? rcu_read_lock_sched_held+0x108/0x120 [ 228.268680] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 228.272734] *** Host State *** [ 228.280675] alloc_pages_current+0x10c/0x210 [ 228.280695] push_pipe+0x400/0x7a0 [ 228.285009] RIP = 0xffffffff811f4664 RSP = 0xffff8801976b7350 [ 228.289908] ? __kmalloc_node+0x47/0x70 [ 228.289930] iov_iter_get_pages_alloc+0x866/0x1530 [ 228.297902] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 228.302531] ? trace_hardirqs_on+0xd/0x10 [ 228.302556] ? iov_iter_fault_in_readable+0x460/0x460 [ 228.307559] FSBase=00007f37869d4700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 228.313928] ? free_obj_work+0xbb0/0xbb0 [ 228.313948] ? free_unref_page+0x6e3/0x9a0 [ 228.317911] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 228.322734] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 228.322755] ? trace_hardirqs_on+0xd/0x10 [ 228.327770] CR0=0000000080050033 CR3=00000001cf74c000 CR4=00000000001426e0 [ 228.335188] ? mark_free_pages+0x3b0/0x3b0 05:10:49 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8047e, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') io_setup(0x80, &(0x7f00000002c0)=0x0) io_cancel(r3, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000300)="2db454fbcc1a2e845520bd9da16d13a622f805290e85e509e5c9d4952184c696904e83092b0e0c5d12d83e87cb8f032f0df6c191849d1e70ae563f99f78c89f35bb1c7a6354e9f98f6234ef47628667a0bcdee52451bb15a7cefe2c94c9d0f048db5d6767619309c30789d4c994cae473b5ca002f413179cfc76dbf4376abdfde1237c22ae17dba98357cbb6f9ccc9c126488fd1b8a62b25e9a0e896e59bdd8c3ab6710abd89b2c49f50f276f97f73112d887ac49895940085fd57cb9b4b08bc8a1e273f606acc5abb97f2a9fc83edbe6cfa0ce68cdf58c8221cc032dab01735b4ea89171786f0944740f4ff7410ebe3e6de24eb0d6c6da9ced32168ffb13d5b7eb7d3f3daafa647eb683a29e0bd9e09f5f3ecaf5d86fcaf83c90d2938afe37843635b043bf8bf298c419e45a488fc6fb8d57e84eb251fd2fca9edbaea4934c779f3d36d3954cb0f21402177f01ec1c5bcd70fd0a5eb0a4c7a0133c64ce1a47eed0815ae28abd22a6a67676cec1dac0ee8677ac416e46b24080e3e8199c24a02715dd4bdd4578eb2c8175e63f0c647ae80c229d2fcb8cf675cd0f20b987607bd0fa0779ac24e0c6ce4c605349363c3d2ac5ffa1a23422f87468101eebb806dd28126ca52fe437679ba0e5679b4cf30dca366dab18b49e2541bb295c13f5a107761be5ee2e673157bfdd53704200fcbf5c146f5fb577efef3daaeff83571fcd7f5ccb3f5cab96124690b7338517ad4198b29bb9cb8d9aa61b822da0a4c23ac7f0180103aaaf8ce7634ef82ac7f9948df3da0aeed1fad400a2a3a5291121600913916deb2e89d21e2e1721291bf00f1d1790969d091a2da75ed4171fe9ee8eb2ee7910d2dbebd370606c379fd4345f88c676f33223340db5b7f43efc89f1b2b33d5d6b70a5d223417dfd479609109df257f933ee585bf2c83d0807b055f079b9a35f47695f219c51c58aabc56933fef0138afef3bcb573a8895cc68f51d2a268508783d6713454de60ffe4cd9a3a69c7a82f2128bf6516df73ef95028de471cd1200208988c967f366abe6698f8d081b36c0f08f16891198ff1ce66b1ca0fe9c06ab3350b2840a439d43cc25f902ca31fb07d690d7f23f969844e883ced11f6accb6dadb193659f561b374d69d27b0f933ea24e88f8908540a7f0e2a047811c941de63220557eb6947e298a59d220c44eff1b659f89af77ced02388928cc2e6b9bce638978b8c17593c70f41ffa68c98a8e266c03062e783f4297961d78317d8cb29d1f76d1cf43741f99284a111ed226c13dbef5ccbf2f53d27eb02805245656b4acca028ad2702e97d297fa173b23f767a6f170e4a2ce8cbc7bd72114ad87dde1ca0ad1b67879e12f0c4337b6f7fb050b70247ed559f79e76f3d66675d846b380603dffd16f4c8a88a4df9f2542c204dd529f2864198ce4f369ef2010595c62bd7378b5265967e7cc5211bff7f63d04965a64e74f4b491891f45bae079709db321d1288e1b68b851a79a61379e02fc0d32918c676319ad1014483515f738285bf14907ce029f8352dfb7124b1444068b88d35f7a8455df43f5e21cfcbdef8ba0bb3013048fad3d0ca535bda0d60ec71e37872f17135fdcf7c067b3043a6d7cb0a9e5116fbc4a4bd1ec53415a6b110ab2d618a3f2421c96dae723a4a5011b00b4dafe0a792fe9210c5e5006f290705df502e8d5bb565585d6019c126d2f26a1b9874d4b02e2ba8c54036692a671d29ef4d14ec4e2291c3f9251ed4e242e22bc0ebb28a81910961c762e054677054fdb656bf55c3bf0df31d0b03ba3e96c0dcf80953e881422935e58fafb0726fff6a85129caf440c60d1fda435573eda1e8b458cc3b1782c8d315906eede0f5494118ccd54a908ea4fadca8e7a92746a96c14fc2dbb1955cf567f59f77dd8c31e126fe94c816090df9b9ea0384bd3b349b14ab2bfd986e384c7f323101adb1ec7efea92764c080544264681f428048ec041da7ef813a1657108c18f6c9704dab433a067d591759b771154cbe01758b96b3552e816f81dfbdeab6378738cc1c7b2460bf26a34f7a570abd72344e879d321fb0c2c588c618e7ccbe84ce5429cb9fac8ce831f487dadea66aeb5ce643e15bd4a9ec8c6c9bce0d6605e3925d58e6011508fcfe9ab84730b05d34361318599bd6bbb26310c1d0962f2c8aefa2fdc179cab844aefac4dd2400b5e26156c0d52fe7dd4c5f1d7e55cc8651f109f76d1e36d52386b5a13286c2242bb84ced4543d79b5791ed0b447a7826da366f6e09c7b72c9bae92520425bee9da5b5f8e97edd58e53d4621d7d3c5265d1764c2534a53171afaaf590d4d7b9815511368cbfa558f65a20c649fdb236efc78ed1b5660a390bc4f0d0f847b047e1f19d5d8a2adfc13dd8f91b0dc5f783afb643482f3636dfd72c1dbbb7572a150bdee595b8f897eb73de6c6237e398752adb77c59028950e1e81944b388a374ee59c3a8b49946d7277678786930b73af735389b0910bfaa27c8fd74e069bcfefc6c3b455cca7b907b120469cef325b35c2c1232946823160a1a60bd0f07c7745ee7c9c94b0d9d0c3d3d650b973bae2f8dcc60628da7127f259c71a613b6b90f7907f870fded9aff052960f493022d39033fb8ea8a154b5a8c551ae5142cef3887b43d53a199ca0889414a4f27ae3464ee4df5a0b1ff0f7ed40136671015189ad245375ab93541ec3bcb73c6eb7090164eada6bf0048c04496a8317756f52d801e4aa55f97439c0a0fa5b97dc929da4a5afe781053b066cb0e82c6db12116d3e13d99c9c8056a6ad1e472580b44159f76844e0ff7437ae506ea2d05d132c837dae992faca45d914992bc66125754ed147cafe83040b974fb0bc8dd4e09decc2f4b4c0018b361c92be079b0136cfe649aaa60e5aed11d922dd686056f9ec698965f3350571a0e3b45111646b949709643404634af0ce8c798d40cc1845415e998963c822ec6cbbdd0c9c365376fd0968f6fd7411e468b4eac5095f94aa01875383fd7831a1b10af08c5477c4cf13135522a4f6338837eb066b40e8c3afb7581746f4d730b0cbf520dfba8c6283ef672e0fff256d7d18a18ae3e7436ced914ddb2580a32759454863af910c7022c9e9db0edc2b19b4033bf0fd4c98edf9d0b84c9e700b470fad18ebeb14cc8e8b2e6d6939c2b3d5ef0cba9bdc818f77e8d01bcf20db95748ca6f8c3db510ae35fcee50f27a26874b0205002106e1ca7596d2596c339585c1d3edb587d89a5a8e2a6857062baf81820c16cfc79da1546c89df9fb55799b9403e5a9c496bbc4d28edd74deb4416b0a959a35f1d2d2b5afa42ece4849d04efe84853bfee0e4d842ab50c4fe1ceced88b3f8576e498c63745a12bcf93fcaa1d9de8c11bc9be54ffc73dc5cbd265510918833f26b92326058b53b9a69439f319ae46218aeea4191a2375aaa40e41cfaf00b31f3f77aa6c4edadef806ebe8f76253c46c8a1ed89e68cad1064de0f211f4bc8adfae139014f5db2e1bd624642b1553340a3c49511e18b68dd2707316dda065700a5062c0e7b4d9fdcb80a8d9d386f79432b7e5883bdfe2ef1d170ba0b37957918bb323e6e788052a2a6e6f3c1f851e8e9f0f10c7c05e949f711db46baca6d87139b8c4099f756d9f98a76be0c74c02d8b2c3ed0ec32209aee3d708fa38982e78edab0aec3c1960557155fb8573c35407eaedf1da943db24f3001613485342fa2bc4ecbb6ec9b8d09813b9b2ecee78bed08b1575e49daa44406c679f3e159eebb7beff150c3c49d8dd65b2a06b5a82427be8437d069e04efceafde6db6ea326970db95ffb659e6e385e433b4bc3fe76cc71ef093a10a4beaa758775c32915a8df1218dab4d1e908e2463f8cb8762b10cc3ae8745b0d60e70d646d0074c76398d1e571f057dd58142b0e47dfc089e9ad25c3184b0b8610f3d070ab809b2fab5782ade1f659bf09b9f7ccd07016d2290dac17c6ad33ade9b4a3c8da5b31eebac5514eaee3d9559ffb9f233a05b41f1ca0aa00f86911d1872853762b43961d253dcd82708c060541af0a6bd5e4c25281629d042b611b9a71164fa563cf210cbec559080cf4d2a50ad485a89c34f7b947081d57432765107bc6f66088674baf51f3a2bccf4ff8b3b56484e3bc1d12ad22984957c55aae9eecb175dbc29f41b65f02c887dcb2632b63223be06f9aeacb57eb7957fbc8ac7f90537a88401109234f3dfc425688d0725645ea7a088320e0c7fe6afadcd62fb39927cead19a5dec18eae4ff2f30b9a6098b4a0b3f8a7f48d76a9b95cd4160a7200cebed01d88af70899dcc643ac2b85a61efebd65b9477fd836fc30cccb995c289dac045adc3810b8eb4ed5b2b56c1298818cf79ec3e864641efd08e97ff01f20c2cce109650e255858daafa62b851c5ab85f4d41f05171c15ba6f8568f9c7e6e831cd227775983baa12ee50281149a39f9b40bd15a0eea72a4d646818d3b43139a945a25c08e19d92b841d51c4cc6db7d1b5e9ecc682e97b12aa566aade121bbc64475becb656aadb9a85f562b196c8ff4123cad64713040b66edb678b746a0ddb2523d42a3201ffbf9a7c722b2b4470d99d5b6236ee0f0ae3d46ad9ab4d1aa169a4cb0f3fb657acf827959ec2d9af35126fd29d8205b86e6b66dd42ac4757aaf949e9d9ad41697b30db773bbd07ba8e0392d010b684caee7550ebc6e75d35d180c65734b1fbe8ca66282dce7808b7ecb6b2100d26539ad1b5beed5cf86632211957c3d7a6005eadf13d5427fefdc5906383a15f057d9cc02aa50c2466e3e62b97bf5a054ba35c2749767517bc1b9d19fe0fd9e928d48c149562ab4fd5cbe335743641b19468fa96d7c9b134bf229532dd9cc7fa71127fd3e3cb93a3f2d1e4d04d19189e2628654d47fad16f2b1e454cac7cf1d40ae08d70d789fb0577d4b07de4ee78699f854d1ca656ef9aa4b5c5175625bef72395d67281851ebee87c3300d04fa5d1d6e1e32e351fa16fc9268870f9a7e08ce06a9881219da3eb39acb86a5c602c0c91ad6ba89af3d4a868defd99ceb750e37849f6d832d64b23b68500bfc5bc16d13158b9cebe39865453ee729a302866df66cff858b115d5fb2163424a599193ba5b027c85c6b4de2e169e6fcd6b14875e56fee7b949970aa598961dd27c508579e9fc76369cf0f8b85fec8a052a4525134ccb7b83238a4330b108442ac5f25ab611498d77536b2550bbe85464b27bc5059a08dd0993e0a33124de4367ffbe963cf8a66ac8be9361bf291f3cad3f8a6b08ffa7f9b0e44051510ba97cd8598e94693d8eab3eafbc9c8c1a020eba31f0cfd27889f7f1e2fcd86cd5e7c95faba05b7f753d7ef206aee6e38b463414b6ca3c6c54c06d05c89b7a4f40fad24eb56f66abf24b08523970f3def4a63cac8c890d808dc1fe2217665b601cd2ecc8bee28b8b157a49a672af48665efaf5da5d111e4dbf3053ad93291321917e9fdc3efb279695ce6cf08046a498c4d09854ba3c3f25b01370e7eca3f78a656e49691754fe249fc06a2894b0c2b7ad432421654c614c0eb4daeb9788c7d00585be0acb7179e70f2595e1ab5148bb4968f4faece5ff7109ac1b432640c82dc6ee096dcc76537b15f8b6ce46f808922efa7eb6eba11d9baa9566957dcab7d8931f4ac46c898fb6ac4bdf433769580d6c98b36ad83367cd4db9a340a14b0c6247fd4782e073b2544b6320cfbba421979f7b2a96fc73aadc91e51162cd9a42d9c57026712dcf685284ca0db4f099faa56d96378ecbb743619c7fbbefdc24866ba3b514218b0", 0x1000, 0x1, 0x0, 0x1, r0}, &(0x7f0000001340)) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="1a002cbd7000fedbdf2503000000140003000800010003000000080004000500000008000500030000001c0003000800040009000000080007004e240000080007004e23000008000400020000000800050200000000780003001400020064756d6d79300000000000000000000014000200766574683000000000000000000000001400020062637366300000000000000000000000080005000000000114000600fe8000000000000000000000000000aa1400020073797a5f74756e000000000000000000080007004e220000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x11) pipe(&(0x7f0000000040)) [ 228.335204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.335221] ? sock_sendmsg+0x5a/0x120 [ 228.339097] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 228.343037] ? kernel_sendmsg+0x43/0x50 [ 228.343060] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 228.349281] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 228.353226] ? iov_iter_pipe+0xc2/0x2f0 [ 228.353244] default_file_splice_read+0x1da/0xb10 [ 228.353261] ? do_splice_direct+0x2d4/0x420 [ 228.358260] *** Control State *** [ 228.363764] ? do_sendfile+0x623/0xe20 [ 228.363777] ? __x64_sys_sendfile64+0x15d/0x250 [ 228.363795] ? do_syscall_64+0x1b9/0x820 [ 228.366984] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 228.371368] ? iter_file_splice_write+0x1010/0x1010 [ 228.371385] ? __put_page+0x136/0x190 [ 228.374913] EntryControls=0000d1ff ExitControls=0023efff [ 228.380861] ? __put_compound_page+0xe0/0xe0 [ 228.380877] ? sock_kfree_s+0x60/0x60 [ 228.380902] ? generic_pipe_buf_release+0x1de/0x2b0 [ 228.384861] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 228.389755] ? anon_pipe_buf_release+0x530/0x530 [ 228.389780] ? generic_pipe_buf_nosteal+0x10/0x10 [ 228.396173] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 228.400286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.400301] ? splice_from_pipe_next.part.9+0x296/0x340 [ 228.400320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.405497] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 228.413253] ? fsnotify+0xbb4/0x14e0 [ 228.413279] ? fsnotify_first_mark+0x350/0x350 [ 228.417329] reason=80000021 qualification=0000000000000000 [ 228.421546] ? fsnotify+0x14e0/0x14e0 [ 228.421562] ? splice_from_pipe+0x1f5/0x340 [ 228.421580] ? generic_pipe_buf_nosteal+0x10/0x10 [ 228.427451] IDTVectoring: info=00000000 errcode=00000000 [ 228.432437] ? splice_shrink_spd+0xd0/0xd0 [ 228.432460] ? security_file_permission+0x1c6/0x240 [ 228.436592] TSC Offset = 0xffffff82bc91527f [ 228.443574] ? rw_verify_area+0x118/0x360 [ 228.443588] ? iter_file_splice_write+0x1010/0x1010 [ 228.443605] do_splice_to+0x12e/0x190 [ 228.447825] EPT pointer = 0x00000001ad33c01e [ 228.453333] splice_direct_to_actor+0x270/0x8f0 [ 228.453351] ? pipe_to_sendpage+0x400/0x400 [ 228.660691] ? do_splice_to+0x190/0x190 [ 228.664657] ? rw_verify_area+0x118/0x360 [ 228.668790] do_splice_direct+0x2d4/0x420 [ 228.672930] ? splice_direct_to_actor+0x8f0/0x8f0 [ 228.677759] ? rw_verify_area+0x118/0x360 [ 228.681892] do_sendfile+0x623/0xe20 [ 228.685595] ? do_compat_pwritev64+0x1c0/0x1c0 [ 228.690167] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 228.695690] ? _copy_from_user+0xdf/0x150 [ 228.699822] __x64_sys_sendfile64+0x15d/0x250 [ 228.704303] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 228.708875] ? do_syscall_64+0x9a/0x820 [ 228.712836] do_syscall_64+0x1b9/0x820 [ 228.716709] ? finish_task_switch+0x1d3/0x870 [ 228.721189] ? syscall_return_slowpath+0x5e0/0x5e0 [ 228.726102] ? syscall_return_slowpath+0x31d/0x5e0 [ 228.731026] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 228.736377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 228.741208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.746387] RIP: 0033:0x455ab9 [ 228.749559] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.768806] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 228.776497] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 228.783749] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 228.791014] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 05:10:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x40003) shutdown(r0, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x9, 0x20e, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d2, 0x5, 0xff, 0xb3, 0x4, 0x20000000}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in, 0x7, 0x0, 0x10}, @sadb_ident={0x2, 0xa, 0x0, 0x0, 0x8000}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x3503}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}]}, 0x1070}, 0x1}, 0x40800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000001200)=0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) [ 228.798269] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 228.805520] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000020 [ 228.824637] Unknown ioctl -1072125377 05:10:50 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5, 0x1, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x1) r2 = dup2(r1, r1) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)) r4 = getegid() fchownat(r2, &(0x7f0000000280)='./file0\x00', r3, r4, 0x41000) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x1) 05:10:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) getpeername$packet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@empty, r3}, 0x14) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000140)=0xfffffffd, 0x3) 05:10:50 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000a40)='\x00\x00\x00\x00\x00\x00', 0x0, &(0x7f0000000b80)) chroot(&(0x7f0000000280)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x400, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000380)={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x38d, 0x400001) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18030000160000042c0002b49b77fbd519e4430a8ef845e17fc1dbdf25023f04ffd23f0000000000000089a3ec78f786c5d8371cc95a3d336b441aea03839f02321a1384e51c550000000057256f9f460e1ea30c9beed6fbccce36278d4566250900ca9cd6ba0c307d4d1880", @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x20044000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x81, 0x9, 0x1, 0x0, 0x100000000, 0x2, 0x7, {0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0xd7, 0x1, 0x4, 0x5, 0x1000}}, &(0x7f0000000140)=0xb0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000007c0)={0x3, 0x2, 0x0, 0x7fffffff, 0x703, 0x7ff, 0x7, 0x5, 0x1ff, 0x0, 0xea6, 0x1000}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r3, 0x3}, &(0x7f0000000780)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x200}}, 0xfffffffffffffffb, 0xbf7f}, &(0x7f0000000740)=0x4d) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000001700)=""/4096) fadvise64(r1, 0x0, 0x7, 0x3) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='qnx6\x00', 0x1000, &(0x7f0000000500)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 05:10:50 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x8000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x401, 0x2, 0x4, 0x4}, {0x5, 0x400, 0x3f, 0x3f}, {0x400, 0x9, 0x8, 0x3}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001280)={0x1, 0x10, 0x1844, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, [0x25f]}, 0x2c) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x80800) r2 = accept4(r1, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000280)={0x7ade, 0x20}) r4 = getpid() getpriority(0x0, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x3ff}, @in={0x2, 0x4e20, @rand_addr=0x800}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}], 0x3c) 05:10:50 executing program 4 (fault-call:2 fault-nth:33): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:50 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/hci\x00') setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=""/176, 0xb0) r1 = socket$inet(0x10, 0x80805, 0x1) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x2, 0x30}, 0xc) 05:10:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'bridge0\x00', 0x1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xe97, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x9, @dev={0xac, 0x14, 0x14}}, @IFA_LOCAL={0x8, 0x2, @rand_addr}]}, 0x28}, 0x1}, 0x0) 05:10:50 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}}, &(0x7f0000000280)) [ 229.004643] ion_buffer_destroy: buffer still mapped in the kernel [ 229.044675] FAULT_INJECTION: forcing a failure. [ 229.044675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.056614] CPU: 0 PID: 14689 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 229.063982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.073329] Call Trace: [ 229.075930] dump_stack+0x1c9/0x2b4 [ 229.079551] ? dump_stack_print_info.cold.2+0x52/0x52 [ 229.084731] ? find_held_lock+0x36/0x1c0 [ 229.088791] should_fail.cold.4+0xa/0x1a [ 229.092849] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 229.097948] ? kasan_check_read+0x11/0x20 [ 229.102083] ? rcu_is_watching+0x8c/0x150 [ 229.106226] ? find_held_lock+0x36/0x1c0 [ 229.110291] ? check_same_owner+0x340/0x340 [ 229.114602] ? rcu_note_context_switch+0x730/0x730 [ 229.119531] __alloc_pages_nodemask+0x36e/0xdb0 [ 229.124190] ? default_file_splice_read+0x1da/0xb10 [ 229.129368] ? do_splice_to+0x12e/0x190 [ 229.133327] ? splice_direct_to_actor+0x270/0x8f0 [ 229.138159] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 229.143174] ? rcu_pm_notify+0xc0/0xc0 [ 229.147056] ? __kmalloc_node+0x33/0x70 [ 229.151019] ? __kmalloc_node+0x33/0x70 [ 229.154987] ? rcu_read_lock_sched_held+0x108/0x120 [ 229.159998] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 229.165531] alloc_pages_current+0x10c/0x210 [ 229.169949] push_pipe+0x400/0x7a0 [ 229.173482] ? __kmalloc_node+0x47/0x70 [ 229.177451] iov_iter_get_pages_alloc+0x866/0x1530 [ 229.182365] ? trace_hardirqs_on+0xd/0x10 [ 229.186511] ? iov_iter_fault_in_readable+0x460/0x460 [ 229.191690] ? free_obj_work+0xbb0/0xbb0 [ 229.195743] ? free_unref_page+0x6e3/0x9a0 [ 229.199977] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 229.204982] ? trace_hardirqs_on+0xd/0x10 [ 229.209120] ? mark_free_pages+0x3b0/0x3b0 [ 229.213341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.218866] ? sock_sendmsg+0x5a/0x120 [ 229.222743] ? kernel_sendmsg+0x43/0x50 [ 229.226704] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 229.231708] ? iov_iter_pipe+0xc2/0x2f0 [ 229.235677] default_file_splice_read+0x1da/0xb10 [ 229.240506] ? do_splice_direct+0x2d4/0x420 [ 229.244817] ? do_sendfile+0x623/0xe20 [ 229.248689] ? __x64_sys_sendfile64+0x15d/0x250 [ 229.253352] ? do_syscall_64+0x1b9/0x820 [ 229.257411] ? iter_file_splice_write+0x1010/0x1010 [ 229.262415] ? __put_page+0x136/0x190 [ 229.266214] ? __put_compound_page+0xe0/0xe0 [ 229.270620] ? sock_kfree_s+0x60/0x60 [ 229.274413] ? generic_pipe_buf_release+0x1de/0x2b0 [ 229.279416] ? anon_pipe_buf_release+0x530/0x530 [ 229.284163] ? generic_pipe_buf_nosteal+0x10/0x10 [ 229.288991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.294521] ? splice_from_pipe_next.part.9+0x296/0x340 [ 229.299875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.305399] ? fsnotify+0xbb4/0x14e0 [ 229.309109] ? fsnotify_first_mark+0x350/0x350 [ 229.313678] ? fsnotify+0x14e0/0x14e0 [ 229.317464] ? splice_from_pipe+0x1f5/0x340 [ 229.321774] ? generic_pipe_buf_nosteal+0x10/0x10 [ 229.326606] ? splice_shrink_spd+0xd0/0xd0 [ 229.330833] ? security_file_permission+0x1c6/0x240 [ 229.335837] ? rw_verify_area+0x118/0x360 [ 229.339971] ? iter_file_splice_write+0x1010/0x1010 [ 229.344976] do_splice_to+0x12e/0x190 [ 229.348767] splice_direct_to_actor+0x270/0x8f0 [ 229.353424] ? pipe_to_sendpage+0x400/0x400 [ 229.357739] ? do_splice_to+0x190/0x190 [ 229.361704] ? rw_verify_area+0x118/0x360 [ 229.365840] do_splice_direct+0x2d4/0x420 [ 229.369981] ? splice_direct_to_actor+0x8f0/0x8f0 [ 229.374821] ? rw_verify_area+0x118/0x360 [ 229.378958] do_sendfile+0x623/0xe20 [ 229.382667] ? do_compat_pwritev64+0x1c0/0x1c0 [ 229.387246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 229.392771] ? _copy_from_user+0xdf/0x150 [ 229.396912] __x64_sys_sendfile64+0x15d/0x250 [ 229.401394] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 229.405963] ? do_syscall_64+0x9a/0x820 [ 229.409938] do_syscall_64+0x1b9/0x820 [ 229.413813] ? finish_task_switch+0x1d3/0x870 [ 229.418299] ? syscall_return_slowpath+0x5e0/0x5e0 [ 229.423215] ? syscall_return_slowpath+0x31d/0x5e0 [ 229.428137] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 229.433491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.438326] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.443500] RIP: 0033:0x455ab9 [ 229.446674] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 229.466014] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 229.473714] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 229.480970] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 229.488222] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 229.495478] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 05:10:50 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffe0ffffffffaaaaaaaaaa0008004500001c000000010000886400089078"], 0x0) 05:10:50 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) acct(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000a85a00060000000000000004b35915d6bd63500a204e3f5bcae8c13a81bbb7eedc4fe74db837e6887fadecca0dae1e75b68c978498449f3699c7eab9b6300000", @ANYRES32=r2, @ANYBLOB="00000000000000000c000100aaaaaaaaaaaa00000800210000000000"], 0x34}, 0x1}, 0x0) [ 229.502742] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000021 [ 229.520075] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 1, id = 0 05:10:50 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff71, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000280)={0xffffffffffffffff}, 0x143}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x3ffd, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xaa63}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x1}, 0x8) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 05:10:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000002c0)={0xa, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20040, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/107) 05:10:50 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000380)=""/200) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000001c0)=""/101) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='/dev/input/event#\x00'}, 0x10) r4 = accept$packet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000240)=0x14) ioctl$BLKRRPART(r3, 0x125f, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000140)=@req={0x5, 0x9, 0x1ff, 0x9}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newtclass={0x34, 0x28, 0x0, 0x70bd29, 0x25dfdbfe, {0x0, r5, {0xffff, 0xfff2}, {0x10, 0xfff3}, {0xe, 0x7}}, [@TCA_RATE={0x8, 0x5, {0x4b7}}, @TCA_RATE={0x8, 0x5, {0x7, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") close(r0) 05:10:50 executing program 4 (fault-call:2 fault-nth:34): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 229.710107] FAULT_INJECTION: forcing a failure. [ 229.710107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.722093] CPU: 1 PID: 14720 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 229.729457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.738810] Call Trace: [ 229.741409] dump_stack+0x1c9/0x2b4 [ 229.745050] ? dump_stack_print_info.cold.2+0x52/0x52 [ 229.750246] ? find_held_lock+0x36/0x1c0 [ 229.754323] should_fail.cold.4+0xa/0x1a [ 229.758402] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 229.763522] ? kasan_check_read+0x11/0x20 [ 229.767678] ? rcu_is_watching+0x8c/0x150 [ 229.771834] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 229.776256] ? find_held_lock+0x36/0x1c0 [ 229.780346] ? check_same_owner+0x340/0x340 [ 229.784675] ? rcu_note_context_switch+0x730/0x730 [ 229.789629] __alloc_pages_nodemask+0x36e/0xdb0 [ 229.794307] ? default_file_splice_read+0x1da/0xb10 [ 229.799327] ? do_splice_to+0x12e/0x190 [ 229.803307] ? splice_direct_to_actor+0x270/0x8f0 [ 229.808159] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 229.813199] ? rcu_pm_notify+0xc0/0xc0 [ 229.817104] ? __kmalloc_node+0x33/0x70 [ 229.821084] ? __kmalloc_node+0x33/0x70 [ 229.825066] ? rcu_read_lock_sched_held+0x108/0x120 [ 229.830088] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 229.835639] alloc_pages_current+0x10c/0x210 [ 229.840051] push_pipe+0x400/0x7a0 [ 229.843588] ? __kmalloc_node+0x47/0x70 [ 229.847566] iov_iter_get_pages_alloc+0x866/0x1530 [ 229.852486] ? trace_hardirqs_on+0xd/0x10 [ 229.856637] ? iov_iter_fault_in_readable+0x460/0x460 [ 229.861818] ? free_obj_work+0xbb0/0xbb0 [ 229.865871] ? free_unref_page+0x6e3/0x9a0 [ 229.870096] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 229.875102] ? trace_hardirqs_on+0xd/0x10 [ 229.879239] ? mark_free_pages+0x3b0/0x3b0 [ 229.883465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.888990] ? sock_sendmsg+0x5a/0x120 [ 229.892870] ? kernel_sendmsg+0x43/0x50 [ 229.896834] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 229.901835] ? iov_iter_pipe+0xc2/0x2f0 [ 229.905801] default_file_splice_read+0x1da/0xb10 [ 229.910632] ? __schedule+0x884/0x1ed0 [ 229.914506] ? __x64_sys_sendfile64+0x15d/0x250 [ 229.919160] ? do_syscall_64+0x1b9/0x820 [ 229.923220] ? iter_file_splice_write+0x1010/0x1010 [ 229.928224] ? __put_page+0x136/0x190 [ 229.932019] ? __put_compound_page+0xe0/0xe0 [ 229.936421] ? sock_kfree_s+0x60/0x60 [ 229.940213] ? generic_pipe_buf_release+0x1de/0x2b0 [ 229.945220] ? anon_pipe_buf_release+0x530/0x530 [ 229.949972] ? generic_pipe_buf_nosteal+0x10/0x10 [ 229.954803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.960327] ? splice_from_pipe_next.part.9+0x296/0x340 [ 229.965680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.971202] ? fsnotify+0xbb4/0x14e0 [ 229.974915] ? fsnotify_first_mark+0x350/0x350 [ 229.979487] ? fsnotify+0x14e0/0x14e0 [ 229.983276] ? splice_from_pipe+0x1f5/0x340 [ 229.987597] ? generic_pipe_buf_nosteal+0x10/0x10 [ 229.992430] ? splice_shrink_spd+0xd0/0xd0 [ 229.996656] ? security_file_permission+0x1c6/0x240 [ 230.001662] ? rw_verify_area+0x118/0x360 [ 230.005809] ? iter_file_splice_write+0x1010/0x1010 [ 230.010813] do_splice_to+0x12e/0x190 [ 230.014604] splice_direct_to_actor+0x270/0x8f0 [ 230.019263] ? pipe_to_sendpage+0x400/0x400 [ 230.023576] ? do_splice_to+0x190/0x190 [ 230.027543] ? rw_verify_area+0x118/0x360 [ 230.031689] do_splice_direct+0x2d4/0x420 [ 230.035831] ? splice_direct_to_actor+0x8f0/0x8f0 [ 230.040675] ? rw_verify_area+0x118/0x360 [ 230.044810] do_sendfile+0x623/0xe20 [ 230.048521] ? do_compat_pwritev64+0x1c0/0x1c0 [ 230.053101] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.058626] ? _copy_from_user+0xdf/0x150 [ 230.062763] __x64_sys_sendfile64+0x15d/0x250 [ 230.067258] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 230.071826] ? do_syscall_64+0x9a/0x820 [ 230.075790] do_syscall_64+0x1b9/0x820 [ 230.079662] ? finish_task_switch+0x1d3/0x870 [ 230.084145] ? syscall_return_slowpath+0x5e0/0x5e0 [ 230.089062] ? syscall_return_slowpath+0x31d/0x5e0 [ 230.093983] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 230.099341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.104175] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.109348] RIP: 0033:0x455ab9 [ 230.112518] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.131841] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 230.139546] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 230.146801] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 230.154056] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 05:10:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x19) connect(r0, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80) getsockname(r0, &(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000140)=0x80) [ 230.161311] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 230.168576] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000022 05:10:51 executing program 1: r0 = socket(0xf, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18, {{0x4}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) 05:10:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x8, 0xc0000bb7, &(0x7f0000000500)="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", &(0x7f00000001c0)="176ffac977bda6d3", 0xfa, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180092820300000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r0, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000140)=0x800, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000d0000002c0003000800080009000000080005007f00000108000500e000000208000100000000000800050000000007080006000100000008000500020000001800020014000100ac1414aa00000000000000000000000058000100080009002300000008000b0073697000080008008eb90000080006006c6300000800090010000000080002002d000000080009000400000008000b007369700014000300ff0100000000000000000000000000013400030014000600000000000000000000000000000000001400020076657468315f746f5f626f6e6400000008000400e80f00000800040004000000"], 0xfc}, 0x1}, 0x0) recvmmsg(r4, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000004480)=""/178, 0xb2}}], 0x16, 0x0, 0x0) 05:10:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000100)={0x6, 0x0, [{0x4, 0x9, 0x400, 0x8, 0x4360}, {0x0, 0x7, 0x81, 0x1, 0x7}, {0xc0000009, 0x2, 0xffff, 0xdb45, 0x2}, {0x4, 0x101, 0x7, 0x1000, 0x4}, {0x80000001, 0x0, 0x6, 0x1, 0xfff1}, {0x2, 0x2, 0x2, 0x3, 0x101}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x400000}) 05:10:51 executing program 4 (fault-call:2 fault-nth:35): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:51 executing program 5: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80) connect$netlink(r0, &(0x7f00000001c0)=@unspec, 0xc) r1 = socket$inet6(0xa, 0x7, 0x316c000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x200, 0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) getsockopt(r1, 0x8, 0x3, &(0x7f00000002c0)=""/73, &(0x7f0000000340)=0x49) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000004c0)=ANY=[], 0xfffffecd) recvmmsg(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/156, 0x9c}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000026c0)=""/4096, 0x1000}], 0x1, &(0x7f00000036c0)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f0000002240)={0x77359400}) 05:10:51 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x20, 0x2) recvfrom$inet(r0, &(0x7f0000000040)=""/158, 0x9e, 0x40, 0x0, 0x0) socketpair$inet(0x2, 0x7, 0x7fffffff, &(0x7f0000000000)) 05:10:51 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20001, 0x0) ioctl$TCSETSW(r0, 0x5111, &(0x7f0000000040)) [ 230.375526] FAULT_INJECTION: forcing a failure. [ 230.375526] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.387495] CPU: 0 PID: 14746 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 230.394861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.404218] Call Trace: [ 230.406820] dump_stack+0x1c9/0x2b4 [ 230.410465] ? dump_stack_print_info.cold.2+0x52/0x52 [ 230.415670] ? find_held_lock+0x36/0x1c0 [ 230.419761] should_fail.cold.4+0xa/0x1a 05:10:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x65, 0x120, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x200800) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500810}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newae={0x50, 0x1e, 0x400, 0x70bd26, 0x25dfdbfb, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d3, 0x2}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x3500}, [@proto={0x8, 0x19, 0xff}, @ipv4_hthresh={0x8, 0x3, {0x1c, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 05:10:51 executing program 7: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f00000000c0)={0x5, 0x7f, 0x3ff, 0x9, [], [], [], 0x0, 0x4, 0x10000000, 0x0, "c4c46df58009b95b773a5fb3d80ee2ab"}) r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xfff}, 0x1c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x4a2502, 0x0) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000003740)="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", 0x52d}], 0x1, &(0x7f0000000a80)}}], 0x2, 0x0) ioctl(r0, 0x1f, &(0x7f0000000040)="1132d29c9f6f60543df225f76662f4c0d41b4ea28c32f68590adfac694c8f84ef63d3729dab5c09b7f611ea2493921db9f76072532da0f0822013233953e78c323468fd9c7c773aab488e930b24f089df7") [ 230.423838] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 230.428953] ? kasan_check_read+0x11/0x20 [ 230.433112] ? rcu_is_watching+0x8c/0x150 [ 230.437267] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 230.441689] ? find_held_lock+0x36/0x1c0 [ 230.445781] ? check_same_owner+0x340/0x340 [ 230.450550] ? rcu_note_context_switch+0x730/0x730 [ 230.455503] __alloc_pages_nodemask+0x36e/0xdb0 [ 230.460182] ? default_file_splice_read+0x1da/0xb10 [ 230.465204] ? do_splice_to+0x12e/0x190 [ 230.469185] ? splice_direct_to_actor+0x270/0x8f0 05:10:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgrp(r1) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xe) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 230.474036] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 230.479072] ? rcu_pm_notify+0xc0/0xc0 [ 230.482978] ? __kmalloc_node+0x33/0x70 [ 230.486958] ? __kmalloc_node+0x33/0x70 [ 230.490940] ? rcu_read_lock_sched_held+0x108/0x120 [ 230.495970] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 230.501520] alloc_pages_current+0x10c/0x210 [ 230.505935] push_pipe+0x400/0x7a0 [ 230.509479] ? __kmalloc_node+0x47/0x70 [ 230.513469] iov_iter_get_pages_alloc+0x866/0x1530 [ 230.518409] ? trace_hardirqs_on+0xd/0x10 [ 230.522579] ? iov_iter_fault_in_readable+0x460/0x460 [ 230.527874] ? free_obj_work+0xbb0/0xbb0 [ 230.531946] ? free_unref_page+0x6e3/0x9a0 [ 230.536199] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 230.541226] ? trace_hardirqs_on+0xd/0x10 [ 230.545463] ? mark_free_pages+0x3b0/0x3b0 [ 230.549699] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.555231] ? sock_sendmsg+0x5a/0x120 [ 230.559111] ? kernel_sendmsg+0x43/0x50 [ 230.563251] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 230.568257] ? iov_iter_pipe+0xc2/0x2f0 [ 230.572228] default_file_splice_read+0x1da/0xb10 [ 230.577062] ? __schedule+0x884/0x1ed0 [ 230.580939] ? __x64_sys_sendfile64+0x15d/0x250 [ 230.585595] ? do_syscall_64+0x1b9/0x820 [ 230.589656] ? iter_file_splice_write+0x1010/0x1010 [ 230.594661] ? __put_page+0x136/0x190 [ 230.598452] ? __put_compound_page+0xe0/0xe0 [ 230.602851] ? sock_kfree_s+0x60/0x60 [ 230.606644] ? generic_pipe_buf_release+0x1de/0x2b0 [ 230.611648] ? anon_pipe_buf_release+0x530/0x530 [ 230.616397] ? generic_pipe_buf_nosteal+0x10/0x10 [ 230.621235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.626760] ? splice_from_pipe_next.part.9+0x296/0x340 [ 230.632113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.637635] ? fsnotify+0xbb4/0x14e0 [ 230.641343] ? fsnotify_first_mark+0x350/0x350 [ 230.645913] ? fsnotify+0x14e0/0x14e0 [ 230.649715] ? splice_from_pipe+0x1f5/0x340 [ 230.654030] ? generic_pipe_buf_nosteal+0x10/0x10 [ 230.658869] ? splice_shrink_spd+0xd0/0xd0 [ 230.663096] ? security_file_permission+0x1c6/0x240 [ 230.668100] ? rw_verify_area+0x118/0x360 [ 230.672240] ? iter_file_splice_write+0x1010/0x1010 [ 230.677253] do_splice_to+0x12e/0x190 [ 230.681063] splice_direct_to_actor+0x270/0x8f0 [ 230.685720] ? pipe_to_sendpage+0x400/0x400 [ 230.690039] ? do_splice_to+0x190/0x190 [ 230.694003] ? rw_verify_area+0x118/0x360 [ 230.698149] do_splice_direct+0x2d4/0x420 [ 230.702287] ? splice_direct_to_actor+0x8f0/0x8f0 [ 230.707121] ? rw_verify_area+0x118/0x360 [ 230.711260] do_sendfile+0x623/0xe20 [ 230.714969] ? do_compat_pwritev64+0x1c0/0x1c0 [ 230.719550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.725074] ? _copy_from_user+0xdf/0x150 [ 230.729220] __x64_sys_sendfile64+0x15d/0x250 [ 230.733705] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 230.738284] ? do_syscall_64+0x9a/0x820 [ 230.742253] do_syscall_64+0x1b9/0x820 [ 230.746125] ? finish_task_switch+0x1d3/0x870 [ 230.750611] ? syscall_return_slowpath+0x5e0/0x5e0 [ 230.755530] ? syscall_return_slowpath+0x31d/0x5e0 [ 230.760451] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 230.765815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.770652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.775827] RIP: 0033:0x455ab9 [ 230.778999] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.798336] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 230.806033] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 230.813287] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 230.820540] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 05:10:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/stat\x00') exit(0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x18) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) pread64(r0, &(0x7f0000000000)=""/82, 0x52, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x5, [0x6, 0x2, 0x100000000, 0x81, 0xfffffffffffffffa]}) [ 230.827796] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 230.835052] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000023 05:10:52 executing program 4 (fault-call:2 fault-nth:36): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) [ 230.913876] binder_alloc: 14766: binder_alloc_buf failed to map page at 20001000 in userspace [ 230.928117] binder: 14766:14767 transaction failed 29201/-12, size 0-0 line 2967 [ 230.939321] *** Guest State *** [ 230.942758] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 230.951669] CR4: actual=0x0000000000002060, shadow=0x0000000000002020, gh_mask=ffffffffffffe871 [ 230.960604] CR3 = 0x0000000000000000 [ 230.964384] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 230.970915] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x000000aa00000008 [ 230.977301] binder: BINDER_SET_CONTEXT_MGR already set [ 230.977446] RSP = 0x0000000000000f80 RIP = 0x000000000000067e [ 230.988717] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 230.994748] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 230.998455] binder_alloc: 14766: binder_alloc_buf, no vma [ 231.001457] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 231.001480] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 231.001499] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 231.001515] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 231.001534] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 231.001551] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 231.001563] GDTR: limit=0x00000000, base=0x0000000000000000 [ 231.001578] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 231.001591] IDTR: limit=0x00000000, base=0x0000000000000000 [ 231.007189] binder: 14766:14778 transaction failed 29189/-3, size 0-0 line 2967 [ 231.015174] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 231.026339] FAULT_INJECTION: forcing a failure. [ 231.026339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.031140] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 231.031157] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 231.031167] Interruptibility = 00000000 ActivityState = 00000000 [ 231.031171] *** Host State *** [ 231.031183] RIP = 0xffffffff811f4664 RSP = 0xffff880199247350 [ 231.031204] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 231.031216] FSBase=00007f37869b3700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 231.031227] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 231.031240] CR0=0000000080050033 CR3=00000001aa977000 CR4=00000000001426e0 [ 231.031253] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87a01380 [ 231.031267] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 231.039257] CPU: 0 PID: 14783 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 231.039270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.047243] *** Control State *** [ 231.055167] Call Trace: [ 231.055192] dump_stack+0x1c9/0x2b4 [ 231.055213] ? dump_stack_print_info.cold.2+0x52/0x52 [ 231.063176] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000040ca [ 231.071108] ? zap_class+0x740/0x740 [ 231.071134] should_fail.cold.4+0xa/0x1a [ 231.079086] EntryControls=0000d1ff ExitControls=0023efff [ 231.086507] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 231.086526] ? rcu_is_watching+0x8c/0x150 [ 231.094489] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 231.106240] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 231.106265] ? find_held_lock+0x36/0x1c0 [ 231.112656] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 231.120090] ? check_same_owner+0x340/0x340 [ 231.120107] ? rcu_note_context_switch+0x730/0x730 [ 231.126328] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001 [ 231.129495] __alloc_pages_nodemask+0x36e/0xdb0 [ 231.129513] ? default_file_splice_read+0x1da/0xb10 [ 231.135469] reason=80000021 qualification=0000000000000000 [ 231.141837] ? do_splice_to+0x12e/0x190 [ 231.141851] ? splice_direct_to_actor+0x270/0x8f0 [ 231.141870] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 231.149652] IDTVectoring: info=00000000 errcode=00000000 [ 231.155520] ? rcu_pm_notify+0xc0/0xc0 [ 231.155542] ? __kmalloc_node+0x33/0x70 [ 231.162537] TSC Offset = 0xffffff813c8a4b34 [ 231.169169] ? __kmalloc_node+0x33/0x70 [ 231.169184] ? rcu_read_lock_sched_held+0x108/0x120 [ 231.169204] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 231.175255] EPT pointer = 0x00000001d812501e [ 231.182588] alloc_pages_current+0x10c/0x210 [ 231.182607] push_pipe+0x400/0x7a0 [ 231.203381] binder: 14766:14767 ioctl 40046207 0 returned -16 [ 231.206744] ? __kmalloc_node+0x47/0x70 [ 231.206772] iov_iter_get_pages_alloc+0x866/0x1530 [ 231.362189] ? trace_hardirqs_on+0xd/0x10 [ 231.366329] ? iov_iter_fault_in_readable+0x460/0x460 [ 231.371506] ? free_obj_work+0xbb0/0xbb0 [ 231.375564] ? free_unref_page+0x6e3/0x9a0 [ 231.379787] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 231.384797] ? trace_hardirqs_on+0xd/0x10 [ 231.388939] ? mark_free_pages+0x3b0/0x3b0 [ 231.393158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 231.398690] ? sock_sendmsg+0x5a/0x120 [ 231.402564] ? kernel_sendmsg+0x43/0x50 [ 231.406524] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 231.411534] ? iov_iter_pipe+0xc2/0x2f0 [ 231.415499] default_file_splice_read+0x1da/0xb10 [ 231.420326] ? do_splice_direct+0x2d4/0x420 [ 231.424634] ? do_sendfile+0x623/0xe20 [ 231.428505] ? __x64_sys_sendfile64+0x15d/0x250 [ 231.433157] ? do_syscall_64+0x1b9/0x820 [ 231.437219] ? iter_file_splice_write+0x1010/0x1010 [ 231.442227] ? __put_page+0x136/0x190 [ 231.446027] ? __put_compound_page+0xe0/0xe0 [ 231.450424] ? sock_kfree_s+0x60/0x60 [ 231.454215] ? generic_pipe_buf_release+0x1de/0x2b0 [ 231.459217] ? anon_pipe_buf_release+0x530/0x530 [ 231.463959] ? generic_pipe_buf_nosteal+0x10/0x10 [ 231.468783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 231.474305] ? splice_from_pipe_next.part.9+0x296/0x340 [ 231.479656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 231.485177] ? fsnotify+0xbb4/0x14e0 [ 231.488880] ? fsnotify_first_mark+0x350/0x350 [ 231.493448] ? fsnotify+0x14e0/0x14e0 [ 231.497232] ? splice_from_pipe+0x1f5/0x340 [ 231.501540] ? generic_pipe_buf_nosteal+0x10/0x10 [ 231.506368] ? splice_shrink_spd+0xd0/0xd0 [ 231.510604] ? security_file_permission+0x1c6/0x240 [ 231.515622] ? rw_verify_area+0x118/0x360 [ 231.519755] ? iter_file_splice_write+0x1010/0x1010 [ 231.524758] do_splice_to+0x12e/0x190 [ 231.528545] splice_direct_to_actor+0x270/0x8f0 [ 231.533199] ? pipe_to_sendpage+0x400/0x400 [ 231.537506] ? do_splice_to+0x190/0x190 [ 231.541468] ? rw_verify_area+0x118/0x360 [ 231.545600] do_splice_direct+0x2d4/0x420 [ 231.549736] ? splice_direct_to_actor+0x8f0/0x8f0 [ 231.554565] ? rw_verify_area+0x118/0x360 [ 231.558701] do_sendfile+0x623/0xe20 [ 231.562403] ? do_compat_pwritev64+0x1c0/0x1c0 [ 231.566977] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 231.572497] ? _copy_from_user+0xdf/0x150 [ 231.576632] __x64_sys_sendfile64+0x15d/0x250 [ 231.581121] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 231.585692] ? do_syscall_64+0x9a/0x820 [ 231.589666] do_syscall_64+0x1b9/0x820 [ 231.593543] ? finish_task_switch+0x1d3/0x870 [ 231.598030] ? syscall_return_slowpath+0x5e0/0x5e0 [ 231.602943] ? syscall_return_slowpath+0x31d/0x5e0 [ 231.607862] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 231.613214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 231.618045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.623216] RIP: 0033:0x455ab9 [ 231.626393] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.645655] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 231.653346] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 231.660596] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 231.667853] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 231.675107] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 231.682357] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000024 [ 231.693087] binder: undelivered TRANSACTION_ERROR: 29201 05:10:53 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1ff, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0xffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x80, 0x800, 0x200, {0x77359400}, 0x8, 0x3}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x188, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {0x7}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1b43}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffff000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x16}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x15}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x8080) close(r0) 05:10:53 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socketpair(0x5, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)) 05:10:53 executing program 4 (fault-call:2 fault-nth:37): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:53 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = gettid() r3 = dup(r1) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e18ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5454, &(0x7f000005b000)=0x2) fcntl$setown(r4, 0x8, r2) readv(r5, &(0x7f0000000040)=[{&(0x7f0000fb6f9c)=""/25, 0x19}], 0x1) dup(r4) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x12) r6 = dup2(r4, r5) write$P9_RSETATTR(r6, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) renameat2(r6, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00', 0x1) tkill(r2, 0x16) [ 231.720454] binder: undelivered TRANSACTION_ERROR: 29189 05:10:53 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x2, 0x1}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x84) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x20000000001}) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000ffc), &(0x7f0000013000)=0xf9) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001800)={{{@in6=@ipv4={[], [], @dev}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000001900)=0xe8) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffffffff, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', r5}) clone(0x0, &(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000000340), &(0x7f00000001c0)) close(r0) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000040)) 05:10:53 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x300, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f0000000000), &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x362) 05:10:53 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x9, 0x200000) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) getpeername$inet(r0, &(0x7f00000001c0)={0x0, 0x0, @multicast2}, &(0x7f0000000340)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffffffffff6d3, 0x3, 0x728000000000000, 0x45c4}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0x7, 0x2, 0xc17, 0x3, 0x84}, 0x98) getdents(r1, &(0x7f0000000040)=""/148, 0x18) [ 231.844441] kernel msg: ebtables bug: please report to author: Wrong len argument [ 231.863427] FAULT_INJECTION: forcing a failure. [ 231.863427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.875365] CPU: 1 PID: 14811 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 231.882739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.892105] Call Trace: [ 231.894796] dump_stack+0x1c9/0x2b4 [ 231.898447] ? dump_stack_print_info.cold.2+0x52/0x52 [ 231.903651] ? find_held_lock+0x36/0x1c0 [ 231.907734] should_fail.cold.4+0xa/0x1a [ 231.911809] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 231.916918] ? kasan_check_read+0x11/0x20 [ 231.921063] ? rcu_is_watching+0x8c/0x150 [ 231.925206] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 231.929609] ? find_held_lock+0x36/0x1c0 [ 231.933680] ? check_same_owner+0x340/0x340 [ 231.937991] ? rcu_note_context_switch+0x730/0x730 [ 231.942924] __alloc_pages_nodemask+0x36e/0xdb0 [ 231.947584] ? default_file_splice_read+0x1da/0xb10 [ 231.952588] ? do_splice_to+0x12e/0x190 [ 231.956572] ? splice_direct_to_actor+0x270/0x8f0 [ 231.961406] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 231.966424] ? rcu_pm_notify+0xc0/0xc0 [ 231.970304] ? __kmalloc_node+0x33/0x70 [ 231.974264] ? __kmalloc_node+0x33/0x70 [ 231.978228] ? rcu_read_lock_sched_held+0x108/0x120 [ 231.983236] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 231.988765] alloc_pages_current+0x10c/0x210 [ 231.993166] push_pipe+0x400/0x7a0 [ 231.996695] ? __kmalloc_node+0x47/0x70 [ 232.000664] iov_iter_get_pages_alloc+0x866/0x1530 [ 232.005583] ? trace_hardirqs_on+0xd/0x10 [ 232.009729] ? iov_iter_fault_in_readable+0x460/0x460 [ 232.014914] ? free_obj_work+0xbb0/0xbb0 [ 232.018965] ? free_unref_page+0x6e3/0x9a0 [ 232.023193] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 232.028205] ? trace_hardirqs_on+0xd/0x10 [ 232.032341] ? mark_free_pages+0x3b0/0x3b0 [ 232.036565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.042094] ? sock_sendmsg+0x5a/0x120 [ 232.045972] ? kernel_sendmsg+0x43/0x50 [ 232.049937] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 232.054947] ? iov_iter_pipe+0xc2/0x2f0 [ 232.058923] default_file_splice_read+0x1da/0xb10 [ 232.063751] ? __schedule+0x884/0x1ed0 [ 232.067625] ? __x64_sys_sendfile64+0x15d/0x250 [ 232.072280] ? do_syscall_64+0x1b9/0x820 [ 232.076337] ? iter_file_splice_write+0x1010/0x1010 [ 232.081348] ? __put_page+0x136/0x190 [ 232.085145] ? __put_compound_page+0xe0/0xe0 [ 232.089638] ? sock_kfree_s+0x60/0x60 [ 232.093438] ? generic_pipe_buf_release+0x1de/0x2b0 [ 232.098441] ? anon_pipe_buf_release+0x530/0x530 [ 232.103186] ? generic_pipe_buf_nosteal+0x10/0x10 [ 232.108022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.113550] ? splice_from_pipe_next.part.9+0x296/0x340 [ 232.118904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.124428] ? fsnotify+0xbb4/0x14e0 [ 232.128138] ? fsnotify_first_mark+0x350/0x350 [ 232.132711] ? fsnotify+0x14e0/0x14e0 [ 232.136501] ? splice_from_pipe+0x1f5/0x340 [ 232.140810] ? generic_pipe_buf_nosteal+0x10/0x10 [ 232.145639] ? splice_shrink_spd+0xd0/0xd0 [ 232.149866] ? security_file_permission+0x1c6/0x240 [ 232.154874] ? rw_verify_area+0x118/0x360 [ 232.159012] ? iter_file_splice_write+0x1010/0x1010 [ 232.164031] do_splice_to+0x12e/0x190 [ 232.167828] splice_direct_to_actor+0x270/0x8f0 [ 232.172485] ? pipe_to_sendpage+0x400/0x400 [ 232.176797] ? do_splice_to+0x190/0x190 [ 232.180760] ? rw_verify_area+0x118/0x360 [ 232.184901] do_splice_direct+0x2d4/0x420 [ 232.189044] ? splice_direct_to_actor+0x8f0/0x8f0 [ 232.193879] ? rw_verify_area+0x118/0x360 [ 232.198025] do_sendfile+0x623/0xe20 [ 232.201756] ? do_compat_pwritev64+0x1c0/0x1c0 [ 232.206343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 232.211866] ? _copy_from_user+0xdf/0x150 [ 232.216018] __x64_sys_sendfile64+0x15d/0x250 [ 232.220508] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 232.225083] ? do_syscall_64+0x9a/0x820 [ 232.229052] do_syscall_64+0x1b9/0x820 [ 232.232927] ? finish_task_switch+0x1d3/0x870 [ 232.237419] ? syscall_return_slowpath+0x5e0/0x5e0 [ 232.242336] ? syscall_return_slowpath+0x31d/0x5e0 [ 232.247256] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 232.252618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 232.257456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 232.262628] RIP: 0033:0x455ab9 [ 232.265798] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 232.285234] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 05:10:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x7fffc) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x4fe, 0x400) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="ba4100ed0f019f0058d3eadc3366b96d0a00000f3266b8f60000000f23d00f21f86635300000020f23f8f3260f0f0e00800c0f20963e2e0fc7980060baf80c66b868ee4f8c66efbafc0c66b8bc05000066ef", 0x52}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x400300}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00000080000000f0ffffffffffffff00", 0x3fffffe}) 05:10:53 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffeffffffff}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000240)=""/177) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000800080049, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getdents64(r3, &(0x7f0000000000)=""/54, 0x36) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000100)=0x3ff) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) sendfile(r2, r3, &(0x7f0000000140), 0x2000000000008402) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)={0x2, [0xffff, 0x7]}, &(0x7f0000000200)=0x8) 05:10:53 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xb7) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000000c0)=""/4096, &(0x7f0000000040)=0x1000) [ 232.292931] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 232.300187] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 232.307441] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 232.314705] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 232.321959] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000025 05:10:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) signalfd4(r0, &(0x7f0000000040), 0x8, 0x80000) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) [ 232.395470] xprt_adjust_timeout: rq_timeout = 0! 05:10:53 executing program 1: r0 = socket(0x200000000010, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') write(r0, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 05:10:53 executing program 4 (fault-call:2 fault-nth:38): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:53 executing program 6: syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') 05:10:53 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x7, 0x80000000, 0x0, 0x8, 0x4, 0x1, 0x9, 0x6, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x5}, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_acct\x00') r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4a27, &(0x7f00000000c0)) fcntl$setpipe(r3, 0x407, 0x9d) lseek(r2, 0x63, 0x0) sync_file_range(r0, 0xb3, 0x80000000, 0x7) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x12000) [ 232.482559] xprt_adjust_timeout: rq_timeout = 0! 05:10:53 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaa8dedd604a7929d60086dd6050a09c00060000fe8000683b6146f335bd9e87e60e28ec694f36000000000000000000000000bbfe8000000000000000000000000000aa2c00000000089078"], &(0x7f0000000040)) chmod(&(0x7f0000000180)='./file0\x00', 0x60) r0 = shmget(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) shmctl$SHM_LOCK(r0, 0xb) chmod(&(0x7f0000000000)='./file0\x00', 0x40) 05:10:53 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/.et/ipv4/vs/snat_reroute\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/159, 0x9f}], 0x1, 0x0) 05:10:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x81, 0x5, 0x6, 0x0, 0xffffffffffffff9c}, 0x2c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x2, &(0x7f0000000180)=@raw=[@generic={0x3, 0x3f, 0x6, 0x100}], &(0x7f00000000c0)='GPL\x00', 0x8, 0xd5, &(0x7f0000000240)=""/213, 0x41100, 0x1}, 0xffffff39) [ 232.605187] FAULT_INJECTION: forcing a failure. [ 232.605187] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 232.617112] CPU: 1 PID: 14849 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 232.624481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.633837] Call Trace: [ 232.636437] dump_stack+0x1c9/0x2b4 [ 232.640080] ? dump_stack_print_info.cold.2+0x52/0x52 [ 232.645281] ? find_held_lock+0x36/0x1c0 [ 232.649356] should_fail.cold.4+0xa/0x1a [ 232.653431] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 232.658544] ? kasan_check_read+0x11/0x20 [ 232.662693] ? rcu_is_watching+0x8c/0x150 [ 232.666844] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 232.671262] ? find_held_lock+0x36/0x1c0 [ 232.675351] ? check_same_owner+0x340/0x340 [ 232.679680] ? rcu_note_context_switch+0x730/0x730 [ 232.684629] __alloc_pages_nodemask+0x36e/0xdb0 [ 232.689311] ? default_file_splice_read+0x1da/0xb10 [ 232.694338] ? do_splice_to+0x12e/0x190 [ 232.698322] ? splice_direct_to_actor+0x270/0x8f0 05:10:53 executing program 6: r0 = socket$inet6(0xa, 0xfffffffffffe, 0x0) ioctl(r0, 0x9, &(0x7f0000000100)="8f362070000800c8cd1e00000000") r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x18) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000000)=""/240, &(0x7f0000ca5ffc)=0xf0) [ 232.703177] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 232.708217] ? rcu_pm_notify+0xc0/0xc0 [ 232.712123] ? __kmalloc_node+0x33/0x70 [ 232.716104] ? __kmalloc_node+0x33/0x70 [ 232.720087] ? rcu_read_lock_sched_held+0x108/0x120 [ 232.725109] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 232.730657] alloc_pages_current+0x10c/0x210 [ 232.735073] push_pipe+0x400/0x7a0 [ 232.738617] ? __kmalloc_node+0x47/0x70 [ 232.742607] iov_iter_get_pages_alloc+0x866/0x1530 [ 232.747549] ? trace_hardirqs_on+0xd/0x10 [ 232.751716] ? iov_iter_fault_in_readable+0x460/0x460 [ 232.756914] ? free_obj_work+0xbb0/0xbb0 [ 232.760986] ? free_unref_page+0x6e3/0x9a0 [ 232.765241] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 232.770269] ? trace_hardirqs_on+0xd/0x10 [ 232.774429] ? mark_free_pages+0x3b0/0x3b0 [ 232.778676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.784217] ? sock_sendmsg+0x5a/0x120 [ 232.788100] ? kernel_sendmsg+0x43/0x50 [ 232.792072] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 232.797075] ? iov_iter_pipe+0xc2/0x2f0 [ 232.801048] default_file_splice_read+0x1da/0xb10 [ 232.805876] ? do_splice_direct+0x2d4/0x420 [ 232.810263] ? do_sendfile+0x623/0xe20 [ 232.814138] ? __x64_sys_sendfile64+0x15d/0x250 [ 232.818795] ? do_syscall_64+0x1b9/0x820 [ 232.822865] ? iter_file_splice_write+0x1010/0x1010 [ 232.827873] ? __put_page+0x136/0x190 [ 232.831664] ? __put_compound_page+0xe0/0xe0 [ 232.836067] ? sock_kfree_s+0x60/0x60 [ 232.839851] ? generic_pipe_buf_release+0x1de/0x2b0 [ 232.844849] ? anon_pipe_buf_release+0x530/0x530 [ 232.849589] ? generic_pipe_buf_nosteal+0x10/0x10 [ 232.854421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.859953] ? splice_from_pipe_next.part.9+0x296/0x340 [ 232.865308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.870856] ? fsnotify+0xbb4/0x14e0 [ 232.874566] ? fsnotify_first_mark+0x350/0x350 [ 232.879130] ? fsnotify+0x14e0/0x14e0 [ 232.882910] ? splice_from_pipe+0x1f5/0x340 [ 232.887230] ? generic_pipe_buf_nosteal+0x10/0x10 [ 232.892068] ? splice_shrink_spd+0xd0/0xd0 [ 232.896287] ? security_file_permission+0x1c6/0x240 [ 232.901296] ? rw_verify_area+0x118/0x360 [ 232.905441] ? iter_file_splice_write+0x1010/0x1010 [ 232.910439] do_splice_to+0x12e/0x190 [ 232.914234] splice_direct_to_actor+0x270/0x8f0 [ 232.918898] ? pipe_to_sendpage+0x400/0x400 [ 232.923221] ? do_splice_to+0x190/0x190 [ 232.927176] ? rw_verify_area+0x118/0x360 [ 232.931309] do_splice_direct+0x2d4/0x420 [ 232.935441] ? splice_direct_to_actor+0x8f0/0x8f0 [ 232.940267] ? rw_verify_area+0x118/0x360 [ 232.944407] do_sendfile+0x623/0xe20 [ 232.948117] ? do_compat_pwritev64+0x1c0/0x1c0 [ 232.952684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 232.958202] ? _copy_from_user+0xdf/0x150 [ 232.962338] __x64_sys_sendfile64+0x15d/0x250 [ 232.966817] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 232.971381] ? do_syscall_64+0x9a/0x820 [ 232.975342] do_syscall_64+0x1b9/0x820 [ 232.979221] ? syscall_slow_exit_work+0x500/0x500 [ 232.984065] ? syscall_return_slowpath+0x5e0/0x5e0 [ 232.988981] ? syscall_return_slowpath+0x31d/0x5e0 [ 232.993907] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 232.999257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 233.004094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.009269] RIP: 0033:0x455ab9 [ 233.012435] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 233.031610] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 233.039304] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 233.046569] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 233.053826] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 233.061085] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 233.068337] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000026 05:10:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x40000000015, 0x5, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000f7db7f)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x8}]}, &(0x7f0000000300)=0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x10042) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000180)='./file0\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), 0x4) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)=0x5) recvfrom(r1, &(0x7f0000002500)=""/40, 0x28, 0x0, 0x0, 0x0) 05:10:56 executing program 2: prctl$setmm(0x23, 0x1, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = getpgid(r1) setpgid(r1, r2) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x9, &(0x7f0000000000), &(0x7f00000000c0)=0xfffffffffffffc6f) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x40, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3f, 0x8c}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x100000000, 0x5, 0x2, 0x100, 0x7, 0x4481, 0x7f, 0x3ff, r4}, &(0x7f00000001c0)=0x20) 05:10:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r1, 0x6, 0x1a, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x2040, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000540)={0x1f, {0x6, 0x3, 0x1ff, 0x4, 0x5, 0x8}, 0xfffffffffffffff8}, 0xa) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000002c0)={'sit0\x00', {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000280), 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) socketpair(0x5, 0x4, 0x7ffffffe, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x3e}, &(0x7f0000000100)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000007c0)={@remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1d}}, @loopback={0x0, 0x1}, 0x1, 0xa6c, 0x1, 0x500, 0x10000, 0x0, r6}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480)=0x0) write$FUSE_ATTR(r3, &(0x7f00000004c0)={0x78, 0x0, 0x6, {0xffff, 0xfff, 0x0, {0x1, 0x0, 0x8000, 0xb8ef, 0xfffffffffffffffa, 0xfffffffffffffffc, 0x401, 0x7fff, 0x5, 0x80, 0x0, r7, r8, 0x3, 0x9}}}, 0x78) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) pipe2(&(0x7f0000000080), 0x84000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='nv\x00', 0x3) shutdown(r0, 0x100000000001) 05:10:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000340)) close(r0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x5, 0x8000) r2 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x100010, 0xffffffffffffff9c, 0x0) r3 = mmap$binder(&(0x7f000070a000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x30, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08631040", @ANYRES64=r2, @ANYBLOB="0400000000000000066304400000000009631040", @ANYRES64=r3, @ANYBLOB], 0x2, 0x0, &(0x7f0000000380)="ef20"}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000400)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000080)=@generic) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x84040, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r5, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x1, 0x0, 0x1000, 0x101, 0x0, 0x8, 0x40814, 0x2, 0x7, 0x4a2, 0x9, 0x1, 0x7fff, 0x1, 0x0, 0xfffffffffffffffe, 0x2, 0x1, 0x100000000, 0x100000000, 0x7, 0xfff, 0x8, 0x8, 0x7ff, 0x2, 0x2, 0x3, 0x5, 0x6, 0x2, 0x5, 0x2, 0x9, 0x5, 0x5, 0x0, 0x6, 0x0, @perf_config_ext={0xbef, 0xacd800}, 0x8000, 0x2, 0x8, 0x7, 0x8001, 0xd6, 0x9}, 0x0, 0x10, r4, 0x2) 05:10:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000000)='em0eth1\x00', 0x2) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000040)=""/35, &(0x7f0000000080)=0x23) pwrite64(r0, &(0x7f0000000340)='@', 0x1, 0x0) 05:10:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000200)={0x0, 0xfffffffffffffffd}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r2, 0xffffffffffffffff}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="393a340d231c04e0c2b076b1172946c7ba3d30"], 0x13) 05:10:56 executing program 4 (fault-call:2 fault-nth:39): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:56 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lookup_dcookie(0x6, &(0x7f0000000040)=""/21, 0x15) flistxattr(r0, &(0x7f0000000100)=""/150, 0x96) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f00000000c0), &(0x7f0000000000)=0x32c) socket$inet6_tcp(0xa, 0x1, 0x0) [ 234.879140] FAULT_INJECTION: forcing a failure. [ 234.879140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.891082] CPU: 0 PID: 14872 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 234.898454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.907807] Call Trace: [ 234.910411] dump_stack+0x1c9/0x2b4 [ 234.914053] ? dump_stack_print_info.cold.2+0x52/0x52 [ 234.919252] ? find_held_lock+0x36/0x1c0 [ 234.923339] should_fail.cold.4+0xa/0x1a [ 234.927417] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 234.932531] ? kasan_check_read+0x11/0x20 [ 234.936686] ? rcu_is_watching+0x8c/0x150 [ 234.940858] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 234.940887] ? find_held_lock+0x36/0x1c0 [ 234.949359] ? check_same_owner+0x340/0x340 [ 234.953699] ? rcu_note_context_switch+0x730/0x730 [ 234.958647] __alloc_pages_nodemask+0x36e/0xdb0 [ 234.963329] ? default_file_splice_read+0x1da/0xb10 [ 234.968363] ? do_splice_to+0x12e/0x190 [ 234.968381] ? splice_direct_to_actor+0x270/0x8f0 [ 234.968402] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 234.968433] ? rcu_pm_notify+0xc0/0xc0 [ 234.968456] ? __kmalloc_node+0x33/0x70 [ 234.968470] ? __kmalloc_node+0x33/0x70 [ 234.968487] ? rcu_read_lock_sched_held+0x108/0x120 [ 234.968505] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 234.968526] alloc_pages_current+0x10c/0x210 [ 234.968544] push_pipe+0x400/0x7a0 [ 234.968557] ? __kmalloc_node+0x47/0x70 [ 234.968579] iov_iter_get_pages_alloc+0x866/0x1530 [ 234.968595] ? trace_hardirqs_on+0xd/0x10 [ 234.968618] ? iov_iter_fault_in_readable+0x460/0x460 [ 234.968636] ? free_obj_work+0xbb0/0xbb0 [ 234.968652] ? free_unref_page+0x6e3/0x9a0 [ 234.968670] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 234.968686] ? trace_hardirqs_on+0xd/0x10 [ 234.968703] ? mark_free_pages+0x3b0/0x3b0 [ 234.968720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.968734] ? sock_sendmsg+0x5a/0x120 [ 234.968751] ? kernel_sendmsg+0x43/0x50 [ 234.968768] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 234.968781] ? iov_iter_pipe+0xc2/0x2f0 [ 234.968802] default_file_splice_read+0x1da/0xb10 [ 234.968817] ? do_splice_direct+0x2d4/0x420 [ 234.968830] ? do_sendfile+0x623/0xe20 [ 234.968844] ? __x64_sys_sendfile64+0x15d/0x250 [ 234.968860] ? do_syscall_64+0x1b9/0x820 [ 234.968886] ? iter_file_splice_write+0x1010/0x1010 [ 234.968901] ? __put_page+0x136/0x190 [ 234.968917] ? __put_compound_page+0xe0/0xe0 [ 234.968935] ? sock_kfree_s+0x60/0x60 [ 234.968955] ? generic_pipe_buf_release+0x1de/0x2b0 [ 234.968970] ? anon_pipe_buf_release+0x530/0x530 [ 234.968990] ? generic_pipe_buf_nosteal+0x10/0x10 [ 234.969004] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.969021] ? splice_from_pipe_next.part.9+0x296/0x340 [ 234.969039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.969051] ? fsnotify+0xbb4/0x14e0 [ 234.969074] ? fsnotify_first_mark+0x350/0x350 [ 234.969089] ? fsnotify+0x14e0/0x14e0 [ 234.969106] ? splice_from_pipe+0x1f5/0x340 [ 234.969122] ? generic_pipe_buf_nosteal+0x10/0x10 [ 234.969138] ? splice_shrink_spd+0xd0/0xd0 [ 234.969157] ? security_file_permission+0x1c6/0x240 [ 234.969174] ? rw_verify_area+0x118/0x360 05:10:56 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f00000002c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/76, 0x4c}, {&(0x7f00000014c0)=""/74, 0x4a}], 0x4, &(0x7f0000000080)=""/165, 0xa5}}], 0x6fb, 0x0, &(0x7f0000004000)={0x77359400}) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1, 0x200000) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}, 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005a00)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x0) 05:10:56 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) socket$inet6(0xa, 0x80005, 0xfffffffffffffffb) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0xdac1, 0x8, 0x10000, 0x800, 0x10001, 0x9}) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x55, 0x2}, {{0x77359400}}], 0x30) 05:10:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='/dev/sequencer2\x00'}, 0x10) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x1d, 0x1c, "30a5b022b061d33679f22f381f979519bc9d54fc5c78656bf45456f8fe3febb2e87c6ea09d27d04e23db7c99dc82019f5125a88c220fe90428f23b986a2977b2", "93416cf49b3092f58e508cc890e6f409cf7060210427001a4b288e056cb33a06", [0x7ff, 0x7]}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x40045109, &(0x7f0000a07fff)) getsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:10:56 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000340)="2f65786500000000000409004bddd9ded2da75af1fc5028e6cb5667c60e8a72b7800e9bece35331ce39c0000000000000000000020643039f0c5a3145fa86b1350995931a793218f182f8aaae51c7d299c0143098671ce7edf185255f632cea4fafa8a2fb8b1e09b347b0000000000007ca33b785219fc938676cde21fdb5c05af19bae1d8ac83125ed87b0560a9034a5ed1b25abd821cad44bae7e0705a487226fc4385e2f9939426a7e7b1cad4af54cf2479a87646479be9124a46c8bf893caa277a08d83290c4b702e10f00000000") ioctl$KVM_IOEVENTFD(r1, 0x40086602, &(0x7f0000000140)={0x5000, &(0x7f0000000100)}) 05:10:56 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000100)={@rand_addr, @loopback=0x7f000001}, 0xc) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000140)="ff", 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x121000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000040)="c99f64ad5d3d73e88175e6f4398003b4b277fc700789faa6c69329f4a6e646accdba1fa5720471671452056813bc5b2c29449fc60f14fa06d8f338af555fc4caf993132c5b6f63c90d13334dfe9ca2f6837ac90f487f12e8f5b7fe55100386efcae3c8d64fe988a719de768db637a7f7339a18e1d1ded1993bc9bc71d60c59c4588e9de598d6d3d03af56c4ce9d46ff399b87de2a5b88beb78b3b02c1d43d85d360538e2f34dca2a1917"}, 0x10) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) [ 234.969191] ? iter_file_splice_write+0x1010/0x1010 [ 234.969207] do_splice_to+0x12e/0x190 [ 234.969228] splice_direct_to_actor+0x270/0x8f0 [ 234.969246] ? pipe_to_sendpage+0x400/0x400 [ 234.969266] ? do_splice_to+0x190/0x190 [ 234.969283] ? rw_verify_area+0x118/0x360 [ 234.969302] do_splice_direct+0x2d4/0x420 [ 234.969329] ? splice_direct_to_actor+0x8f0/0x8f0 [ 234.969351] ? rw_verify_area+0x118/0x360 [ 234.969370] do_sendfile+0x623/0xe20 [ 234.969394] ? do_compat_pwritev64+0x1c0/0x1c0 05:10:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000440)=@fragment, 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@fragment, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) [ 234.969420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.969436] ? _copy_from_user+0xdf/0x150 [ 234.969455] __x64_sys_sendfile64+0x15d/0x250 [ 234.969472] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 234.969489] ? do_syscall_64+0x9a/0x820 [ 234.969511] do_syscall_64+0x1b9/0x820 [ 234.969524] ? finish_task_switch+0x1d3/0x870 [ 234.969541] ? syscall_return_slowpath+0x5e0/0x5e0 [ 234.969559] ? syscall_return_slowpath+0x31d/0x5e0 [ 234.969581] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 234.969604] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.969629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.283218] RIP: 0033:0x455ab9 [ 235.286403] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.305740] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 235.313456] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 235.320719] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 05:10:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = gettid() ioctl$KVM_NMI(r2, 0xae9a) write(r3, &(0x7f0000000480)="ce", 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000040)={{r5, r6+10000000}}, &(0x7f0000000080)) fcntl$setstatus(r3, 0x4, 0x40c00) tkill(r4, 0x1000000000016) [ 235.327977] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 235.335234] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 235.342491] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000027 05:10:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) sendmmsg$inet_sctp(0xffffffffffffff9c, &(0x7f0000001280)=[{&(0x7f0000000180)=@in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000800)}], 0x1, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000640)={&(0x7f0000000200)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000580)=""/182, 0xb6, 0x10000}, 0x10001) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000680)={0x303, 0x33}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="364280560008f0453119660f3880750966ba4100b80b000000ef66b84f008ee866b803000f00d8420f011b660f38823af3460fbd5c9008660f38815500"}], 0xaaaaaaaaaaaad04, 0x0, &(0x7f0000000180), 0x1131) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000), 0x10) 05:10:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'tunl0\x00'}) r2 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x6aed, 0x100) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) close(r1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xff, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x1, 0x1ff, 0x5, {0x0, @in6={{0xa, 0x4e20, 0x1f0000000000, @loopback={0x0, 0x1}, 0x6}}, 0xfffffffffffffff8, 0x10000, 0x0, 0x7044}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r3, 0x4, 0x10001, 0x78, 0x1, 0x1f, 0x6, 0x101, {r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x8000, 0x400, 0x5, 0xbb46, 0x20}}, &(0x7f00000002c0)=0xb0) 05:10:56 executing program 4 (fault-call:2 fault-nth:40): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$inet(0x2, 0x1, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="95000000ce6cfe6e3c36bc50bfc7233d6c23da6d3bd9c46006644bb1afddf55a16380fe5be9cdc69294aea619edb783b97b6752d2f1ac5e79abdb49bf9b85b5f1b7135d2e5a9c02f97d090ae521882697c396e0b106de0e81a6a3e7a55887ef618dca7c4bb96004d6183f4dcae11a311516c99a99e5618722d847d8c26bc0b335e5ed2cb926ac3dbcd953d81d8ade1e47edc2988bb17e6875fb3c2d7ef99980317d3c31ff1e6b09429162df081eb0125364df3b6b8f3673f82dddb6ea68d7344f329d17e4828794653ba1f6113cee5e602c193dfd10dce"], &(0x7f0000000200)=0x9d) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x35, @local={0xfe, 0x80, [], 0xaa}, 0xb5}}, 0x9, 0x1000}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r2, 0x1, 0x30}, &(0x7f0000000080)=0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400), &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x0, 0x6, 0x5, 0x8, 0x4}, 0x98) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000002c0)=0x10) 05:10:56 executing program 2: r0 = socket$inet6(0xa, 0x807, 0x200) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xfffffffffffffffc, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) [ 235.484657] FAULT_INJECTION: forcing a failure. [ 235.484657] name failslab, interval 1, probability 0, space 0, times 0 [ 235.495996] CPU: 1 PID: 14933 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #149 [ 235.503365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.512730] Call Trace: [ 235.515315] dump_stack+0x1c9/0x2b4 [ 235.518947] ? dump_stack_print_info.cold.2+0x52/0x52 [ 235.524125] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 235.528528] should_fail.cold.4+0xa/0x1a [ 235.532579] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 235.537674] ? kasan_check_read+0x11/0x20 [ 235.541807] ? rcu_is_watching+0x8c/0x150 [ 235.545956] ? find_held_lock+0x36/0x1c0 [ 235.550026] ? check_same_owner+0x340/0x340 [ 235.554338] ? rcu_note_context_switch+0x730/0x730 [ 235.559258] __should_failslab+0x124/0x180 [ 235.563482] should_failslab+0x9/0x14 [ 235.567269] __kmalloc+0x2c8/0x760 [ 235.570796] ? __kmalloc_node+0x33/0x70 [ 235.574756] ? __kmalloc_node+0x33/0x70 [ 235.578720] ? rw_copy_check_uvector+0x361/0x3e0 [ 235.583463] ? rcu_read_lock_sched_held+0x108/0x120 [ 235.588468] rw_copy_check_uvector+0x361/0x3e0 [ 235.593886] import_iovec+0xcf/0x470 [ 235.597593] ? dup_iter+0x270/0x270 [ 235.601210] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.606732] ? iov_iter_get_pages_alloc+0x3ab/0x1530 [ 235.611841] vfs_readv+0xf5/0x1c0 [ 235.615285] ? compat_rw_copy_check_uvector+0x440/0x440 [ 235.620636] ? free_obj_work+0xbb0/0xbb0 [ 235.624684] ? free_unref_page+0x6e3/0x9a0 [ 235.628909] ? trace_hardirqs_on+0xd/0x10 [ 235.633046] ? mark_free_pages+0x3b0/0x3b0 [ 235.637273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.642798] ? kernel_sendmsg+0x43/0x50 [ 235.646761] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 235.651772] default_file_splice_read+0x526/0xb10 [ 235.656599] ? do_splice_direct+0x2d4/0x420 [ 235.660906] ? do_sendfile+0x623/0xe20 [ 235.664778] ? __x64_sys_sendfile64+0x15d/0x250 [ 235.669433] ? do_syscall_64+0x1b9/0x820 [ 235.673486] ? iter_file_splice_write+0x1010/0x1010 [ 235.678489] ? __put_compound_page+0xe0/0xe0 [ 235.682883] ? sock_kfree_s+0x60/0x60 [ 235.686674] ? generic_pipe_buf_release+0x1de/0x2b0 [ 235.691676] ? anon_pipe_buf_release+0x530/0x530 [ 235.696423] ? generic_pipe_buf_nosteal+0x10/0x10 [ 235.701250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.706778] ? splice_from_pipe_next.part.9+0x296/0x340 [ 235.712128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.717649] ? fsnotify+0xbb4/0x14e0 [ 235.721376] ? rw_verify_area+0x118/0x360 [ 235.725509] ? iter_file_splice_write+0x1010/0x1010 [ 235.730512] do_splice_to+0x12e/0x190 [ 235.734303] splice_direct_to_actor+0x270/0x8f0 [ 235.738960] ? pipe_to_sendpage+0x400/0x400 [ 235.743270] ? do_splice_to+0x190/0x190 [ 235.747230] ? rw_verify_area+0x118/0x360 [ 235.751366] do_splice_direct+0x2d4/0x420 [ 235.755502] ? splice_direct_to_actor+0x8f0/0x8f0 [ 235.760348] ? rw_verify_area+0x118/0x360 [ 235.764502] do_sendfile+0x623/0xe20 [ 235.768208] ? do_compat_pwritev64+0x1c0/0x1c0 [ 235.772780] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.778302] ? _copy_from_user+0xdf/0x150 [ 235.782438] __x64_sys_sendfile64+0x15d/0x250 [ 235.786920] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 235.791487] ? do_syscall_64+0x9a/0x820 [ 235.795448] do_syscall_64+0x1b9/0x820 [ 235.799320] ? finish_task_switch+0x1d3/0x870 [ 235.803810] ? syscall_return_slowpath+0x5e0/0x5e0 [ 235.808726] ? syscall_return_slowpath+0x31d/0x5e0 [ 235.813647] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 235.818998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.823844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.829030] RIP: 0033:0x455ab9 [ 235.832201] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.851431] RSP: 002b:00007f6b67989c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 235.859129] RAX: ffffffffffffffda RBX: 00007f6b6798a6d4 RCX: 0000000000455ab9 [ 235.866383] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 235.873644] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 235.880897] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000015 [ 235.888149] R13: 00000000004c0d79 R14: 00000000004d1380 R15: 0000000000000028 05:10:57 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/28}, 0x24, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000002400)={0x0, ""/4096}, 0x1008, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) 05:10:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00001f0000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 05:10:57 executing program 4 (fault-call:2 fault-nth:41): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:57 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername(r0, &(0x7f0000000200)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x32a, 0x7ff, 0x8, 0x1, 0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, {&(0x7f0000000280)=""/210, 0xd2}, &(0x7f0000000380), 0x40}, 0xa0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x8001}}, 0x80, 0x3, 0x4, 0x0, 0x93b0}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000580)={r2, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f00000000c0)="be340680b09da8d1d0e84677605c206b6d6571c803e3071a318525ee33d248ae73b3a1c64b04baf9285613a4d88623e6476425ec0ec2b3fd5846226247c2376251a920f9b0db3d50c821865df9c327213c9694f48aa6ceeb0c50d3e4b6209676cc2f8ee0076e19f9776eda22cd90a498bf5f2b70c675098e3efd5a90cf1920cad0984e82ad18a1c3995af691ab1010102c997a5252aa2e42c5ee9e5db7b0cbd3d18bc413e771047d3788ef5da2c082b30c1f7f059de88267e1c89fb2248eb17a4bfa003de76bcf58289f617b11a9d97ad7bc2729829dcb619d30e2d24ba34c8d740f4385c37fe8e4d003b6131cd6dd0ca0458412c8b7dc2b37333915b38d7b8e4d90af1ac70835d4", 0x108) 05:10:57 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00081100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00c336004e2000089078"], &(0x7f0000000040)) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x1b) syz_emit_ethernet(0x348, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) 05:10:57 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1=0xe0000001, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="b8", 0x1}], 0x1) 05:10:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = memfd_create(&(0x7f0000000580)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) fcntl$addseals(r2, 0x409, 0xc) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000680)=']', 0x1}], 0x1, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='security.evm\x00', &(0x7f0000000100)='\x00', 0x1, 0x2) lseek(r1, 0xf7, 0x4) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000000)) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 05:10:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d34008f762070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_deladdr={0x2c, 0x15, 0x111, 0x0, 0x0, {0xa}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x2c}, 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10026000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x3c, r2, 0x301, 0x70bd29, 0x25dfdbfb, {0x1}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x108, r2, 0x200, 0x70bd28, 0x25dfdbff, {0xd}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffffff7d}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf54e}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5fd7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 05:10:57 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7ff, 0x400) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x1) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 05:10:59 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @dev}}, &(0x7f0000000500)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000580)={@multicast2, @rand_addr, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={"00000200", r2}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) r4 = dup3(r0, r0, 0x80000) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)={0x34, 0x2c, 0x17, 0x18, 0x1, 0x8, 0x4, 0xd0}) getsockname(r1, &(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f0000000200)=0x80) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000000c0)={{0x0, 0x2}, {0x0, 0x1}, 0x9, 0x1, 0x6}) 05:10:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000000)=0xf, 0x80000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x0) 05:10:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x20002, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7fffffff, 0x410300) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) mmap(&(0x7f00006fd000/0x4000)=nil, 0x4000, 0x4, 0xa051, r1, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0xfffffffffffffffa) 05:10:59 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @broadcast}, &(0x7f00000000c0)=0xc) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 05:10:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000180)="64f30f01c866b9290800000f320f01d90aa17d54060fc76b7ab8b4000f00d066b9800000c00f326635010000000f300f20210f2103", 0x35}], 0x1, 0x49, &(0x7f0000000580), 0x0) kexec_load(0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000580)="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", 0x1000, 0x3, 0x81}, {&(0x7f00000000c0)="ac90cef5d1dc505604e1665fdd4d31c1a4f81eacc9c0557db4029956dba97199c12724e0601c6fca172c03a5cdeb11c08695bdd4135bd770d17f4afaefee8c235ecb86cbafe00047172fdb7b153e1768afc279c9dedc9389fa08c6ade46fdce42f3e6ac90cf41b23c55f15bfbb", 0x6d, 0x1, 0x81}], 0x150000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b90e020000b800980000ba000000000f3036670f01cf640f01c9c4e1d8c2d5eb9a00e000001d01c4e161e9d0b9800000c00f3235000800000f30660f3810596d0f20e035000010000f22e00f20e035000002000f22e0", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:10:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000000000410000, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x96) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x23, &(0x7f0000000000)=0x98, 0x4) 05:10:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback={0x0, 0x1}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) syz_emit_ethernet(0xb5, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00740600fe80000000000000000000000000000000000000aa00004e200000000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 05:10:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x200) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000040)=""/48, &(0x7f0000000080)=0x30) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='^!\x00', 0xffffffffffffff9c}, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) recvmmsg(r0, &(0x7f0000003f80)=[{{&(0x7f00000004c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/224, 0xe0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/88, 0x58}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x5, &(0x7f0000002800)=""/56, 0x38, 0xc6af}, 0x1f}, {{&(0x7f0000002840)=@can={0x0, 0x0}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000028c0)=""/210, 0xd2}, {&(0x7f00000029c0)=""/71, 0x47}], 0x2, &(0x7f0000002a80)=""/163, 0xa3, 0x400}, 0x9}, {{&(0x7f0000002b40)=@rc, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002bc0)=""/159, 0x9f}, {&(0x7f0000002c80)=""/36, 0x24}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/149, 0x95}, {&(0x7f0000003d80)=""/207, 0xcf}, {&(0x7f0000003e80)=""/17, 0x11}], 0x6, &(0x7f0000003f40)=""/28, 0x1c, 0x6}, 0x10000}], 0x3, 0x40, &(0x7f0000004040)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004080)={'gretap0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000041c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000004200)={@empty, @dev, 0x0}, &(0x7f0000004240)=0xc) recvmmsg(r0, &(0x7f0000008200)=[{{&(0x7f00000042c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004340)=""/195, 0xc3}, {&(0x7f0000004440)=""/88, 0x58}], 0x2, &(0x7f0000004500)=""/136, 0x88, 0x7}}, {{&(0x7f00000045c0)=@can, 0x80, &(0x7f0000004740)=[{&(0x7f0000004640)=""/64, 0x40}, {&(0x7f0000004680)=""/8, 0x8}, {&(0x7f00000046c0)=""/80, 0x50}], 0x3, &(0x7f0000004780)=""/177, 0xb1}, 0x3}, {{&(0x7f0000004840)=@sco, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000048c0)=""/16, 0x10}, {&(0x7f0000004900)=""/192, 0xc0}, {&(0x7f00000049c0)=""/98, 0x62}, {&(0x7f0000004a40)=""/242, 0xf2}, {&(0x7f0000004b40)=""/124, 0x7c}], 0x5, &(0x7f0000004c40)=""/4096, 0x1000, 0x1}, 0x1}, {{&(0x7f0000005c40)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f00000070c0)=[{&(0x7f0000005cc0)=""/86, 0x56}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/182, 0xb6}, {&(0x7f0000006e00)=""/21, 0x15}, {&(0x7f0000006e40)=""/84, 0x54}, {&(0x7f0000006ec0)=""/144, 0x90}, {&(0x7f0000006f80)=""/230, 0xe6}, {&(0x7f0000007080)=""/36, 0x24}], 0x8, &(0x7f0000007140)=""/7, 0x7, 0x1}, 0x6}, {{&(0x7f0000007180), 0x80, &(0x7f0000007340)=[{&(0x7f0000007200)=""/30, 0x1e}, {&(0x7f0000007240)=""/5, 0x5}, {&(0x7f0000007280)=""/147, 0x93}], 0x3, &(0x7f0000007380)=""/144, 0x90, 0xffff}, 0x9}, {{&(0x7f0000007440)=@nfc, 0x80, &(0x7f0000007780)=[{&(0x7f00000074c0)=""/153, 0x99}, {&(0x7f0000007580)=""/25, 0x19}, {&(0x7f00000075c0)=""/183, 0xb7}, {&(0x7f0000007680)=""/115, 0x73}, {&(0x7f0000007700)=""/93, 0x5d}], 0x5, 0x0, 0x0, 0xffff}, 0x9}, {{&(0x7f0000007800)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007880)=""/2, 0x2}, {&(0x7f00000078c0)=""/181, 0xb5}, {&(0x7f0000007980)=""/162, 0xa2}, {&(0x7f0000007a40)=""/92, 0x5c}, {&(0x7f0000007ac0)=""/176, 0xb0}, {&(0x7f0000007b80)=""/108, 0x6c}, {&(0x7f0000007c00)=""/95, 0x5f}], 0x7, 0x0, 0x0, 0x5}, 0x8000}, {{&(0x7f0000007d00)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000008100)=[{&(0x7f0000007d80)=""/158, 0x9e}, {&(0x7f0000007e40)=""/224, 0xe0}, {&(0x7f0000007f40)}, {&(0x7f0000007f80)=""/187, 0xbb}, {&(0x7f0000008040)=""/77, 0x4d}, {&(0x7f00000080c0)=""/9, 0x9}], 0x6, &(0x7f0000008180)=""/120, 0x78, 0x1f}, 0x8000}], 0x8, 0x10000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, 0x0}, &(0x7f0000008440)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000008480)={@broadcast, @local, 0x0}, &(0x7f00000084c0)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000008500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008540)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000008580)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000008680)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000008980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000008940)={&(0x7f00000086c0)={0x250, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, [{0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x124, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}, {0x8, 0x7}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x1}, 0x1) 05:10:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x347, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x3e, &(0x7f0000000000), &(0x7f0000000080)=0x4) 05:10:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000240)={0x1000, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e20, @broadcast=0xffffffff}}}, 0x108) ioctl$KVM_IRQ_LINE(r1, 0x4010ae67, &(0x7f00000001c0)={0xfffffffffffffffe}) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r3 = dup3(r1, r1, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x8080, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) socket$inet(0x2, 0x8000f, 0xfff) socket$l2tp(0x18, 0x1, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x10) r4 = socket(0xf, 0x6, 0x40) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') init_module(&(0x7f0000000100)='/dev/kvm\x00', 0x9, &(0x7f0000000080)='/dev/kvm\x00') getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x9, "a7c85798c756ba81b5"}, &(0x7f00000003c0)=0x11) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000400)={r5, 0x1}, 0x8) 05:10:59 executing program 6: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x200000, 0x0) ioctl$sock_bt(r2, 0x541b, &(0x7f0000000140)="c1f3bb738e91533606d3c8dc0d0550783b61b605c38daf95c009b487c827fc41") setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) sendto$inet6(r0, &(0x7f0000000300), 0xfd1a, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 05:10:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x100000001, 0x40) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000380)={[], 0xd83e, 0x1, 0x8001, 0x0, 0x4, r2}) sync_file_range(r0, 0x2, 0xce, 0x7) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x44000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x5, 0x5}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4}, &(0x7f00000002c0)=0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c01000010000302000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}, 0x1}, 0x0) [ 238.515198] BUG: unable to handle kernel paging request at ffffffff0000568a [ 238.522340] PGD 8e6d067 P4D 8e6d067 PUD 0 [ 238.526600] Oops: 0002 [#1] SMP KASAN [ 238.530409] CPU: 1 PID: 15026 Comm: syz-executor7 Not tainted 4.18.0-rc5+ #149 [ 238.537763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.547145] RIP: 0010:vmx_vcpu_run+0x124a/0x2600 05:10:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$void(0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x6) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000001, 0x191101) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) semget(0x2, 0x3, 0x100) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100)=0x4, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000300)={0x6, 0x27a, 0xfa00, {{0xffffffffffffff54, 0x1, "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", 0x1a, 0x0, 0xe1a5, 0x2000000000000000, 0x8, 0x70, 0x9}, r3}}, 0x120) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x4e22}, 0x1c) close(r0) r4 = accept4(r1, &(0x7f00000004c0)=@alg, &(0x7f0000715ffc)=0x80, 0x0) sendmmsg(r4, &(0x7f00000006c0)=[{{&(0x7f0000000180)=@can={0x1d}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="9a", 0x1}], 0x1, &(0x7f0000000800)=ANY=[]}}], 0x2, 0x33f2da5704ef4f20) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140)=0xfffffffffffffff8, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0xfc24a9c7b075533c}}, 0x20) 05:10:59 executing program 6: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x200000, 0x0) ioctl$sock_bt(r2, 0x541b, &(0x7f0000000140)="c1f3bb738e91533606d3c8dc0d0550783b61b605c38daf95c009b487c827fc41") setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) sendto$inet6(r0, &(0x7f0000000300), 0xfd1a, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 238.551903] Code: a9 68 03 00 00 4c 8b b1 70 03 00 00 4c 8b b9 78 03 00 00 48 8b 89 08 03 00 00 75 05 0f 01 c2 eb 03 0f 01 c3 48 89 4c 24 08 59 <0f> 96 81 88 56 00 00 48 89 81 00 03 00 00 48 89 99 18 03 00 00 8f [ 238.571174] RSP: 0018:ffff8801b21c7358 EFLAGS: 00010002 [ 238.576545] RAX: 0000000000000000 RBX: ffff8801b6e465c0 RCX: ffffffff00000002 [ 238.583821] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8801b6e46d70 [ 238.591097] RBP: ffff8801b21c76a0 R08: ffffed0036dc8daf R09: ffffed0036dc8dae [ 238.598374] R10: ffffed0036dc8dae R11: ffff8801b6e46d77 R12: ffff8801b6e46d70 [ 238.605653] R13: ffff8801b21c77b8 R14: ffff8801b21c7710 R15: ffff8801b21c77b8 05:10:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000240)={0x1000, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e20, @broadcast=0xffffffff}}}, 0x108) ioctl$KVM_IRQ_LINE(r1, 0x4010ae67, &(0x7f00000001c0)={0xfffffffffffffffe}) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r3 = dup3(r1, r1, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x8080, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) socket$inet(0x2, 0x8000f, 0xfff) socket$l2tp(0x18, 0x1, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x10) r4 = socket(0xf, 0x6, 0x40) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') init_module(&(0x7f0000000100)='/dev/kvm\x00', 0x9, &(0x7f0000000080)='/dev/kvm\x00') getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x9, "a7c85798c756ba81b5"}, &(0x7f00000003c0)=0x11) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000400)={r5, 0x1}, 0x8) 05:10:59 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001480)=0x0) ptrace$setopts(0x4206, r0, 0x3e6d, 0x21) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000080)=""/69, 0x45, 0x10000, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000b18000)={{0xffffff94}}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x7cee, 'syz0\x00', 0x2}) getsockname$packet(r1, &(0x7f0000002940)={0x0, 0x0, 0x0}, &(0x7f0000002980)=0x14) connect$can_bcm(r1, &(0x7f00000029c0)={0x1d, r2}, 0x10) getresuid(&(0x7f0000000280)=0x0, &(0x7f0000001500), &(0x7f0000001540)) getresgid(&(0x7f0000001580)=0x0, &(0x7f00000015c0), &(0x7f0000001740)) fchownat(r1, &(0x7f00000001c0)='./file0\x00', r3, r4, 0x1000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000001300)=""/216) write$FUSE_OPEN(r1, &(0x7f0000001440)={0x20, 0x0, 0x1, {0x0, 0x4}}, 0x20) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000012c0)={0x0, 0x1}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18, 0x1}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000014c0)={0x8, 0x0, 0x7fff, 0xca8, 'syz0\x00', 0x3ed}) close(r1) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000001400)) r5 = request_key(&(0x7f0000001640)="656e637279707465640082424675bac89f483485724ff89f62478f8e172356a416be02c67978ff3abd6afea03270e6ab841d152509d193adf8194b4ca17d80aed78e0caa80c878c6c0bb386a4ed3fabd585a5c4e75d79445d1a888cf26f7e27e3cca6b65d8fb1cdd5a90f92b1969cc8a52e4d88dbeff6abde0a4333bc6327dc4690834f64cd197c00fff4bea9c13b750d915b5f9ccce4abfb3df199a2a7b48cdb7e5c5bf78b1ec03152f079fca41e53f", &(0x7f0000001700)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001600)='/dev/sequencer2\x00', 0xfffffffffffffffb) keyctl$read(0xb, r5, &(0x7f00000002c0)=""/4096, 0x1000) [ 238.612931] FS: 00007ff213047700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 238.621164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.627052] CR2: ffffffff0000568a CR3: 00000001ce818000 CR4: 00000000001426e0 [ 238.634331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.641604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.648883] Call Trace: [ 238.651472] ? wake_q_add+0x23/0xb0 [ 238.655105] ? trace_hardirqs_on+0x10/0x10 [ 238.659330] ? handle_vmfunc+0x9d0/0x9d0 [ 238.663392] ? vcpu_enter_guest+0x205b/0x6090 [ 238.667880] ? graph_lock+0x170/0x170 [ 238.671707] ? kvm_set_msr_common+0x26a0/0x26a0 [ 238.676362] ? preempt_notifier_register+0x200/0x200 [ 238.681457] ? lock_acquire+0x1e4/0x540 [ 238.685417] ? futex_wake+0x370/0x760 [ 238.689210] ? kasan_check_write+0x14/0x20 [ 238.693430] ? wake_q_add+0x23/0xb0 [ 238.697044] mark_wake_futex+0x137/0x1e0 [ 238.701091] ? __unqueue_futex+0x2e0/0x2e0 [ 238.705312] ? kasan_check_write+0x14/0x20 [ 238.709531] ? do_raw_spin_lock+0xc1/0x200 [ 238.713755] futex_wake+0x5dd/0x760 [ 238.717372] ? get_futex_key+0x1ea0/0x1ea0 [ 238.721596] ? kasan_check_read+0x11/0x20 [ 238.725734] ? rcu_pm_notify+0xc0/0xc0 [ 238.729614] do_futex+0x300/0x27d0 [ 238.733140] ? kfree+0x1e9/0x260 [ 238.736509] ? kvm_vcpu_ioctl+0x2ba/0x1300 [ 238.740733] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 238.745744] ? exit_robust_list+0x290/0x290 [ 238.750052] ? find_held_lock+0x36/0x1c0 [ 238.754103] ? lock_downgrade+0x8f0/0x8f0 [ 238.758240] ? kasan_check_read+0x11/0x20 [ 238.762373] ? rcu_is_watching+0x8c/0x150 [ 238.766510] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 238.770908] ? __fget+0x414/0x670 [ 238.774347] ? expand_files.part.8+0x9c0/0x9c0 [ 238.778915] ? lock_downgrade+0x8f0/0x8f0 [ 238.783051] ? kvm_uevent_notify_change.part.31+0x440/0x440 [ 238.788747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.794267] ? do_vfs_ioctl+0x201/0x1720 [ 238.798313] ? ioctl_preallocate+0x300/0x300 [ 238.802705] ? __fget_light+0x2f7/0x440 [ 238.806666] ? __schedule+0x1ed0/0x1ed0 [ 238.810628] ? fget_raw+0x20/0x20 [ 238.814071] ? task_work_run+0x22f/0x2a0 [ 238.818121] __x64_sys_futex+0x472/0x6a0 [ 238.822167] ? exit_to_usermode_loop+0x8c/0x370 [ 238.826834] ? do_futex+0x27d0/0x27d0 [ 238.830624] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 238.836149] ? fput+0x130/0x1a0 [ 238.839422] ? ksys_ioctl+0x81/0xd0 [ 238.843034] ? do_syscall_64+0x9a/0x820 [ 238.847000] do_syscall_64+0x1b9/0x820 [ 238.850878] ? finish_task_switch+0x1d3/0x870 [ 238.855360] ? syscall_return_slowpath+0x5e0/0x5e0 [ 238.860275] ? syscall_return_slowpath+0x31d/0x5e0 [ 238.865197] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 238.870547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.875379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.880549] RIP: 0033:0x455ab9 [ 238.883720] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 238.902986] RSP: 002b:00007ff213046c88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 238.910689] RAX: ffffffffffffffda RBX: 00007ff2130476d4 RCX: 0000000000455ab9 [ 238.917940] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000072bec4 [ 238.925191] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 238.932454] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 238.939723] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000000 [ 238.946993] Modules linked in: [ 238.950179] Dumping ftrace buffer: [ 238.953708] (ftrace buffer empty) [ 238.957402] CR2: ffffffff0000568a [ 238.960844] ---[ end trace 1ffded5ad3edd53c ]--- [ 238.965589] RIP: 0010:vmx_vcpu_run+0x124a/0x2600 [ 238.970319] Code: a9 68 03 00 00 4c 8b b1 70 03 00 00 4c 8b b9 78 03 00 00 48 8b 89 08 03 00 00 75 05 0f 01 c2 eb 03 0f 01 c3 48 89 4c 24 08 59 <0f> 96 81 88 56 00 00 48 89 81 00 03 00 00 48 89 99 18 03 00 00 8f [ 238.989593] RSP: 0018:ffff8801b21c7358 EFLAGS: 00010002 [ 238.994951] RAX: 0000000000000000 RBX: ffff8801b6e465c0 RCX: ffffffff00000002 [ 239.002205] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8801b6e46d70 [ 239.009545] RBP: ffff8801b21c76a0 R08: ffffed0036dc8daf R09: ffffed0036dc8dae [ 239.016802] R10: ffffed0036dc8dae R11: ffff8801b6e46d77 R12: ffff8801b6e46d70 [ 239.024056] R13: ffff8801b21c77b8 R14: ffff8801b21c7710 R15: ffff8801b21c77b8 [ 239.031312] FS: 00007ff213047700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 239.039523] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.045390] CR2: ffffffff0000568a CR3: 00000001ce818000 CR4: 00000000001426e0 [ 239.052653] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.059914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.067167] Kernel panic - not syncing: Fatal exception [ 239.072998] Dumping ftrace buffer: [ 239.076524] (ftrace buffer empty) [ 239.080212] Kernel Offset: disabled [ 239.083825] Rebooting in 86400 seconds..