[info] Using makefile-style concurrent boot in runlevel 2. [ 26.468155] audit: type=1800 audit(1542374609.166:21): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts. 2018/11/16 13:23:41 fuzzer started 2018/11/16 13:23:43 dialing manager at 10.128.0.26:43351 2018/11/16 13:23:43 syscalls: 1 2018/11/16 13:23:43 code coverage: enabled 2018/11/16 13:23:43 comparison tracing: enabled 2018/11/16 13:23:43 setuid sandbox: enabled 2018/11/16 13:23:43 namespace sandbox: enabled 2018/11/16 13:23:43 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/16 13:23:43 fault injection: enabled 2018/11/16 13:23:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/16 13:23:43 net packed injection: enabled 2018/11/16 13:23:43 net device setup: enabled 13:26:47 executing program 0: syzkaller login: [ 224.767503] IPVS: ftp: loaded support on port[0] = 21 13:26:47 executing program 1: [ 224.992485] IPVS: ftp: loaded support on port[0] = 21 13:26:47 executing program 2: [ 225.268988] IPVS: ftp: loaded support on port[0] = 21 13:26:48 executing program 3: [ 225.720573] IPVS: ftp: loaded support on port[0] = 21 13:26:48 executing program 4: [ 226.314979] IPVS: ftp: loaded support on port[0] = 21 [ 226.348827] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.378539] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.392761] device bridge_slave_0 entered promiscuous mode [ 226.486110] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.501351] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.508650] device bridge_slave_1 entered promiscuous mode [ 226.650973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.675696] bridge0: port 1(bridge_slave_0) entered blocking state 13:26:49 executing program 5: [ 226.699853] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.719689] device bridge_slave_0 entered promiscuous mode [ 226.738095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.824882] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.850692] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.861158] device bridge_slave_1 entered promiscuous mode [ 226.924691] IPVS: ftp: loaded support on port[0] = 21 [ 226.948618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.069852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.113370] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.131069] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.151030] device bridge_slave_0 entered promiscuous mode [ 227.173595] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.281989] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.319971] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.340695] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.347761] device bridge_slave_1 entered promiscuous mode [ 227.496374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.539379] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.632791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.680527] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.748135] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.762534] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.769903] device bridge_slave_0 entered promiscuous mode [ 227.870433] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.894769] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.903611] device bridge_slave_1 entered promiscuous mode [ 227.926790] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.934935] team0: Port device team_slave_0 added [ 227.949230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.968405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.036158] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.047647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.071416] team0: Port device team_slave_1 added [ 228.085472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.149197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.194054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 228.216743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.232895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.257217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.291307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.321980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.351543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 228.358409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.368622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.389529] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.402576] team0: Port device team_slave_0 added [ 228.429067] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.441152] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.449043] device bridge_slave_0 entered promiscuous mode [ 228.467039] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.482262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.491979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.528835] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.540334] team0: Port device team_slave_1 added [ 228.595622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.620569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.628685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.651167] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.657518] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.676185] device bridge_slave_1 entered promiscuous mode [ 228.701260] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.744277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.761893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.817296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.836313] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.873982] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.883009] team0: Port device team_slave_0 added [ 228.894010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.911530] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.923240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.941569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.004597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 229.019684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.038973] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.051623] team0: Port device team_slave_1 added [ 229.059138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.071533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.079466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.134708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.161247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.210924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.217807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.226964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.279086] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.306324] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.314037] device bridge_slave_0 entered promiscuous mode [ 229.325403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.353766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.371405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.379297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.422137] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.428517] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.443171] device bridge_slave_1 entered promiscuous mode [ 229.455916] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.473374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.481381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.489309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.531604] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.538961] team0: Port device team_slave_0 added [ 229.567044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.627181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.652773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.661665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.683005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.694435] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.707442] team0: Port device team_slave_1 added [ 229.810503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.887360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.969868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.990958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.000552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.045356] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.093269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.100401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.118930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.154675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 230.163063] team0: Port device team_slave_0 added [ 230.172386] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.248984] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.255548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.262668] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.269015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.285806] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 230.296302] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.304284] team0: Port device team_slave_1 added [ 230.321305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.336525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.436799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 230.446519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.471254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.492868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 230.501366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.577393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.706966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.721249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.736014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.769887] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.776270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.782921] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.789251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.816753] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 230.836904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.847782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.858959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.892287] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 230.911284] team0: Port device team_slave_0 added [ 230.940887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.955917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.035500] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.042020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.048632] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.055044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.064598] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.076889] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.086790] team0: Port device team_slave_1 added [ 231.209408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 231.221306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.236742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.320447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 231.340733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.348609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.440149] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.446563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.453225] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.459592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.486039] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.496042] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.510737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.518670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.600914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.608018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.621844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.951783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.974793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.193292] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.199684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.206397] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.212806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.236007] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.916114] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.922544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.929146] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.935562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.944926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.990742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.001391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.239346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.651727] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.719340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.841094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.098063] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.107872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.121295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.135633] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.281322] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.394184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.512976] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.601198] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.618500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.633422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.692388] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.698643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.706169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.868525] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.998580] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.031536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.107226] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.256351] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.273136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.295286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.451276] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.697054] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.877501] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.889156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.904448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.915939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.251842] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.381389] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.841680] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.847864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.856167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 13:27:01 executing program 0: 13:27:02 executing program 0: [ 239.331579] 8021q: adding VLAN 0 to HW filter on device team0 13:27:02 executing program 0: 13:27:02 executing program 0: 13:27:02 executing program 0: 13:27:02 executing program 0: 13:27:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) getpid() setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 13:27:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fff, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x3e1, 0x400, 0x6b, &(0x7f0000000100)="5154ec2618793cc1a11ab848cd567c83bbc4342631a2a9996b073d91112dd16ee1eb9faa5bbb7ec547304b304afbf35fa53e9cd4c6f59e9da974054bda924b30b84ebff9f47d03d513417e41011bfa7f335edafb7c80b4fbc327f1217e9729fbd18c418997c2a0a80e5a39"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0xf0ffff, 0xff66}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0xff8e}}, 0x0) 13:27:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000080)={0x8, 0xfffffffffffffff7}) r1 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x541b, 0x70e000) [ 239.995029] hrtimer: interrupt took 29799 ns 13:27:02 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x88000) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x8, 0x3}) 13:27:03 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) connect$l2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x4, 0x4, {0xa, 0x4e21, 0x60, @ipv4={[], [], @local}, 0xfffffffffffffffd}}}, 0x3a) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000200)=0x5, 0x4) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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") accept4(r4, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 13:27:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000840)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@ipv4_getnetconf={0x44, 0x52, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xe12}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x10001}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000001c0)={{0x7, 0x7, 0x1, 0x80000000, 'syz1\x00', 0x400}, 0x0, [0xbcb8, 0x0, 0xffff, 0xffffffffffffffff, 0x1, 0x1, 0x24c, 0xff, 0x6, 0x44, 0x6, 0x77e, 0x5, 0x3, 0x42b9, 0x9, 0x4, 0x0, 0x3, 0x1ff, 0x2, 0x1, 0x7, 0x22, 0x3b86, 0x7fffffff, 0x3, 0x4, 0x1, 0xd51, 0x4, 0x1, 0x2, 0xad8, 0xcd42, 0x6, 0x3ff, 0x5, 0x2, 0xccc2, 0xf057, 0xff, 0x6, 0x5, 0x3, 0x40, 0x4f3b, 0x6, 0xffffffffffffff68, 0x81, 0x3, 0x0, 0x8, 0x8f6, 0x34, 0x5, 0x3, 0x7f, 0x100000000, 0xff, 0x2, 0x0, 0x1, 0x200, 0x2, 0x1, 0x4, 0x1, 0x1, 0xecb, 0xfff, 0x4, 0xfc4, 0x9, 0x10001, 0x3ff, 0xc797, 0x5, 0x10001, 0x80000000, 0xffffffff, 0x6, 0x5, 0x80000001, 0x3f, 0x0, 0x2ffb, 0x100000000, 0x1, 0x5, 0x100000000, 0xffffffffffff6047, 0x0, 0x8, 0x1ff, 0x1, 0x3, 0x0, 0x7be, 0xffffffffffffc5a6, 0x2, 0x100000000, 0x37, 0x7, 0x6, 0x3, 0x1000, 0x7, 0x8001, 0x42, 0x6, 0x8, 0x7ff, 0x9, 0xf0, 0x0, 0x7, 0x7, 0x7, 0x8, 0xa391, 0x6, 0x6, 0x5, 0x6, 0x7, 0x401, 0x80], {0x77359400}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) ioctl$KDENABIO(r0, 0x4b36) 13:27:03 executing program 1: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x5, 0x5}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={{}, {r2, r3/1000+10000}}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000100)={0x2000007f, 0x5, @name="a484f1f788c901c505a86bcf32ea571e8bfa77e13e670f2fd0e358651d6120a3"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = dup(r0) acct(0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000140), 0x4) 13:27:03 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc8e42b54cbecd20d, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x254, 0xfb, &(0x7f0000000340)=""/251, 0x410fd, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x4) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000780)={0x0, 0xa3, "1e48a3b527023ed4ad64533f24702296dc169dd884a26bc612f36542a74afe71476dbc9f0cd371b11102ba02817cab957ed846d9bcc12179aef34508c857f0406674288d04d2dc63388f41272eb2168763ed2b049950426e45fb5f1170788865072fe2bc9e3229648eafd1b97c8e0e9ea05fa34e247327f1ea609042fa2ea81096b7bf02ee0124b9bb4972eae6c508dd3e74431fcecc3986357c6bcbd81d73af7cbcec"}, &(0x7f0000000580)=0xab) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r3, 0x8001}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ip6gretap0\x00', @broadcast}) ioctl$SIOCSIFHWADDR(r4, 0x8937, &(0x7f0000000000)={"6272696467655f736c6176655f3100f0", @random="01003a1e2410"}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCCONS(r2, 0x541d) dup3(r2, r1, 0x480000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = socket$inet(0x2b, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000300)={0x3, 0x5, 0x800000000000000}) chdir(&(0x7f0000000540)='./file0\x00') recvmmsg(r5, &(0x7f0000002800)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/57, 0x39, 0xffffffffffffff1a}, 0x2}, {{&(0x7f0000000c40)=@ipx, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/86, 0x56, 0x2}, 0x200}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/71, 0x47}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/33, 0x21}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/138, 0x8a}, {&(0x7f0000002500)=""/89, 0x59}, {&(0x7f0000002580)=""/183, 0xb7}, {&(0x7f0000002640)=""/176, 0xb0}], 0xa, &(0x7f00000027c0), 0x0, 0x7}, 0x1}], 0x3, 0x100, &(0x7f0000002980)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x3c, 0xf3fe, 0x0, 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000440)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000480), &(0x7f0000000500)=0x4) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/141, 0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xc5, 0x0, 0x3, 0x8, 0x80000000, 0xa6, 0x8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@ipv4, 0x1e570444, 0x2, 0x0, 0xe, 0x5, 0x1, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) close(r0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000840)=0x4) 13:27:03 executing program 3: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x80240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x40, 0x7, 0xf4b2, 0x4, 0x6, 0x4e, 0x3ff, 0xdfb, 0x0, 0x0, 0x5, 0x1f}) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x620400) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f00000000c0)={0x100000000007, 0x0, 0x400000000, 0x0, "7914084b165e9ec52f1595ab29eb0800000000000000acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) 13:27:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e22, 0x6, @empty, 0xb761}, {0xa, 0x4e24, 0xce, @dev={0xfe, 0x80, [], 0x10}, 0x1}, 0x8, [0x5, 0x1, 0x3, 0x80000000, 0xfffffffffffffff7, 0x10001, 0x7, 0x10001]}, 0x5c) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000000)=[0xfffffffffffffff9, 0x6, 0x8001, 0x5, 0xffffffffffffffb7, 0x9], 0x6, 0xfffffffffffffffc, 0x7f, 0x0, 0xc23, 0x5, {0x5, 0x40, 0x4, 0x5c5f, 0x7, 0x8001, 0x100000001, 0xfff, 0x4, 0x8, 0x1, 0x7, 0x1, 0x1, "f9068e4bafc1508902990d71315ad7f4d2e85041efb57070216323077ca31134"}}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0xf1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x18}, 0x400}}}, &(0x7f0000000500)=0x84) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2dcd2a7dfc4a50ca16") syz_emit_ethernet(0xffffffe9, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b0a9e1100fe8000000000000040000000000000aafe8000000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="fbe7a522ed6ab1050082c81f00000000000000"], &(0x7f0000000100)={0x0, 0x2, [0x4, 0xad4]}) accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14, 0x0) recvfrom(r0, &(0x7f0000000700)=""/131, 0x83, 0x2100, &(0x7f0000000800)=@can={0x1d, r3}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000200)={{0x9, 0x1f}, 'port1\x00', 0x1, 0x10, 0x2, 0x0, 0x1f, 0xffffffff, 0x7f, 0x0, 0x1, 0x7fff}) 13:27:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20102, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) [ 240.858755] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 13:27:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x1, 0x48, &(0x7f00000000c0), 0x10000000000003e9) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0x7fff, 0x7f, 0x48, 0x5, 0x7, 0xec, 0xfffffffffffffe01, 0x400, 0x0, 0x6, 0x1, 0x6000000, 0xfffffffffffffffe, 0x10001, 0x3f], 0xf000, 0x1000}) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000180)=0x8) 13:27:03 executing program 2: socket$inet6(0xa, 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000380)=""/117, 0x75, 0x0, &(0x7f0000000400)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x5) accept(r1, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)={'syz1'}, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000200)) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000440)={0x10000}) syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 13:27:03 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x1, 0x14, 0x1}, 0x2c) 13:27:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x82100, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x40000072]}) r4 = memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x7) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) 13:27:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x101, 0x400000) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000040)={0x0, 0x3433}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x7c, 0x0, [0xc0010015]}) 13:27:03 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc8e42b54cbecd20d, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x254, 0xfb, &(0x7f0000000340)=""/251, 0x410fd, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x4) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000780)={0x0, 0xa3, "1e48a3b527023ed4ad64533f24702296dc169dd884a26bc612f36542a74afe71476dbc9f0cd371b11102ba02817cab957ed846d9bcc12179aef34508c857f0406674288d04d2dc63388f41272eb2168763ed2b049950426e45fb5f1170788865072fe2bc9e3229648eafd1b97c8e0e9ea05fa34e247327f1ea609042fa2ea81096b7bf02ee0124b9bb4972eae6c508dd3e74431fcecc3986357c6bcbd81d73af7cbcec"}, &(0x7f0000000580)=0xab) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r3, 0x8001}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ip6gretap0\x00', @broadcast}) ioctl$SIOCSIFHWADDR(r4, 0x8937, &(0x7f0000000000)={"6272696467655f736c6176655f3100f0", @random="01003a1e2410"}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCCONS(r2, 0x541d) dup3(r2, r1, 0x480000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = socket$inet(0x2b, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000300)={0x3, 0x5, 0x800000000000000}) chdir(&(0x7f0000000540)='./file0\x00') recvmmsg(r5, &(0x7f0000002800)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/57, 0x39, 0xffffffffffffff1a}, 0x2}, {{&(0x7f0000000c40)=@ipx, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/86, 0x56, 0x2}, 0x200}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/71, 0x47}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/33, 0x21}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/138, 0x8a}, {&(0x7f0000002500)=""/89, 0x59}, {&(0x7f0000002580)=""/183, 0xb7}, {&(0x7f0000002640)=""/176, 0xb0}], 0xa, &(0x7f00000027c0), 0x0, 0x7}, 0x1}], 0x3, 0x100, &(0x7f0000002980)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x3c, 0xf3fe, 0x0, 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000440)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000480), &(0x7f0000000500)=0x4) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/141, 0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xc5, 0x0, 0x3, 0x8, 0x80000000, 0xa6, 0x8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@ipv4, 0x1e570444, 0x2, 0x0, 0xe, 0x5, 0x1, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) close(r0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000840)=0x4) 13:27:03 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc8e42b54cbecd20d, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x254, 0xfb, &(0x7f0000000340)=""/251, 0x410fd, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x4) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000780)={0x0, 0xa3, "1e48a3b527023ed4ad64533f24702296dc169dd884a26bc612f36542a74afe71476dbc9f0cd371b11102ba02817cab957ed846d9bcc12179aef34508c857f0406674288d04d2dc63388f41272eb2168763ed2b049950426e45fb5f1170788865072fe2bc9e3229648eafd1b97c8e0e9ea05fa34e247327f1ea609042fa2ea81096b7bf02ee0124b9bb4972eae6c508dd3e74431fcecc3986357c6bcbd81d73af7cbcec"}, &(0x7f0000000580)=0xab) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r3, 0x8001}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ip6gretap0\x00', @broadcast}) ioctl$SIOCSIFHWADDR(r4, 0x8937, &(0x7f0000000000)={"6272696467655f736c6176655f3100f0", @random="01003a1e2410"}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCCONS(r2, 0x541d) dup3(r2, r1, 0x480000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = socket$inet(0x2b, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000300)={0x3, 0x5, 0x800000000000000}) chdir(&(0x7f0000000540)='./file0\x00') recvmmsg(r5, &(0x7f0000002800)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/57, 0x39, 0xffffffffffffff1a}, 0x2}, {{&(0x7f0000000c40)=@ipx, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/86, 0x56, 0x2}, 0x200}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/71, 0x47}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/33, 0x21}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/138, 0x8a}, {&(0x7f0000002500)=""/89, 0x59}, {&(0x7f0000002580)=""/183, 0xb7}, {&(0x7f0000002640)=""/176, 0xb0}], 0xa, &(0x7f00000027c0), 0x0, 0x7}, 0x1}], 0x3, 0x100, &(0x7f0000002980)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x3c, 0xf3fe, 0x0, 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000440)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000480), &(0x7f0000000500)=0x4) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/141, 0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xc5, 0x0, 0x3, 0x8, 0x80000000, 0xa6, 0x8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@ipv4, 0x1e570444, 0x2, 0x0, 0xe, 0x5, 0x1, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) close(r0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000840)=0x4) 13:27:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x1718}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x21, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x1c}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) 13:27:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000780)="b856e1d35e78a89f447d8bddde93ae3f76d7cd6221a54aa0b20904a3ec7dc06869dc1b6feb54d5edef71308b24510e7269ed3a7aed05952655d59639ab1aaddb346eae96914f8b4761fe018ae856e0bc68d1525e3673e1d29ceb13d7668868e00422265abc0ceb99cdd4454dae6e1f3078a6e9af76b7889e5645561c281eccfdabcaf3d76077fdebf1516b7f384378a775e0dc6ffcf177559351120f82eb7b8b2150eb5002333a83785e0bd2ac096ff6f7706450fbf406c7b28ec552587a6693b756ad6f7235182a27878cb712752791131fcd7379c978050ecb788441c245e2b2a3bf9dcb712ba4f596e49524a6521f1fbf970f9f") syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x200ffffffff) ioctl(r1, 0x8911, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x404, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = socket$inet6(0xa, 0xa, 0x8001) ioctl(r4, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000640)='vfat\x00', &(0x7f0000000440)='./file0\x00', 0xe005, 0x1, &(0x7f0000000600)=[{&(0x7f00000005c0)="eb3c90ad00027000f80100000000000000000000000000000000000000000000", 0x20}], 0x10808410, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0]) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) mkdirat(r5, &(0x7f0000000540)='./file0/file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB]) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x0, 0x0) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x8, 0x2, 0x89, 0x3, 0xca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r8, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev}, @in6, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @rand_addr}, @in={0x2, 0x0, @rand_addr}]}, &(0x7f0000000100)=0x21f) write(r9, &(0x7f0000000140)="150000000000080083a66dd2c86b6525000010", 0x13) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x80000000, 0xc3, 0x1}, 0xc) 13:27:04 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000080)='proc\x00'}, 0x30) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x5b8, 0x6000000000000000, 0x10001, 0x8001, 0x0, 0x80008000, 0x0, 0x8, 0x4, 0x6, 0x3, 0x5, 0xe87, 0x3, 0x4, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffff8, 0x3, 0x8, 0x400, 0x3, 0x2, 0x2, 0x100000001, 0x81, 0xa25, 0x20, 0xdd, 0x80000000, 0x1000, 0x8000, 0x0, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x4, @perf_config_ext={0x0, 0x4}, 0x14a, 0x3, 0x101, 0xb, 0x282, 0x80, 0x1}, r0, 0x8, r1, 0x0) prctl$intptr(0x1a, 0x800000000000006) [ 241.349808] netlink: 'syz-executor4': attribute type 4 has an invalid length. [ 241.387729] netlink: 'syz-executor4': attribute type 4 has an invalid length. 13:27:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x80e030000000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000000000000000000000000000000000000063dc998c486ea47d80d4eef7908a717f010868036a482b18104604af217b7b1bdd08c153c642d0492737e8115eb303970800006fbefdde43b18f972cf312cdc7c4780c741c0adf1082b4dace9f33f3fd5974c5cc58450c61acece2453b21725587aa5e94862bc1faa83fe9e395e9f4acd7d641d929899030459e65c14933d927d53b9563da2671259188b6f7aa136456d405", @ANYRES32=0x0, @ANYBLOB="0000000000000000080014000000000008001b0000000000009a5f317ff2ba80cb6b950bd24929cdce91fe8c85046be627a9f3376470d2d2aeb126bf898f04a67725959d9cc1977a12e89cf2662ce6e1669628b796d3b5a9a5d50133b0e5153c5ca1f5a9b6b929d44ce2f21533fc013ed1b90000007eeb53ca43ab1b4a856e81c907509ee484a07f258d9247e8a644d1b665c5ff6d1365d1c319cbea3b1959213f30eaad7a9fde1dc99e8fe136a8cef4b8cfa262b8b3411c92116e6dac9ca21598af3512f8fd94ea27c91c4adf7b158073006100"], 0x30}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000340)={@hyper}) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) 13:27:04 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc8e42b54cbecd20d, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x254, 0xfb, &(0x7f0000000340)=""/251, 0x410fd, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x4) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000780)={0x0, 0xa3, "1e48a3b527023ed4ad64533f24702296dc169dd884a26bc612f36542a74afe71476dbc9f0cd371b11102ba02817cab957ed846d9bcc12179aef34508c857f0406674288d04d2dc63388f41272eb2168763ed2b049950426e45fb5f1170788865072fe2bc9e3229648eafd1b97c8e0e9ea05fa34e247327f1ea609042fa2ea81096b7bf02ee0124b9bb4972eae6c508dd3e74431fcecc3986357c6bcbd81d73af7cbcec"}, &(0x7f0000000580)=0xab) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r3, 0x8001}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ip6gretap0\x00', @broadcast}) ioctl$SIOCSIFHWADDR(r4, 0x8937, &(0x7f0000000000)={"6272696467655f736c6176655f3100f0", @random="01003a1e2410"}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCCONS(r2, 0x541d) dup3(r2, r1, 0x480000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = socket$inet(0x2b, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000300)={0x3, 0x5, 0x800000000000000}) chdir(&(0x7f0000000540)='./file0\x00') recvmmsg(r5, &(0x7f0000002800)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/57, 0x39, 0xffffffffffffff1a}, 0x2}, {{&(0x7f0000000c40)=@ipx, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/86, 0x56, 0x2}, 0x200}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/71, 0x47}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/33, 0x21}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/138, 0x8a}, {&(0x7f0000002500)=""/89, 0x59}, {&(0x7f0000002580)=""/183, 0xb7}, {&(0x7f0000002640)=""/176, 0xb0}], 0xa, &(0x7f00000027c0), 0x0, 0x7}, 0x1}], 0x3, 0x100, &(0x7f0000002980)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x3c, 0xf3fe, 0x0, 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000440)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000480), &(0x7f0000000500)=0x4) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/141, 0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xc5, 0x0, 0x3, 0x8, 0x80000000, 0xa6, 0x8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@ipv4, 0x1e570444, 0x2, 0x0, 0xe, 0x5, 0x1, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) close(r0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000840)=0x4) 13:27:04 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002d0007031dfffd946fa28300cee60a0009030000000000000002000000000000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 13:27:04 executing program 2: socket$inet6(0xa, 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000380)=""/117, 0x75, 0x0, &(0x7f0000000400)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x5) accept(r1, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)={'syz1'}, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000200)) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000440)={0x10000}) syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 13:27:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x13) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000180)=0x3aa, 0x0) shutdown(r1, 0x1) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0xd0daffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x70bd28}, 0x8}}, 0x0) 13:27:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000000)='./file0/file0\x00') 13:27:04 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x808d35c88e45c3ee, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000140)=0x8f70) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={&(0x7f0000000100), 0x114}) [ 241.594843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:27:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x5) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=0xfffffdfd) 13:27:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x30) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'team_slave_0\x00', 0x10000000000600}) sendto(r0, &(0x7f0000cfefee)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 13:27:04 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vcan0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000140)=""/16) r2 = perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740), 0x1000000000000014, &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=r0], @ANYRES16=r2, @ANYRES32=r1], 0xe}, 0x10000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000003c0)=0x200) signalfd(r2, &(0x7f0000000380)={0x5}, 0x8) 13:27:04 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc8e42b54cbecd20d, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x254, 0xfb, &(0x7f0000000340)=""/251, 0x410fd, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0x4) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000780)={0x0, 0xa3, "1e48a3b527023ed4ad64533f24702296dc169dd884a26bc612f36542a74afe71476dbc9f0cd371b11102ba02817cab957ed846d9bcc12179aef34508c857f0406674288d04d2dc63388f41272eb2168763ed2b049950426e45fb5f1170788865072fe2bc9e3229648eafd1b97c8e0e9ea05fa34e247327f1ea609042fa2ea81096b7bf02ee0124b9bb4972eae6c508dd3e74431fcecc3986357c6bcbd81d73af7cbcec"}, &(0x7f0000000580)=0xab) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={r3, 0x8001}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ip6gretap0\x00', @broadcast}) ioctl$SIOCSIFHWADDR(r4, 0x8937, &(0x7f0000000000)={"6272696467655f736c6176655f3100f0", @random="01003a1e2410"}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCCONS(r2, 0x541d) dup3(r2, r1, 0x480000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = socket$inet(0x2b, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000300)={0x3, 0x5, 0x800000000000000}) chdir(&(0x7f0000000540)='./file0\x00') recvmmsg(r5, &(0x7f0000002800)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/57, 0x39, 0xffffffffffffff1a}, 0x2}, {{&(0x7f0000000c40)=@ipx, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/86, 0x56, 0x2}, 0x200}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/71, 0x47}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/33, 0x21}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/138, 0x8a}, {&(0x7f0000002500)=""/89, 0x59}, {&(0x7f0000002580)=""/183, 0xb7}, {&(0x7f0000002640)=""/176, 0xb0}], 0xa, &(0x7f00000027c0), 0x0, 0x7}, 0x1}], 0x3, 0x100, &(0x7f0000002980)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x3c, 0xf3fe, 0x0, 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000440)=0x7fffffff, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000480), &(0x7f0000000500)=0x4) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/141, 0x8d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xc5, 0x0, 0x3, 0x8, 0x80000000, 0xa6, 0x8}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@ipv4, 0x1e570444, 0x2, 0x0, 0xe, 0x5, 0x1, 0x100}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) close(r0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000840)=0x4) 13:27:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0x9, &(0x7f0000000000)={0x1f, 0x9881}, &(0x7f0000000040)) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d0100000000fffffff600000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c5ee539c37d1f23b763ce55672b8e492664e624e0efe078f2e3aa38061af373a3d160cfbe9b6318577fab", 0xf4, 0x10000}], 0x0, &(0x7f0000000000)=ANY=[]) 13:27:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0x1) 13:27:04 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000040000006a0a00fe00000000850000000a000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x1c, &(0x7f0000000080)="93be41e059663645583d5824474a", &(0x7f00000000c0)=""/28}, 0x28) 13:27:04 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$netlink(r0, &(0x7f0000000180), &(0x7f00000003c0)=0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffff9c, 0x6, 0x1, &(0x7f00000005c0)={0x3, 0x413e, 0x10001, 0x6, 0x62, 0x10000, 0x6}, 0xc) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000400)={0x20, 0x0, 0x1000, 0x1}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000280)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) socket$alg(0x26, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000540)=0x1, 0x0) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x26d, 0x5, 0x0, 0xff, 0x100, 0x8, 0x101, 0x99, 0xfffffffffffffffb, 0x0, 0x5c10, 0x7, 0xfd, 0x0, 0x0, 0xffff, 0x7, 0x0, 0x0, 0x5e, 0xffffffff, 0x0, 0x7, 0x6, 0xfffffffffffffe01, 0x6, 0x8, 0x0, 0x3, 0x1, 0xb0, 0xe460, 0x100000001, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x10, 0x0, 0xfffffffffffffffe, 0xe, 0x0, 0x0, 0x10000000000}, r4, 0x0, r4, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000600)={0x1f, {0x516c, 0x2, 0xa54d, 0x9, 0x6, 0x8}, 0x7ff}, 0xa) write(r5, &(0x7f0000000340), 0x807438f1) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000340)=0x1000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r6, 0x0, r7) socket$pptp(0x18, 0x1, 0x2) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000440)={0x2e6, 0x1, 0x1, 0x3, 0x1c, 0xd1d9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r8+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 242.033019] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 2530879793048935964 transid 756082810144684242 /dev/loop2 13:27:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)="6c616e316e6f646576000000000000000000000000000000000344824b10898e56c5a9f28f8b80b7738b411a9e96678ec8fef8de9e3a509243904b204bcddfdc7bb27752ef53565a25168ad6c1930143119cfa9ed77459abc72c477787486a4224f7d9483edf34c61553a9baa6b0550791abf8dd927c3ab9a606ce19c27b48688ec20bfb7111316820e1ea9856415ac8286e397a33c91892a7e8dfd04ade953e06", 0x2) fcntl$addseals(r0, 0x409, 0x4) fallocate(r0, 0x0, 0x0, 0xeb96) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0xfffffffffffffffd) [ 242.124712] BTRFS error (device loop2): unsupported checksum algorithm 3786 [ 242.132388] BTRFS error (device loop2): superblock checksum mismatch [ 242.156603] BTRFS error (device loop2): open_ctree failed 13:27:05 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f071cb47"}, 0x0, 0x0, @userptr, 0x4}) r1 = dup(r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) migrate_pages(r3, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x1) 13:27:05 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000740)=""/77) r2 = dup3(r0, r1, 0x80000) r3 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x400, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x48000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000001c0)={{0x5, 0x2dc475af, 0xffff, 0x1ff, 0x3, 0x3f}, 0x9, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x8200, 0x3f, "fc84ba0bc5e93a2c69cf4e496b5bd2ae18392eddf0199e42bfc32cb3086a9e53b9bda439200de8cd41fb38fe94d02e3beae2445757a2e2f314a8b5f2e98cba62aefa3571dd6dae71ce97636dadfbf870123587a47c1a5b48abc6986c6d657672c292f2ef99f72e9ce5973b36a6b214100868c0610b9cb2fc6eaa49ffcf4e288b"}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)=0x80000001, 0x4) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000280)={0xb, {0x8, 0x52, 0x9, 0x2}}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000600)={{0xffffffff, 0xfffffffffffffff9, 0x0, 0xffffffffffff0000, 0x3f, 0x7f}, 0x397, 0x1, 0x4, 0x4, 0x80, "b26064a1968aec7ff3786aee3c7e0123c27aaf6d3c36451d4ca2641b82db3fd04d7cc9355736c2e5ff22320e07b9f3759875857d2bcba9e7d764f299d194741210943dceb8d4719e4cd5b61a8b6facdc3afa03aaf981688070289f17d73424f82883544c075cd10e26d4769c396ab23e403108222bc4e1a8a902ca7fe9985b66"}) setsockopt$inet_tcp_buf(r4, 0x6, 0x3f, &(0x7f00000006c0)="b283b4ef5fe441f331bb910de904f0b2162722bdbbe1c6532b26e89be9aa9287e3aadf066fee1db46dd18eee231a68be7441a795e528b4995c75ddb313bc2014e45924dc91745934d2a3c240b177abdfc733942c79a475c7093b68a71b080e9d1e06825f", 0x64) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000300)={0x1, 0xff}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000540)={0x4, 0x0, 0x1, 'queue1\x00', 0x6}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x1, 0x4, {0x2, @win={{}, 0x0, 0xca800, &(0x7f0000000080)={{}, &(0x7f0000000040)}, 0x0, &(0x7f00000000c0)}}}) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000480)=""/186) [ 242.410207] syz-executor3 (7722) used greatest stack depth: 13800 bytes left 13:27:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) membarrier(0x10, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x13, 0x1a0ffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13:27:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0x9, &(0x7f0000000000)={0x1f, 0x9881}, &(0x7f0000000040)) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d0100000000fffffff600000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c5ee539c37d1f23b763ce55672b8e492664e624e0efe078f2e3aa38061af373a3d160cfbe9b6318577fab", 0xf4, 0x10000}], 0x0, &(0x7f0000000000)=ANY=[]) 13:27:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000900)}}], 0x1, 0x0, &(0x7f0000007fc0)={0x0, 0x1c9c380}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 13:27:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ea) io_setup(0x3ff, &(0x7f0000000100)=0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000580)={0xf000, &(0x7f0000000340), 0x7}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)) io_submit(r2, 0x1, &(0x7f0000000a00)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f00000007c0), 0x0, 0x200, 0x0, 0x2, 0xffffffffffffff9c}]) 13:27:05 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x4000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') exit(0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf000000, 0x2000007fe) 13:27:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "4947cbc6c73964d82a9ad55ceff463fa"}, 0x11, 0x3) r3 = dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(r2, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x3, 0x3ff}, &(0x7f0000000100)=0xc) clone(0x3ffd7fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @local}, 0x10) 13:27:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x141000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f0000000200)) 13:27:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@generic={0x2, 0x3, 0x5}) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") unshare(0x520104fc) [ 242.651798] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551615) [ 242.715121] BTRFS error (device loop2): unsupported checksum algorithm 3786 [ 242.727983] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 242.735223] BTRFS error (device loop2): superblock checksum mismatch [ 242.754107] BTRFS error (device loop2): open_ctree failed [ 242.782224] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551615) [ 242.792368] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 13:27:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "4947cbc6c73964d82a9ad55ceff463fa"}, 0x11, 0x3) r3 = dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(r2, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x3, 0x3ff}, &(0x7f0000000100)=0xc) clone(0x3ffd7fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @local}, 0x10) 13:27:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x5, 0xffffffffffffffff}, 0x14}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x202000, 0x0) timerfd_gettime(r1, &(0x7f0000000180)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x10) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000100)={0xfff, "78937f4aa2a76d8f06afcab26a5cc78ffe2638d8889c1d27957fc076ca8dbd04", 0x2, 0x1}) 13:27:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt(r0, 0x4, 0x4, &(0x7f00000000c0)="d994ed58ce6ec2da50d4180a58ba151c5ddfc44eb1bfb0e25d7a1219659b5b4a945738f46066d23989400c0b38d220bac8c150d30909c2075a7ba9ef1a8965ce2537889dc5954cce6401b5ecee807e9aa5", 0x51) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x1, 0x37, 0x0, 0x400, 0xffffffffffff4ff7}) fanotify_mark(0xffffffffffffffff, 0x80, 0x8000004, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) 13:27:05 executing program 3: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)="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", 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) dup(r2) sendfile(r2, r2, &(0x7f0000000000), 0x9) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@dev, @multicast1}, &(0x7f0000000240)=0xc) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045510, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev, [0x7]}, {}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gre0\x00'}) 13:27:05 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$netlink(r0, &(0x7f0000000180), &(0x7f00000003c0)=0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffff9c, 0x6, 0x1, &(0x7f00000005c0)={0x3, 0x413e, 0x10001, 0x6, 0x62, 0x10000, 0x6}, 0xc) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000400)={0x20, 0x0, 0x1000, 0x1}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000280)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) socket$alg(0x26, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000540)=0x1, 0x0) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x26d, 0x5, 0x0, 0xff, 0x100, 0x8, 0x101, 0x99, 0xfffffffffffffffb, 0x0, 0x5c10, 0x7, 0xfd, 0x0, 0x0, 0xffff, 0x7, 0x0, 0x0, 0x5e, 0xffffffff, 0x0, 0x7, 0x6, 0xfffffffffffffe01, 0x6, 0x8, 0x0, 0x3, 0x1, 0xb0, 0xe460, 0x100000001, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x10, 0x0, 0xfffffffffffffffe, 0xe, 0x0, 0x0, 0x10000000000}, r4, 0x0, r4, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000600)={0x1f, {0x516c, 0x2, 0xa54d, 0x9, 0x6, 0x8}, 0x7ff}, 0xa) write(r5, &(0x7f0000000340), 0x807438f1) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000340)=0x1000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r6, 0x0, r7) socket$pptp(0x18, 0x1, 0x2) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000440)={0x2e6, 0x1, 0x1, 0x3, 0x1c, 0xd1d9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r8+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2334, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) 13:27:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x8010aebb, &(0x7f0000000000)) 13:27:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x4, 0x7, 0x1, "5be61ea736a62cd24bc7c9f5f49df029a68a0ce9164b7079e4954b73220cbaf3", 0xfd777f5f}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x3d, &(0x7f0000000680)=0x1ff, 0x4) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000240), 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00002c1000)={0x70000005}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000600)={0xfff, 0xb, 0x4, 0x2000, {}, {0x3, 0xc, 0x8, 0x8, 0x2, 0x7, "880e1b07"}, 0x4, 0x4, @planes=&(0x7f0000000300)={0x4, 0x10000, @userptr=0x7, 0x4}, 0x4}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x250) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={&(0x7f0000000200), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x8000000000000) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x800, 0x0) dup2(r1, r2) 13:27:05 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) socket$inet_tcp(0x2, 0x1, 0x0) sync() 13:27:05 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r2 = getuid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() r5 = getpgrp(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x7, r2, r3, r4, 0x0, 0x0, 0x2}, 0x4, 0xc0000, 0x31e5, 0xfffffffffffff801, r5, r6, 0x7711}) 13:27:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "4947cbc6c73964d82a9ad55ceff463fa"}, 0x11, 0x3) r3 = dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup3(r2, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x3, 0x3ff}, &(0x7f0000000100)=0xc) clone(0x3ffd7fff, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @local}, 0x10) 13:27:05 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x1ff, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffa, 0x80) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000100)=""/27, &(0x7f0000000140)=0x1b) mount$9p_tcp(&(0x7f0000000040)="3132372e302e302e31a1", &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d7f52702c706f72743d3478303030303030303030303030303030302c00"]) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000002c0)=""/165) 13:27:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) read(r0, &(0x7f0000000380)=""/141, 0x8d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x0, 0x3}) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x0, 0x0, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0x425dbd77, 0x4b, 0x7f, 0x100000000, 0x0, 0xd0, 0x1, 0x0, 0x7c28, 0x6, 0xc4e, 0x40, 0x9, 0x800, 0x9, 0x5, 0x1, 0x7fff, 0x62f, 0x6, 0xfffffffffffffffc, 0xffffffff, 0x7f, 0x2, 0x20, 0x76a76b87, 0x3, 0xcb60, 0x9, 0x5, 0x1, 0x7eb, 0x40, 0x6, 0x6, 0x1f, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xeb6}, 0x8020, 0x2, 0x485e, 0x0, 0x800, 0xffffffffffffffc1, 0x7}, r2, 0x6, r0, 0x8) [ 243.349164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.357596] 9pnet: Could not find request transport: Rp 13:27:06 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) socket$inet_tcp(0x2, 0x1, 0x0) sync() [ 243.415554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.452903] 9pnet: Could not find request transport: Rp 13:27:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x7fffffff, 0x0, 0xffffffffffffffff}, 0x4) 13:27:06 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) socket$inet_tcp(0x2, 0x1, 0x0) sync() 13:27:06 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$netlink(r0, &(0x7f0000000180), &(0x7f00000003c0)=0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffff9c, 0x6, 0x1, &(0x7f00000005c0)={0x3, 0x413e, 0x10001, 0x6, 0x62, 0x10000, 0x6}, 0xc) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000400)={0x20, 0x0, 0x1000, 0x1}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000280)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) socket$alg(0x26, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000540)=0x1, 0x0) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x26d, 0x5, 0x0, 0xff, 0x100, 0x8, 0x101, 0x99, 0xfffffffffffffffb, 0x0, 0x5c10, 0x7, 0xfd, 0x0, 0x0, 0xffff, 0x7, 0x0, 0x0, 0x5e, 0xffffffff, 0x0, 0x7, 0x6, 0xfffffffffffffe01, 0x6, 0x8, 0x0, 0x3, 0x1, 0xb0, 0xe460, 0x100000001, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x10, 0x0, 0xfffffffffffffffe, 0xe, 0x0, 0x0, 0x10000000000}, r4, 0x0, r4, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000600)={0x1f, {0x516c, 0x2, 0xa54d, 0x9, 0x6, 0x8}, 0x7ff}, 0xa) write(r5, &(0x7f0000000340), 0x807438f1) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000340)=0x1000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r6, 0x0, r7) socket$pptp(0x18, 0x1, 0x2) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000440)={0x2e6, 0x1, 0x1, 0x3, 0x1c, 0xd1d9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r8+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:27:06 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x5c, 0x8, 0x5, 0x400, 0x8}, 0xff}, 0xa) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404010}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x58, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x8001) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="a61364fc33948eba9a50340442897ec1c9a73466b49b708d27f8a986ad5970cc06408fa7452be3905c9800770f93640cf50d49e95b97f95618d583b222e5cc65fa9c2fbbfa57da921cfea5df4967492719f9124c8ffc19c08e14cb90c495ca82a74b371afdf79f360b5c11ea3a0a6ec553f2302586dfcf39902b488df8e147916b57c09c38b6308d7d6de83be847e95f6dc2f4a28331202ca62b5e8945"]]], 0x1}}, 0x40002) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f0000000640)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000ac0)={&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000940)=""/75, 0x4b}], 0x1, &(0x7f00000009c0)=""/235, 0xeb, 0x4}, 0x2000) bind$xdp(r0, &(0x7f0000000b00)={0x2c, 0x4, r5, 0x2d, r2}, 0x10) fcntl$setownex(r1, 0xf, &(0x7f00000006c0)={0x1, r4}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={'\x00', {0x2, 0x4e20, @remote}}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000580)={0x0, 0x6}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000600)={r6, 0x1}, 0x8) ioctl$sock_proto_private(r2, 0x89e5, &(0x7f0000000740)="be200607daeec0d7e9d82b36e4243519a0f22f94bdd3c38c75ff4e9b6274ca8dd583eda1b2a8994c95ed5e6f5571f0274892f53d311ffd3cca259b8c61ebaaaa24c7f6bcf2d5cffc11bf9556a8d09c588fc825b2a0db37a0a9fa2fd2e298281504b835f30528d8dd6a6dcd2aba7b0243082275096e333bcf83334f3d120809c7cc747351e590e41c479a6f64cf45a2d4e3b0907c9abe4e825e97ac9061e798") getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) 13:27:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000b00)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000480)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) timer_create(0x6, &(0x7f0000000200)={0x0, 0x27, 0x0, @tid=r3}, &(0x7f0000000080)) write$9p(0xffffffffffffffff, &(0x7f0000000640), 0x0) [ 244.149159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:27:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x200000040000071, 0x63adeed]}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) flock(r0, 0x8) 13:27:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) read(r0, &(0x7f0000000380)=""/141, 0x8d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x0, 0x3}) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x0, 0x0, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000440)={0x3, 0x70, 0x425dbd77, 0x4b, 0x7f, 0x100000000, 0x0, 0xd0, 0x1, 0x0, 0x7c28, 0x6, 0xc4e, 0x40, 0x9, 0x800, 0x9, 0x5, 0x1, 0x7fff, 0x62f, 0x6, 0xfffffffffffffffc, 0xffffffff, 0x7f, 0x2, 0x20, 0x76a76b87, 0x3, 0xcb60, 0x9, 0x5, 0x1, 0x7eb, 0x40, 0x6, 0x6, 0x1f, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xeb6}, 0x8020, 0x2, 0x485e, 0x0, 0x800, 0xffffffffffffffc1, 0x7}, r2, 0x6, r0, 0x8) 13:27:07 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) socket$inet_tcp(0x2, 0x1, 0x0) sync() 13:27:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000400)=""/19) socket$inet(0x2, 0x3, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x90201, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) shmctl$SHM_LOCK(r1, 0xb) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)={0x1, 0x5}) ioctl$BLKPG(r4, 0x40140921, &(0x7f0000000080)={0x0, 0x7, 0x2, &(0x7f0000000700)}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) 13:27:07 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) pipe2(&(0x7f0000000000), 0x80800) 13:27:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000400)=""/19) socket$inet(0x2, 0x3, 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x90201, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) shmctl$SHM_LOCK(r1, 0xb) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)={0x1, 0x5}) ioctl$BLKPG(r4, 0x40140921, &(0x7f0000000080)={0x0, 0x7, 0x2, &(0x7f0000000700)}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) [ 244.695158] md: loop2 has zero or unknown size, marking faulty! [ 244.702801] md: md_import_device returned -22 [ 244.719623] md: loop2 has zero or unknown size, marking faulty! [ 244.727913] md: md_import_device returned -22 13:27:07 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) sync() 13:27:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ba0c8a3391", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000017c0)=""/163, 0xa3}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) 13:27:07 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) pipe2(&(0x7f0000000000), 0x80800) 13:27:07 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000140)={0x9, "ec9c487b614dc5d0d2e3b505aa8331a58b6623042f2338e27c8e88c08e3471d9", 0x3, 0x240, 0x0, 0x7fffffff, 0x10, 0x4, 0x8000, 0xffffffffffffff81}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) migrate_pages(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) clone(0x80000fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000001c0)={0x1f, 0x927, 0x1, 0x5, 0x1bc018be80000}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000580)=0x54) 13:27:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x9) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000640)={0x14, 0x67, 0x2, {0x20}}, 0x14) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x5, 0x200000000, 'queue1\x00'}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000340)) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0xb, 0x20, &(0x7f0000000040)="9bdf", {0xffffffffffffff01, 0x4, 0x4c47504a, 0x0, 0x3, 0x400, 0x0, 0x6}}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) clock_nanosleep(0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000580)) fstatfs(r0, &(0x7f0000004200)=""/4096) [ 244.922624] md: loop2 has zero or unknown size, marking faulty! [ 244.946445] md: md_import_device returned -22 13:27:07 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) pipe2(&(0x7f0000000000), 0x80800) 13:27:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) ptrace$poke(0x4, r1, &(0x7f0000000240), 0x4) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xcc5, 0xf78, 0x0, 0x2, 0xd, 0x19, "71a87e27a8e625e8aed2a367f7c5d28b74c52d52b5ea2c771a9d5390fc9c081ed51eb08b28b37af187a5b254aa9a0be22d200d88e0be28c18b16a53ed522723b", "c3155773a3f406d8dbaa0d4a83cc459dd7c8bbd65836bb2a51ecaacf64daf91d9ab2d4e816cfc2fc714087744a3f0aaaf5d9d7887b3ee8d556c3cc0b3ef2a43a", "27bea1e2bb294f833d424d9276ce2e31598a26e2bd0d53e9c5650c47d5c9aba1", [0x8, 0x6]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, r5, {0xc, 0xd}, {0x9, 0xada0e87b9eb84d0a}, {0xf}}, [@TCA_RATE={0x8, 0x5, {0x8, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffffffffffa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRESHEX=r6, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYPTR, @ANYBLOB="589c6e3e82ab034b09a28f8d6c85def1d68074956e974dec98ef471b66e7ac7b1eb64b24d9512dfec1e2a0669b652576ab0a4916aeed710769d5c47182d8fe984311a67f16bc13b05a9563125b0fecdf4b9f0640b562f799811ee356efc5257c7ae74a415dbb9511bca5168c11eec4ec71b33ddf47dd4adab4df3a81863685309d", @ANYRESDEC=r2], @ANYRESHEX=r2, @ANYRES16, @ANYBLOB="f117a7b8e5c1be5607746975bd628124e137c9fef6c0e074cc0c0be7adc6c272f53ab0589cc67455fb8f038ef913a3965487c6d9000e67652ec13662bd4de59d18a3dc863e0fb298020c9e11400722f17f5230127e553a6f75a0e786f222c5b543a81e6f9c26097e95dfa280b0519ed52e5dc041fb278f8707aae96bed954d8d94e09544fa947f7a33ed2482edf61c7ba147a8f018324be2fa44d8e7a282ef254eb4c34129b3aa668b28f535c205ad92e862a624f9a9759a9c9c8991f0b10bba97aed9113222d0162948e02b71baa0e164fabe89886ecc34e3"], 0x7a) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001d80)=""/136, 0x88}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003140)=""/203, 0xcb}}], 0x1, 0x0, &(0x7f00000044c0)={0x0, 0x1c9c380}) 13:27:07 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) sync() 13:27:07 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) sync() 13:27:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x9) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000640)={0x14, 0x67, 0x2, {0x20}}, 0x14) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x5, 0x200000000, 'queue1\x00'}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000340)) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0xb, 0x20, &(0x7f0000000040)="9bdf", {0xffffffffffffff01, 0x4, 0x4c47504a, 0x0, 0x3, 0x400, 0x0, 0x6}}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) clock_nanosleep(0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000580)) fstatfs(r0, &(0x7f0000004200)=""/4096) 13:27:07 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x1200, 0x0, 0xf0000000000010, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$mice(&(0x7f00000013c0)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000001640)={0xffff, {0x8e, 0x1, 0x0, 0x200, 0x9, 0x1}}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x9, 0xe77}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x3f}, 0x121) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x7fffffff, 0x3fc) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000240)=0xe755) syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f00000002c0)='./file0\x00', 0x8001, 0x4, &(0x7f00000014c0)=[{&(0x7f0000000300)="ba72b46438a35e4f8fea4900820a1f67840b130de84594cc6bb43ed59fbb8eab8a2b5d8c34dfd2b8f688d49c46200295222cb738d5089293a909c1b7d4fe1cb3d4f310b631d40e40fa80a9eee5845080cbaf5e8f40281a4b5dd8ed9d8e596af3e0eb64081997187bce590da516148d011540c3", 0x73, 0x20}, {&(0x7f0000000380)="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", 0xffffffffffffff08, 0x401}, {&(0x7f00000015c0)="bf41cb86b84ad9ab37f9ddcc69570691318b34f995034d8e6c42c0c0d84601808de71383ee220700f76031df590ac17627100fefcb257b0b2b605a5b19b341565d521c22c59014e68b443e17e14885bedc8a341a3dd93759d74bb13674aa47870079c7a7f381d6989adfd46c972b05e783f79f9d78fc0b511f6d6b", 0x7b}, {&(0x7f0000001400)="4928f02f1c71c3e3e5eb47e25570418c0ce28295f87e499b81b12e3e4396783ca0291e9573b0423271723f38c942fb1ee09ed45ec560af9bb8368b260e940412166c529007841d3a96b37cbb583088e636d3e36de56818b9f344853a45078fb7e19208a6c6fd198271587e3360b0ed803a611347d9a75ae01b4c6a4ce4b318a9e442ff60a02a892a51dc3368d6aa84e487c1d2a8a26ebf0cf0bda2898735579fc97bb3c6c5f9865804128f78a4", 0xad, 0x3}], 0x2001, &(0x7f0000001580)='lo)bdev-\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000001380)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x9) 13:27:07 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) pipe2(&(0x7f0000000000), 0x80800) 13:27:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xbd, 0x12) 13:27:08 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) sync() 13:27:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xdf72, 0x4000) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x3, 0x9}) socket$inet6(0xa, 0x80003, 0x800000000000006) r2 = socket$netlink(0x10, 0x3, 0x4) recvmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000400)=""/131, 0x83}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x15, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}}, 0x14}}, 0x0) 13:27:08 executing program 0: r0 = memfd_create(&(0x7f0000000080)='systemuser>\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) ftruncate(r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x1, 0x1d5dd5f9}) 13:27:08 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) sync() 13:27:08 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 13:27:08 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:08 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000001c0)={0x0, 0x1}) 13:27:08 executing program 1: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x300, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0]) 13:27:08 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x101080, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x219}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4b}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x18}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48010}, 0x4000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000008920000100009200000000000000000050ae5ee0c5ab0871e33efc80148b5767c1a66eaa9ea3e2134e15b2cb2351396eb0bbb045777b3fe0115cf41ccb8a847d152d4cc4b7cfc0738ad664ad2b52fac792d93256d52b11c53fbc335de91ee19efa67a7a5980087f99194295b17b732a64fff5c680e3003ec1d2abeae83f68ac16086b1664de487cb87286023e32289d00a85c18beaeefe5143d9c1d5de9492d764fb11cb1f07aa52e4e64d932872d6f2a8268abf3d145bdbdb8c5d11a900"]}) 13:27:08 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 13:27:08 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:08 executing program 3: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = request_key(&(0x7f0000000340)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000440)='trustedvboxnet1self#\x00', 0xfffffffffffffffc) keyctl$clear(0x7, r1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x9, 0x3f}, &(0x7f0000000400)=0x10) r5 = eventfd2(0x8b, 0x80000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) write$binfmt_misc(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="0019e28f28097800e8ff001dac04008e02005ea3c6730a8e05baecce92c03002ced6c6a96383ea917c8aea7e019fc5d6d46375bc0ea3b1c49dbd3673b7f17f4b5c2053ac194ef77f5100b24c3ceb42e4337a6bc09b3c3ca67f78d97d9d5eec8c74fcd30658d98fc6c69651f3fb"], 0x2c) io_setup(0x101, &(0x7f0000000040)=0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000004c0)=""/16, &(0x7f0000000500)=0x10) io_submit(r6, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0xfffffce4}]) r7 = dup(r5) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000600)={0x3, 0x1, &(0x7f0000000540)=""/139, &(0x7f0000000240)=""/112, &(0x7f0000001dc0)=""/4096, 0x2}) r8 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) inotify_init() bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)={&(0x7f0000000180)='./file0\x00', r8}, 0x10) ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f00000006c0)) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000dc0)=""/4096, 0x1000) 13:27:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1, 0x6, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x2, 0x100000001}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x802, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="83bd79cfb684"], 0x37, 0x0, &(0x7f00000003c0)="651771df5db10b15ef1ae185b18a75d03274518e5a51f7b0ee8934bc49aadde8c578c1934210658cfaf79f9277979ec04d2ed2b4d9cf07"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={"7465616d30001000", 0xffffffffffbfdffc}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000280)) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000080)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80000004) accept4(0xffffffffffffffff, &(0x7f0000001900)=@hci, &(0x7f0000001980)=0x80, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x0, 0xffffffffffffffff, 0x97, 0xfffffffffffffff8, @buffer={0x0, 0xfa, &(0x7f0000001c40)=""/250}, &(0x7f0000001700)="fdf935625966b55462627c45e30222e8bc7040edfcddc57b7acda5235768e437a1423d658af4994b485aa70c0b2701d49f058a0a4be0867b8c3ee4f02d97f8f086ff8b6082992a299f26120b24c1a5dad70b19853da18342a2c32fd48e992f4756d08e5b94b37880cce046041e18a0cbe384ed1a9693265183788577153be5e0685b7929190c4ffe7039db976b29bfa816cbc6933aaa43", &(0x7f00000017c0)=""/83, 0x6, 0x10, 0xffffffffffffffff, &(0x7f0000001840)}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={"7465616d300000ffffffc000002000", 0x4bfd}) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x180000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r3, &(0x7f0000eed000), &(0x7f0000b88000)="03"}, 0x20) 13:27:08 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) [ 246.167338] 9pnet: Insufficient options for proto=fd 13:27:08 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 246.196545] 9pnet: Insufficient options for proto=fd 13:27:08 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) sync() 13:27:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={[0x0, 0x30030000, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9000, 0x0, &(0x7f0000ff4000/0x9000)=nil) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0xff, 0x4) futex(&(0x7f000000cffc)=0x4, 0x0, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) [ 246.272946] device team0 entered promiscuous mode [ 246.288348] device team_slave_0 entered promiscuous mode [ 246.312719] device team_slave_1 entered promiscuous mode 13:27:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="66b8dc008ee8f2aa0f01f60f001d00580000660f5dbb0e000000c4e1e1748d0b0000000f06b97a0b0000b808000000ba000000000f3069170300000066b81f000f00d8", 0x43}], 0x1, 0x0, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:27:09 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) sync() [ 246.433121] 8021q: adding VLAN 0 to HW filter on device team0 13:27:09 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:09 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) sync() 13:27:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000001600)={0x4, &(0x7f0000001580)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000400)={0x4, &(0x7f0000000000)=""/20, &(0x7f0000000380)=[{0x1, 0x87, 0x9, &(0x7f0000000140)=""/135}, {0xc3b7, 0x30, 0xce23, &(0x7f0000000200)=""/48}, {0x18000000000000, 0x64, 0x7, &(0x7f0000000240)=""/100}, {0x4, 0x99, 0x7, &(0x7f00000002c0)=""/153}]}) [ 246.653058] 8021q: adding VLAN 0 to HW filter on device team0 13:27:09 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:09 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x80000100000001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000320007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x402c00) 13:27:09 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) fallocate(r0, 0x10, 0x0, 0x1000f2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000240)={0x1}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000140)) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) r2 = semget(0x1, 0x7dabb996bbc4275d, 0x0) semctl$SEM_INFO(r2, 0x7, 0x13, &(0x7f0000000280)=""/255) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0xfff, 0x2) fstat(0xffffffffffffffff, &(0x7f00000001c0)) sendfile(r1, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 13:27:09 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000200), 0x4) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', r3}, 0x10) r4 = dup2(r1, r0) write$cgroup_type(r4, &(0x7f0000000080)='threaded\x00', 0x9) fcntl$addseals(r2, 0x409, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000180)={0xa4, 0x14, [0x9c, 0x6, 0x101, 0xaeaa, 0x7]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x64c001, 0x0) close(r2) 13:27:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000001600)={0x4, &(0x7f0000001580)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000400)={0x4, &(0x7f0000000000)=""/20, &(0x7f0000000380)=[{0x1, 0x87, 0x9, &(0x7f0000000140)=""/135}, {0xc3b7, 0x30, 0xce23, &(0x7f0000000200)=""/48}, {0x18000000000000, 0x64, 0x7, &(0x7f0000000240)=""/100}, {0x4, 0x99, 0x7, &(0x7f00000002c0)=""/153}]}) 13:27:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() [ 246.948719] tc_dump_action: action bad kind [ 246.961023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 247.000179] kauditd_printk_skb: 9 callbacks suppressed [ 247.000193] audit: type=1800 audit(1542374829.696:31): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="bus" dev="sda1" ino=16524 res=0 13:27:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:09 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) fallocate(r0, 0x10, 0x0, 0x1000f2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000240)={0x1}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000140)) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) r2 = semget(0x1, 0x7dabb996bbc4275d, 0x0) semctl$SEM_INFO(r2, 0x7, 0x13, &(0x7f0000000280)=""/255) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0xfff, 0x2) fstat(0xffffffffffffffff, &(0x7f00000001c0)) sendfile(r1, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 13:27:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000001600)={0x4, &(0x7f0000001580)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000400)={0x4, &(0x7f0000000000)=""/20, &(0x7f0000000380)=[{0x1, 0x87, 0x9, &(0x7f0000000140)=""/135}, {0xc3b7, 0x30, 0xce23, &(0x7f0000000200)=""/48}, {0x18000000000000, 0x64, 0x7, &(0x7f0000000240)=""/100}, {0x4, 0x99, 0x7, &(0x7f00000002c0)=""/153}]}) [ 247.086974] audit: type=1800 audit(1542374829.776:32): pid=8113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="bus" dev="sda1" ino=16524 res=0 [ 247.154791] xt_nfacct: accounting object `syz0' does not exists 13:27:09 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)='X', 0x1, 0xfec0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r4 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="27a17aeeb4601163bff9dd2a008461685f8b81f6d422599ee153298c96da8f541f40698bdb7def10ce1bd7bbaec0dbe4b124a3e4a1d75dff6d1b6f79ebfe28553d28747586d01028759272d5030ad963b6afd733e6fb0bd944000000"], 0x1}}, 0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000480)=""/4096) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) dup3(r0, r4, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x14) [ 247.221789] xt_nfacct: accounting object `syz0' does not exists 13:27:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:10 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000001600)={0x4, &(0x7f0000001580)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000400)={0x4, &(0x7f0000000000)=""/20, &(0x7f0000000380)=[{0x1, 0x87, 0x9, &(0x7f0000000140)=""/135}, {0xc3b7, 0x30, 0xce23, &(0x7f0000000200)=""/48}, {0x18000000000000, 0x64, 0x7, &(0x7f0000000240)=""/100}, {0x4, 0x99, 0x7, &(0x7f00000002c0)=""/153}]}) [ 247.269044] audit: type=1800 audit(1542374829.966:33): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="bus" dev="sda1" ino=16526 res=0 13:27:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000001600)={0x4, &(0x7f0000001580)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:10 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 247.645712] xt_nfacct: accounting object `syz0' does not exists 13:27:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 247.942817] xt_nfacct: accounting object `syz0' does not exists 13:27:10 executing program 1: r0 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000180)=@req={0x3fc}, 0x10) eventfd2(0x20, 0x80000) sendmmsg(r2, &(0x7f0000000000), 0x142, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x10001, 0x400a00) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x3, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8) 13:27:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6612, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000080)={0x14, 0x27, 0xafd, 0x0, 0x0, {0x4802}}, 0x14}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@remote}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) syz_emit_ethernet(0x5ec, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0x5b6, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0x5b6, 0x0, [], "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"}}}}}}, &(0x7f0000000000)) 13:27:10 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 248.007781] syz-executor1 (8126) used greatest stack depth: 13080 bytes left 13:27:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8}, 0x10) 13:27:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) [ 248.121313] xt_nfacct: accounting object `syz0' does not exists 13:27:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6612, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000080)={0x14, 0x27, 0xafd, 0x0, 0x0, {0x4802}}, 0x14}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@remote}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) syz_emit_ethernet(0x5ec, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0x5b6, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0x5b6, 0x0, [], "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"}}}}}}, &(0x7f0000000000)) 13:27:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8}, 0x10) 13:27:11 executing program 1: r0 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000180)=@req={0x3fc}, 0x10) eventfd2(0x20, 0x80000) sendmmsg(r2, &(0x7f0000000000), 0x142, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x10001, 0x400a00) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x3, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8) 13:27:11 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6612, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000080)={0x14, 0x27, 0xafd, 0x0, 0x0, {0x4802}}, 0x14}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@remote}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) syz_emit_ethernet(0x5ec, &(0x7f0000000200)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "614ab1", 0x5b6, 0x2c, 0x0, @dev, @mcast2, {[], @udp={0x2c00, 0x0, 0x5b6, 0x0, [], "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"}}}}}}, &(0x7f0000000000)) 13:27:11 executing program 2 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8}, 0x10) [ 248.436182] xt_nfacct: accounting object `syz0' does not exists 13:27:11 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 248.500311] FAULT_INJECTION: forcing a failure. [ 248.500311] name failslab, interval 1, probability 0, space 0, times 1 [ 248.561311] CPU: 0 PID: 8225 Comm: syz-executor2 Not tainted 4.20.0-rc2+ #337 [ 248.568641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.578014] Call Trace: [ 248.580722] dump_stack+0x244/0x39d [ 248.584383] ? dump_stack_print_info.cold.1+0x20/0x20 [ 248.589626] ? find_held_lock+0x36/0x1c0 [ 248.593773] should_fail.cold.4+0xa/0x17 [ 248.597862] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 248.603030] ? kasan_check_read+0x11/0x20 [ 248.607220] ? do_raw_spin_unlock+0xa7/0x330 [ 248.611644] ? do_raw_spin_trylock+0x270/0x270 [ 248.616260] ? _raw_spin_unlock+0x2c/0x50 [ 248.620462] ? __queue_work+0x676/0x1440 [ 248.624536] ? zap_class+0x640/0x640 [ 248.628327] ? debug_smp_processor_id+0x1c/0x20 [ 248.633015] ? perf_trace_lock+0x14d/0x7a0 [ 248.637264] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 248.642381] ? print_usage_bug+0xc0/0xc0 [ 248.646482] ? lock_acquire+0x1ed/0x520 [ 248.650543] ? bdi_split_work_to_wbs+0x123/0x13d0 [ 248.655582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 13:27:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x2304, 0x0, [0xfffffffe]}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20002, 0x0) close(r1) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) 13:27:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 248.661137] ? check_preemption_disabled+0x48/0x280 [ 248.666172] __should_failslab+0x124/0x180 [ 248.670482] should_failslab+0x9/0x14 [ 248.674295] kmem_cache_alloc_trace+0x4b/0x750 [ 248.678910] bdi_split_work_to_wbs+0x5c1/0x13d0 [ 248.683799] ? mark_held_locks+0x130/0x130 [ 248.688061] ? locked_inode_to_wb_and_lock_list+0xb50/0xb50 [ 248.693786] ? debug_smp_processor_id+0x1c/0x20 [ 248.698456] ? perf_trace_lock+0x14d/0x7a0 [ 248.702690] ? zap_class+0x640/0x640 [ 248.702713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.702730] ? check_preemption_disabled+0x48/0x280 [ 248.702751] ? debug_smp_processor_id+0x1c/0x20 [ 248.702767] ? perf_trace_lock+0x14d/0x7a0 [ 248.725912] ? lock_is_held_type+0x210/0x210 [ 248.730344] ? wakeup_flusher_threads+0x314/0x5e0 [ 248.735205] ? zap_class+0x640/0x640 [ 248.738933] ? find_held_lock+0x36/0x1c0 [ 248.743013] ? lock_acquire+0x1ed/0x520 [ 248.747005] sync_inodes_sb+0x333/0x480 [ 248.747029] ? try_to_writeback_inodes_sb+0x70/0x70 [ 248.747095] ? iterate_supers+0xda/0x290 [ 248.747114] ? lock_downgrade+0x900/0x900 [ 248.756109] ? down_read+0x8d/0x120 [ 248.756130] ? __down_interruptible+0x700/0x700 [ 248.756156] sync_inodes_one_sb+0x59/0x70 [ 248.756171] iterate_supers+0x149/0x290 [ 248.756186] ? __ia32_sys_tee+0x2b0/0x2b0 [ 248.764387] ksys_sync+0xec/0x1e0 [ 248.772669] ? sync_filesystem+0x330/0x330 [ 248.772743] ? __ia32_sys_read+0xb0/0xb0 [ 248.772761] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.772786] ? trace_hardirqs_off_caller+0x310/0x310 [ 248.772812] __ia32_sys_sync+0xe/0x20 [ 248.811006] do_syscall_64+0x1b9/0x820 [ 248.814905] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 248.820290] ? syscall_return_slowpath+0x5e0/0x5e0 [ 248.825239] ? trace_hardirqs_on_caller+0x310/0x310 [ 248.830272] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 248.835384] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 248.842064] ? __switch_to_asm+0x40/0x70 [ 248.846138] ? __switch_to_asm+0x34/0x70 [ 248.850218] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.855081] entry_SYSCALL_64_after_hwframe+0x49/0xbe 13:27:11 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 248.860283] RIP: 0033:0x457569 [ 248.863489] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.882403] RSP: 002b:00007f2ccd42bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 248.882419] RAX: ffffffffffffffda RBX: 00007f2ccd42bc90 RCX: 0000000000457569 [ 248.882428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.882438] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 13:27:11 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 248.882448] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ccd42c6d4 [ 248.882458] R13: 00000000004c3156 R14: 00000000004d8190 R15: 0000000000000004 13:27:11 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000100)=0x54) bind$inet(r0, &(0x7f0000000080)={0x2, 0x20, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x5}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000440)={0x0, 0xfffffffffffff0b4, 0x0, 0x4, 0x1}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={r1, 0x3c, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, [], 0x18}, 0x3}]}, &(0x7f0000000540)=0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x16f, 0x16dd}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x7}, &(0x7f0000000400)=0x90) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000580)) r4 = dup2(r0, r0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xf, 0x10, "70875db62b9db99cff80b381ba4e7e1192c39b02aae4ecd8ead3671b77d9ea991fdb4a2f8aaa4ba116e5577cb6903c198b1e5ddee565f0b07c58f991c00a6502", "e1ee37bf36191ee97153e4661b6c4691714ee1fc56bc1ad88bbf73b7bdd214ff", [0x0, 0x1]}) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffd3) close(r0) socket$nl_route(0x10, 0x3, 0x0) 13:27:11 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r0}}, 0x10) 13:27:11 executing program 0: write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYRES32]]], 0x8) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000340)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000004c0)) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r2, r2}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, &(0x7f00000001c0)}) [ 248.959841] xt_nfacct: accounting object `syz0' does not exists 13:27:11 executing program 2 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:11 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:11 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r0}}, 0x10) 13:27:11 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r0 = dup(0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f0000000580)={0x90, 0xffffffffffffffda, 0x8, {0x5, 0x0, 0x5, 0x86a6, 0xa5, 0x4, {0x4, 0x6, 0x0, 0x0, 0x5, 0x7, 0x8, 0x0, 0x9, 0x8, 0x200, r1, 0x0, 0x711, 0x8001}}}, 0x90) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="75ea6b925016ea33d971cfa5cd7f5ac42eafc7f59bb512ba9958d637708d0b11ffd1730100c596a99fa0811ef42a699022d6dd083f64b7f396b617e81299bfdfbd3af53718c00d95ff998b6a008a7889a97831f355206a339f4edc459130fa47c0ea6a5994f6a4bce514bddb88c74d42832178c563226e9f2043de3193f82b58252e27cac03ae5660a50aa6a6743010354ea988e48cfb27d3135949183dd2ef635e873"], 0x1}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000300)={@mcast2, r2}, 0x14) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000340)=""/247, 0x7ffff000}], 0x10000052) sendto$inet(r3, &(0x7f0000000a00), 0xff00, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) 13:27:11 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r0}}, 0x10) [ 249.181250] FAULT_INJECTION: forcing a failure. [ 249.181250] name failslab, interval 1, probability 0, space 0, times 0 [ 249.231403] CPU: 0 PID: 8273 Comm: syz-executor2 Not tainted 4.20.0-rc2+ #337 [ 249.238741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.248115] Call Trace: [ 249.250743] dump_stack+0x244/0x39d [ 249.254414] ? dump_stack_print_info.cold.1+0x20/0x20 [ 249.259668] should_fail.cold.4+0xa/0x17 [ 249.263774] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 249.268917] ? mutex_unlock+0xd/0x10 [ 249.272726] ? flush_workqueue+0x7b6/0x1e10 [ 249.277079] ? lock_is_held_type+0x210/0x210 13:27:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) [ 249.281516] ? print_usage_bug+0xc0/0xc0 [ 249.285625] ? print_usage_bug+0xc0/0xc0 [ 249.289719] ? zap_class+0x640/0x640 [ 249.293464] ? cancel_delayed_work+0x3e0/0x3e0 [ 249.298080] ? __lock_acquire+0x62f/0x4c20 [ 249.302343] ? find_held_lock+0x36/0x1c0 [ 249.306442] ? __lock_is_held+0xb5/0x140 [ 249.310548] __should_failslab+0x124/0x180 [ 249.310642] ? mempool_free+0x370/0x370 [ 249.318777] should_failslab+0x9/0x14 [ 249.322601] kmem_cache_alloc+0x47/0x730 13:27:12 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 249.326697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.332270] ? mempool_free+0x370/0x370 [ 249.336269] mempool_alloc_slab+0x44/0x60 [ 249.340443] mempool_alloc+0x193/0x4a0 [ 249.344382] ? mempool_destroy+0x30/0x30 [ 249.348469] ? __switch_to_asm+0x40/0x70 [ 249.352639] ? dquot_commit+0x5d0/0x5d0 [ 249.356753] ? zap_class+0x640/0x640 [ 249.360550] bio_alloc_bioset+0x3a8/0x700 [ 249.364726] ? bvec_alloc+0x2d0/0x2d0 [ 249.368587] blkdev_issue_flush+0xd1/0x300 [ 249.372904] ext4_sync_fs+0x61c/0xab0 [ 249.376740] ? ext4_statfs+0xed0/0xed0 [ 249.380670] ? lock_downgrade+0x900/0x900 [ 249.384869] ? iterate_supers+0xe2/0x290 [ 249.388959] ? __down_interruptible+0x700/0x700 [ 249.393658] ? ext4_statfs+0xed0/0xed0 [ 249.397581] sync_fs_one_sb+0xd0/0x100 [ 249.401499] iterate_supers+0x149/0x290 [ 249.405493] ? do_fsync+0xa0/0xa0 [ 249.408978] ksys_sync+0x10c/0x1e0 [ 249.412541] ? sync_filesystem+0x330/0x330 [ 249.416801] ? __ia32_sys_read+0xb0/0xb0 [ 249.420886] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.426277] ? trace_hardirqs_off_caller+0x310/0x310 13:27:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r0 = dup(0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f0000000580)={0x90, 0xffffffffffffffda, 0x8, {0x5, 0x0, 0x5, 0x86a6, 0xa5, 0x4, {0x4, 0x6, 0x0, 0x0, 0x5, 0x7, 0x8, 0x0, 0x9, 0x8, 0x200, r1, 0x0, 0x711, 0x8001}}}, 0x90) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="75ea6b925016ea33d971cfa5cd7f5ac42eafc7f59bb512ba9958d637708d0b11ffd1730100c596a99fa0811ef42a699022d6dd083f64b7f396b617e81299bfdfbd3af53718c00d95ff998b6a008a7889a97831f355206a339f4edc459130fa47c0ea6a5994f6a4bce514bddb88c74d42832178c563226e9f2043de3193f82b58252e27cac03ae5660a50aa6a6743010354ea988e48cfb27d3135949183dd2ef635e873"], 0x1}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000300)={@mcast2, r2}, 0x14) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000340)=""/247, 0x7ffff000}], 0x10000052) sendto$inet(r3, &(0x7f0000000a00), 0xff00, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) [ 249.431423] __ia32_sys_sync+0xe/0x20 [ 249.435254] do_syscall_64+0x1b9/0x820 [ 249.439169] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 249.444558] ? syscall_return_slowpath+0x5e0/0x5e0 [ 249.449514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.454382] ? trace_hardirqs_on_caller+0x310/0x310 [ 249.459419] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 249.464458] ? prepare_exit_to_usermode+0x291/0x3b0 [ 249.469501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.474377] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.479576] RIP: 0033:0x457569 [ 249.482781] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.501692] RSP: 002b:00007f2ccd44cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 249.509423] RAX: ffffffffffffffda RBX: 00007f2ccd44cc90 RCX: 0000000000457569 [ 249.516713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.524003] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 249.531376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ccd44d6d4 [ 249.538667] R13: 00000000004c3156 R14: 00000000004d8190 R15: 0000000000000004 13:27:12 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000100)=0x54) bind$inet(r0, &(0x7f0000000080)={0x2, 0x20, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x5}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000440)={0x0, 0xfffffffffffff0b4, 0x0, 0x4, 0x1}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={r1, 0x3c, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, [], 0x18}, 0x3}]}, &(0x7f0000000540)=0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x16f, 0x16dd}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x7}, &(0x7f0000000400)=0x90) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000580)) r4 = dup2(r0, r0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xf, 0x10, "70875db62b9db99cff80b381ba4e7e1192c39b02aae4ecd8ead3671b77d9ea991fdb4a2f8aaa4ba116e5577cb6903c198b1e5ddee565f0b07c58f991c00a6502", "e1ee37bf36191ee97153e4661b6c4691714ee1fc56bc1ad88bbf73b7bdd214ff", [0x0, 0x1]}) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffd3) close(r0) socket$nl_route(0x10, 0x3, 0x0) 13:27:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:12 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:12 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x5c, 0x8, 0x5, 0x400, 0x8}, 0xff}, 0xa) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404010}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x58}}, 0x8001) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="a61364fc33948eba9a50340442897ec1c9a73466b49b708d27f8a986ad5970cc06408fa7452be3905c9800770f93640cf50d49e95b97f95618d583b222e5cc65fa9c2fbbfa57da921cfea5df4967492719f9124c8ffc19c08e14cb90c495ca82a74b371afdf79f360b5c11ea3a0a6ec553f2302586dfcf39902b488df8e147916b57c09c38b6308d7d6de83be847e95f6dc2f4a28331202ca62b5e8945"]]], 0x1}}, 0x40002) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) 13:27:12 executing program 2 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() [ 249.900569] FAULT_INJECTION: forcing a failure. [ 249.900569] name failslab, interval 1, probability 0, space 0, times 0 [ 249.952247] CPU: 0 PID: 8309 Comm: syz-executor2 Not tainted 4.20.0-rc2+ #337 [ 249.959601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.968978] Call Trace: [ 249.971603] dump_stack+0x244/0x39d [ 249.975285] ? dump_stack_print_info.cold.1+0x20/0x20 [ 249.980543] should_fail.cold.4+0xa/0x17 [ 249.984662] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 249.989904] ? perf_tp_event+0xc20/0xc20 [ 249.993978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.994020] ? check_preemption_disabled+0x48/0x280 [ 250.004562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.004583] ? check_preemption_disabled+0x48/0x280 [ 250.004602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.004620] ? check_preemption_disabled+0x48/0x280 [ 250.004642] ? memset+0x31/0x40 [ 250.029012] ? debug_smp_processor_id+0x1c/0x20 [ 250.033703] ? perf_trace_lock+0x14d/0x7a0 [ 250.037959] ? perf_trace_lock_acquire+0x501/0x800 [ 250.042933] ? lock_is_held_type+0x210/0x210 [ 250.047373] ? perf_trace_lock+0x7a0/0x7a0 [ 250.051658] __should_failslab+0x124/0x180 [ 250.055926] should_failslab+0x9/0x14 [ 250.059749] kmem_cache_alloc_node+0x56/0x730 [ 250.064258] ? check_preemption_disabled+0x48/0x280 [ 250.064314] create_task_io_context+0xbd/0x580 [ 250.064337] ? ioc_clear_queue+0x610/0x610 [ 250.064358] ? generic_make_request_checks+0x1290/0x26c0 [ 250.064381] ? lock_downgrade+0x900/0x900 [ 250.078200] ? check_preemption_disabled+0x48/0x280 [ 250.078300] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 250.097754] ? kasan_check_read+0x11/0x20 13:27:12 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) [ 250.101927] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 250.107229] ? rcu_softirq_qs+0x20/0x20 [ 250.111262] generic_make_request_checks+0x1f2f/0x26c0 [ 250.116608] ? trace_event_raw_event_block_rq_requeue+0x6d0/0x6d0 [ 250.122964] ? is_bpf_text_address+0xd3/0x170 [ 250.127488] ? kernel_text_address+0x79/0xf0 [ 250.131924] ? __kernel_text_address+0xd/0x40 [ 250.136494] ? unwind_get_return_address+0x61/0xa0 [ 250.141762] ? __save_stack_trace+0x8d/0xf0 [ 250.146144] ? save_stack+0xa9/0xd0 [ 250.149796] ? save_stack+0x43/0xd0 [ 250.153451] ? kasan_kmalloc+0xc7/0xe0 [ 250.157356] ? kasan_slab_alloc+0x12/0x20 [ 250.161531] ? mempool_alloc_slab+0x44/0x60 [ 250.165878] ? mempool_alloc+0x193/0x4a0 [ 250.169963] ? bio_alloc_bioset+0x3a8/0x700 [ 250.174314] ? blkdev_issue_flush+0xd1/0x300 [ 250.178749] ? ext4_sync_fs+0x61c/0xab0 [ 250.182743] ? sync_fs_one_sb+0xd0/0x100 [ 250.186818] ? iterate_supers+0x149/0x290 [ 250.190978] ? ksys_sync+0x10c/0x1e0 [ 250.194710] ? __ia32_sys_sync+0xe/0x20 [ 250.198709] ? do_syscall_64+0x1b9/0x820 13:27:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x5c, 0x8, 0x5, 0x400, 0x8}, 0xff}, 0xa) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404010}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x58}}, 0x8001) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="a61364fc33948eba9a50340442897ec1c9a73466b49b708d27f8a986ad5970cc06408fa7452be3905c9800770f93640cf50d49e95b97f95618d583b222e5cc65fa9c2fbbfa57da921cfea5df4967492719f9124c8ffc19c08e14cb90c495ca82a74b371afdf79f360b5c11ea3a0a6ec553f2302586dfcf39902b488df8e147916b57c09c38b6308d7d6de83be847e95f6dc2f4a28331202ca62b5e8945"]]], 0x1}}, 0x40002) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) 13:27:12 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000100)=0x54) bind$inet(r0, &(0x7f0000000080)={0x2, 0x20, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x5}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000440)={0x0, 0xfffffffffffff0b4, 0x0, 0x4, 0x1}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={r1, 0x3c, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, [], 0x18}, 0x3}]}, &(0x7f0000000540)=0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x16f, 0x16dd}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x7}, &(0x7f0000000400)=0x90) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000580)) r4 = dup2(r0, r0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xf, 0x10, "70875db62b9db99cff80b381ba4e7e1192c39b02aae4ecd8ead3671b77d9ea991fdb4a2f8aaa4ba116e5577cb6903c198b1e5ddee565f0b07c58f991c00a6502", "e1ee37bf36191ee97153e4661b6c4691714ee1fc56bc1ad88bbf73b7bdd214ff", [0x0, 0x1]}) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffd3) close(r0) socket$nl_route(0x10, 0x3, 0x0) [ 250.202796] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.208189] ? print_usage_bug+0xc0/0xc0 [ 250.212296] generic_make_request+0x2c7/0x18a0 [ 250.216893] ? zap_class+0x640/0x640 [ 250.220638] ? blk_get_request+0x800/0x800 [ 250.224923] ? __lock_is_held+0xb5/0x140 [ 250.229088] ? rcu_read_lock_sched_held+0x14f/0x180 [ 250.229110] ? kmem_cache_alloc+0x33a/0x730 [ 250.238434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.238465] ? mempool_alloc_slab+0x44/0x60 [ 250.238484] ? mempool_free+0x370/0x370 [ 250.238507] ? mempool_alloc_slab+0x44/0x60 [ 250.256676] submit_bio+0xba/0x460 [ 250.260240] ? submit_bio+0xba/0x460 [ 250.263996] ? generic_make_request+0x18a0/0x18a0 [ 250.268925] ? init_wait_entry+0x1c0/0x1c0 [ 250.273186] ? dquot_commit+0x5d0/0x5d0 [ 250.277183] ? zap_class+0x640/0x640 [ 250.277221] submit_bio_wait+0x134/0x1e0 [ 250.277242] ? submit_bio_wait_endio+0x40/0x40 [ 250.277307] blkdev_issue_flush+0x204/0x300 [ 250.293948] ext4_sync_fs+0x61c/0xab0 [ 250.293977] ? ext4_statfs+0xed0/0xed0 [ 250.293998] ? lock_downgrade+0x900/0x900 [ 250.294041] ? iterate_supers+0xe2/0x290 [ 250.310015] ? __down_interruptible+0x700/0x700 [ 250.314719] ? ext4_statfs+0xed0/0xed0 [ 250.318639] sync_fs_one_sb+0xd0/0x100 [ 250.322565] iterate_supers+0x149/0x290 [ 250.326565] ? do_fsync+0xa0/0xa0 [ 250.330049] ksys_sync+0x10c/0x1e0 [ 250.333630] ? sync_filesystem+0x330/0x330 [ 250.337890] ? __ia32_sys_read+0xb0/0xb0 [ 250.341978] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.347368] ? trace_hardirqs_off_caller+0x310/0x310 13:27:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@mpls_getnetconf={0x1c, 0x52, 0x3, 0x0, 0x0, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x6, 0x7, 0xb000}, 0x4) [ 250.352535] __ia32_sys_sync+0xe/0x20 [ 250.356361] do_syscall_64+0x1b9/0x820 [ 250.360281] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 250.365681] ? syscall_return_slowpath+0x5e0/0x5e0 [ 250.370633] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.375493] ? trace_hardirqs_on_caller+0x310/0x310 [ 250.375518] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 250.375549] ? prepare_exit_to_usermode+0x291/0x3b0 [ 250.375580] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.390614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.390632] RIP: 0033:0x457569 [ 250.390652] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.390664] RSP: 002b:00007f2ccd44cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 250.390684] RAX: ffffffffffffffda RBX: 00007f2ccd44cc90 RCX: 0000000000457569 [ 250.390695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.390706] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 13:27:13 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x5c, 0x8, 0x5, 0x400, 0x8}, 0xff}, 0xa) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404010}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x58}}, 0x8001) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="a61364fc33948eba9a50340442897ec1c9a73466b49b708d27f8a986ad5970cc06408fa7452be3905c9800770f93640cf50d49e95b97f95618d583b222e5cc65fa9c2fbbfa57da921cfea5df4967492719f9124c8ffc19c08e14cb90c495ca82a74b371afdf79f360b5c11ea3a0a6ec553f2302586dfcf39902b488df8e147916b57c09c38b6308d7d6de83be847e95f6dc2f4a28331202ca62b5e8945"]]], 0x1}}, 0x40002) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) 13:27:13 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 250.390719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ccd44d6d4 [ 250.390731] R13: 00000000004c3156 R14: 00000000004d8190 R15: 0000000000000004 13:27:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:13 executing program 4: socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:13 executing program 2 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:13 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:13 executing program 4: socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 250.624533] FAULT_INJECTION: forcing a failure. [ 250.624533] name failslab, interval 1, probability 0, space 0, times 0 [ 250.672885] CPU: 0 PID: 8357 Comm: syz-executor2 Not tainted 4.20.0-rc2+ #337 [ 250.680228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.689599] Call Trace: [ 250.692227] dump_stack+0x244/0x39d [ 250.695895] ? dump_stack_print_info.cold.1+0x20/0x20 [ 250.701131] ? _raw_spin_unlock+0x2c/0x50 [ 250.705315] should_fail.cold.4+0xa/0x17 [ 250.709391] ? worker_thread+0x1390/0x1390 [ 250.713659] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 250.718800] ? find_held_lock+0x36/0x1c0 [ 250.722893] ? mark_held_locks+0xc7/0x130 [ 250.727064] ? __local_bh_enable_ip+0x160/0x260 [ 250.731752] ? __local_bh_enable_ip+0x160/0x260 [ 250.736444] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 250.741048] ? trace_hardirqs_on+0xbd/0x310 [ 250.745395] ? _raw_spin_unlock_bh+0x30/0x40 [ 250.749829] ? trace_hardirqs_off_caller+0x310/0x310 [ 250.754958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.760516] ? check_preemption_disabled+0x48/0x280 [ 250.765558] ? wb_queue_work+0x32c/0x6f0 [ 250.769640] ? wb_queue_work+0x32c/0x6f0 [ 250.773730] ? __local_bh_enable_ip+0x160/0x260 [ 250.778430] ? _raw_spin_unlock_bh+0x30/0x40 [ 250.782859] ? wb_queue_work+0x32c/0x6f0 [ 250.786951] ? perf_trace_writeback_dirty_page+0x920/0x920 [ 250.792609] __should_failslab+0x124/0x180 [ 250.796870] should_failslab+0x9/0x14 [ 250.800690] kmem_cache_alloc_trace+0x4b/0x750 [ 250.805318] bdi_split_work_to_wbs+0x5c1/0x13d0 [ 250.805342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.805372] ? locked_inode_to_wb_and_lock_list+0xb50/0xb50 [ 250.815691] ? perf_trace_lock_acquire+0x501/0x800 [ 250.815717] ? check_preemption_disabled+0x48/0x280 [ 250.815736] ? memset+0x31/0x40 [ 250.815797] ? perf_trace_lock+0x7a0/0x7a0 [ 250.831445] ? wakeup_flusher_threads+0x314/0x5e0 [ 250.831470] ? zap_class+0x640/0x640 [ 250.831504] ? find_held_lock+0x36/0x1c0 [ 250.831543] ? lock_acquire+0x1ed/0x520 [ 250.831572] sync_inodes_sb+0x333/0x480 [ 250.839068] ? try_to_writeback_inodes_sb+0x70/0x70 [ 250.839085] ? iterate_supers+0xda/0x290 [ 250.839107] ? lock_downgrade+0x900/0x900 13:27:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000707000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000c4034731a000000001c005e2b317aa2962635740008000700800000000000000000000000000000000000000000abbbb4995692dd9a673de9c355d5df047f7547d1f7a780125292d420ad4798b61d74d8da832b5023c8449490ca7d13f584272b4dfd2b0d09709b03ffe0be74"], 0x3c}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 13:27:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x3302, 0x5c, 0x8, 0x5, 0x400, 0x8}, 0xff}, 0xa) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404010}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x58}}, 0x8001) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="a61364fc33948eba9a50340442897ec1c9a73466b49b708d27f8a986ad5970cc06408fa7452be3905c9800770f93640cf50d49e95b97f95618d583b222e5cc65fa9c2fbbfa57da921cfea5df4967492719f9124c8ffc19c08e14cb90c495ca82a74b371afdf79f360b5c11ea3a0a6ec553f2302586dfcf39902b488df8e147916b57c09c38b6308d7d6de83be847e95f6dc2f4a28331202ca62b5e8945"]]], 0x1}}, 0x40002) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0xc, 0x0, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) clock_gettime(0x0, &(0x7f0000000240)) [ 250.839149] ? down_read+0x8d/0x120 [ 250.847777] ? __down_interruptible+0x700/0x700 [ 250.847814] sync_inodes_one_sb+0x59/0x70 [ 250.847834] iterate_supers+0x149/0x290 [ 250.847852] ? __ia32_sys_tee+0x2b0/0x2b0 [ 250.855873] ksys_sync+0xec/0x1e0 [ 250.855894] ? sync_filesystem+0x330/0x330 [ 250.855917] ? __ia32_sys_read+0xb0/0xb0 [ 250.855935] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.855956] ? trace_hardirqs_off_caller+0x310/0x310 [ 250.864957] __ia32_sys_sync+0xe/0x20 [ 250.864979] do_syscall_64+0x1b9/0x820 [ 250.864996] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 250.865018] ? syscall_return_slowpath+0x5e0/0x5e0 [ 250.873211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.873238] ? trace_hardirqs_on_caller+0x310/0x310 [ 250.873261] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 250.873285] ? prepare_exit_to_usermode+0x291/0x3b0 [ 250.873318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.881602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.881620] RIP: 0033:0x457569 13:27:13 executing program 0: mlock2(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) remap_file_pages(&(0x7f0000006000/0x4000)=nil, 0x7fffdfff9000, 0x0, 0x0, 0x0) [ 250.881640] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.881652] RSP: 002b:00007f2ccd44cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 250.881670] RAX: ffffffffffffffda RBX: 00007f2ccd44cc90 RCX: 0000000000457569 [ 250.881683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.889771] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 250.889785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ccd44d6d4 13:27:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:13 executing program 4: socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:13 executing program 1: r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f00000000c0)="00e10050438863a7") fcntl$getflags(r1, 0x40b) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VT_RELDISP(r2, 0xb702) [ 250.889796] R13: 00000000004c3156 R14: 00000000004d8190 R15: 0000000000000004 [ 251.045363] mmap: syz-executor0 (8375) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 13:27:13 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:13 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1}]}, 0x218) [ 251.246080] kernel msg: ebtables bug: please report to author: bad policy 13:27:14 executing program 2 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:14 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x9, 0x4, &(0x7f0000519fa8)=ANY=[@ANYBLOB="18000000020000000000000000000000630114000000000095000000000000c3"], &(0x7f0000000000)="472edd3a4083b930504c00", 0x8000, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x22000910) 13:27:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000400)="0a5c2d0240316285717070") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1, 0x5}) 13:27:14 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1}]}, 0x218) 13:27:14 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 251.473354] kernel msg: ebtables bug: please report to author: bad policy 13:27:14 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) [ 251.516637] FAULT_INJECTION: forcing a failure. [ 251.516637] name failslab, interval 1, probability 0, space 0, times 0 [ 251.573241] CPU: 0 PID: 8419 Comm: syz-executor2 Not tainted 4.20.0-rc2+ #337 [ 251.580577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.589973] Call Trace: [ 251.592588] dump_stack+0x244/0x39d [ 251.596271] ? dump_stack_print_info.cold.1+0x20/0x20 [ 251.601505] ? zap_class+0x640/0x640 [ 251.605248] ? zap_class+0x640/0x640 [ 251.609007] should_fail.cold.4+0xa/0x17 [ 251.613101] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.618249] ? find_held_lock+0x36/0x1c0 13:27:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xa002, 0x1) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = geteuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18}, 0x18) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000140)=0x1) 13:27:14 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1}]}, 0x218) [ 251.622428] ? __unlock_page_memcg+0x53/0x100 [ 251.626955] ? lock_downgrade+0x900/0x900 [ 251.631134] ? check_preemption_disabled+0x48/0x280 [ 251.636197] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 251.641161] ? kasan_check_read+0x11/0x20 [ 251.645329] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 251.650634] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 251.655419] ? zap_class+0x640/0x640 [ 251.659179] ? trace_hardirqs_on+0xbd/0x310 [ 251.659278] ? __block_write_full_page+0x85e/0x14a0 [ 251.659300] ? trace_hardirqs_off_caller+0x310/0x310 13:27:14 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 251.668655] ? __lock_is_held+0xb5/0x140 [ 251.668704] __should_failslab+0x124/0x180 [ 251.682078] ? mempool_free+0x370/0x370 [ 251.686077] should_failslab+0x9/0x14 [ 251.689901] kmem_cache_alloc+0x47/0x730 [ 251.694008] ? mempool_free+0x370/0x370 [ 251.698014] mempool_alloc_slab+0x44/0x60 [ 251.702191] mempool_alloc+0x193/0x4a0 [ 251.706096] ? zap_class+0x640/0x640 [ 251.709853] ? mempool_destroy+0x30/0x30 [ 251.714018] ? page_mapping+0x5a2/0xa50 [ 251.714067] ? __lock_is_held+0xb5/0x140 [ 251.714128] ? mac80211_hwsim_new_radio+0xc80/0x3460 [ 251.727242] bio_alloc_bioset+0x3a8/0x700 [ 251.727869] kernel msg: ebtables bug: please report to author: bad policy [ 251.731425] ? bvec_alloc+0x2d0/0x2d0 [ 251.731506] ? perf_trace_sched_process_exec+0x860/0x860 [ 251.731527] ? kasan_check_read+0x11/0x20 [ 251.751835] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 251.751855] ? check_preemption_disabled+0x48/0x280 [ 251.751888] submit_bh_wbc+0x14b/0x790 [ 251.766075] __block_write_full_page+0x93b/0x14a0 [ 251.770939] ? I_BDEV+0x20/0x20 13:27:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x4, 0x20000) write$P9_RREADDIR(r0, &(0x7f0000000180)={0x87, 0x29, 0x1, {0xffffffffffffffff, [{{0xa2, 0x1, 0x7}, 0x40, 0x9, 0x7, './file0'}, {{0x8, 0x2, 0x3}, 0x0, 0x200, 0x7, './file0'}, {{0x80, 0x3, 0x7}, 0x3d8, 0x0, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x20, 0x9, 0x7, './file0'}]}}, 0x87) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000005c0)="0001000000ff000000010000c903000005000000010008003c1d865f05f2480add2000f3ff1f0000000100000000f5ff6d5fbe5c0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7465cb84f8d9866d01795f656e6372797074696f6e2c00656bca1733557541b7e6a65cd2d3a9c7da13df00326f571b16d9fb3e90a838bedfbbc93ea7ab56994f0a29502c566adf91cb729d2607d4af454e1c2ce980597cddc277b45b0cb6c4433af1d1cec923eddf74e4737dcfcba2b2765f7431a734ea665d14e9ab2cee"]) [ 251.774245] ? bh_uptodate_or_lock+0x160/0x160 [ 251.778866] ? submit_bh_wbc+0x790/0x790 [ 251.782959] ? trace_hardirqs_on+0xbd/0x310 [ 251.787302] ? tag_pages_for_writeback+0x5ff/0x7d0 [ 251.792284] ? zap_class+0x640/0x640 [ 251.796033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.801599] ? check_preemption_disabled+0x48/0x280 [ 251.806663] block_write_full_page+0x221/0x270 [ 251.811281] ? I_BDEV+0x20/0x20 [ 251.814595] blkdev_writepage+0x24/0x30 [ 251.818598] __writepage+0x69/0xe0 [ 251.822179] write_cache_pages+0xc91/0x1e20 [ 251.826532] ? __wb_update_bandwidth+0x680/0x680 [ 251.831347] ? clear_page_dirty_for_io+0x1900/0x1900 [ 251.836514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.836548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.847729] ? check_preemption_disabled+0x48/0x280 [ 251.852768] ? mark_held_locks+0x130/0x130 [ 251.852798] ? debug_smp_processor_id+0x1c/0x20 [ 251.852822] ? check_preemption_disabled+0x48/0x280 [ 251.852855] ? lock_is_held_type+0x210/0x210 [ 251.852910] ? perf_trace_lock_acquire+0x501/0x800 [ 251.852929] ? zap_class+0x640/0x640 [ 251.852962] ? perf_trace_lock+0x7a0/0x7a0 [ 251.880520] EXT4-fs (loop1): Unrecognized mount option "teË„øÙ†my_encryption" or missing value [ 251.884146] ? blk_start_plug+0xcc/0x370 [ 251.884167] ? find_held_lock+0x36/0x1c0 [ 251.884191] ? blk_lld_busy+0x70/0x70 [ 251.884228] ? wbc_attach_and_unlock_inode+0x5c0/0xa30 [ 251.884249] ? lock_downgrade+0x900/0x900 [ 251.884284] ? kasan_check_read+0x11/0x20 [ 251.918738] generic_writepages+0xda/0x150 [ 251.923008] ? write_cache_pages+0x1e20/0x1e20 [ 251.927628] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.933208] blkdev_writepages+0x1d/0x30 [ 251.937291] ? blkdev_readpages+0x40/0x40 [ 251.941464] do_writepages+0x9a/0x1a0 [ 251.945295] __filemap_fdatawrite_range+0x364/0x4a0 [ 251.950351] ? delete_from_page_cache_batch+0x1640/0x1640 [ 251.955938] ? do_raw_spin_trylock+0x270/0x270 [ 251.960534] ? up_read_non_owner+0x100/0x100 [ 251.964968] ? __down_interruptible+0x700/0x700 [ 251.969675] filemap_fdatawrite+0x26/0x30 [ 251.973850] fdatawrite_one_bdev+0x50/0x70 [ 251.978133] iterate_bdevs+0x11e/0x291 [ 251.982049] ? fdatawait_one_bdev+0x70/0x70 [ 251.986413] ksys_sync+0x11a/0x1e0 [ 251.989984] ? sync_filesystem+0x330/0x330 [ 251.994252] ? __ia32_sys_read+0xb0/0xb0 [ 251.998338] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.003715] ? trace_hardirqs_off_caller+0x310/0x310 [ 252.008824] __ia32_sys_sync+0xe/0x20 [ 252.012621] do_syscall_64+0x1b9/0x820 [ 252.016519] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 252.021899] ? syscall_return_slowpath+0x5e0/0x5e0 [ 252.026820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.031660] ? trace_hardirqs_on_caller+0x310/0x310 [ 252.036676] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 252.041703] ? prepare_exit_to_usermode+0x291/0x3b0 [ 252.046833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.051681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.056863] RIP: 0033:0x457569 [ 252.060055] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.078949] RSP: 002b:00007f2ccd44cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 252.086650] RAX: ffffffffffffffda RBX: 00007f2ccd44cc90 RCX: 0000000000457569 [ 252.093911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.101186] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 252.108461] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ccd44d6d4 [ 252.115730] R13: 00000000004c3156 R14: 00000000004d8190 R15: 0000000000000004 13:27:14 executing program 2 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:14 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:14 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) 13:27:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r3 = dup2(r0, r2) r4 = accept(r0, &(0x7f0000000180)=@generic, &(0x7f00000000c0)=0x80) sendto$unix(r4, &(0x7f0000000200)="caee5614e3d42612ba7046c60e85fc631cf9ae45318e30db6c522875cd38372c0f837e07288090adf76e5039006bc04ed2729d4394ae089b7d80a908d6b308fa0d1f3b699f7098ac693e8981011e31fd0e478e0098dea68a54a592cc91a85e1f74a9e0299ff0f74b43e4c98c4a1aa2dd2dec30a94d43aa4a671cc4acc011270a226cabf048e3941d797c", 0x8a, 0x0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$P9_RAUTH(r3, &(0x7f00000007c0)={0x14, 0x67, 0x1, {0x2, 0x4, 0x4}}, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)) [ 252.188837] EXT4-fs (loop1): Unrecognized mount option "teË„øÙ†my_encryption" or missing value [ 252.228563] kernel msg: ebtables bug: please report to author: bad policy 13:27:15 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xf703, 0x280000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0x0, 0xf0, 0x2, 0x21, &(0x7f0000000040)=""/33, 0xd0, &(0x7f00000000c0)=""/208, 0xfd, &(0x7f0000000240)=""/253}) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x1269, &(0x7f0000000200)) 13:27:15 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) 13:27:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8}, 0x10) 13:27:15 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:15 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) [ 252.462471] kernel msg: ebtables bug: please report to author: bad policy 13:27:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8}, 0x10) 13:27:15 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sendto$inet(r0, &(0x7f0000000100)="f5c75191ddef91381ddfd739bef0de54a3e833eb183e020a795c9c5792e1ca00e8c11f1669d985745ba7c6b2b02e3551eba7e3f6ec754b0f3d844514754cdf2823b4ddd81e4231404b6c21d534f5635644c87ec3171673305a64e12d01b2295308d00920c791ec6ddb93e77b5d2753b91440ee8d862a4317a5f933ada31f2e5575b9b32ee3f8839c466dd6c767", 0x8d, 0x4000, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0x2, 0x7f}}, 0x18}}, 0x0) 13:27:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)='\\keyringuser,vmnet0nodevmd5summime_typeself[(\'cpuset:\x00', 0x36, 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3, r1}) 13:27:15 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r3 = dup2(r0, r2) r4 = accept(r0, &(0x7f0000000180)=@generic, &(0x7f00000000c0)=0x80) sendto$unix(r4, &(0x7f0000000200)="caee5614e3d42612ba7046c60e85fc631cf9ae45318e30db6c522875cd38372c0f837e07288090adf76e5039006bc04ed2729d4394ae089b7d80a908d6b308fa0d1f3b699f7098ac693e8981011e31fd0e478e0098dea68a54a592cc91a85e1f74a9e0299ff0f74b43e4c98c4a1aa2dd2dec30a94d43aa4a671cc4acc011270a226cabf048e3941d797c", 0x8a, 0x0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$P9_RAUTH(r3, &(0x7f00000007c0)={0x14, 0x67, 0x1, {0x2, 0x4, 0x4}}, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)) 13:27:15 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r0) 13:27:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8}, 0x10) [ 252.731077] kernel msg: ebtables bug: please report to author: bad policy 13:27:15 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0xe2000, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xa, 0x9}, 0x21) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000240)=0x100000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xd, 0xfb, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x8, &(0x7f00000000c0)}, 0x299) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req={0x267, 0x4, 0x800, 0x5}, 0x10) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000002c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000040), &(0x7f0000000100)=""/108}, 0xd) 13:27:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 13:27:15 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) 13:27:15 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:15 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r0) 13:27:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r3 = dup2(r0, r2) r4 = accept(r0, &(0x7f0000000180)=@generic, &(0x7f00000000c0)=0x80) sendto$unix(r4, &(0x7f0000000200)="caee5614e3d42612ba7046c60e85fc631cf9ae45318e30db6c522875cd38372c0f837e07288090adf76e5039006bc04ed2729d4394ae089b7d80a908d6b308fa0d1f3b699f7098ac693e8981011e31fd0e478e0098dea68a54a592cc91a85e1f74a9e0299ff0f74b43e4c98c4a1aa2dd2dec30a94d43aa4a671cc4acc011270a226cabf048e3941d797c", 0x8a, 0x0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$P9_RAUTH(r3, &(0x7f00000007c0)={0x14, 0x67, 0x1, {0x2, 0x4, 0x4}}, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)) 13:27:15 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r0) 13:27:15 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0xe2000, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xa, 0x9}, 0x21) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000240)=0x100000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xd, 0xfb, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x8, &(0x7f00000000c0)}, 0x299) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req={0x267, 0x4, 0x800, 0x5}, 0x10) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000002c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000040), &(0x7f0000000100)=""/108}, 0xd) 13:27:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:15 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) 13:27:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() [ 252.976344] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 13:27:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r3 = dup2(r0, r2) r4 = accept(r0, &(0x7f0000000180)=@generic, &(0x7f00000000c0)=0x80) sendto$unix(r4, &(0x7f0000000200)="caee5614e3d42612ba7046c60e85fc631cf9ae45318e30db6c522875cd38372c0f837e07288090adf76e5039006bc04ed2729d4394ae089b7d80a908d6b308fa0d1f3b699f7098ac693e8981011e31fd0e478e0098dea68a54a592cc91a85e1f74a9e0299ff0f74b43e4c98c4a1aa2dd2dec30a94d43aa4a671cc4acc011270a226cabf048e3941d797c", 0x8a, 0x0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$P9_RAUTH(r3, &(0x7f00000007c0)={0x14, 0x67, 0x1, {0x2, 0x4, 0x4}}, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)) 13:27:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0x16, 0x8, 0xfa00, {r1}}, 0x10) 13:27:15 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r0) [ 253.121469] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 13:27:15 executing program 2: perf_event_open(&(0x7f0000000180)={0xffffffffffffffff, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ustat(0x7f, &(0x7f0000000040)) getgroups(0xa, &(0x7f0000000600)=[0xee00, 0xee00, 0xee00, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01]) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x7, &(0x7f0000000540)=[{&(0x7f0000000100)="350a71deca1778efc7", 0x9, 0xfffffffffffffd41}, {&(0x7f0000000200)="d5f271ffa5baa9c0b597892b7d2c71d1ce19d26a94b2b951debe9529f481aff32bcb40288370d44ae4bb02fb44785779b8d82f0566ad2a718f33d91b24e38e45f2db3e36d26a71bb", 0x48, 0x1}, {&(0x7f0000000140)="0a1c3950093459e390cb0a", 0xb, 0x8}, {&(0x7f0000000280)="be4e08ddea654f440a494db889bd45f4bce9d3e8a60867dd02a6d54e6fc8c0477d783c6f2792936b77623e36c675ded0fda665e4c5af7928ccf9b946eb71931b86e7466c9053259a016606c80c9b8c765ca1b7ecf648cbb57584d84eee09cbe820853a0c37e4627ff437809e85238eafbb0e81c0aa8658ce822560d84efd51ece82a9407e37e7deb40f2be51d5cda50eea4e1612b27745995a2ad5aa160cdbb6cffb1075b7447df13870b9ab92e91126e6b919ca3c4a47f912b57a33a9247baafdcffc3655108cfdec39a724", 0xcc, 0xdc}, {&(0x7f0000000380)="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", 0xfc, 0x7}, {&(0x7f0000000480)="2b32a1b63fe34137190526342c69296fc3adba8ccae1fbc2aeec32", 0x1b, 0x100000000}, {&(0x7f00000004c0)="82fa550f6670b49ab17bcdf465ef4c212a9480bf4b935ecd853bbbc550a7a1804d3fead1b45ff1f62f5a457bd4a947d41d215b7644aca6a1d962b968e4728c56577b365c90b69505cefac567717ce1ced38b41d871761d35ccfb41b1e3", 0x5d, 0x88b3}], 0x2020000, &(0x7f0000000640)={[{@part={'part', 0x3d, 0x80000001}}, {@gid={'gid', 0x3d, r0}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@creator={'creator', 0x3d, "041ff6f8"}}, {@type={'type', 0x3d, "92993b6b"}}], [{@obj_role={'obj_role', 0x3d, '!'}}]}) sync() 13:27:15 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) 13:27:15 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0xe2000, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xa, 0x9}, 0x21) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000240)=0x100000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xd, 0xfb, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x8, &(0x7f00000000c0)}, 0x299) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req={0x267, 0x4, 0x800, 0x5}, 0x10) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000002c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000040), &(0x7f0000000100)=""/108}, 0xd) [ 253.295894] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 13:27:16 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r0) 13:27:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x200000c8, 0xfa00, {r1}}, 0x10) 13:27:16 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xef84, 0x1000, 0x7, 0x5}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 13:27:16 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r0) 13:27:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0xbf7b101fd8de68d3, &(0x7f0000000180)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-monitor\x00', 0x171000, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="61a5126c3e094e8dde0317361ec7fdf1e0a6c66ab687aee385049869080c279d9d416c84621fd072848fff56029f98b93212d859917958670843ebd7b19c09fcb5ebe4c647c53ddba92f089c2dbbd6fd68b04c63a0c4c622124df05d5f74c6dfc12c00b661f8", 0x66, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000640)='cifs.spnego\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)="662386a9e7d59c374f14b91687942e1bd5961242adad26efc269f4c1970eef7a45bf3a609a59", 0x26, 0xfffffffffffffffc) keyctl$negate(0xd, r2, 0xfffffffffffffffc, r3) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r4 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000280)={0x6, [0x1, 0x40000000000006, 0x5, 0x5, 0x65, 0x3, 0x9, 0x6e, 0x0, 0x9, 0xfffffffffffffe00, 0xff, 0x4, 0x8000, 0x6, 0x100000001, 0x80, 0x6e, 0x1000, 0x7ff, 0x3, 0x80, 0x3f, 0x0, 0x3, 0x10000, 0x4, 0x8001, 0x80, 0x6, 0x1ff, 0x4af, 0x3, 0x9e8, 0x5, 0x200000000000002, 0x72, 0x0, 0xc00, 0x80000001, 0x4, 0x8, 0x81, 0x5, 0x1, 0xfffffffffffffffc, 0x7b, 0x9f], 0xf}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="7800000025816500b46ee1baa846e7109c803477bf6f52eeb6e5ce6d9d3c92b84ef58db757eba1f0fbb33e7bd12f1d402e45d283f8078fe22298e5c335b647c0b36ea8ec032293ca499f9f136dfc30876900000000000000000000000000", @ANYRES16=r5, @ANYBLOB="000228bd7000fcdbdf711eb8ae5b44934200490a000008000600060000001c000300080007004e230000080007004e200000040008000400000028000300080004000200000008000400070000001400060000000000000000000000000000000000080400000004c4210800050006000000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x24008095) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000480)={0x0, @reserved}) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000700)=0x7fffffff) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000007c0)={0x3, 0x6, 0x1017}) [ 253.586253] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 13:27:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r3 = dup2(r0, r2) r4 = accept(r0, &(0x7f0000000180)=@generic, &(0x7f00000000c0)=0x80) sendto$unix(r4, &(0x7f0000000200)="caee5614e3d42612ba7046c60e85fc631cf9ae45318e30db6c522875cd38372c0f837e07288090adf76e5039006bc04ed2729d4394ae089b7d80a908d6b308fa0d1f3b699f7098ac693e8981011e31fd0e478e0098dea68a54a592cc91a85e1f74a9e0299ff0f74b43e4c98c4a1aa2dd2dec30a94d43aa4a671cc4acc011270a226cabf048e3941d797c", 0x8a, 0x0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$P9_RAUTH(r3, &(0x7f00000007c0)={0x14, 0x67, 0x1, {0x2, 0x4, 0x4}}, 0x14) 13:27:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x200000d0, 0xfa00, {r1}}, 0x10) 13:27:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x459, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) socketpair$inet6(0xa, 0x4, 0x4, &(0x7f0000000280)) r2 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) write(r2, &(0x7f00000002c0)="a804e294", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, &(0x7f0000000080)) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={r1, 0x2}) sync() write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff2900000008003950322d39bbf375"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r3, 0x6, 0xffffffff, 0x9}, 0x10) 13:27:16 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x3f00000000000000}}, 0x10) 13:27:16 executing program 1: ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000010c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, "e2dc52d39b7b1e67fbc79ccb551dee18eb881caab472f1105184a884c81a97a42da90011a89e59dd8aa3081e79945030778c558ab6827b2be3e96f34e3566d697166def9b5ce23c749e6519e5ab637632d72938ff32bd32ddaa558b7cdf0df9cd6bc7dbf460efb089f8bd2e31e13e23d234a29bb5aa875f06719c1f26b0324c6"}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x2, 0xfffffffffffffffe, 0x3}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={r0, 0x8}, &(0x7f0000000340)=0x8) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7f, 0x4000) r3 = accept$unix(r2, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x6e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000100)}}], 0x3b2, 0x0) bind$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) dup3(r1, r4, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001180)=0x1, 0x4) 13:27:16 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) [ 253.802609] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 13:27:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r2) r3 = accept(r0, &(0x7f0000000180)=@generic, &(0x7f00000000c0)=0x80) sendto$unix(r3, &(0x7f0000000200)="caee5614e3d42612ba7046c60e85fc631cf9ae45318e30db6c522875cd38372c0f837e07288090adf76e5039006bc04ed2729d4394ae089b7d80a908d6b308fa0d1f3b699f7098ac693e8981011e31fd0e478e0098dea68a54a592cc91a85e1f74a9e0299ff0f74b43e4c98c4a1aa2dd2dec30a94d43aa4a671cc4acc011270a226cabf048e3941d797c", 0x8a, 0x0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 13:27:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000001200)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001240)={r0}) sync() 13:27:16 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:16 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x3f000000}}, 0x10) 13:27:16 executing program 1: ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000010c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, "e2dc52d39b7b1e67fbc79ccb551dee18eb881caab472f1105184a884c81a97a42da90011a89e59dd8aa3081e79945030778c558ab6827b2be3e96f34e3566d697166def9b5ce23c749e6519e5ab637632d72938ff32bd32ddaa558b7cdf0df9cd6bc7dbf460efb089f8bd2e31e13e23d234a29bb5aa875f06719c1f26b0324c6"}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x2, 0xfffffffffffffffe, 0x3}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={r0, 0x8}, &(0x7f0000000340)=0x8) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7f, 0x4000) r3 = accept$unix(r2, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x6e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000100)}}], 0x3b2, 0x0) bind$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) dup3(r1, r4, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001180)=0x1, 0x4) [ 254.012190] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 254.125232] FAULT_INJECTION: forcing a failure. [ 254.125232] name failslab, interval 1, probability 0, space 0, times 0 [ 254.150749] CPU: 0 PID: 8653 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 254.158068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.167427] Call Trace: [ 254.170032] dump_stack+0x244/0x39d [ 254.173680] ? dump_stack_print_info.cold.1+0x20/0x20 [ 254.178913] should_fail.cold.4+0xa/0x17 [ 254.182995] ? try_to_grab_pending+0x180/0x9c0 [ 254.187594] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 254.192707] ? insert_work+0x4c0/0x4c0 [ 254.196608] ? zap_class+0x640/0x640 [ 254.200342] ? mark_held_locks+0xc7/0x130 [ 254.204515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.210070] ? check_preemption_disabled+0x48/0x280 [ 254.215099] ? debug_smp_processor_id+0x1c/0x20 [ 254.219787] ? perf_trace_lock+0x14d/0x7a0 13:27:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r2) accept(r0, &(0x7f0000000180)=@generic, &(0x7f00000000c0)=0x80) 13:27:16 executing program 1: r0 = socket$inet(0x10, 0x0, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 13:27:16 executing program 2: syz_emit_ethernet(0x244, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0x18, 0x8, 0x3, 0x0, [{}, {}, {[@empty=0x4888]}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x7, 0x6, 0x10000) [ 254.224036] ? lock_release+0xa00/0xa00 [ 254.228024] ? perf_trace_sched_process_exec+0x860/0x860 [ 254.233493] ? lock_is_held_type+0x210/0x210 [ 254.237937] ? __mutex_lock+0x85e/0x16f0 [ 254.242004] ? destroy_delayed_work_on_stack+0x30/0x30 [ 254.247414] ? hci_unregister_dev+0x7cc/0x990 [ 254.247432] ? cancel_delayed_work+0x2b8/0x3e0 [ 254.256624] __should_failslab+0x124/0x180 [ 254.256646] should_failslab+0x9/0x14 [ 254.256661] kmem_cache_alloc_node+0x56/0x730 [ 254.256738] __alloc_skb+0x119/0x770 [ 254.272896] ? netdev_alloc_frag+0x1f0/0x1f0 [ 254.277334] ? kasan_check_write+0x14/0x20 [ 254.281583] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 254.286524] ? wait_for_completion+0x8a0/0x8a0 [ 254.291181] hci_sock_dev_event+0x1ee/0x740 [ 254.295505] ? mgmt_index_removed+0x16d/0x410 [ 254.299999] ? hci_send_monitor_ctrl_event+0x520/0x520 [ 254.305276] ? do_raw_write_trylock+0x270/0x270 [ 254.309963] hci_unregister_dev+0x335/0x990 [ 254.314285] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 254.319096] ? ima_file_check+0x130/0x130 [ 254.323289] ? vhci_close_dev+0x50/0x50 [ 254.327254] vhci_release+0x76/0xf0 [ 254.330883] __fput+0x385/0xa30 [ 254.334162] ? get_max_files+0x20/0x20 [ 254.338046] ? trace_hardirqs_on+0xbd/0x310 [ 254.342361] ? kasan_check_read+0x11/0x20 [ 254.346503] ? task_work_run+0x1af/0x2a0 [ 254.350558] ? trace_hardirqs_off_caller+0x310/0x310 [ 254.355662] ? filp_close+0x1cd/0x250 [ 254.359465] ____fput+0x15/0x20 [ 254.362738] task_work_run+0x1e8/0x2a0 [ 254.366623] ? task_work_cancel+0x240/0x240 [ 254.370973] ? copy_fd_bitmaps+0x210/0x210 [ 254.375203] ? do_syscall_64+0x9a/0x820 [ 254.379177] exit_to_usermode_loop+0x318/0x380 [ 254.383772] ? __bpf_trace_sys_exit+0x30/0x30 [ 254.388271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.393809] do_syscall_64+0x6be/0x820 [ 254.397693] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 254.403053] ? syscall_return_slowpath+0x5e0/0x5e0 [ 254.407976] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.412816] ? trace_hardirqs_on_caller+0x310/0x310 [ 254.417827] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 254.422841] ? prepare_exit_to_usermode+0x291/0x3b0 [ 254.427855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.432703] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.437885] RIP: 0033:0x457569 [ 254.441078] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.459971] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 254.467671] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 13:27:17 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1c8) [ 254.474932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 254.482197] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 254.489455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 254.496717] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 13:27:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x3f00}}, 0x10) 13:27:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="a0b4a5cebc0417c9dc09dbe30edf8ed083b7f21a306e4eada0597e6a8798ef69ef174ed12926a119033ef8cc67ade45b840139f36062a95815c305b42e4c5193e10d7bf23ebd083c6db45cf9eb2538ed3e8b01ab27d910976d5e4a7d80b9a4d141e9791d0987050b", 0x68}, &(0x7f0000000100)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x4, &(0x7f0000000140)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0x11, @rand_addr=0x9, 0x4e20, 0x3, 'rr\x00', 0x11, 0x81, 0x2a}, {@local, 0x4e24, 0x4, 0x40, 0x200, 0x800}}, 0x44) setsockopt$inet6_buf(r0, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) 13:27:17 executing program 5 (fault-call:4 fault-nth:1): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:17 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1c8) 13:27:17 executing program 2: readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/179, 0xb3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r2) 13:27:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x200000d0) [ 254.823407] FAULT_INJECTION: forcing a failure. [ 254.823407] name failslab, interval 1, probability 0, space 0, times 0 [ 254.846365] CPU: 0 PID: 8694 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 254.853685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.863045] Call Trace: [ 254.865691] dump_stack+0x244/0x39d 13:27:17 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1c8) 13:27:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() set_robust_list(&(0x7f00000000c0)={&(0x7f0000000040), 0x8, &(0x7f0000000080)}, 0x18) [ 254.869343] ? dump_stack_print_info.cold.1+0x20/0x20 [ 254.874567] should_fail.cold.4+0xa/0x17 [ 254.878651] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 254.883763] ? __save_stack_trace+0x8d/0xf0 [ 254.888102] ? save_stack+0xa9/0xd0 [ 254.891744] ? save_stack+0x43/0xd0 [ 254.895370] ? kasan_kmalloc+0xc7/0xe0 [ 254.899261] ? kasan_slab_alloc+0x12/0x20 [ 254.903410] ? kmem_cache_alloc_node+0x144/0x730 [ 254.908184] ? __alloc_skb+0x119/0x770 [ 254.912082] ? hci_sock_dev_event+0x1ee/0x740 [ 254.916583] ? hci_unregister_dev+0x335/0x990 [ 254.921086] ? vhci_release+0x76/0xf0 [ 254.924897] ? __fput+0x385/0xa30 [ 254.924912] ? ____fput+0x15/0x20 [ 254.924928] ? task_work_run+0x1e8/0x2a0 [ 254.924948] ? exit_to_usermode_loop+0x318/0x380 [ 254.931832] ? do_syscall_64+0x6be/0x820 [ 254.931848] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.931880] ? debug_smp_processor_id+0x1c/0x20 [ 254.931896] ? perf_trace_lock+0x14d/0x7a0 [ 254.931912] ? lock_release+0xa00/0xa00 [ 254.931929] ? perf_trace_sched_process_exec+0x860/0x860 [ 254.968423] ? lock_is_held_type+0x210/0x210 [ 254.973357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.978913] ? check_preemption_disabled+0x48/0x280 [ 254.983944] __should_failslab+0x124/0x180 [ 254.988182] should_failslab+0x9/0x14 [ 254.991983] kmem_cache_alloc_node_trace+0x5a/0x740 [ 254.997025] __kmalloc_node_track_caller+0x3c/0x70 [ 255.001953] __kmalloc_reserve.isra.40+0x41/0xe0 [ 255.006725] __alloc_skb+0x155/0x770 [ 255.010442] ? netdev_alloc_frag+0x1f0/0x1f0 [ 255.014865] ? kasan_check_write+0x14/0x20 [ 255.019096] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 255.024026] ? wait_for_completion+0x8a0/0x8a0 [ 255.028615] hci_sock_dev_event+0x1ee/0x740 [ 255.032934] ? mgmt_index_removed+0x16d/0x410 [ 255.037422] ? hci_send_monitor_ctrl_event+0x520/0x520 [ 255.042695] ? do_raw_write_trylock+0x270/0x270 [ 255.047369] hci_unregister_dev+0x335/0x990 [ 255.051688] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 255.056439] ? ima_file_check+0x130/0x130 [ 255.060607] ? vhci_close_dev+0x50/0x50 [ 255.064579] vhci_release+0x76/0xf0 [ 255.068202] __fput+0x385/0xa30 [ 255.071485] ? get_max_files+0x20/0x20 [ 255.075365] ? trace_hardirqs_on+0xbd/0x310 [ 255.079680] ? kasan_check_read+0x11/0x20 [ 255.083822] ? task_work_run+0x1af/0x2a0 [ 255.087884] ? trace_hardirqs_off_caller+0x310/0x310 [ 255.092984] ? filp_close+0x1cd/0x250 [ 255.096794] ____fput+0x15/0x20 [ 255.100068] task_work_run+0x1e8/0x2a0 [ 255.103955] ? task_work_cancel+0x240/0x240 [ 255.108285] ? copy_fd_bitmaps+0x210/0x210 [ 255.112511] ? do_syscall_64+0x9a/0x820 [ 255.116746] exit_to_usermode_loop+0x318/0x380 [ 255.121324] ? __bpf_trace_sys_exit+0x30/0x30 [ 255.125818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.131354] do_syscall_64+0x6be/0x820 [ 255.135234] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 255.140614] ? syscall_return_slowpath+0x5e0/0x5e0 [ 255.145538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.150375] ? trace_hardirqs_on_caller+0x310/0x310 [ 255.155383] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 255.160396] ? prepare_exit_to_usermode+0x291/0x3b0 [ 255.165415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.170259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.175438] RIP: 0033:0x457569 [ 255.178628] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.197529] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 255.205241] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 [ 255.212513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 255.219775] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 255.227037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 255.234297] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 13:27:18 executing program 5 (fault-call:4 fault-nth:2): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x7) 13:27:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) dup2(r0, r2) 13:27:18 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r2) [ 255.418345] kernel msg: ebtables bug: please report to author: bad policy 13:27:18 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0xc040) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) r2 = memfd_create(&(0x7f0000000280)='/dev/audio\x00', 0x1) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x6, r1, 0xb, r2}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000300)=""/223) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x24000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000080)={0x10001, 0x0, 0x0, 0x1}) ioctl$sock_netdev_private(r3, 0x89f8, &(0x7f0000000400)="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") [ 255.455447] FAULT_INJECTION: forcing a failure. [ 255.455447] name failslab, interval 1, probability 0, space 0, times 0 [ 255.501697] CPU: 1 PID: 8730 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 255.509020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.518376] Call Trace: [ 255.518406] dump_stack+0x244/0x39d [ 255.518432] ? dump_stack_print_info.cold.1+0x20/0x20 [ 255.518458] ? debug_smp_processor_id+0x1c/0x20 [ 255.518472] ? perf_trace_lock+0x14d/0x7a0 [ 255.518494] should_fail.cold.4+0xa/0x17 [ 255.534543] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 255.534562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.534578] ? wake_up_klogd+0x11a/0x180 [ 255.534599] ? preempt_schedule_common+0x1f/0xe0 [ 255.534615] ? console_device+0xc0/0xc0 [ 255.534635] ? ___preempt_schedule+0x16/0x18 [ 255.534655] ? vprintk_emit+0x293/0x990 [ 255.534679] ? find_held_lock+0x36/0x1c0 [ 255.579309] ? perf_trace_sched_process_exec+0x860/0x860 [ 255.579331] ? vprintk_default+0x28/0x30 [ 255.579354] __should_failslab+0x124/0x180 [ 255.579374] should_failslab+0x9/0x14 [ 255.579390] kmem_cache_alloc_trace+0x2d7/0x750 [ 255.579419] kobject_uevent_env+0x2f3/0x101e [ 255.579496] ? sysfs_remove_group+0xf6/0x1b0 [ 255.579521] kobject_uevent+0x1f/0x24 [ 255.593324] device_del+0x6c9/0xb70 [ 255.601698] ? __device_links_no_driver+0x320/0x320 [ 255.601754] rfkill_unregister+0x137/0x480 [ 255.601773] ? hci_sock_dev_event+0x10b/0x740 [ 255.631648] ? mgmt_index_removed+0x16d/0x410 [ 255.636227] ? rfkill_register+0xe00/0xe00 [ 255.640457] ? do_raw_write_trylock+0x270/0x270 [ 255.645137] hci_unregister_dev+0x360/0x990 [ 255.649454] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 255.654210] ? ima_file_check+0x130/0x130 [ 255.658366] ? vhci_close_dev+0x50/0x50 [ 255.662338] vhci_release+0x76/0xf0 [ 255.665977] __fput+0x385/0xa30 [ 255.669257] ? get_max_files+0x20/0x20 [ 255.673138] ? trace_hardirqs_on+0xbd/0x310 [ 255.677500] ? kasan_check_read+0x11/0x20 [ 255.681642] ? task_work_run+0x1af/0x2a0 [ 255.685698] ? trace_hardirqs_off_caller+0x310/0x310 [ 255.690795] ? filp_close+0x1cd/0x250 [ 255.694610] ____fput+0x15/0x20 [ 255.697883] task_work_run+0x1e8/0x2a0 [ 255.701770] ? task_work_cancel+0x240/0x240 [ 255.706093] ? copy_fd_bitmaps+0x210/0x210 [ 255.710318] ? do_syscall_64+0x9a/0x820 [ 255.714295] exit_to_usermode_loop+0x318/0x380 [ 255.718871] ? __bpf_trace_sys_exit+0x30/0x30 [ 255.723370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.728907] do_syscall_64+0x6be/0x820 [ 255.732787] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 255.738151] ? syscall_return_slowpath+0x5e0/0x5e0 [ 255.743075] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.747912] ? trace_hardirqs_on_caller+0x310/0x310 [ 255.752925] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 255.757936] ? prepare_exit_to_usermode+0x291/0x3b0 [ 255.762952] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.767806] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.772989] RIP: 0033:0x457569 [ 255.776180] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.795075] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 255.802775] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 13:27:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000340)=0xe8) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000380)=r4) ioctl$KDSETLED(r3, 0x4b32, 0x81) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) dup2(r0, r2) 13:27:18 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 255.810043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 255.817306] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 255.824566] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 255.831944] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 13:27:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r2) 13:27:18 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x900, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x32fe, 0x8001, 0x8, 0x6, 0x401, 0x8, 0x4, 0x5, 0xe94, 0x1, 0x3, 0x8, 0x9, 0x9, 0x8000]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x7fffffff, 0x10, 0x1}, &(0x7f00000002c0)=0x18) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0xc5, 0x5, 0x1, "d569f68927606923aca5f403642ab97b", "8f6634a8765038738e0b91573372d33d45cec239746ed72272d88236f1aa115cad61303300a4f8729aa681cfea45cd083c2857a25001ee821467b9f1a31f451d044d2b5a5982c1d2587d5767b0bd4cef154cfdf801a963a6da01520819f0da3b00f60bbd9ed0f8f70df15cf4d2d80dd0b37af690a0a8cdaf005e859b588f8b1c952eca15ebdb2b0a74eb4eaefb3095de30b40361b21d2fd9838013b9ffd458bbf75428254cd0c7cb8f6b3e9d4ad21105"}, 0xc5, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0xfffffffffffffe51) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) 13:27:18 executing program 5 (fault-call:4 fault-nth:3): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 256.000053] kernel msg: ebtables bug: please report to author: bad policy 13:27:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=""/247, &(0x7f0000000680)=""/240, 0x5000}) dup2(r0, r2) [ 256.130343] FAULT_INJECTION: forcing a failure. [ 256.130343] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 256.142666] CPU: 1 PID: 8775 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 256.149950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.159397] Call Trace: [ 256.162009] dump_stack+0x244/0x39d [ 256.165665] ? dump_stack_print_info.cold.1+0x20/0x20 [ 256.170869] ? up+0xea/0x1c0 [ 256.173914] should_fail.cold.4+0xa/0x17 [ 256.177997] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 256.183113] ? console_unlock+0x837/0x1190 [ 256.187360] ? lock_downgrade+0x900/0x900 [ 256.191546] ? mark_held_locks+0x130/0x130 [ 256.195800] ? vprintk_emit+0x391/0x990 [ 256.199795] ? trace_hardirqs_off_caller+0x310/0x310 [ 256.204924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.210477] ? check_preemption_disabled+0x48/0x280 [ 256.215515] ? debug_smp_processor_id+0x1c/0x20 [ 256.220199] ? perf_trace_lock+0x14d/0x7a0 [ 256.224458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.230006] ? should_fail+0x22d/0xd01 [ 256.233905] ? lock_is_held_type+0x210/0x210 [ 256.238329] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 256.243435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.248973] ? wake_up_klogd+0x11a/0x180 [ 256.253031] __alloc_pages_nodemask+0x34b/0xde0 [ 256.257688] ? __down_trylock_console_sem+0x151/0x1f0 [ 256.262872] ? __alloc_pages_slowpath+0x2e10/0x2e10 [ 256.267875] ? vprintk_emit+0x293/0x990 [ 256.271854] ? find_held_lock+0x36/0x1c0 [ 256.275993] ? device_wakeup_disarm_wake_irqs+0x158/0x220 [ 256.281537] ? trace_hardirqs_off+0xb8/0x310 [ 256.285945] cache_grow_begin+0xa5/0x8c0 [ 256.289999] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 256.295533] ? check_preemption_disabled+0x48/0x280 [ 256.300546] kmem_cache_alloc_trace+0x684/0x750 [ 256.305216] kobject_uevent_env+0x2f3/0x101e [ 256.309614] ? sysfs_remove_group+0xf6/0x1b0 [ 256.314020] kobject_uevent+0x1f/0x24 [ 256.317818] device_del+0x6c9/0xb70 [ 256.321457] ? __device_links_no_driver+0x320/0x320 [ 256.326468] rfkill_unregister+0x137/0x480 [ 256.330690] ? hci_sock_dev_event+0x10b/0x740 [ 256.335176] ? mgmt_index_removed+0x16d/0x410 [ 256.339659] ? rfkill_register+0xe00/0xe00 [ 256.343896] ? do_raw_write_trylock+0x270/0x270 [ 256.348561] hci_unregister_dev+0x360/0x990 [ 256.352883] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 256.357641] ? ima_file_check+0x130/0x130 [ 256.361790] ? vhci_close_dev+0x50/0x50 [ 256.365765] vhci_release+0x76/0xf0 [ 256.369386] __fput+0x385/0xa30 [ 256.372661] ? get_max_files+0x20/0x20 [ 256.376540] ? trace_hardirqs_on+0xbd/0x310 [ 256.380851] ? kasan_check_read+0x11/0x20 [ 256.384990] ? task_work_run+0x1af/0x2a0 [ 256.389039] ? trace_hardirqs_off_caller+0x310/0x310 [ 256.394136] ? filp_close+0x1cd/0x250 [ 256.397929] ____fput+0x15/0x20 [ 256.401197] task_work_run+0x1e8/0x2a0 [ 256.405075] ? task_work_cancel+0x240/0x240 [ 256.409398] ? copy_fd_bitmaps+0x210/0x210 [ 256.413622] ? do_syscall_64+0x9a/0x820 [ 256.417590] exit_to_usermode_loop+0x318/0x380 [ 256.422166] ? __bpf_trace_sys_exit+0x30/0x30 [ 256.426656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.432185] do_syscall_64+0x6be/0x820 [ 256.436060] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 256.441412] ? syscall_return_slowpath+0x5e0/0x5e0 [ 256.446328] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.451161] ? trace_hardirqs_on_caller+0x310/0x310 [ 256.456171] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 256.461192] ? prepare_exit_to_usermode+0x291/0x3b0 [ 256.466200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.471041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.476219] RIP: 0033:0x457569 [ 256.479406] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.498383] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 256.506081] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 [ 256.513336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 256.520596] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 13:27:18 executing program 1: syz_emit_ethernet(0x244, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0x18, 0x8, 0x3, 0x0, [{}, {}, {[@empty=0x4888]}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x7, 0x6, 0x10000) 13:27:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffffffffffd51) 13:27:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r2) 13:27:19 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 256.527852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 256.535107] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 13:27:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget(0x2, 0x1, 0x400) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000040)=""/118) sync() r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400200, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x7, 0x0, 0x50, &(0x7f0000ffb000/0x2000)=nil, 0x3}) 13:27:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r1}}, 0x1ca) eventfd(0x48) 13:27:19 executing program 5 (fault-call:4 fault-nth:4): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) socket(0xb, 0xa, 0x7) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r2) [ 256.734009] kernel msg: ebtables bug: please report to author: bad policy 13:27:19 executing program 1: syz_emit_ethernet(0x244, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0x18, 0x8, 0x3, 0x0, [{}, {}, {[@empty=0x4888]}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x7, 0x6, 0x10000) [ 256.776878] FAULT_INJECTION: forcing a failure. [ 256.776878] name failslab, interval 1, probability 0, space 0, times 0 13:27:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x4, 0x7c0e11b0, 0x64295893, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0x400, @local}}}, &(0x7f0000000380)=0x84) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000140)={0x0, 0x9, 0x203d}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000080)={0xffffffffffffffff, 0x6}) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000000c0)=0x100000000, 0x4) sync() 13:27:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x10000, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={[], [], @remote}, 0x7}, @in={0x2, 0x4e21, @rand_addr=0x20}], 0x2c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = getpgid(0x0) write$P9_RGETLOCK(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2900000037010002fcfeffffffffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="0b002ff4a276af611200007200"], 0x29) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) [ 256.820804] CPU: 0 PID: 8807 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 256.828123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.837485] Call Trace: [ 256.840089] dump_stack+0x244/0x39d [ 256.843750] ? dump_stack_print_info.cold.1+0x20/0x20 [ 256.848965] ? debug_smp_processor_id+0x1c/0x20 [ 256.853657] ? perf_trace_lock+0x14d/0x7a0 [ 256.857913] should_fail.cold.4+0xa/0x17 [ 256.862020] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 256.867149] ? lock_release+0xa00/0xa00 [ 256.871127] ? perf_trace_sched_process_exec+0x860/0x860 [ 256.876578] ? zap_class+0x640/0x640 [ 256.880301] ? find_held_lock+0x36/0x1c0 [ 256.884368] ? __lock_is_held+0xb5/0x140 [ 256.888438] ? put_dec+0x3b/0xf0 [ 256.891798] ? perf_trace_sched_process_exec+0x860/0x860 [ 256.897239] ? zap_class+0x640/0x640 [ 256.900959] __should_failslab+0x124/0x180 [ 256.905196] should_failslab+0x9/0x14 [ 256.908996] kmem_cache_alloc_node+0x26e/0x730 [ 256.913582] ? find_held_lock+0x36/0x1c0 [ 256.917649] __alloc_skb+0x119/0x770 [ 256.921365] ? netdev_alloc_frag+0x1f0/0x1f0 [ 256.925769] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 256.930716] ? kasan_check_read+0x11/0x20 [ 256.934855] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 256.940135] ? rcu_softirq_qs+0x20/0x20 [ 256.944190] ? netlink_has_listeners+0x2cb/0x4a0 [ 256.948949] ? netlink_tap_init_net+0x3d0/0x3d0 [ 256.953619] alloc_uevent_skb+0x84/0x1da [ 256.957681] kobject_uevent_env+0xa52/0x101e [ 256.962088] ? sysfs_remove_group+0xf6/0x1b0 [ 256.966501] kobject_uevent+0x1f/0x24 [ 256.970752] device_del+0x6c9/0xb70 [ 256.974383] ? __device_links_no_driver+0x320/0x320 [ 256.979405] rfkill_unregister+0x137/0x480 [ 256.983629] ? hci_sock_dev_event+0x10b/0x740 [ 256.988130] ? mgmt_index_removed+0x16d/0x410 [ 256.992621] ? rfkill_register+0xe00/0xe00 [ 256.996855] ? do_raw_write_trylock+0x270/0x270 [ 257.001553] hci_unregister_dev+0x360/0x990 [ 257.005875] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 257.010627] ? ima_file_check+0x130/0x130 [ 257.014780] ? vhci_close_dev+0x50/0x50 [ 257.018748] vhci_release+0x76/0xf0 [ 257.022376] __fput+0x385/0xa30 [ 257.025664] ? get_max_files+0x20/0x20 [ 257.029563] ? trace_hardirqs_on+0xbd/0x310 [ 257.033880] ? kasan_check_read+0x11/0x20 [ 257.038020] ? task_work_run+0x1af/0x2a0 [ 257.042078] ? trace_hardirqs_off_caller+0x310/0x310 [ 257.047173] ? filp_close+0x1cd/0x250 [ 257.050977] ____fput+0x15/0x20 [ 257.054263] task_work_run+0x1e8/0x2a0 [ 257.058159] ? task_work_cancel+0x240/0x240 [ 257.062477] ? copy_fd_bitmaps+0x210/0x210 [ 257.066710] ? do_syscall_64+0x9a/0x820 [ 257.070685] exit_to_usermode_loop+0x318/0x380 [ 257.075274] ? __bpf_trace_sys_exit+0x30/0x30 [ 257.079766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.085313] do_syscall_64+0x6be/0x820 [ 257.089203] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 257.094562] ? syscall_return_slowpath+0x5e0/0x5e0 [ 257.099486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.104328] ? trace_hardirqs_on_caller+0x310/0x310 [ 257.109340] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 257.114351] ? prepare_exit_to_usermode+0x291/0x3b0 [ 257.119369] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.124213] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.129395] RIP: 0033:0x457569 [ 257.132583] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.151475] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 257.159173] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 13:27:19 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 257.166433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 257.173700] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 257.180979] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 257.188239] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 [ 257.213085] FAULT_INJECTION: forcing a failure. [ 257.213085] name failslab, interval 1, probability 0, space 0, times 0 [ 257.225672] CPU: 1 PID: 8819 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #337 [ 257.232987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.242348] Call Trace: [ 257.242379] dump_stack+0x244/0x39d [ 257.242406] ? dump_stack_print_info.cold.1+0x20/0x20 [ 257.242432] ? debug_smp_processor_id+0x1c/0x20 [ 257.242455] ? perf_trace_lock+0x14d/0x7a0 [ 257.242485] should_fail.cold.4+0xa/0x17 [ 257.248709] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.248731] ? trace_hardirqs_on_caller+0x310/0x310 [ 257.248777] ? native_iret+0x7/0x7 [ 257.258620] ? find_held_lock+0x36/0x1c0 [ 257.258681] ? perf_trace_sched_process_exec+0x860/0x860 [ 257.258717] __should_failslab+0x124/0x180 [ 257.294364] should_failslab+0x9/0x14 [ 257.298183] kmem_cache_alloc_node_trace+0x270/0x740 [ 257.303308] ? __might_fault+0x12b/0x1e0 [ 257.307457] __get_vm_area_node+0x130/0x3a0 [ 257.311814] __vmalloc_node_range+0xc4/0x750 [ 257.316295] ? do_replace+0x23b/0x4c0 [ 257.316323] ? do_replace+0x23b/0x4c0 [ 257.323913] vmalloc+0x6f/0x80 [ 257.327123] ? do_replace+0x23b/0x4c0 [ 257.330943] do_replace+0x23b/0x4c0 [ 257.334626] ? apparmor_cred_transfer+0x590/0x590 [ 257.339483] ? do_replace_finish+0x2940/0x2940 [ 257.339529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.339547] ? ns_capable_common+0x13f/0x170 [ 257.339571] do_ebt_set_ctl+0xe7/0x110 [ 257.357978] nf_setsockopt+0x7d/0xd0 [ 257.358049] ip_setsockopt+0xd8/0xf0 [ 257.358082] udp_setsockopt+0x62/0xa0 [ 257.365529] sock_common_setsockopt+0x9a/0xe0 [ 257.365554] __sys_setsockopt+0x1ba/0x3c0 [ 257.365575] ? kernel_accept+0x310/0x310 [ 257.373977] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 257.373999] ? trace_hardirqs_on+0xbd/0x310 [ 257.374018] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.374038] ? trace_hardirqs_off_caller+0x310/0x310 [ 257.374066] __x64_sys_setsockopt+0xbe/0x150 [ 257.374093] do_syscall_64+0x1b9/0x820 [ 257.382277] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 257.382299] ? syscall_return_slowpath+0x5e0/0x5e0 [ 257.382316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.382336] ? trace_hardirqs_on_caller+0x310/0x310 [ 257.382356] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 257.382375] ? prepare_exit_to_usermode+0x291/0x3b0 [ 257.382401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.391292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.391306] RIP: 0033:0x457569 [ 257.391324] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.391334] RSP: 002b:00007fb4a2f5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 257.391351] RAX: ffffffffffffffda RBX: 00007fb4a2f5ac90 RCX: 0000000000457569 [ 257.391361] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 257.391371] RBP: 000000000072bf00 R08: 0000000000000218 R09: 0000000000000000 [ 257.391380] R10: 0000000020000000 R11: 0000000000000246 R12: 00007fb4a2f5b6d4 [ 257.391393] R13: 00000000004c3d13 R14: 00000000004d6138 R15: 0000000000000004 13:27:20 executing program 5 (fault-call:4 fault-nth:5): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 257.591264] syz-executor4: vmalloc: allocation failure: 256 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 257.618120] syz-executor4 cpuset=syz4 mems_allowed=0 [ 257.624310] CPU: 1 PID: 8819 Comm: syz-executor4 Not tainted 4.20.0-rc2+ #337 [ 257.631599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.631606] Call Trace: [ 257.631628] dump_stack+0x244/0x39d [ 257.631657] ? dump_stack_print_info.cold.1+0x20/0x20 [ 257.631681] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 257.631706] warn_alloc.cold.116+0xb7/0x1bd [ 257.662296] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 257.662314] ? __get_vm_area_node+0x130/0x3a0 [ 257.662332] ? rcu_read_lock_sched_held+0x14f/0x180 [ 257.662352] ? __might_fault+0x12b/0x1e0 [ 257.671673] ? __get_vm_area_node+0x2e5/0x3a0 [ 257.671701] __vmalloc_node_range+0x472/0x750 13:27:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r2) 13:27:20 executing program 1: syz_emit_ethernet(0x244, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0x18, 0x8, 0x3, 0x0, [{}, {}, {[@empty=0x4888]}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioperm(0x7, 0x6, 0x10000) 13:27:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) 13:27:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = dup3(r0, r0, 0x80000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sync() [ 257.689752] ? do_replace+0x23b/0x4c0 [ 257.693575] vmalloc+0x6f/0x80 [ 257.696876] ? do_replace+0x23b/0x4c0 [ 257.700687] do_replace+0x23b/0x4c0 [ 257.704321] ? apparmor_cred_transfer+0x590/0x590 [ 257.709184] ? do_replace_finish+0x2940/0x2940 [ 257.713796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.719348] ? ns_capable_common+0x13f/0x170 [ 257.723774] do_ebt_set_ctl+0xe7/0x110 [ 257.727674] nf_setsockopt+0x7d/0xd0 [ 257.731390] ip_setsockopt+0xd8/0xf0 [ 257.735114] udp_setsockopt+0x62/0xa0 [ 257.738923] sock_common_setsockopt+0x9a/0xe0 [ 257.743421] __sys_setsockopt+0x1ba/0x3c0 [ 257.747570] ? kernel_accept+0x310/0x310 [ 257.751640] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 257.756218] ? trace_hardirqs_on+0xbd/0x310 [ 257.760534] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.765903] ? trace_hardirqs_off_caller+0x310/0x310 [ 257.771007] __x64_sys_setsockopt+0xbe/0x150 [ 257.775418] do_syscall_64+0x1b9/0x820 [ 257.779301] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 257.784665] ? syscall_return_slowpath+0x5e0/0x5e0 [ 257.789584] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.794425] ? trace_hardirqs_on_caller+0x310/0x310 [ 257.799437] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 257.804449] ? prepare_exit_to_usermode+0x291/0x3b0 [ 257.809464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.814311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.819496] RIP: 0033:0x457569 [ 257.822682] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.841674] RSP: 002b:00007fb4a2f5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 257.849405] RAX: ffffffffffffffda RBX: 00007fb4a2f5ac90 RCX: 0000000000457569 [ 257.856665] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 257.864024] RBP: 000000000072bf00 R08: 0000000000000218 R09: 0000000000000000 [ 257.871284] R10: 0000000020000000 R11: 0000000000000246 R12: 00007fb4a2f5b6d4 [ 257.878550] R13: 00000000004c3d13 R14: 00000000004d6138 R15: 0000000000000004 [ 257.901990] Mem-Info: [ 257.905026] active_anon:136880 inactive_anon:186 isolated_anon:36 [ 257.905026] active_file:7617 inactive_file:36012 isolated_file:0 [ 257.905026] unevictable:0 dirty:25 writeback:25 unstable:0 [ 257.905026] slab_reclaimable:11949 slab_unreclaimable:108316 [ 257.905026] mapped:55058 shmem:244 pagetables:1079 bounce:0 [ 257.905026] free:1227229 free_pcp:995 free_cma:0 [ 257.947234] Node 0 active_anon:547588kB inactive_anon:744kB active_file:30468kB inactive_file:144048kB unevictable:0kB isolated(anon):1328kB isolated(file):0kB mapped:220232kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 374784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 257.980501] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.030571] lowmem_reserve[]: [ 258.049863] 0 2818 6321 6321 [ 258.053365] Node 0 DMA32 free:2887356kB min:30052kB low:37564kB high:45076kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2888776kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1420kB local_pcp:0kB free_cma:0kB [ 258.088195] FAULT_INJECTION: forcing a failure. [ 258.088195] name failslab, interval 1, probability 0, space 0, times 0 [ 258.101130] CPU: 0 PID: 8853 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 258.108429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.117778] Call Trace: [ 258.117896] dump_stack+0x244/0x39d [ 258.117917] ? dump_stack_print_info.cold.1+0x20/0x20 [ 258.117937] ? debug_smp_processor_id+0x1c/0x20 [ 258.117956] ? perf_trace_lock+0x14d/0x7a0 [ 258.138489] should_fail.cold.4+0xa/0x17 [ 258.142576] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 258.147706] ? __save_stack_trace+0x8d/0xf0 [ 258.152060] ? zap_class+0x640/0x640 [ 258.155793] ? save_stack+0xa9/0xd0 [ 258.157416] lowmem_reserve[]: 0 0 3503 3503 [ 258.159433] ? save_stack+0x43/0xd0 [ 258.159458] ? find_held_lock+0x36/0x1c0 [ 258.159478] ? __lock_is_held+0xb5/0x140 [ 258.159502] ? zap_class+0x640/0x640 13:27:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7fff, 0x8, 'queue0\x00', 0x3}) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, 0xffffffffffffffff) [ 258.164618] Node 0 Normal free:2011584kB min:37364kB low:46704kB high:56044kB active_anon:541256kB inactive_anon:744kB active_file:30468kB inactive_file:144048kB unevictable:0kB writepending:148kB present:4718592kB managed:3587816kB mlocked:0kB kernel_stack:7232kB pagetables:4020kB bounce:0kB free_pcp:2660kB local_pcp:1284kB free_cma:0kB [ 258.167447] ? perf_trace_sched_process_exec+0x860/0x860 [ 258.167473] ? check_preemption_disabled+0x48/0x280 [ 258.167495] __should_failslab+0x124/0x180 [ 258.167514] should_failslab+0x9/0x14 [ 258.172268] lowmem_reserve[]: 0 0 0 0 [ 258.175613] kmem_cache_alloc_node_trace+0x270/0x740 [ 258.175646] __kmalloc_node_track_caller+0x3c/0x70 [ 258.175667] __kmalloc_reserve.isra.40+0x41/0xe0 [ 258.175687] __alloc_skb+0x155/0x770 [ 258.179549] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 258.209398] ? netdev_alloc_frag+0x1f0/0x1f0 [ 258.209416] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 258.209432] ? kasan_check_read+0x11/0x20 [ 258.209444] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 258.209457] ? rcu_softirq_qs+0x20/0x20 [ 258.209486] ? netlink_has_listeners+0x2cb/0x4a0 [ 258.209504] ? netlink_tap_init_net+0x3d0/0x3d0 [ 258.209523] alloc_uevent_skb+0x84/0x1da [ 258.209542] kobject_uevent_env+0xa52/0x101e [ 258.209559] ? sysfs_remove_group+0xf6/0x1b0 [ 258.217216] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 703*4096kB (M) = 2887356kB [ 258.220021] kobject_uevent+0x1f/0x24 [ 258.220042] device_del+0x6c9/0xb70 [ 258.220062] ? __device_links_no_driver+0x320/0x320 [ 258.220088] rfkill_unregister+0x137/0x480 13:27:21 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x90, 0x102) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x2) bind$xdp(r0, &(0x7f0000000400)={0x2c, 0x1, r1, 0x20, r2}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'veth0_to_bond\x00', {0x2, 0x4e22, @multicast2}}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000080)) 13:27:21 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x20000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x5, 0x400, "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", 0xff, 0x200, 0xffffffff, 0x7, 0x8, 0x0, 0x3, 0x1}, r3}}, 0x120) 13:27:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) [ 258.225773] Node 0 Normal: 8410*4kB (UME) 1154*8kB (UM) 639*16kB (UM) 333*32kB (UME) 74*64kB (UME) 19*128kB (UM) 29*256kB (UM) 16*512kB (UM) 6*1024kB (UE) 3*2048kB (M) 467*4096kB (M) = 2011656kB [ 258.228088] ? hci_sock_dev_event+0x10b/0x740 [ 258.228106] ? mgmt_index_removed+0x16d/0x410 [ 258.228126] ? rfkill_register+0xe00/0xe00 [ 258.228146] ? do_raw_write_trylock+0x270/0x270 [ 258.232446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.237034] hci_unregister_dev+0x360/0x990 [ 258.237055] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 258.237075] ? ima_file_check+0x130/0x130 [ 258.237103] ? vhci_close_dev+0x50/0x50 [ 258.242516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 258.246754] vhci_release+0x76/0xf0 [ 258.246776] __fput+0x385/0xa30 [ 258.246800] ? get_max_files+0x20/0x20 [ 258.246819] ? trace_hardirqs_on+0xbd/0x310 [ 258.251723] 43872 total pagecache pages [ 258.264043] ? kasan_check_read+0x11/0x20 [ 258.264062] ? task_work_run+0x1af/0x2a0 [ 258.264081] ? trace_hardirqs_off_caller+0x310/0x310 [ 258.264098] ? filp_close+0x1cd/0x250 [ 258.264120] ____fput+0x15/0x20 [ 258.264135] task_work_run+0x1e8/0x2a0 [ 258.264153] ? task_work_cancel+0x240/0x240 [ 258.264173] ? copy_fd_bitmaps+0x210/0x210 [ 258.269258] 0 pages in swap cache [ 258.273492] ? do_syscall_64+0x9a/0x820 [ 258.273517] exit_to_usermode_loop+0x318/0x380 [ 258.273536] ? __bpf_trace_sys_exit+0x30/0x30 [ 258.273559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.273578] do_syscall_64+0x6be/0x820 13:27:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) pipe2$9p(&(0x7f0000000000), 0x80800) [ 258.273599] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 258.273617] ? syscall_return_slowpath+0x5e0/0x5e0 [ 258.273632] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.273649] ? trace_hardirqs_on_caller+0x310/0x310 [ 258.273663] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 258.273681] ? prepare_exit_to_usermode+0x291/0x3b0 [ 258.278402] Swap cache stats: add 0, delete 0, find 0/0 [ 258.283087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.283115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.283128] RIP: 0033:0x457569 [ 258.283143] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.283152] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 258.283167] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 [ 258.283176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 258.283189] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 258.287744] Free swap = 0kB 13:27:21 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 258.291884] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 258.291894] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 [ 258.369079] Total swap = 0kB [ 258.428643] 1965979 pages RAM [ 258.499866] 0 pages HighMem/MovableOnly [ 258.534456] 342854 pages reserved [ 258.581934] 0 pages cma reserved [ 258.594362] QAT: Invalid ioctl [ 258.706054] QAT: Invalid ioctl 13:27:21 executing program 5 (fault-call:4 fault-nth:6): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xd142, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in=@broadcast}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xfffffffffffffffc}}, 0x20) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r2}}, 0xfffffd4b) 13:27:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(0xffffffffffffffff, r0) [ 258.757400] xt_nfacct: accounting object `syz0' does not exists 13:27:21 executing program 2: sync() 13:27:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) [ 258.872780] FAULT_INJECTION: forcing a failure. [ 258.872780] name failslab, interval 1, probability 0, space 0, times 0 [ 258.928497] CPU: 0 PID: 8898 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 258.935839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.945214] Call Trace: [ 258.947836] dump_stack+0x244/0x39d [ 258.951492] ? dump_stack_print_info.cold.1+0x20/0x20 [ 258.956709] ? debug_smp_processor_id+0x1c/0x20 [ 258.961394] ? perf_trace_lock+0x14d/0x7a0 [ 258.965649] should_fail.cold.4+0xa/0x17 [ 258.970238] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 258.975339] ? rcu_softirq_qs+0x20/0x20 [ 258.979307] ? unwind_dump+0x190/0x190 [ 258.983206] ? is_bpf_text_address+0xd3/0x170 [ 258.987699] ? zap_class+0x640/0x640 [ 258.991427] ? find_held_lock+0x36/0x1c0 [ 258.995489] ? __lock_is_held+0xb5/0x140 [ 258.999564] ? kobject_uevent+0x1f/0x24 [ 259.003541] ? perf_trace_sched_process_exec+0x860/0x860 [ 259.008983] ? vhci_release+0x76/0xf0 [ 259.012775] ? __fput+0x385/0xa30 [ 259.016410] ? task_work_run+0x1e8/0x2a0 [ 259.020477] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.025854] __should_failslab+0x124/0x180 [ 259.030084] should_failslab+0x9/0x14 [ 259.033877] kmem_cache_alloc+0x2be/0x730 [ 259.038044] skb_clone+0x1bb/0x500 [ 259.041582] ? skb_split+0x11e0/0x11e0 [ 259.045464] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 259.050475] ? netlink_trim+0x1b4/0x380 [ 259.054451] ? netlink_skb_destructor+0x210/0x210 [ 259.059310] netlink_broadcast_filtered+0x110f/0x1680 [ 259.064504] ? __netlink_sendskb+0xd0/0xd0 [ 259.068747] ? kasan_check_read+0x11/0x20 [ 259.072891] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 259.078168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.083704] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 259.089153] ? refcount_add_not_zero_checked+0x330/0x330 [ 259.094600] ? netlink_has_listeners+0x2cb/0x4a0 [ 259.099352] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 259.104369] netlink_broadcast+0x3a/0x50 [ 259.108431] kobject_uevent_env+0xa83/0x101e [ 259.112831] ? sysfs_remove_group+0xf6/0x1b0 [ 259.117245] kobject_uevent+0x1f/0x24 [ 259.121053] device_del+0x6c9/0xb70 [ 259.124678] ? __device_links_no_driver+0x320/0x320 [ 259.129787] rfkill_unregister+0x137/0x480 [ 259.134020] ? hci_sock_dev_event+0x10b/0x740 [ 259.138530] ? mgmt_index_removed+0x16d/0x410 [ 259.143108] ? rfkill_register+0xe00/0xe00 [ 259.147342] ? do_raw_write_trylock+0x270/0x270 [ 259.152023] hci_unregister_dev+0x360/0x990 [ 259.156338] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 259.161090] ? ima_file_check+0x130/0x130 [ 259.165246] ? vhci_close_dev+0x50/0x50 [ 259.169215] vhci_release+0x76/0xf0 [ 259.172854] __fput+0x385/0xa30 [ 259.176136] ? get_max_files+0x20/0x20 [ 259.180019] ? trace_hardirqs_on+0xbd/0x310 [ 259.184335] ? kasan_check_read+0x11/0x20 [ 259.188488] ? task_work_run+0x1af/0x2a0 [ 259.192552] ? trace_hardirqs_off_caller+0x310/0x310 [ 259.197662] ? filp_close+0x1cd/0x250 [ 259.201464] ____fput+0x15/0x20 [ 259.204738] task_work_run+0x1e8/0x2a0 [ 259.208713] ? task_work_cancel+0x240/0x240 [ 259.213035] ? copy_fd_bitmaps+0x210/0x210 [ 259.217268] ? do_syscall_64+0x9a/0x820 [ 259.221242] exit_to_usermode_loop+0x318/0x380 [ 259.225823] ? __bpf_trace_sys_exit+0x30/0x30 [ 259.230317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.235849] do_syscall_64+0x6be/0x820 [ 259.239729] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 259.245086] ? syscall_return_slowpath+0x5e0/0x5e0 [ 259.250006] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.254843] ? trace_hardirqs_on_caller+0x310/0x310 [ 259.259857] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 259.264871] ? prepare_exit_to_usermode+0x291/0x3b0 [ 259.269885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.274731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.279998] RIP: 0033:0x457569 [ 259.283189] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.302165] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 259.309893] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 [ 259.317155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 13:27:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x3, 0x7}, 0xc) 13:27:21 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa001000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe99, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x8000002}}, 0xe) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xb6, 0x0, 0x6, "4164ae6e6fb7768795a125a9c4dcb0f4", "6afa7a634301c1005c6024bc144e22e9378a32c6f45cf094700232bac45c1182897561e0ded1f2ef8135b45b555d496c5f2858bc43a09d4387a18c1a5075b30d13c1443283c88342dca3e0cd7438167fcb92bb433334c11d21bfa8cf44b28d8f1bbf861a21de951b3e049823746377d4e093e96c9f4df83afe1b74b61182d7649d87d9a77525e6bf12b2f0affd3268db95169eafa8b32dd9925ec9044e11732c00"}, 0xb6, 0x1) r2 = dup2(r0, r0) ioctl$KDENABIO(r2, 0x4b36) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) [ 259.324416] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 259.331676] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 259.338937] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 13:27:22 executing program 0: r0 = socket(0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:22 executing program 5 (fault-call:4 fault-nth:7): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) [ 259.429645] xt_nfacct: accounting object `syz0' does not exists 13:27:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x2}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x88000, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r2}}, 0xfe4a) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00000000c0)=""/40, &(0x7f00000001c0)=0x28) 13:27:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x0, 0x1000}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 13:27:22 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x20000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa) delete_module(&(0x7f00000001c0)='%mime_type\x00', 0xa00) ioctl$TIOCSTI(r2, 0x5412, 0x4) pipe(&(0x7f0000000180)) 13:27:22 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x300, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:22 executing program 0: r0 = socket(0xa, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) [ 259.598986] FAULT_INJECTION: forcing a failure. [ 259.598986] name failslab, interval 1, probability 0, space 0, times 0 13:27:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'veth0_to_bond\x00', {0x2, 0x4e20, @multicast2}}) [ 259.680841] CPU: 1 PID: 8924 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 259.688163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.697528] Call Trace: [ 259.700146] dump_stack+0x244/0x39d [ 259.703805] ? dump_stack_print_info.cold.1+0x20/0x20 [ 259.709017] ? debug_smp_processor_id+0x1c/0x20 [ 259.713702] ? perf_trace_lock+0x14d/0x7a0 [ 259.717952] should_fail.cold.4+0xa/0x17 [ 259.722053] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 259.727167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.732701] ? wake_up_klogd+0x11a/0x180 [ 259.736758] ? console_device+0xc0/0xc0 [ 259.740731] ? __down_trylock_console_sem+0x151/0x1f0 [ 259.745923] ? vprintk_emit+0x293/0x990 [ 259.749902] ? find_held_lock+0x36/0x1c0 [ 259.753985] ? perf_trace_sched_process_exec+0x860/0x860 [ 259.759430] ? vprintk_default+0x28/0x30 [ 259.763494] __should_failslab+0x124/0x180 [ 259.767729] should_failslab+0x9/0x14 [ 259.771559] kmem_cache_alloc_trace+0x2d7/0x750 [ 259.776250] kobject_uevent_env+0x2f3/0x101e [ 259.780654] ? mutex_unlock+0xd/0x10 [ 259.784361] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 259.789207] kobject_uevent+0x1f/0x24 [ 259.793002] device_del+0x6c9/0xb70 [ 259.796628] ? __device_links_no_driver+0x320/0x320 [ 259.801641] ? kobject_put+0x86/0xe0 [ 259.805360] hci_unregister_dev+0x3a2/0x990 [ 259.809680] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 259.814432] ? ima_file_check+0x130/0x130 [ 259.818602] ? vhci_close_dev+0x50/0x50 [ 259.822570] vhci_release+0x76/0xf0 [ 259.826193] __fput+0x385/0xa30 [ 259.829481] ? get_max_files+0x20/0x20 [ 259.833362] ? trace_hardirqs_on+0xbd/0x310 [ 259.837675] ? kasan_check_read+0x11/0x20 [ 259.841816] ? task_work_run+0x1af/0x2a0 [ 259.845869] ? trace_hardirqs_off_caller+0x310/0x310 [ 259.850968] ? filp_close+0x1cd/0x250 [ 259.854767] ____fput+0x15/0x20 [ 259.858039] task_work_run+0x1e8/0x2a0 [ 259.861927] ? task_work_cancel+0x240/0x240 [ 259.866252] ? copy_fd_bitmaps+0x210/0x210 [ 259.870486] ? do_syscall_64+0x9a/0x820 [ 259.874470] exit_to_usermode_loop+0x318/0x380 [ 259.879048] ? __bpf_trace_sys_exit+0x30/0x30 [ 259.883549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.889082] do_syscall_64+0x6be/0x820 [ 259.892961] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 259.898333] ? syscall_return_slowpath+0x5e0/0x5e0 [ 259.903264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.908100] ? trace_hardirqs_on_caller+0x310/0x310 [ 259.913112] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 259.918125] ? prepare_exit_to_usermode+0x291/0x3b0 [ 259.923143] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.928007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.933186] RIP: 0033:0x457569 [ 259.936373] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.955267] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 259.962970] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 [ 259.970238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 13:27:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) dup2(r0, r1) 13:27:22 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 259.977501] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 259.984760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 259.992157] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 13:27:22 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x980000, 0x7, 0x0, [], &(0x7f0000000180)={0x9f0903, 0x5, [], @p_u32=&(0x7f0000000140)=0x9}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000200)={0x8d16, "5081a75e9ace1134fcaf625c64c7d8cd80d23e5a38fad26281efb86c121b2bce", 0x3, 0x1}) [ 260.105677] xt_nfacct: accounting object `syz0' does not exists 13:27:22 executing program 5 (fault-call:4 fault-nth:8): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:22 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680)}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/113, 0xfc0f}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe91}}], 0x40000000000006c, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000200)=""/4096) sync() r4 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000013c0)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000001280)={0x8, 0x120, 0xfa00, {0x2, {0x0, 0x3ff, "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", 0xe3, 0x40, 0xfa, 0x81, 0x1, 0x2, 0x3}, r5}}, 0x128) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x13, 0x1, 0x13, 0x4, 0x2, 0x4, 0x3, 0x1b, 0xffffffffffffffff}) inotify_init1(0x80800) 13:27:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:22 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) dup2(r0, r1) 13:27:22 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000140)={0x0, 0x0, 0x10002, 0x1ff}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000180)={r2, 0x421}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @local, [], {@ipv4={0x6558, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x81000000, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, &(0x7f0000ea3000)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) 13:27:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:23 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x8800000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) dup2(r0, r1) 13:27:23 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9, 0x52a81) fadvise64(r0, 0x0, 0x100, 0x7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 13:27:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) [ 260.399728] FAULT_INJECTION: forcing a failure. [ 260.399728] name failslab, interval 1, probability 0, space 0, times 0 [ 260.454606] xt_nfacct: accounting object `syz0' does not exists 13:27:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) [ 260.520868] CPU: 0 PID: 8978 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 260.528205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.528214] Call Trace: [ 260.528238] dump_stack+0x244/0x39d [ 260.528262] ? dump_stack_print_info.cold.1+0x20/0x20 [ 260.549006] ? debug_smp_processor_id+0x1c/0x20 [ 260.549025] ? perf_trace_lock+0x14d/0x7a0 [ 260.549049] should_fail.cold.4+0xa/0x17 [ 260.561997] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 260.567133] ? save_stack+0xa9/0xd0 [ 260.570780] ? kasan_kmalloc+0xc7/0xe0 [ 260.574686] ? kmem_cache_alloc_trace+0x152/0x750 [ 260.579540] ? kobject_uevent_env+0x2f3/0x101e [ 260.584129] ? kobject_uevent+0x1f/0x24 [ 260.588125] ? find_held_lock+0x36/0x1c0 [ 260.592227] ? perf_trace_sched_process_exec+0x860/0x860 [ 260.597709] __should_failslab+0x124/0x180 [ 260.601961] should_failslab+0x9/0x14 [ 260.605768] __kmalloc+0x2e0/0x760 [ 260.609317] ? kobject_uevent_env+0x2f3/0x101e [ 260.613917] ? rcu_read_lock_sched_held+0x14f/0x180 [ 260.618948] ? kobject_get_path+0xc2/0x1b0 [ 260.623189] ? kmem_cache_alloc_trace+0x353/0x750 [ 260.623214] kobject_get_path+0xc2/0x1b0 [ 260.623234] kobject_uevent_env+0x314/0x101e [ 260.632112] ? mutex_unlock+0xd/0x10 [ 260.632129] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 260.632152] kobject_uevent+0x1f/0x24 [ 260.632172] device_del+0x6c9/0xb70 [ 260.632193] ? __device_links_no_driver+0x320/0x320 [ 260.632212] ? kobject_put+0x86/0xe0 [ 260.661256] hci_unregister_dev+0x3a2/0x990 [ 260.665594] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 260.670359] ? ima_file_check+0x130/0x130 [ 260.670399] ? vhci_close_dev+0x50/0x50 [ 260.678497] vhci_release+0x76/0xf0 [ 260.678519] __fput+0x385/0xa30 [ 260.678544] ? get_max_files+0x20/0x20 [ 260.689302] ? trace_hardirqs_on+0xbd/0x310 [ 260.693633] ? kasan_check_read+0x11/0x20 [ 260.697797] ? task_work_run+0x1af/0x2a0 [ 260.701872] ? trace_hardirqs_off_caller+0x310/0x310 [ 260.706984] ? filp_close+0x1cd/0x250 [ 260.710800] ____fput+0x15/0x20 [ 260.714099] task_work_run+0x1e8/0x2a0 [ 260.718005] ? task_work_cancel+0x240/0x240 [ 260.722339] ? copy_fd_bitmaps+0x210/0x210 [ 260.726581] ? do_syscall_64+0x9a/0x820 [ 260.730572] exit_to_usermode_loop+0x318/0x380 [ 260.735172] ? __bpf_trace_sys_exit+0x30/0x30 [ 260.739690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.745247] do_syscall_64+0x6be/0x820 [ 260.749141] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 260.754521] ? syscall_return_slowpath+0x5e0/0x5e0 [ 260.754536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.754555] ? trace_hardirqs_on_caller+0x310/0x310 [ 260.754572] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 260.754588] ? prepare_exit_to_usermode+0x291/0x3b0 [ 260.754610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.754633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.789432] RIP: 0033:0x457569 [ 260.792638] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.811548] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 13:27:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000240)='./file0/file0\x00', 0x141800, 0x23) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x8) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x29, @loopback, 0x4e22, 0x4, 'dh\x00', 0x20, 0x5, 0x4f}, 0x2c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$P9_RCREATE(r1, &(0x7f0000000180)={0x18, 0x73, 0x2, {{0x4, 0x1, 0x7}, 0xff}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000280)={0x80007, 0x1000, 0x2, 0x2, 0x9, 0x10001}) [ 260.819259] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 [ 260.826530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 260.833802] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 260.841076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 260.848347] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000004 13:27:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:23 executing program 5 (fault-call:4 fault-nth:9): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)="4916b5deff48941be23bb006e761db6e4deba5349ca8be22253769cef4397b8eefc04e5b2652c81ace6b61d73d321b71f82c6ff461d61b8ee386ac132ef0fe8424245070adca936f8e7fdf259e60c37a1b4e1124ba556c24484c9bb9f2eb9dab3f492aa861492e1efe6dfece5d7964c5c4011a6bb58739", 0x77, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:23 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mmap(&(0x7f00008a4000/0x6000)=nil, 0x6000, 0x0, 0x400000000000031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x2000) recvfrom$unix(r2, &(0x7f00000001c0)=""/145, 0x91, 0x40, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) ioctl(r1, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070812efda9e66681c0d4360759b111281fe0678046885c09ef56b9f63925f1b25cdfb712666cf224f27c") ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00008a6000/0x4000)=nil, 0x4000}}) move_pages(0x0, 0x24c, &(0x7f0000000040)=[&(0x7f0000cb8000/0x3000)=nil], &(0x7f0000003b80), &(0x7f0000000080), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) [ 261.191642] FAULT_INJECTION: forcing a failure. [ 261.191642] name failslab, interval 1, probability 0, space 0, times 0 [ 261.244988] CPU: 0 PID: 9012 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 261.252309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.261681] Call Trace: [ 261.264289] dump_stack+0x244/0x39d [ 261.267933] ? dump_stack_print_info.cold.1+0x20/0x20 [ 261.267963] ? debug_smp_processor_id+0x1c/0x20 [ 261.277810] ? perf_trace_lock+0x14d/0x7a0 [ 261.282062] should_fail.cold.4+0xa/0x17 [ 261.286134] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 261.286163] ? lock_release+0xa00/0xa00 [ 261.295227] ? perf_trace_sched_process_exec+0x860/0x860 [ 261.300693] ? zap_class+0x640/0x640 [ 261.304414] ? console_unlock+0x8d8/0x1190 [ 261.308665] ? find_held_lock+0x36/0x1c0 [ 261.312740] ? __lock_is_held+0xb5/0x140 [ 261.316824] ? put_dec+0x3b/0xf0 [ 261.320198] ? perf_trace_sched_process_exec+0x860/0x860 [ 261.325655] ? zap_class+0x640/0x640 [ 261.329390] __should_failslab+0x124/0x180 [ 261.333645] should_failslab+0x9/0x14 [ 261.337454] kmem_cache_alloc_node+0x26e/0x730 13:27:23 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x11, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28000, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, 0xffffffffffffffff) 13:27:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:24 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x200000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 261.342049] ? find_held_lock+0x36/0x1c0 [ 261.346128] __alloc_skb+0x119/0x770 [ 261.349859] ? netdev_alloc_frag+0x1f0/0x1f0 [ 261.354277] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 261.359213] ? kasan_check_read+0x11/0x20 [ 261.363382] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 261.368666] ? rcu_softirq_qs+0x20/0x20 [ 261.372672] ? netlink_has_listeners+0x2cb/0x4a0 [ 261.377441] ? netlink_tap_init_net+0x3d0/0x3d0 [ 261.382125] alloc_uevent_skb+0x84/0x1da [ 261.386199] kobject_uevent_env+0xa52/0x101e [ 261.390626] ? mutex_unlock+0xd/0x10 13:27:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(0xffffffffffffffff, r0) 13:27:24 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x400, 0x1ff, 0x100000001, 0x8}, &(0x7f0000000180)=0x98) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8}, 0x10) [ 261.394362] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 261.399218] kobject_uevent+0x1f/0x24 [ 261.403027] device_del+0x6c9/0xb70 [ 261.406674] ? __device_links_no_driver+0x320/0x320 [ 261.411704] ? kobject_put+0x86/0xe0 [ 261.415456] hci_unregister_dev+0x3a2/0x990 [ 261.419792] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 261.424562] ? ima_file_check+0x130/0x130 [ 261.428732] ? vhci_close_dev+0x50/0x50 [ 261.432718] vhci_release+0x76/0xf0 [ 261.436371] __fput+0x385/0xa30 [ 261.439672] ? get_max_files+0x20/0x20 [ 261.443569] ? trace_hardirqs_on+0xbd/0x310 [ 261.447904] ? kasan_check_read+0x11/0x20 [ 261.452063] ? task_work_run+0x1af/0x2a0 [ 261.456138] ? trace_hardirqs_off_caller+0x310/0x310 [ 261.461259] ? filp_close+0x1cd/0x250 [ 261.465078] ____fput+0x15/0x20 [ 261.468365] task_work_run+0x1e8/0x2a0 [ 261.472260] ? task_work_cancel+0x240/0x240 [ 261.476599] ? copy_fd_bitmaps+0x210/0x210 [ 261.480847] ? do_syscall_64+0x9a/0x820 [ 261.484841] exit_to_usermode_loop+0x318/0x380 [ 261.489440] ? __bpf_trace_sys_exit+0x30/0x30 [ 261.493956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.499512] do_syscall_64+0x6be/0x820 [ 261.503414] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 261.507086] xt_nfacct: accounting object `syz0' does not exists [ 261.508790] ? syscall_return_slowpath+0x5e0/0x5e0 [ 261.508807] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.508825] ? trace_hardirqs_on_caller+0x310/0x310 [ 261.508845] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 261.534840] ? prepare_exit_to_usermode+0x291/0x3b0 [ 261.539876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.544738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.549938] RIP: 0033:0x457569 [ 261.553138] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 261.572040] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 261.579738] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 [ 261.586994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 261.594252] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 261.601510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 261.608762] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 13:27:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x4, 0x0, 0x0, 0x9, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000080000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x80800) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x401, 0x80000001, 0x0, 0x3, 0x1}) 13:27:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:24 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3f00000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x23c, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x52, 0x40000) getsockopt$netlink(r2, 0x10e, 0x1, &(0x7f0000000100), &(0x7f0000000140)) 13:27:24 executing program 5 (fault-call:4 fault-nth:10): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 261.720956] FAULT_INJECTION: forcing a failure. [ 261.720956] name failslab, interval 1, probability 0, space 0, times 0 [ 261.750789] CPU: 1 PID: 9054 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 261.758116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.767481] Call Trace: [ 261.770098] dump_stack+0x244/0x39d [ 261.773757] ? dump_stack_print_info.cold.1+0x20/0x20 [ 261.778967] ? debug_smp_processor_id+0x1c/0x20 [ 261.778988] ? perf_trace_lock+0x14d/0x7a0 [ 261.779012] should_fail.cold.4+0xa/0x17 [ 261.791956] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 261.791990] ? zap_class+0x640/0x640 [ 261.792010] ? save_stack+0xa9/0xd0 [ 261.798646] xt_nfacct: accounting object `syz0' does not exists [ 261.800815] ? find_held_lock+0x36/0x1c0 [ 261.800839] ? __lock_is_held+0xb5/0x140 13:27:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x7) 13:27:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) [ 261.800871] ? perf_trace_sched_process_exec+0x860/0x860 [ 261.800893] ? check_preemption_disabled+0x48/0x280 [ 261.800918] __should_failslab+0x124/0x180 [ 261.833379] should_failslab+0x9/0x14 [ 261.837201] kmem_cache_alloc_node_trace+0x270/0x740 [ 261.842348] __kmalloc_node_track_caller+0x3c/0x70 [ 261.847307] __kmalloc_reserve.isra.40+0x41/0xe0 [ 261.852087] __alloc_skb+0x155/0x770 [ 261.855818] ? netdev_alloc_frag+0x1f0/0x1f0 [ 261.860243] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 261.865187] ? kasan_check_read+0x11/0x20 13:27:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0), 0x0) dup2(r0, r1) [ 261.869437] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 261.874721] ? rcu_softirq_qs+0x20/0x20 [ 261.878805] ? netlink_has_listeners+0x2cb/0x4a0 [ 261.883574] ? netlink_tap_init_net+0x3d0/0x3d0 [ 261.888261] alloc_uevent_skb+0x84/0x1da [ 261.892346] kobject_uevent_env+0xa52/0x101e [ 261.896763] ? mutex_unlock+0xd/0x10 [ 261.900484] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 261.905350] kobject_uevent+0x1f/0x24 [ 261.909252] device_del+0x6c9/0xb70 [ 261.912892] ? __device_links_no_driver+0x320/0x320 [ 261.917919] ? kobject_put+0x86/0xe0 13:27:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0), 0x0) dup2(r0, r1) [ 261.921654] hci_unregister_dev+0x3a2/0x990 [ 261.925988] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 261.930772] ? ima_file_check+0x130/0x130 [ 261.934954] ? vhci_close_dev+0x50/0x50 [ 261.938934] vhci_release+0x76/0xf0 [ 261.942576] __fput+0x385/0xa30 [ 261.945881] ? get_max_files+0x20/0x20 [ 261.949776] ? trace_hardirqs_on+0xbd/0x310 [ 261.954110] ? kasan_check_read+0x11/0x20 [ 261.958274] ? task_work_run+0x1af/0x2a0 [ 261.962354] ? trace_hardirqs_off_caller+0x310/0x310 [ 261.967467] ? filp_close+0x1cd/0x250 [ 261.971296] ____fput+0x15/0x20 [ 261.974584] task_work_run+0x1e8/0x2a0 [ 261.978488] ? task_work_cancel+0x240/0x240 [ 261.982826] ? copy_fd_bitmaps+0x210/0x210 [ 261.987072] ? do_syscall_64+0x9a/0x820 [ 261.991068] exit_to_usermode_loop+0x318/0x380 [ 261.995658] ? __bpf_trace_sys_exit+0x30/0x30 [ 262.000169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.005718] do_syscall_64+0x6be/0x820 [ 262.009594] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 262.014944] ? syscall_return_slowpath+0x5e0/0x5e0 [ 262.019876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.024710] ? trace_hardirqs_on_caller+0x310/0x310 [ 262.029715] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 262.034730] ? prepare_exit_to_usermode+0x291/0x3b0 [ 262.039749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.044593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.049772] RIP: 0033:0x457569 [ 262.052966] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.071888] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 262.079584] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 [ 262.086841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 262.094093] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.101361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 262.108632] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 13:27:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0), 0x0) dup2(r0, r1) 13:27:24 executing program 1: r0 = socket(0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:24 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xffffff7f, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 262.123994] xt_nfacct: accounting object `syz0' does not exists 13:27:24 executing program 5 (fault-call:4 fault-nth:11): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x80000, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x4}}, 0x10) 13:27:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x30) dup2(r0, r1) 13:27:24 executing program 1: r0 = socket(0xa, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:25 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa0010000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @empty, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000000c0), 0xc) close(r3) dup3(r1, r2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) [ 262.292732] FAULT_INJECTION: forcing a failure. [ 262.292732] name failslab, interval 1, probability 0, space 0, times 0 [ 262.329311] CPU: 0 PID: 9088 Comm: syz-executor5 Not tainted 4.20.0-rc2+ #337 [ 262.336633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.345991] Call Trace: [ 262.348602] dump_stack+0x244/0x39d [ 262.352264] ? dump_stack_print_info.cold.1+0x20/0x20 [ 262.357473] ? debug_smp_processor_id+0x1c/0x20 [ 262.362168] ? perf_trace_lock+0x14d/0x7a0 [ 262.366411] should_fail.cold.4+0xa/0x17 [ 262.370472] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 262.375581] ? rcu_softirq_qs+0x20/0x20 [ 262.379552] ? unwind_dump+0x190/0x190 [ 262.383463] ? is_bpf_text_address+0xd3/0x170 [ 262.387965] ? zap_class+0x640/0x640 [ 262.391684] ? find_held_lock+0x36/0x1c0 [ 262.395742] ? __lock_is_held+0xb5/0x140 [ 262.399811] ? kobject_uevent+0x1f/0x24 [ 262.403781] ? perf_trace_sched_process_exec+0x860/0x860 [ 262.409220] ? __fput+0x385/0xa30 [ 262.412683] ? ____fput+0x15/0x20 [ 262.416129] ? exit_to_usermode_loop+0x318/0x380 [ 262.420889] __should_failslab+0x124/0x180 [ 262.425133] should_failslab+0x9/0x14 [ 262.428928] kmem_cache_alloc+0x2be/0x730 [ 262.433088] skb_clone+0x1bb/0x500 [ 262.436635] ? skb_split+0x11e0/0x11e0 [ 262.440529] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 262.445540] ? netlink_trim+0x1b4/0x380 [ 262.449510] ? netlink_skb_destructor+0x210/0x210 [ 262.454362] netlink_broadcast_filtered+0x110f/0x1680 [ 262.459560] ? __netlink_sendskb+0xd0/0xd0 [ 262.463801] ? kasan_check_read+0x11/0x20 [ 262.467941] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 262.473215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.478752] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 262.484200] ? refcount_add_not_zero_checked+0x330/0x330 [ 262.489648] ? netlink_has_listeners+0x2cb/0x4a0 [ 262.494401] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 262.499420] netlink_broadcast+0x3a/0x50 [ 262.503478] kobject_uevent_env+0xa83/0x101e [ 262.507881] ? mutex_unlock+0xd/0x10 [ 262.511587] ? kernfs_remove_by_name_ns+0x65/0xb0 [ 262.516433] kobject_uevent+0x1f/0x24 [ 262.520232] device_del+0x6c9/0xb70 [ 262.523879] ? __device_links_no_driver+0x320/0x320 [ 262.528888] ? kobject_put+0x86/0xe0 [ 262.532603] hci_unregister_dev+0x3a2/0x990 [ 262.536919] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 262.541673] ? ima_file_check+0x130/0x130 [ 262.545829] ? vhci_close_dev+0x50/0x50 [ 262.549798] vhci_release+0x76/0xf0 [ 262.553421] __fput+0x385/0xa30 [ 262.556703] ? get_max_files+0x20/0x20 [ 262.560589] ? trace_hardirqs_on+0xbd/0x310 [ 262.564908] ? kasan_check_read+0x11/0x20 [ 262.569050] ? task_work_run+0x1af/0x2a0 [ 262.573108] ? trace_hardirqs_off_caller+0x310/0x310 [ 262.578208] ? filp_close+0x1cd/0x250 [ 262.582017] ____fput+0x15/0x20 [ 262.585291] task_work_run+0x1e8/0x2a0 [ 262.589177] ? task_work_cancel+0x240/0x240 [ 262.593497] ? copy_fd_bitmaps+0x210/0x210 [ 262.597732] ? do_syscall_64+0x9a/0x820 [ 262.601703] exit_to_usermode_loop+0x318/0x380 [ 262.606283] ? __bpf_trace_sys_exit+0x30/0x30 [ 262.610780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.616314] do_syscall_64+0x6be/0x820 [ 262.620191] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 262.625548] ? syscall_return_slowpath+0x5e0/0x5e0 [ 262.630468] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.635307] ? trace_hardirqs_on_caller+0x310/0x310 [ 262.640335] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 262.645349] ? prepare_exit_to_usermode+0x291/0x3b0 [ 262.650367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.655210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.660398] RIP: 0033:0x457569 [ 262.663585] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.682476] RSP: 002b:00007f1956f98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 13:27:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xc, 0x2000) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000180)={0x9, 0x3}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x6f) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r1}}, 0x10) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xc6f, 0x0) 13:27:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x30) dup2(r0, r1) [ 262.690180] RAX: 0000000000000000 RBX: 00007f1956f98c90 RCX: 0000000000457569 [ 262.697441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 262.704704] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.711961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1956f996d4 [ 262.719229] R13: 00000000004f0052 R14: 00000000004cc7c0 R15: 0000000000000006 13:27:25 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3f00, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:25 executing program 5 (fault-call:4 fault-nth:12): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:25 executing program 0: socket(0xa, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x30) dup2(0xffffffffffffffff, r0) 13:27:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000240)={0x4, 0x7, 0x10000, 0x2, 0x4}) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f0000000280)=""/255, &(0x7f0000000380)=0xff) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100, 0x80) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000003c0)={0x8, 0x816, 0x7fff, 0x9, 0x7, 0x3}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000140)=0x1) getdents(r3, &(0x7f0000000180)=""/86, 0x56) 13:27:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:25 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x600000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:25 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x30) dup2(r0, 0xffffffffffffffff) 13:27:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x103000) ioctl$UI_DEV_CREATE(r0, 0x5501) sync() write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) 13:27:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x204000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x240}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffb}]}, 0x98}, 0x1, 0x0, 0x0, 0x805}, 0x4) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:25 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x60000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 263.011891] xt_nfacct: accounting object `syz0' does not exists 13:27:25 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x400, 0x1ff, 0x100000001, 0x8}, &(0x7f0000000180)=0x98) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8}, 0x10) 13:27:25 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:25 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0xc0000}}, 0x10) 13:27:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = open(&(0x7f0000000040)='./file0\x00', 0x210f03, 0x800000000000007) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0xffff, 0x4) 13:27:25 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x400, 0x1ff, 0x100000001, 0x8}, &(0x7f0000000180)=0x98) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8}, 0x10) 13:27:26 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:26 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x3, 0x591000) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:udev_tbl_t:s0\x00', 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x88404100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000002d00240027bd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0f000000050005000d000e003c1d6f312d02614437a88f3945390900000008000b000600000004a89c29bb3e54b9705d50f4cde18a4bc8cde67d79a7ae9382bbdf7d520a2a999303976b3fe0"], 0x34}}, 0x1) connect$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, {0x80000001, 0x80, 0x80, 0x7, 0x7fffffff, 0x10001}, 0x2}, 0xa) socket$inet(0x2, 0x6, 0x0) 13:27:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x10000000000}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r1, 0x40}, &(0x7f0000000280)=0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffeffff, 0x400840) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 13:27:26 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xffffffff00000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 263.367855] xt_nfacct: accounting object `syz0' does not exists 13:27:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, r1) 13:27:26 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x6, 0x0, 0x3}}, 0x14) close(r0) 13:27:26 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x200001, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x6) sync() write$FUSE_STATFS(r1, &(0x7f0000000080)={0x60, 0xffffffffffffffda, 0x7, {{0x101, 0x7, 0x2, 0x3, 0x1, 0x100000000, 0x1, 0x1ff}}}, 0x60) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0xa403) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)) [ 263.499295] xt_nfacct: accounting object `syz0' does not exists 13:27:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0), 0x0) dup2(r0, r1) 13:27:26 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x88000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:26 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000a08da6c9f1cd2681042b096a6973cebd9637b857bed68887f639fa75499b8668970f4b531726351ac3645cbbd66782c9abf984648c8a4a0e2bd78e71356946994aec008a98bbafa540d3e58d27360cc1373dc7e7e792447639fd9d0f51932667eb7c9d14d07389297a9b447c756cc30a9cdabd8de1ca1a0e375df594b8bbc60340c56e1a71f254381a348cdc55bd88d9857656e87bc75b53cd2efa1869b85bd48bd72f04df73ffd01d973d4686caec815da568a5f92f4679643831977b"], 0x2) close(r0) ioctl$KDENABIO(r0, 0x4b36) setrlimit(0x3, &(0x7f00000000c0)={0x48, 0x9}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x8aa, 0x3, 0x6, 0x7738, 0x3, 0x8, 0x7}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0x7e) 13:27:29 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x400, 0x1ff, 0x100000001, 0x8}, &(0x7f0000000180)=0x98) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000000c0)={0xf, 0x8}, 0x10) 13:27:29 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x10001, 0x1, 0x2, 0x8001, 0x7fffffff, 0x4, 0x73eb, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0x0, @remote, 0x4}}}, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r1, 0x40, "04908ae6675b490f23b8da0c114a56c5b1aaaa9a2be74324b8742dcaee2afc1d62a17d8b3fef8e94533cab3010bd4c17d1f042a73d37dc71898703024045b187"}, &(0x7f0000000300)=0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) 13:27:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0), 0x0) dup2(r0, r1) 13:27:29 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:29 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2040, 0x0) write$vnet(r0, &(0x7f00000000c0)={0x1, {&(0x7f0000000200)=""/246, 0xf6, &(0x7f0000000300)=""/215, 0x1, 0x7}}, 0x68) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:29 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0), 0x0) dup2(r0, r1) 13:27:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8}, 0x10) 13:27:29 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 266.429782] ucma_write: process 474 (syz-executor0) changed security contexts after opening file descriptor, this is not allowed. 13:27:29 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1a0, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:29 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x480000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000540)="151bd686e57cca734ad0f2ffc219ec62", 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x280004, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='bond0\x00', 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000240)) sync() ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) 13:27:32 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x400, 0x1ff, 0x100000001, 0x8}, &(0x7f0000000180)=0x98) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 13:27:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x30) dup2(r0, r1) 13:27:32 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0081"], 0x2) close(r0) 13:27:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x321, 0xfa00, {r1}}, 0x10) 13:27:32 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4000000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xd5f1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@dev, @in=@rand_addr}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000400)=0xe8) sync() r1 = semget(0x3, 0x8, 0x10000400) r2 = getuid() r3 = getgid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000002c0), &(0x7f0000000140)=0x0, &(0x7f0000000200)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000240)={{0x0, r2, r3, r4, r5, 0x80, 0xb}, 0xff, 0x9, 0x7ef42ba4}) 13:27:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x30) dup2(r0, r1) 13:27:32 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000100)="97598c585f0481deb49867c9d2746317c36a124d8d151e6dcaf7d93bdc633d7045c4da011dea17ad1a7ef9adc3a845dfe47516aa4416e5b5523565533679262e3455694120d00a9e78a9d11c059e8e696df5850ee17282bb632e0fa23a82bb255091401457b5d9d7501b4badac73b939af964c63ed5fbadd9efc0d47040ffa7bb6f95081e7436f288b2699450ca34e1257447b7dc1ca8873eedf3683bf4e21a12f3bdb577433b87b0a2dae39084190ec2905eebd8a7b3f07849d6a7095a3f98af1dd3d3d70019b398c30c50a002b3cd27c8dd1db3a79681650c383ba2b122bb525b861f954651ca78ef9b61a97ce032f699c8218490e6dd0cb", 0xf9}], 0x1, &(0x7f0000000400)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x20}, 0x4000801) close(r0) [ 269.449048] xt_nfacct: accounting object `syz0' does not exists 13:27:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10) 13:27:32 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) sync() ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xa3b, 0x20000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {0x0}]}) r3 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x8001, 0xdf, 0x3}, &(0x7f0000001200)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000001240)={r4, 0x67b0}, 0x8) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={r2, &(0x7f0000000200)=""/4096}) 13:27:32 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x30) dup2(r0, r1) 13:27:35 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x400, 0x1ff, 0x100000001, 0x8}, &(0x7f0000000180)=0x98) 13:27:35 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:35 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1600"], 0x2) close(r0) 13:27:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x6}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:35 executing program 1: socket(0xa, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(0xffffffffffffffff, r0) 13:27:35 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='$trusted\x00', 0xffffffffffffffff}, 0x30) tkill(r0, 0x26) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:35 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r0, 0xffffffffffffffff) 13:27:35 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa001, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) gettid() write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x1, {0x1, 0x40, "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", 0x14, 0x2, 0x4, 0x40, 0x3ff, 0x16dafa89, 0x7}, r1}}, 0x128) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000180)={0x3, "0d286dc2770203dd948dc5ef19f83eeab40060d2982a05e40489ff8507004fb5", 0x3, 0x80, 0x7, 0x6, 0x8, 0x2, 0x5, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x16}}, 0x10) 13:27:35 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) r1 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) write$P9_RGETATTR(r0, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x10, {0x8, 0x1, 0x6}, 0x21, r1, r2, 0xfffffffffffffffe, 0x8, 0x3, 0x8, 0x59, 0x7, 0x5, 0x3, 0x2e, 0x4, 0x101, 0x28b, 0xa078, 0x5, 0x6}}, 0xa0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140)=0x2b, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10804, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0xfff}, {0xcc00000000000000, 0x1}, 0x0, 0x0, 0x1}) sync() ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x1, 0xfffffffffffffffe, {0xfff, 0xffff, 0x6, 0xff}}) 13:27:35 executing program 1: 13:27:38 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) 13:27:38 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x400, 0x210000) ioctl$RTC_PIE_ON(r2, 0x7005) 13:27:38 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x74, 0x2, 0x100000001, "fbd70512c92e2225dccdfcfe92394a08", "b6d3a3350a0a1f831cc4800f6119ecf20d4155aee3d908384ae2370b69d8aee79c945e99f21a468b7e0a5775e1d99b144f4d8845d17ef412e41cbc52fdc1c9d14ec4404bec40da166076cd3cd0f3dd3791a5da98cffe0ce871be17a5f1c067"}, 0x74, 0x1) 13:27:38 executing program 1: stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x1, &(0x7f0000001fd8)=@raw=[@map], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) fchown(r0, 0x0, 0x0) 13:27:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r0, 0x9, &(0x7f0000000200)="abd577c3ba9e0ae15bc481cc5e4629e4448d90ebdcacbce86bbaa2ac8288547be63d4e00dccbea3909a2eb383465711868f372b16ebeca05a749fbf6f5b47ba61a51b924356d7c872cea7a2a194e2b193644e6fcd686188afe020ba8ee2a1c2cb1a759ec02b9e6a99c8d25e91aa1c9a7fe50bf08b306644cf5f649b528095688e935c5c75eed646389e45c28ac4841872e6b4f1f1d1d4581e0729b69") r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x1, "a5b7b91d0be25d01"}) 13:27:38 executing program 1: stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x1, &(0x7f0000001fd8)=@raw=[@map], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) fchown(r0, 0x0, 0x0) 13:27:38 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:38 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000002c0)={0x5, 0x3, 0x0, [{0x8000, 0x10, 0x2, 0x5, 0x2, 0x9, 0x7}, {0x651, 0x2, 0x7ff, 0x1, 0x7, 0xfffffffffffffffd, 0x5}, {0xfffffffffffffffb, 0x8, 0x75, 0x5c3, 0x8, 0x80, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000003c0)="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", &(0x7f0000000000)="c61b383fce38d64c1d8919aa079de7c9cc5c4c59c6b3af7bbb11c9a7f8", 0x2}, 0x20) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x8280}, {r0, 0x210}, {r0, 0x1040}, {r1, 0x8000}, {r0, 0x1050}], 0x5, &(0x7f0000000100)={r2, r3+30000000}, &(0x7f0000000140)={0x1}, 0x8) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000702f1b48cc7b34189000a002f6465762f766863690002001000"], 0x17) 13:27:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0xfe00000000000000, 0x0, 0xfffffffffffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget(0x0, 0x20) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/47) msgrcv(r0, &(0x7f0000000080)={0x0, ""/185}, 0xc1, 0x0, 0x2000) sync() 13:27:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x1000000) [ 275.699386] xt_nfacct: accounting object `syz0' does not exists [ 275.717576] xt_nfacct: accounting object `syz0' does not exists 13:27:41 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:41 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x500000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000140)={0x8, {{0x2, 0x4e23, @multicast2}}}, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 13:27:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) 13:27:41 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffe05) close(r0) 13:27:41 executing program 1: r0 = socket(0x11, 0x802, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000680)={0x0, 0x0, 0xfd0, 'queue0\x00', 0x90c}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"7465616d30001000"}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)) r2 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in=@loopback, @in=@multicast2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0xa0, 0x80, 0xaf, 0x0, r2}, {0x3, 0x3, 0x0, 0x81}}, {{@in=@remote}, 0x0, @in6=@remote, 0x0, 0x7}}, 0xe8) getpid() fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000280)={0x0, 0x8, 0x7, 0x4f}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={"7465616d300000fffffff2ffff0f0007", 0x4bfd}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000480)=""/244) 13:27:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1003}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) gettid() [ 278.657477] xt_nfacct: accounting object `syz0' does not exists [ 278.673657] xt_nfacct: accounting object `syz0' does not exists 13:27:41 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200200, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLERRORu(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r1) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0x8, 0x2, 0x7, {0x4, 0x5fac, 0x81, 0x80}}) 13:27:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x20a180) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x12, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@ethernet={0x306, @dev={[], 0x1d}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)="b8e842b136e83211f770a76bd7a551053a38c2e2d0cae2bc3a6d8e903884eb57e4f820cb28b904ea7d5984d73975455830896d17e649abbfab2b0f09aa0b5d5669ded3632f28d704df2e84ef1c8b9f477dcc9c06671f2a00ad24b2d84c04a0a899be43c9aebc7b8121f24b6a979b1893e1dfc5b1cbc9dbbd70677ca132fa96e849390ccb50684f7e77d7e2da2e290c6a2c7738ec3be572e694230ef9453ad948cad1df74f5b8e2db2f5ac23d17c16f530e03a2615e52072496ffdb0301b2616fcee21fb91871d74aecdc1b70406701213386204119c8ef12d5b75fb0567b4f441babdc8b57a56411912c9eed60e2", 0xee}, {&(0x7f0000000140)="3b2b5380e65640ecf9b04003bab995df96e6d27669fc78f59d8a98edb7757447fd841dd7f9a7848e4f3838b49b41fcdab1fc7c80daab", 0x36}], 0x2, 0x0, 0x0, 0x4}, 0x4000000) 13:27:41 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x40000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x2) 13:27:41 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 279.200214] device team0 entered promiscuous mode [ 279.210929] device team_slave_0 entered promiscuous mode [ 279.224463] device team_slave_1 entered promiscuous mode [ 279.243696] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.262491] device team0 left promiscuous mode [ 279.267335] device team_slave_0 left promiscuous mode [ 279.293311] device team_slave_1 left promiscuous mode [ 279.633026] device team0 entered promiscuous mode [ 279.637992] device team_slave_0 entered promiscuous mode [ 279.643941] device team_slave_1 entered promiscuous mode [ 279.651113] 8021q: adding VLAN 0 to HW filter on device team0 13:27:44 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) 13:27:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$KDENABIO(r2, 0x4b36) 13:27:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) shutdown(r0, 0x1) prctl$setfpexc(0xc, 0x10083) sync() 13:27:44 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x88, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:44 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={r2, r3/1000+30000}, 0x10) close(r0) 13:27:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)) 13:27:44 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x300000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0xfffffdbb) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x404100, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000140)={0x2, 0x5, 0x40, 0x7f}) 13:27:44 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = getegid() getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) setresgid(r3, r4, r5) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) write$P9_RMKDIR(r0, &(0x7f0000000380)={0x14, 0x49, 0x2, {0x4, 0x4, 0x5}}, 0x14) 13:27:44 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x11000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000002840)=@l2, 0x2c9, &(0x7f0000002dc0)=[{&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2, &(0x7f0000002d40)=""/47, 0x2f}}], 0x400000000000048, 0x0, &(0x7f0000000080)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0) 13:27:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0xa}, 0x410000000}}, [0x6, 0x80000001, 0x1, 0x2c51, 0x8, 0x19, 0x100000000, 0x7, 0x2, 0x0, 0x80000001, 0x1d4d, 0x8001, 0x8c90]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xe5, "6a332c47790bfcb39078ffddf34109b6659263bf6d7dc9e93a2cb336a2e6cf31b2606f12cd0e3718019ed9ccc5ec1721e90b2a6ff077f3eca11aebe7f7b7a13e325d550f71728baa0cb2bdda4b87e0fcb66c0760e52c0adcad8c8dc729550b24eff446fc1ff49c6bf25b19c19c55a0e0c479b8884f12cf02ce0d4ce3d254b1c3d30904d4afda0cf953a952b21115711ea35b9ffba2a0520b730c6d71e8a9b99574f9afa89683cb2fc23df7a7b604a1f7207cc998bee22e5bc6f7e49fb90cbc5bb699365bde21fdb077457926982ff571d75ad70944cfd92c93911b5b9041d314d177ed2e6d"}, &(0x7f0000000340)=0xed) [ 281.800504] xt_nfacct: accounting object `syz0' does not exists 13:27:44 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) 13:27:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000240)={{0xffffffffffffffff, 0x3, 0x8}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000001c0)={[{0xfff, 0x6, 0x0, 0xfffffffffffffffb, 0x44b, 0x2, 0x7, 0x32bb3bb8, 0xfff, 0x8, 0x40, 0x875f, 0x100000000}, {0xffff, 0x1, 0x8b, 0x20, 0x1, 0x3f80000000, 0x1000, 0xfff, 0x7, 0x3, 0x3, 0x0, 0x2}, {0x100000001, 0x4e, 0xffffffff80000001, 0x7fff, 0xffffffffc308083b, 0x6, 0x401, 0x6, 0x101, 0xfffffffffffffc01, 0x2, 0x8, 0x200}], 0x8}) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000280)={0xf, 0xfffffffffffffced, 0xfa00, {r4, 0xd}}, 0x643f4bf8468811db) r5 = pkey_alloc(0x0, 0x2) pkey_free(r5) 13:27:44 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:44 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x101000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) close(r0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0xb2f, 0x4) 13:27:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:44 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) 13:27:44 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x7, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000300)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:44 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9e99932b56486ff727c900f34aa5a58ca0b4adeaf53ff3ea411378b56a02a7f7bc814e86260c46214f61944dcb03c9013d87568b0731870cded60627f3f098556c1740cc9b3e815788cbceadfd83f679a87fa5328f0f87745fe933b37ca5c9036da1c27dddef833c214c47f8cdc8f6729c0dd91e5f6b8a90daaaba6976c288609c2c78a6827e97f8ae4465b921ddc067f068f62f94fd351337e73dcd56b93c39d18305af584f29192addf6d4e4b74a0d290b116ffaad1e4a66a3fc24d41148"], 0x2) socket$vsock_dgram(0x28, 0x2, 0x0) close(r0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x1f3b, 0x7, 0x200a, 0x1}) 13:27:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:44 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = semget(0x2, 0x7, 0x600) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000180)=""/154) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x13, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x80004}}, 0x20) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40081, 0x103) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001340)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0}, &(0x7f00000013c0)=0xc) stat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000014c0)={{{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000015c0)=0xe8) stat(&(0x7f0000001600)='.\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000001800)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="13cbce7de31b78463a445b581ab54d0f7e770ded566ecfc50f28a0d9d6dbda4b7ad629e32b209468cc7d8c2554e184a36d476ae26f", 0x35}, {&(0x7f00000012c0)="fdf128a3fc4689", 0x7}], 0x3, &(0x7f00000016c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x128, 0x40800}, 0x40) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x100000166, 0xfa00, {r2}}, 0xfffffffffffffd76) 13:27:44 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0xa802) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, [], 0x16}, 0x8}], 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 13:27:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x2) sync() r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x18f, 0x181302) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="180000004fcb8cf6926502a3266f9f9761f1771cefd79a9c4793219cfffd6f5a6dccfe92f9a4e81211c6"], &(0x7f00000000c0)=0x20) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000080)=0x68) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2, 0x80000000}, &(0x7f0000000200)=0x181) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x8}, 0x8) 13:27:44 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="56b1"], 0x2) close(r0) [ 282.226360] xt_nfacct: accounting object `syz0' does not exists 13:27:45 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x700, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:45 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x600, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:45 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) 13:27:45 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @multicast1}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0)=0x10001, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 13:27:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="f3b81cdc811135661ba2d7236ceb4086fd"], 0xa, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x501001, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x80}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0x4}, &(0x7f0000000280)=0x8) 13:27:45 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:45 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) 13:27:45 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:45 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:45 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:45 executing program 2: sync() r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) pipe(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000002640), &(0x7f0000002680)=0x4) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r3, r4}, 0xc) 13:27:45 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x60, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) 13:27:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r1, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 13:27:45 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:45 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:45 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x5, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) 13:27:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x1, 0x2, 0x3, 0x4, "5c42beda4b164217a7f99325f2e192754815581f4401448fe76aa126e212ddb435eb5967df4434ea9e0ba9c8165b213ed040272dc7835db6042551bf099b"}, 0x4e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x188) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sync() 13:27:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) bind$nfc_llcp(r2, &(0x7f0000000140)={0x27, 0x0, 0x2, 0x1, 0x3f, 0x4, "e8fc889a4744dcae95764060c81b64772ad8c6cdf3e05ecd4d6d71c43b538faf3e8648e8829cae8f3addc1632431c5be3fbcafcfe00033f1a2da115659a60b"}, 0x60) 13:27:45 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:45 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x101, 0x6, 0x4, 0x0, {r2, r3/1000+30000}, {0x5, 0x0, 0x6, 0x9d6, 0x9, 0x1, "58778111"}, 0x80000000, 0x4, @planes=&(0x7f0000000040)={0x2, 0xf925, @fd=r0, 0x8000}, 0x4}) close(r0) 13:27:45 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xfeffff0700000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:45 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) [ 282.948109] xt_nfacct: accounting object `syz0' does not exists 13:27:45 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x7000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:45 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x73, r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@local, r2}, 0x14) close(r0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x80) 13:27:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x8, 0x400) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000280)={0x300000000000000, 0x80, 0xfffffffffffffe00, [], &(0x7f0000000100)=0x2}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e21, 0x9, @mcast1, 0x1}, {0xa, 0x4e23, 0x2, @mcast2, 0x7}, 0xb9, [0x0, 0x7, 0x3, 0x4e, 0x8, 0x7, 0x1, 0x8001]}, 0x5c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x8, 0x2, 0xdaa, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={r3, 0x80}, &(0x7f0000000380)=0x8) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x7, 0x1, 0x401, 0x5, 0xf98}, 0xc) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x2, 0x0, 0x2, {0x4, 0x7ff, 0x1, 0x101}}) 13:27:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)={0x10001}) sync() fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x2, 0x1ed4, 0x1, 0x2, 0xe3f, 0x2}) 13:27:45 executing program 0: r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:45 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x500, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) recvfrom$inet6(r0, &(0x7f0000000080)=""/181, 0xb5, 0x2000, &(0x7f0000000200)={0xa, 0x4e1e, 0x5, @remote, 0x7}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:45 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt(r0, 0x8, 0x7154, &(0x7f0000000100)=""/248, &(0x7f0000000000)=0xf8) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:45 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:45 executing program 0: r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:46 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2000000000}}, 0x20) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x8) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x1, {0xa, 0x4e21, 0xbd, @loopback, 0x80000000}, r0}}, 0x38) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8000, @mcast2, 0xd43}, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0xb}, 0x5}, r0, 0xfffffffffffffff8}}, 0x48) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', r3}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000180)=0x8) 13:27:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:46 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x20000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:46 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r2) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 13:27:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x528, 0x101800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00', 0x8100}) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0x0, 0x1}, 0x10) sync() 13:27:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff80425e02a15500e51a1334dd7869a9d61240c81cce98b2adbf68da34d90d6604a0798e61f743e92b9b66eb426cd04a211759b7288ea51e973ffe9dcc81d46091b35e7a00aa022fb6adca9fb3f7b3e23a1a5dafd12755b336dd2ad36090fc21de8fee76d1898d3dfd9d5e1ae8e8c4d3306e0fbb4b330d558a1dcb8455fef754b8ce3790ff335453bcc07c4647aa82aa4183149202782459e264c420e65288570af09f545b9b1d5aff6737591e106ed360c991121bf1979fa78c3adebe17c47ceb98dfa53b795374eac9d771a306bcb29f3ed2483422103d1caa5d91baeba74f03834c4137580d2b5309a0df8f25ad3b07f7037d4415ae8ad669d93cfe5c"], 0x2) close(r2) 13:27:46 executing program 0: r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:46 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x8800, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:46 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20000000400204) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r2 = request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='/dev/vhci\x00', 0xfffffffffffffffa) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="86c3246bec349be87b8e368271b503e6227befb2cc6f57cf029c07d8", 0x1c, r2) fcntl$addseals(r0, 0x409, 0x6) 13:27:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) finit_module(r0, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x200001, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80800) ioctl$RTC_UIE_ON(r2, 0x7003) 13:27:46 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) syz_open_dev$usb(&(0x7f0000000580)='/dev/bus/usb/00#/00#\x00', 0x6262911a, 0x4200) r1 = syz_open_dev$sndpcmc(&(0x7f00000005c0)='/dev/snd/pcmC#D#c\x00', 0x73, 0x8000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000600)=0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000640)=""/4096) process_vm_readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000100)=""/56, 0x38}], 0x4, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x3, 0x0) 13:27:46 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1100, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xff60}, 0xe3c7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) getuid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@rand_addr, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000003c0)={'bcsh0\x00', 0x9}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) ioprio_get$uid(0x3, r4) recvfrom$packet(r3, &(0x7f0000000440)=""/91, 0x5b, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = getegid() chown(&(0x7f0000000000)='./file0\x00', 0x0, r5) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000005c0)={0x0, &(0x7f0000000580)}) socket$alg(0x26, 0x5, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000300), 0x4) mount(&(0x7f0000000040)=@nullb='::,0:nullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0xcdc0, 0x0) 13:27:46 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x400000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:46 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0xfffffffffffffffc, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) 13:27:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:46 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:46 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3f000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 283.891837] xt_nfacct: accounting object `syz0' does not exists [ 283.925951] libceph: parse_ips bad ip '::,0:nullb' 13:27:46 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) 13:27:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3, 0x7}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff80425e02a15500e51a1334dd7869a9d61240c81cce98b2adbf68da34d90d6604a0798e61f743e92b9b66eb426cd04a211759b7288ea51e973ffe9dcc81d46091b35e7a00aa022fb6adca9fb3f7b3e23a1a5dafd12755b336dd2ad36090fc21de8fee76d1898d3dfd9d5e1ae8e8c4d3306e0fbb4b330d558a1dcb8455fef754b8ce3790ff335453bcc07c4647aa82aa4183149202782459e264c420e65288570af09f545b9b1d5aff6737591e106ed360c991121bf1979fa78c3adebe17c47ceb98dfa53b795374eac9d771a306bcb29f3ed2483422103d1caa5d91baeba74f03834c4137580d2b5309a0df8f25ad3b07f7037d4415ae8ad669d93cfe5c"], 0x2) close(r2) 13:27:46 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) getpeername(r0, &(0x7f0000000080)=@sco, &(0x7f0000000100)=0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) 13:27:46 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xfeffff07, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:46 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) [ 284.094499] libceph: parse_ips bad ip '::,0:nullb' 13:27:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:46 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 13:27:46 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1100000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0xc880, 0xe6) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0) [ 284.262125] xt_nfacct: accounting object `syz0' does not exists 13:27:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x101, 0x4}, &(0x7f0000000040)=0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r1, 0x3c, 0x1, @in6={0xa, 0x4e21, 0xdbb, @mcast1, 0x4}}}, 0xa0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 13:27:47 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x700000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x8000, 0x7, 0x8, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0xc5, 0x39}, &(0x7f0000000200)=0x10) sync() openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x40040, 0x0) 13:27:47 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:47 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@sha1={0x1, "7d2946caa11ee9d7a4bdc11dfd4b79d64bce0890"}, 0x15, 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffe00, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000140)="d88e7f7644367fd4d78b4129fc302a8ec789568c145d6d2e59c0b5ecd55811140a2ac5d227abc0386a8cf332e42cf5cf957def3fa361be9b3bdf57d153b67e46891f0c7062ebc0f4060776e69fbc5db5883ed16d87210cf044b91d232166fc0f2ce3c7e64304dd15a5ad460cb7", 0x6d}, {&(0x7f00000002c0)="90f5fe3e47ecebbc7a063b9512e359b60cf34dec826659559181cb51e2c3b5968945f8610ecb02d2d55dd11e222c12ce9d2889b6a48e71453dca9090e98270c92cbf55c7d5b6d841c7d44a723700c345ad7237439bed6201a76802f3d0bfa3576b01e19b48cd6db61ab46be0d27aeba37ccf0ba394d0189c60a801a0055e30f1da602598ca0980b38bbd53e5c439b26fe62a65b27c51bfec6b0edc9e1cd1d835e681ba2d9055bbe3", 0xa8, 0x1}, {&(0x7f0000000380)="4607cfdcf5863a109cb881ca8638108c6c736a5e9d38b14fa58ee492c34a64cfb2dc121dccfd92dabb0980a7bdbd4e1a53df13d947eaea8977abc702f5673f63b25303271d7412ccfa0004550641d77e2acb232063d9ca18324053967e0bb823845e93db20b9369fb82bd2d53e31", 0x6e, 0xffffffffffff41f3}, {&(0x7f00000001c0)="a39f8318de22b42c4b29b5e220a3", 0xe, 0x7fff}, {&(0x7f0000000400)="1c69534bb5ae3a44569e749864908b256ff48430a89fb6fefefd01a222bcf3a817ca95586e58cc309ec12811643bfdc71caa99015f4eef400bfcd67ced0c6ec72b995a5537f84135592f21629af71ae4a7fa3b5f50fef378cf669a3ebb0aaebad00c33d9699b9a7db8093b881e497ba7da2c7a6ab989b9c3d1a9998236", 0x7d, 0x2c}, {&(0x7f0000000480)="fc2d9904faa1d107191c69c4fa2a451ac8d40ac33768b5f05c89d44ab9110f364a390d30ed804b3cc55e895ee7b1d32b1385a7d555c97ebecb780fc03280dd2afea25312", 0x44, 0x6}, {&(0x7f0000000500)="8b5c8befcdfcfd5e36232bfbfbf7c6e61d2f17001107f26ea9195e5d3e8a1e34a2e7d1c5a566591d6b5928c1ea4baad6383c6d6e0043c520401994c91bb7d081f97ef9f9fcbaf2f1591af53977391b1a6d33cc1d935b3104399214867b73ff9c65b618bfc7ae5eb269120ad51ad2860d150ba7cc6121c59ddd1bf8a8ffda0cf0b54ffee4a93e7effe9c00ae40bc147a4fdc210162840bb4d19d9d23f7f505b2d084fcec7cb9c41e5bafd0b47c1a0e6a8bcc8c2382740d4783d8a6bfd228b0b09f3c84e84b2e05dd69ba500ff02f8f37c8f5dc533c6", 0xd5, 0x6}, {&(0x7f0000000600)="686042b43afd3662cf23b647eace09512372abe0438c78068e0ecb6cff8e1412ed04d248ecb5b9bbedc6b7231d985270bd731d103329943c3f728be2f1f96e8fcbadd3d903e92daadacd11721567d6ad77916a320eead1bc4e1c11212060c067259c9eadfd55b07f3bfa44c975475b6b474582f3a25c57c3112ffb4587d825ad5cfb97aff68ded02bd4b8703da77c32f43c554f26723e6977929bc0152ed2be8f8", 0xa1, 0x9}, {&(0x7f00000006c0)="701b65cf05c26ec9367cf775440105ac1eed941c7382249b7030303b292e6ab0cc273eb84ebcfb8e33276825c260bd2694fb3b020ecc62474489bc9142bd271128674cd04eb977786ceab7a563480047c6e83a8df7fd3ff81ae7a0eeb8efadc3273e9dbb2c9c64064f22304ee71466d1fc4cdbc08372ec53cdcb4cd85bae4502c052df740582c4fca126ecf801a04ffdb71b60bb1ebf6a5989d9dce10b5e6eaf05137c4e1959af5eec55811e9314f863f513da416096b31373d61ac81abfbdfcd0d4c4e777eade", 0xc7, 0x9}], 0x10000, &(0x7f0000000240)='security.ima\x00') write$P9_RLERRORu(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="16ed4c9442ff8000000000"], 0x2) close(r1) 13:27:47 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r2) 13:27:47 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) [ 284.443733] xt_nfacct: accounting object `syz0' does not exists [ 284.462844] ceph: device name is missing path (no : separator in /dev/loop5) 13:27:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) socket$netlink(0x10, 0x3, 0xf) 13:27:47 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:47 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xffffff7f00000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:47 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(0xffffffffffffffff) 13:27:47 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e20, @rand_addr=0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) 13:27:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffeffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xec, "dc6215fe685136eb173b4539171dacfcaa6f08fc232312d59ef14ccb09cbc2de9c883b88dc90f8207771d285a8d0fbc3efbad19def186f07a24e37a1ccd0787ced253330da3c371bf3b5583c597765e13c4f0ec853e8e18accd78592c8ebd2f4d180d0bca343b7fce88d7039abe93d3d6d39eb9b720a30843e8642020b12865999199a6d7ca9d37c7e324413add65890dabd859c60a17a351bdf25d694d4deff6b0498d9a075d616769e3b0ba5030c5018394d237a7ed9cb10be60c74fb54d90560a2535898ae096d60a5630db6186faa75c3a328f8b888b68701f82466cb48149022d36947d0c31d4622fcc"}, &(0x7f0000000200)=0xf4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x62, 0x4, 0x7, 0x9, r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 13:27:47 executing program 1: socket$alg(0x26, 0x5, 0x0) getpgrp(0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r0) 13:27:47 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) [ 284.642426] xt_nfacct: accounting object `syz0' does not exists 13:27:47 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x5000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:47 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:47 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) flistxattr(r0, &(0x7f0000000000)=""/6, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) accept$alg(r0, 0x0, 0x0) 13:27:47 executing program 3: getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.syz\x00', &(0x7f0000000200)=""/200, 0xc8) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x10001, 0x20400) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000140)={0x9, 0x8}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 13:27:47 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/195) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0xf, 0x103, 0x0, {0xff, 0xa48, 0x90, 0x8}}) 13:27:47 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r0) 13:27:47 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r0}}, 0x10) 13:27:47 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 13:27:47 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) 13:27:47 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:27:47 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000140)='syz1\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 13:27:47 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff80425e02a15500e51a1334dd7869a9d61240c81cce98b2adbf68da34d90d6604a0798e61f743e92b9b66eb426cd04a211759b7288ea51e973ffe9dcc81d46091b35e7a00aa022fb6adca9fb3f7b3e23a1a5dafd12755b336dd2ad36090fc21de8fee76d1898d3dfd9d5e1ae8e8c4d3306e0fbb4b330d558a1dcb8455fef754b8ce3790ff335453bcc07c4647aa82aa4183149202782459e264c420e65288570af09f545b9b1d5aff6737591e106ed360c991121bf1979fa78c3adebe17c47ceb98dfa53b795374eac9d771a306bcb29f3ed2483422103d1caa5d91baeba74f03834c4137580d2b5309a0df8f25ad3b07f7037d4415ae8ad669d93cfe5c"], 0x2) close(r0) 13:27:47 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000000000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:47 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x202200}, 0xfffffe56, &(0x7f0000000080)={&(0x7f00000002c0)={0x138, r1, 0x500, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x0, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x0, 0x6, 0x20}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81c4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x90}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a2b}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ebd31e5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x138}}, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) 13:27:47 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x400, 0x200100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x5, 0x1ff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x213) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x1) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000140)=""/242) semget(0x1, 0x7, 0x1) 13:27:47 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)) [ 285.124182] xt_nfacct: accounting object `syz0' does not exists 13:27:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x50040, 0x0) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) io_setup(0x1f, &(0x7f0000000040)=0x0) io_pgetevents(r1, 0x1, 0x9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080), 0x0) socket$pptp(0x18, 0x1, 0x2) 13:27:47 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x7fffffe, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:47 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x400000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) r2 = getgid() r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/urandom\x00', 0x800, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$packet(0x11, 0x3, 0x300) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_open_dev$audion(&(0x7f00000012c0)='/dev/audio#\x00', 0x101, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) r14 = creat(&(0x7f0000001300)='./file0\x00', 0x8) r15 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000001340)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000001380)={0x0, 0x80000, 0xffffffffffffffff}) r17 = syz_open_dev$radio(&(0x7f00000013c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000001400)={0x0, 0x80000, 0xffffffffffffffff}) r19 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000001440)={0xffffffffffffffff}) r21 = syz_open_dev$mouse(&(0x7f0000001480)='/dev/input/mouse#\x00', 0x9, 0x4000) pipe2$9p(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r23 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001500)='/dev/dlm-monitor\x00', 0x1, 0x0) r24 = openat$userio(0xffffffffffffff9c, &(0x7f0000001540)='/dev/userio\x00', 0x40, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001580)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0}, &(0x7f0000001600)=0xc) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vga_arbiter\x00', 0x2000, 0x0) r29 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x0, 0x0) r30 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x1) r31 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dsp\x00', 0x1, 0x0) r32 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000017c0), &(0x7f0000001800)=0xe, 0x80000) r33 = getpgid(0x0) getresuid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)=0x0) r35 = getgid() sendmmsg$unix(r0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000002c0)="f99670ad7ca65d83654c075a23adecaec89fa7c60c6cf66c52669b14725f323021c099a25338a8e28667a61cc2eb114acd9a70c11bbf94bf1a9b7cbc3c79211b4fb95b02b903c61e3fc5104de8354dff65d94d706df5b8507a4157363cf050aa70d67abd2fdf3fa6a578e5909ef13be35c68fc765b760898c5620e71dec7870caa171a86d028bae53db6068e43cf8bac", 0x90}, {&(0x7f0000000380)="b163db4e5659049cf1c9ce82e2a04f5162fbdab7525f39ed3d64acad46f6566b1c30d13befecdaebd13ae18f1cd860c2989bfed1a8d0533f71f58a281aa6acb309b246f8296df1aab16916dc9730f307d71c68070fb8c520104a2350bf375f6673052efd513feac8e14c661e54d93fdb11c845ed911fd4f1f55efe0bb359715ef758d76b6ced4d238d78da0c41408eebb2614d306bf84f331e1a58f847c95ae03ad755a49818cc9d7c4fc03a492f3826080c0d3fbf965e3b4a35395ec0280721271ddcd35f112712a4717c3e2faa5c11f57f625d406c5c150a098c92dd69944b", 0xe0}], 0x2, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, 0x0, r1, r2}], 0x20, 0x41}, {&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)="e1975b9ee709669a1f6e5149f5fbb8e5a3ae6fd2e08753cb1b4106a10336922de261892d67bbd7975b385232bfdb36d844385d634a30c59dc176831ce0b2f3875b4944efe262aecda25f6001dc658280de86a2b1f2509cb77981ce4a508ba718f5f157c31ed3b77579416ef94e2bdd1765ed3b1e2ce4dbeedc35f4e5725ac4b6a369aa02c5606fed18dbd516899d719475a580ed268f183f32ab5f4c1d3cc875cff3a79cac2f65c9e7efc3a7c71ba6181899cc8e2f9acdc9575699b49dce7a6039ac188135515d2a06ce52221d6175cfb0a70771876a3bbdb39d02", 0xdb}, {&(0x7f00000007c0)="b510189591c80ea0a4e35f23a01e90ed6d70f96a7299b71f0037586cc4a4da68e0f06e70041e257832696255bcd0c184fba85622ee91dbd75a100bf5e90e78d53b5e8b1c93ff71d2c23628833d7dfc7a3f2bf3446ffb0c2e43e4417253d802e8951b16fa3eeba61abb718b7b56357fbc0149e05fe535b9b1e4916df2b0c3fdb71dd5e01873df169efde3aecfecea7b22c79604d0dc28fd0063d44dd9", 0x9c}], 0x2, 0x0, 0xffffffffffffff61, 0x4000080}, {&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000940)="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", 0xfd}, {&(0x7f0000000a40)="e1cb2541be451b77ddd953ce6c19a4c8b08c40ae386884f7bd1aa9df667e0dc012b5728407efecb8e0d4015a5845dc615ef9642f0a0b7cda5ca088c7fa11211a004d246e25730bb7a7c81c82b517ae27ebd22bde51f78995076afd767b40ab42a2f5fe078647ed00b6a31f952de65b9b79d6691041d081df3e7d98c2ddd53e11c3d2b645c6d3e5d5569cbad517f8142cbb3d1775ec1b16b7faedcbbc2f66e08313c4f392e41b24bf63d6251dd57cd5e0ead1b87efeda0077ea37edc26e06a48859c41e", 0xc3}, {&(0x7f0000000b40)="697735da5e8e6212896d20d4c485b014055cf90279788d9cbb906a747fee05d0cdd9a3992f57fae9cdb47bfa1528dd174e5b2629a0929c62326d69603943ee67880a7126bad83160780eab77e73b3bfd31c291984bdf49c34e2385b2d6210e1d9d3da8a2ac16d216420b772f8b529c7bcf0257ddb7b02a45305784269069ffe6337adbbf75d5a1fe18b667fdd30d2751201f", 0x92}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000041e3ffff00000800", @ANYRES32=r3, @ANYRES32=r4], 0x18, 0x44814}, {&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001180)=[{&(0x7f00000000c0)="eaa9aaaf1ecd0aee315195d204fc1ddd9ecc8922a1f62564fdbcc111c8588c3751e96b63eea4a6ba92be42b09ec759ac2c53b9e3d52c1fe16331e919", 0x3c}, {&(0x7f0000000d80)="ff5ab8aed02686f125a91f4f3868b39abdeef1ff4c245c14c61b32bd94fdb0638d36f44e0b", 0x25}, {&(0x7f0000000dc0)="94a13cc967410dd1a9f63b37ea5ce1635f604661e1658a74061894ce881bc26f5913ae7d6231a81d07bdc4186ce2c2b7f723737e01d2a8d12cca18a8c7fb1c95b75d0ceadd5cf4a7add50ebc01c214f10fa186cf366cc1f6dc659c345265d4d088f7fd29174f727e8275adc2fa828c3e925342c9fdf9c1822bcbae66c5d321ecf9b7f65c11101b23d79a901fff94a6cb7e3a2f05b7fa4cf2d3dc03a119a64ce1f92947d9b60a7a53324d0bc3abfc433c2f", 0xb1}, {&(0x7f0000000e80)="3c9a207ed2f54cf3", 0x8}, {&(0x7f0000000ec0)="d4765c8651c87bc5cf0778fc2b0d59edac2c017fbff853be5c879387ef33b93e3c61b2e4102797df8803d598c972a2dcccb7f98ff5a6d42288b1b6021dbb893bd201e132eab782c96c93f3177861d0a7df95b0c6fb2d3d662ba626cc1c22bb1460623960be4b19524de20cbd1d284c3a13e8ec7c25b33c9037801a47323941a748680b28cf78034b215ec986a8123c7a0b9a872ae58e768c4ba197a3c337fbd83cce26f0e1f65f0d54923e97099eb29e17beef80089b3e094bafe3eebb6d716ac87a8f84055a9645a0ccee1ad2", 0xcd}, {&(0x7f0000000fc0)="43fa17553404b4bd32f5eddd9c962f1ff968f90a315c95b2fc1d180d5a253f37b6e1df5cc1b4767f4ff53165c12aa9d0506381835d76f158d289700a93d4b2b61c47dbaf7cc30cece1516665da5f55d039ee79d9a50a8fce5583c64d34d7e5a95c075f0c4e02b3ce1b72ac8048e740adcafd098e61f9a3f100267e3f25beb1af9fcfbda343b2100f01be7c5f7b660676617154f2769af4961357f9e0b0f14edbf5c493237904113e52", 0xa9}, {&(0x7f0000001080)="8d43af3e5fbd083cb48d66d74e26711a935696556d649bc9bdcd2867d9585218915c5fed0facd75192269b483641dccf8d1f195f379d1587d14780d3136c270d20256022f82a6d6de239435b110873fb5b9e302961ebee0d85d70367726ae597e1cd080c60a007013291f85b6a0803aade5eab202e9aeec9409e1e8b8e62b94d5fc0f90fbfaddf09741126f401c5a2f36044b7e862a3a64a80563773849e37d7cf66f69fafd43e38c18dde30c37be285646f06214f741d7f919f56", 0xbb}, {&(0x7f0000001140)="866766db24c7a2854e38c2587c0701687d702c452a7cdd2d3b11cbfc1a22c4f57372b4198c8625fc560e6bbf78e01679ba", 0x31}], 0x8, &(0x7f0000001900)=[@rights={0x20, 0x1, 0x1, [r5, r6, r7, r8]}, @rights={0x28, 0x1, 0x1, [r9, r10, r11, r12, r13, r14]}, @rights={0x38, 0x1, 0x1, [r15, r16, r17, r18, r19, r20, r21, r22, r23, r24]}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @rights={0x28, 0x1, 0x1, [r28, r29, r30, r31, r32]}, @cred={0x20, 0x1, 0x2, r33, r34, r35}], 0xe8, 0x48810}], 0x4, 0x24000000) r36 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r36, 0x8912, 0xfff) ioctl$KVM_SET_USER_MEMORY_REGION(r36, 0x4020ae46, &(0x7f0000000000)={0x4, 0x3, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) write$P9_RLERRORu(r36, &(0x7f0000001b00)=ANY=[@ANYBLOB="080079ffe7ae0080000015072b4e4d87cc320200f3d938914f9852762bea32816466b0d7b1e96e7467a01fe8e4abbe3213215b2086f618a14c46e2fccbf1b3dd2d36d28badf0fc7c195382ea090a57c07e3a5e142cf15585d9d139e6fb3a6e8504dc5c173f73bfde45da19e84c34563c3c1d1022e80e2d7917e00ffb92fb106b51ffad83a87f0e43250999d7cc5370daa1c8"], 0x2) getpeername$packet(r36, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r36, 0x107, 0x1, &(0x7f0000000140)={r37, 0x1, 0x6, @dev={[], 0x21}}, 0x10) fcntl$getownex(r36, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$peekuser(0x3, r38, 0x20) close(r36) 13:27:47 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff80425e02a15500e51a1334dd7869a9d61240c81cce98b2adbf68da34d90d6604a0798e61f743e92b9b66eb426cd04a211759b7288ea51e973ffe9dcc81d46091b35e7a00aa022fb6adca9fb3f7b3e23a1a5dafd12755b336dd2ad36090fc21de8fee76d1898d3dfd9d5e1ae8e8c4d3306e0fbb4b330d558a1dcb8455fef754b8ce3790ff335453bcc07c4647aa82aa4183149202782459e264c420e65288570af09f545b9b1d5aff6737591e106ed360c991121bf1979fa78c3adebe17c47ceb98dfa53b795374eac9d771a306bcb29f3ed2483422103d1caa5d91baeba74f03834c4137580d2b5309a0df8f25ad3b07f7037d4415ae8ad669d93cfe5c"], 0x2) close(r0) 13:27:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x12}}, 0xfffffd7b) 13:27:48 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4000000, 0x80, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:48 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) wait4(0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000080)) 13:27:48 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r0) 13:27:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req={0x4, 0x80000000, 0x3, 0xfe45}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) write$UHID_INPUT2(r0, &(0x7f0000000140)={0xc, 0xbf, "aae46d12a493df93360382197aca32712158f7e90cdc56bd5fce2205ef64f889b9ab75fdf2a647b5b72b01c10a7378341f834e3b20d5bf565f76b75723730d3e8c82e297e1fd59d886379b7f27da6af574cb5a32916e225f362cade22a2a94ac3548e244434c0b956d32feda93a1133191b6cbef699bdf8501791c04f045f86f18075597c4e5fdd5ba3d8c70f203b091aae55213dcc337aa328519e30c2b7a9412cf7e910f2a79f577985cdf663e474527960933b0e171232562ae266f618a"}, 0xc5) 13:27:48 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x14, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/92) sync() fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r1, 0x9, 0x3}, 0x14) 13:27:48 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) 13:27:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xfffffffffffffffd}}, 0x10) 13:27:48 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r0) 13:27:48 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x7, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:48 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x101000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x99, "b07166110d1e99bf86337bc9a2eb9bb3c7c58546fed150291acc62d0e7fadf88bc7d6b14b4b409e6a75fa1177f1104e3d075801ccadb1c008e33490373b2b8122342eac9ebe4cde3ef478d163352b92ea1f3e0b294d2c2831975fcdf83d8b046b10c29df08890f8648c13f3be3cf3d2fec64e959c9bd15ab410b8d7d7f0f8537a7cd454a34b2b3b720e0fa58a68e58072278cdb7c5f03d1214"}, &(0x7f0000000040)=0xa1) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x3f00000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) close(r2) 13:27:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000080), 0x0) sync() 13:27:48 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2d, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:51 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r0) 13:27:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="8500000072720963af83f94f7c2b50e49953f91b5fad22a9cc2f9cc802007be41b302c010cc3cdbde518d096902582f20d7bad57746d4a3ffc008cb086b604abf335abfc0c2df1737d6eb62d9286a2b744c34bdca2180292b99519ccfd9681162975ef070e58be38015cebf126d6b871cee877"], &(0x7f0000000200)=0x8d) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x9}, 0x8) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x100000061, 0xfa00, {r1, 0x1b}}, 0x10) 13:27:51 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xc, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000080)={0x1}) ioctl$TIOCNXCL(r0, 0x540d) sync() ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) ioctl$TIOCSBRK(r0, 0x5427) dup(r0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x2d, 0x4, 0x0, {0x0, 0x6, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) 13:27:51 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff80093e84d1be46fd870031d153bc03a842b35374fa226a46324f488b97704b30e7d0157d76a046a87e76e2abc2ce212d9220d7b30e6e3e800f79f489c99af61f3cd9ff03bf6a39f3f2c1af28f0031437c7f9abe2f0ca18c74c987000fe5473a590c05f3882dbf4da62f5d74409a3e3f0a2265b6414d49806390a154d759a164ebb55f864693a1391493da65ffe84dfa1de68bc895abd3cff77c391d9a0fe2d088b5d818b87"], 0x2) close(r0) 13:27:51 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 13:27:51 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x22, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:51 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2) close(r0) 13:27:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000001c0), 0x4) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0xf}}, 0x10) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fffffff, 0x10800) r4 = getpid() ptrace$getenv(0x4201, r4, 0x7, &(0x7f0000000200)) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) [ 288.481977] kasan: CONFIG_KASAN_INLINE enabled [ 288.498780] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 288.531223] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 288.531310] kobject: 'bluetooth' (00000000afe384d8): kobject_add_internal: parent: 'virtual', set: '(null)' [ 288.537490] CPU: 0 PID: 9979 Comm: syz-executor0 Not tainted 4.20.0-rc2+ #337 [ 288.537501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.537532] RIP: 0010:kernfs_add_one+0x342/0x4d0 [ 288.568750] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 49 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 6d 70 49 8d 7d 08 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 16 01 00 00 45 8b 6d 08 31 ff [ 288.587651] RSP: 0018:ffff8881789df5d0 EFLAGS: 00010202 [ 288.590636] kobject: 'loop4' (00000000fd604c40): kobject_uevent_env [ 288.593014] RAX: dffffc0000000000 RBX: ffff8881d31370e0 RCX: ffffc90005dd6000 [ 288.593023] RDX: 0000000000000001 RSI: ffffffff81f8f80a RDI: 0000000000000008 [ 288.593036] RBP: ffff8881789df618 R08: fffffbfff12cfa19 R09: fffffbfff12cfa18 [ 288.599527] kobject: 'hci0' (000000007cba1908): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 288.606684] R10: fffffbfff12cfa18 R11: ffffffff8967d0c7 R12: 0000000000000000 [ 288.606693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.606705] FS: 00007ffa6ca89700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 [ 288.606714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.606723] CR2: 0000000000930004 CR3: 00000001d1df8000 CR4: 00000000001426f0 [ 288.606735] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.606741] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.606751] Call Trace: [ 288.620642] kobject: 'loop4' (00000000fd604c40): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 288.621279] kernfs_create_dir_ns+0xf6/0x160 [ 288.697705] sysfs_create_dir_ns+0x19b/0x340 [ 288.702118] ? sysfs_create_mount_point+0xa0/0xa0 [ 288.706953] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 288.711712] ? class_dir_child_ns_type+0xd/0x60 [ 288.716379] kobject_add_internal.cold.11+0x116/0x6af [ 288.721562] ? kobj_ns_type_registered+0x60/0x60 [ 288.726334] ? lock_downgrade+0x900/0x900 [ 288.730476] ? refcount_add_not_zero_checked+0x330/0x330 [ 288.735918] ? kasan_check_read+0x11/0x20 [ 288.740061] kobject_add+0x13f/0x1b0 [ 288.743785] ? kset_create_and_add+0x190/0x190 [ 288.748368] ? mutex_unlock+0xd/0x10 [ 288.752088] device_add+0x445/0x18e0 [ 288.755793] ? kfree_const+0x5e/0x70 [ 288.759504] ? get_device_parent.isra.25+0x5a0/0x5a0 [ 288.764615] ? dev_set_name+0xad/0xe0 [ 288.768402] ? device_initialize+0x5f0/0x5f0 [ 288.772817] hci_register_dev+0x3b3/0x9c0 [ 288.777023] ? _copy_from_iter_full+0x2d8/0xce0 [ 288.781685] ? hci_conn_params_free+0x810/0x810 [ 288.786351] ? iov_iter_advance+0x13f0/0x13f0 [ 288.790839] __vhci_create_device+0x2c1/0x580 [ 288.795328] vhci_write+0x2de/0x470 [ 288.798951] __vfs_write+0x6b8/0x9f0 [ 288.802667] ? kernel_read+0x120/0x120 [ 288.806562] ? apparmor_path_rmdir+0x30/0x30 [ 288.810962] ? trace_hardirqs_off_caller+0x310/0x310 [ 288.816058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.821602] ? apparmor_file_permission+0x24/0x30 [ 288.826443] ? rw_verify_area+0x118/0x360 [ 288.830593] vfs_write+0x1fc/0x560 [ 288.834133] ksys_write+0x101/0x260 [ 288.837755] ? __ia32_sys_read+0xb0/0xb0 [ 288.841807] ? trace_hardirqs_off_caller+0x310/0x310 [ 288.846905] __x64_sys_write+0x73/0xb0 [ 288.850793] do_syscall_64+0x1b9/0x820 [ 288.854672] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 288.860028] ? syscall_return_slowpath+0x5e0/0x5e0 [ 288.864950] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.869785] ? trace_hardirqs_on_caller+0x310/0x310 [ 288.874796] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 288.879804] ? prepare_exit_to_usermode+0x291/0x3b0 [ 288.884820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.889663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.894846] RIP: 0033:0x457569 [ 288.898035] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.916930] RSP: 002b:00007ffa6ca88c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.924629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 13:27:51 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x19, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) 13:27:51 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10401, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3d8, 0x89f9, 0x7, 0x200, 0x0, 0x1000000000000000, 0x4000, 0x6, 0x40, 0x5, 0x8, 0x6, 0x3, 0xa1, 0x4, 0x2, 0x2, 0x1, 0x8f89, 0x0, 0x4, 0x8, 0x8, 0xfffffffffffffff9, 0x405, 0x4, 0x0, 0x7, 0x1, 0x7, 0xd958, 0xe8, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x60104187, 0x3, 0x0, 0x7, 0x5, @perf_config_ext={0x4, 0x7f}, 0x1, 0x2527, 0x2, 0x5, 0x7fff, 0x0, 0x80}, 0xffffffffffffffff, 0xf, r0, 0x2) 13:27:51 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpgrp(0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) setpgid(r2, r3) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) open(&(0x7f0000000240)='./file0\x00', 0x400900, 0x94) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000440)={0x100, 0x463}) close(r0) stat(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0xfff, 0x11b7, 0x0, 0x7d48, 0x10001, 0x5, 0x8, 0x5]}) write$P9_RSTATu(r0, &(0x7f0000000340)={0x8e, 0x7d, 0x2, {{0x0, 0x6f, 0x89, 0xffffffff00000000, {0x1, 0x2, 0x3}, 0x0, 0x345e, 0x0, 0x2, 0xa, '/dev/vhci\x00', 0x13, '{GPLsecurity/.#$/lo', 0xa, '/dev/vhci\x00', 0x15, 'bdev]/nodev\'##bdev(%^'}, 0xa, '/dev/vhci\x00', r4, r5, r6}}, 0x8e) [ 288.931889] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000003 [ 288.939149] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 288.946411] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6ca896d4 [ 288.953687] R13: 00000000004c553b R14: 00000000004d8fe8 R15: 00000000ffffffff [ 288.960959] Modules linked in: [ 288.971395] kobject: 'hci0' (000000007cba1908): kobject_uevent_env [ 288.979091] kobject: 'loop2' (000000001071f1e2): kobject_uevent_env [ 288.985189] kobject: 'hci2' (0000000015544aa6): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 288.987395] kobject: 'loop2' (000000001071f1e2): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 289.003576] kobject: 'hci0' (000000007cba1908): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 289.005706] kobject: 'loop5' (00000000b5ccc743): kobject_uevent_env [ 289.018029] kobject: 'hci2' (0000000015544aa6): kobject_uevent_env 13:27:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x80000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r1, 0x1}, &(0x7f00000001c0)=0x8) acct(&(0x7f0000000680)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000640)={0xf, 0x8, 0xfa00, {r2, 0x12}}, 0xffffffffffffff04) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x6077c409}, 0x8) write(r3, &(0x7f00000005c0), 0x0) mq_getsetattr(r3, &(0x7f00000005c0)={0x7, 0x1, 0x5, 0x8001, 0x5, 0x1f, 0x3, 0x6}, &(0x7f0000000600)) execveat(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000300)='-$cgroup-procvmnet0%\x00', &(0x7f0000000340)='\x00'], &(0x7f0000000580)=[&(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000400)='eth1&wlan1,\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)="706f7369785f61636c5f616363657373896c6f707070303a76626f786e6574302b00", &(0x7f00000004c0)='wlan0ppp0]!,mime_type,bdevuser/mime_type\x00', &(0x7f0000000500)='/\x00', &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00'], 0x800) [ 289.021614] kobject: 'loop5' (00000000b5ccc743): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 289.049785] kobject: 'hci2' (0000000015544aa6): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 289.057336] kobject: 'loop3' (000000004572627b): kobject_uevent_env [ 289.064844] kobject: 'rfkill100' (00000000295c52bc): kobject_add_internal: parent: 'hci0', set: 'devices' 13:27:51 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x24, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 289.066688] kobject: 'loop3' (000000004572627b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 289.077394] kobject: 'rfkill100' (00000000295c52bc): kobject_uevent_env [ 289.090200] kobject: 'loop4' (00000000fd604c40): kobject_uevent_env [ 289.094020] kobject: 'rfkill100' (00000000295c52bc): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill100' [ 289.104180] kobject: 'loop4' (00000000fd604c40): fill_kobj_path: path = '/devices/virtual/block/loop4' 13:27:51 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x21, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 289.132188] kobject: 'rfkill101' (00000000c88e50dd): kobject_add_internal: parent: 'hci2', set: 'devices' [ 289.137011] kobject: 'loop4' (00000000fd604c40): kobject_uevent_env [ 289.143647] kobject: 'rfkill100' (00000000295c52bc): kobject_uevent_env [ 289.152029] kobject: 'loop4' (00000000fd604c40): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 289.157369] kobject: 'rfkill101' (00000000c88e50dd): kobject_uevent_env [ 289.171819] kobject: 'rfkill101' (00000000c88e50dd): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill101' 13:27:51 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x18, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 289.183192] kobject: 'rfkill100' (00000000295c52bc): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill100' [ 289.195203] kobject: 'rfkill101' (00000000c88e50dd): kobject_uevent_env [ 289.202777] kobject: 'rfkill101' (00000000c88e50dd): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill101' [ 289.206457] kobject: 'loop4' (00000000fd604c40): kobject_uevent_env [ 289.215162] kobject: 'rfkill100' (00000000295c52bc): kobject_cleanup, parent (null) 13:27:51 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x11, &(0x7f0000000000)=@broute={'brolte\x00', 0x20, 0x1, 0x1a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip_vti0\x00', "626f6e645f736c6176651f3000", 'gre0\x00', 'bcsf0\x00', @dev, [], @remote, [], 0xc0, 0xc0, 0x110, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}}, @common=@IDLETIMER={"49444c4554494d455207fffffe00", 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x218) [ 289.231567] kobject: 'loop4' (00000000fd604c40): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 289.241184] kobject: 'rfkill101' (00000000c88e50dd): kobject_cleanup, parent (null) [ 289.241220] kobject: 'rfkill101' (00000000c88e50dd): calling ktype release [ 289.241248] kobject: 'rfkill101': free name [ 289.267071] kobject: 'rfkill100' (00000000295c52bc): calling ktype release [ 289.280877] kobject: 'hci2' (0000000015544aa6): kobject_uevent_env [ 289.287334] kobject: 'hci2' (0000000015544aa6): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 289.291115] kobject: 'loop3' (000000004572627b): kobject_uevent_env [ 289.302871] kobject: 'rfkill100': free name [ 289.307918] kobject: 'hci0' (000000007cba1908): kobject_uevent_env [ 289.317014] kobject: 'hci2' (0000000015544aa6): kobject_cleanup, parent (null) [ 289.320344] kobject: 'loop3' (000000004572627b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 289.326515] kobject: 'hci0' (000000007cba1908): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 289.345492] kobject: 'hci2' (0000000015544aa6): calling ktype release [ 289.347993] kobject: 'loop4' (00000000fd604c40): kobject_uevent_env [ 289.352629] kobject: 'hci2': free name [ 289.358603] kobject: 'loop4' (00000000fd604c40): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 289.362970] kobject: 'bluetooth' (00000000afe384d8): kobject_cleanup, parent (null) [ 289.373573] kobject: 'loop4' (00000000fd604c40): kobject_uevent_env [ 289.384545] kobject: 'bluetooth' (00000000afe384d8): calling ktype release [ 289.395270] kobject: 'bluetooth': free name [ 289.395358] kobject: 'loop4' (00000000fd604c40): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 289.399740] kobject: 'bluetooth' (000000003e529b25): kobject_add_internal: parent: 'virtual', set: '(null)' [ 289.419496] kobject: 'hci0' (000000007cba1908): kobject_cleanup, parent (null) [ 289.427824] kobject: 'hci0' (000000007cba1908): calling ktype release [ 289.436066] kobject: 'hci2' (00000000135e5fa9): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 289.446257] kobject: 'hci0': free name [ 289.450412] kobject: 'hci2' (00000000135e5fa9): kobject_uevent_env [ 289.457888] kobject: 'hci2' (00000000135e5fa9): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 289.481150] kobject: 'rfkill102' (00000000e5584269): kobject_add_internal: parent: 'hci2', set: 'devices' [ 289.484268] kobject: 'loop1' (00000000a9167514): kobject_uevent_env [ 289.491336] kobject: 'rfkill102' (00000000e5584269): kobject_uevent_env [ 289.497429] kobject: 'loop1' (00000000a9167514): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 289.508258] kobject: 'rfkill102' (00000000e5584269): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill102' [ 289.536441] kobject: 'loop2' (000000001071f1e2): kobject_uevent_env [ 289.539211] kobject: 'rfkill102' (00000000e5584269): kobject_uevent_env [ 289.542941] kobject: 'loop2' (000000001071f1e2): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 289.550010] kobject: 'rfkill102' (00000000e5584269): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill102' [ 289.570492] kobject: 'rfkill102' (00000000e5584269): kobject_cleanup, parent (null) [ 289.579466] kobject: 'rfkill102' (00000000e5584269): calling ktype release [ 289.587057] kobject: 'rfkill102': free name [ 289.591728] kobject: 'hci2' (00000000135e5fa9): kobject_uevent_env [ 289.598166] kobject: 'hci2' (00000000135e5fa9): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 289.608293] kobject: 'bluetooth' (000000003e529b25): kobject_cleanup, parent (null) [ 289.617225] kobject: 'bluetooth' (000000003e529b25): calling ktype release [ 289.624495] kobject: 'bluetooth': free name [ 289.629040] kobject: 'hci2' (00000000135e5fa9): kobject_cleanup, parent (null) [ 289.637526] kobject: 'hci2' (00000000135e5fa9): calling ktype release [ 289.640612] ---[ end trace df05be5d2dba264a ]--- [ 289.644478] kobject: 'hci2': free name [ 289.648874] RIP: 0010:kernfs_add_one+0x342/0x4d0 [ 289.648894] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 49 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 6d 70 49 8d 7d 08 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 16 01 00 00 45 8b 6d 08 31 ff [ 289.673468] kobject: 'loop5' (00000000b5ccc743): kobject_uevent_env [ 289.676946] RSP: 0018:ffff8881789df5d0 EFLAGS: 00010202 [ 289.684721] kobject: 'loop5' (00000000b5ccc743): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 289.688285] RAX: dffffc0000000000 RBX: ffff8881d31370e0 RCX: ffffc90005dd6000 [ 289.705009] RDX: 0000000000000001 RSI: ffffffff81f8f80a RDI: 0000000000000008 [ 289.712336] RBP: ffff8881789df618 R08: fffffbfff12cfa19 R09: fffffbfff12cfa18 [ 289.720912] R10: fffffbfff12cfa18 R11: ffffffff8967d0c7 R12: 0000000000000000 [ 289.731394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.738740] FS: 00007ffa6ca89700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 [ 289.747022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.752936] CR2: 0000000000707158 CR3: 00000001d1df8000 CR4: 00000000001426f0 [ 289.760210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.767530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.774819] Kernel panic - not syncing: Fatal exception [ 289.781338] Kernel Offset: disabled [ 289.784963] Rebooting in 86400 seconds..