8870f8d66d09766023155dec7a9720becb3fede456091401616f70d67cffa761d4bea83d5b1dcb1406e534553df4f030521114d951c04cd313de599cb2cb8138c3677e6693e72454f3dbe1b89145b657d5948947e8038f5e6bf4800c45dcdd235b56b8039d1d576e92b0bd021e2b582fd0750a30a7f9914cd25e115bb6083e88b767ca858521930075aa58cb675c1095b72", 0xde}, {&(0x7f00000022c0)="1ce289ec65cb5308eb155461c7b1bdfc343bc894b2c031f8e3fb9ad8de8daa0e1ec02a6a1eaefcc3c18467a2deb9ab6e9299546e5b049f16344ea72c040e6ceab0d027bbeca3d4886e0f2971f52b95a77d91aeac9eae816209875613c136723ce8fab0906da4d9266fbea21907cd5c410589fabcd50912f3ccf53c1bf4b43a14582d7a5c8df127b7134829baca997024ce59f5a70a7ed4613f3b2c6c0efa05e775db9e55c174b0c64c5e5742a6dbec52ac72bbdbc8c8d70376bf0da55f", 0xbd}, {&(0x7f0000002380)="b004ebd613ec72d2603f4fdf38dab82aaa9168f9f67c27678528c83c637beea6a7f0ee904baf938a13731a70ff1231d738ac0cbe19f91208a86fb564626b60e5d7ce902b954405cf46bfeaa6fddc33b7833b3cb768ce38629977dbc2ba71e45452fd8f074adf029664a0de60dacd619bffe7a3b23c0cc3d7109f7d1d8d7e06d331a2d1e4db1c12d780aad50d69ce47d3867c2c62e84d3d978efa9fe9e618de7f38e6caa78888c3d4213d1eec7e120e09ce7119abc81e45b69d43d43996e59c6f15d495431e9b82df6f6cd1ab44", 0xcd}, {&(0x7f0000003a80)="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", 0x145}, {&(0x7f0000002580)="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", 0xfc}, {&(0x7f0000002680)="16d97ff967104a08c65c6a51e647af1cf0cadbc31f146dab19441d9cf2a6b8217331fa1585d1db4e1e0d5b953261022402a40185fd22e6fc50127aae24e6f7de22816ffaea98e711b7139527b4d3228099a2d0a8530b120f1c017df48fadbfb287373eb16fef22e5c21a289700ad02d0a5483ed973ba5f78b7a18b9b7591d9d30c01d1daf7705fd664e28940a32a0018959cc12a838af0b314becdc12d261c063d382c7247", 0xa5}], 0x7, &(0x7f00000027c0)=[{0xd0, 0x29, 0x1ff, "7b9daa601e246e78c89a857d678c3dc079f1edd7621c5b1d3114030dcef65ebb64acd7753dc26c1a802ad2a3dae9a02f31156b8a768086e61b2d8ffd39d5359a73cc454a76ef3fa961c385c61e9580b51187c0efc639f2fccf5b4e19d35084362330f7051be05d4f9ecde595cc6ea2bcf733c8363f6b0c41f8ebd1acbca8095302e77b07d886e0e32fbb674af36c30653c0d8b78298c68a35b07425e78c69682b6ea14647972953cf770ea1ffac2c2fd714de74969e1e3842f939372"}], 0xd0}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f00000028c0)="32142d80ccdfc51747d88a56bee3930d2224b5cf3777f36acc426387b383f8629feba8b7741f44384690d934225b23e7dfd3ea53b037aca6166ea87e9247fee9dfe9d93fd5c7e5c3df84ab064900435b113e6e72ce35dd36c07b1ab5c82b332b849fd427827e4fc07c581cfac52536855bc947d21abcecb283f2ba4989f3f0caf6119df035c1e5e98fea399debbb3db7bf7704d3726e02dc4efbe4c55186fa69f9d867ed090bb9c8045e25ef32d7dd3b89296fc28671a80524828eadc3b24a380596f8e5c57dd509485d0cb7c4b87b8074ba7867bdf82bb2eb", 0xd9}, {&(0x7f00000029c0)="8c3f032fd45cd8902b5844e3ad5838f8bffd9200f2dac1e4c37b83a68cdae9d585e211dff8008d877ed52be7b506a49fdf1140952851218816fe41c83b4a7d8bdcbb057a0973372f7d5b5eeb48eec3d2829d1ce07457fe3ddf29f366b8e033a9dc756736f7fbd467473fe56b589ea5e72f023720cea10401d7d575e79384cce9e0bcbba2d4c8e0fa0e43c6b609cc7ceb8fc09c9301e9815e6826a950d811f5dd2548af26386f88149348e208b9c02ae7bbd02e5bfe7d5524a6d341ac4ba6322b5a6759e817de9b724b3a088859b6882186cb78e8415bf5c30a3b1fbdd5d35584ab9783b5b0c6ecdcdc069b7aa8ff6b2eddf5c8b5c3", 0xf5}, {&(0x7f0000002ac0)="cbe1aa6506813242513784c0cbeba9b7111fbcb17809ffefab9ec7c41f9a96cb8cfab492fc80a9bc2fe22d8a050ebb1e336248683c58488b917d15da15386c99c976c1fc9371afadf2e2f8bb9c01d7016b45b9a8122fb6aef018c890f232ff9fd3d963a04ac1b5595438883044eec99479d799de85b3a2f5a74ec34f7f61", 0x7e}, {&(0x7f0000002b40)="77d378defd673055e9dc6934fb21d0e19decbcc01edb8acd73c9dec68a97177202ad93f86d54306f88223b7eaaa0f67eac5ef0e1b245173849308ef922c2384c3feef976613ebc2ebab90d44d7bd2beb8b972030f7ad7b2c9dc36a26855069a82870c803746c514cb9f7fc87158378425afb9b15f1cd1aa9e11cde7ff7990698c8b91e6d6348f522cebfbec7606c4b40b1ca3a503f1e1efd8fee4437cfbe1b2514fb0aad5dce5176a508c09d8688a0d645c3b8f12270db930c1eb6b375d0418fdb676debca060c3edbb51b700d1e31179e80095aa02873656d626d75146995fa97f7a412822443edf4489ced", 0xec}, {&(0x7f0000002c40)="f817bd10f882b97556e7397b0b05d28d10fd7d26b86e8827d8b82dbb500de95c8e175e887f829c4641957f", 0x2b}, {&(0x7f0000002c80)="8338cf226528063eaab846d2eed251fdba1573d0edf682bc3fd7cd8b6897937de7801f711217d1145c228c9f7f278ace8a0a7731ab46981b496ebf66db87af49d9940061732ba5fde08d38e740973307805ead6fde7a", 0x56}, {&(0x7f0000002d00)="fc11e94df8e50873eb9eebaad4ac0acef3625908544d070c2d4e7bd172de974a04c65129be3b1d84121f815e16e0836a788556770622d24209562e9c55c1357e541cee8e491c934a93dbf603988b46a61b7216c1ce7d9f51ac482a56106d57", 0x5f}, {&(0x7f0000002d80)="0691", 0x2}, {&(0x7f0000002dc0)="8cea13c204868b8ce27aabea2e2d581fcb7ab4b64970ae1172cfe1b4b9673784964f26aca9b991a13ee85884713f89c62406ef5966ba7e01fa1aa4ed9243f4bca7b2d34f13f2f92e2f8f283a511b059258ef7d89ca7857bcec9ad10f63e005509d8defd77037b73716941056bcac855c126157b95098ca730a03714fefff89688776814baa8a", 0x86}], 0x9, &(0x7f0000002f80)=[{0x48, 0x10a, 0x6, "ed1d33498188ad0101c60722ca1ff2605b02d6e7eab1cf843325cca286fef298fcdc8c87f121073d93e70277103f586d3d"}, {0xa0, 0x1b, 0xffffffff, "0d8dfe971648c19d8c733ceb31c7f6a0c92d86cb0e13eb155fa00b8cedd791188a596150fd8ff540c616a6ea750149c373b54c1bb2c2c559da03d2cc9bddfc54c6a9abe0099a2e65fd163bf18eb0c1f6cd7d63e875e97556eec0246d95e9659bdc017dd2f5763a24b45908b3e257c75185850e39f65a08035012eebe5153586d9222a295fd8aa7c72f6f275387742e"}, {0xc0, 0x0, 0x4, "51abc87c95a4ace769ba71ac6d7b49d1c7b258ea225fd5df0907529be2bc9f0b3f0c72c5158de0d32a0ce0458e34d7a08a670709e9dd97152472f339ce80efd41704dce092c24e51849327c17e5aeccbb84a8a061e64ab14ada0e314aea7bcba72d1021ab78a18830d641d8c13df9a070eb76e8d49d111e2488ced1b367e56e0f4a40cd1ea5a10418c21292997b45c0cd11dd38caa7898ab3d23594dc4a905e34248d243f5664774285bbe"}, {0x108, 0x0, 0x7fffffff, "4df9f3dcd73022303780a050384020911f2b05822c4cd17fd7033292ea3953ff639882f1e1831cf0e9b744b8c4060651de386734a87e69114087d49f89dcfc018055dae3fa749c4d7f2bb800e6fbe9dc09d0e5dcef6c4ce18f4980e3d54218a2424e65780bf95a04f1ed895a8ed75ed97bc58f5e0b026c40cf4fe200fbb4259864a1d2cd583b6f6ec986f2a51dc0f68672a80f6de15f8e0adde3d0da68a269cf6a338609bca9bbd1d4179950145cec5dd8b443de21abe785fe96bb44db58789c0234a2c60db0bce4afafab8be0d129bf36ef452bc9149b1c38455d02bfc4fe32455ce72976d2f8adcbda28af571cc524a755"}, {0xa8, 0x0, 0x6, "085b53872ab032dc8f4846af377992cc4b16f9bfcfb4a9ef88006ad6c83979f81e2cc3752b525816cbceafb217e093c2199232f6c541d7f4b10d4a42d3197fdef80bcf6af17b5228fbdbeaf5991cd305e1aea25ba897de7caaa08da555a5e8ad91b51621ed788ccac7b3595255c2cb049f6fa4f9b0ad8ba7e9427a89cb4f7a2c123db4968b4031421714e4193b639bd852"}], 0x358}}, {{&(0x7f0000003300)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1, 0x2}}, 0x80, &(0x7f00000033c0)=[{&(0x7f00000039c0)="7ca2e4930d7b519d407a6916371aa6df4c7e4b3209004a31bd8da4250ad5c8b7a06e066ed65fafc1523ff0bb4f391292e9ba075c793faff5bb2c97389995128f75af277efe7b21575459581a72627a1610af33e83933d53aef1219f162c9d70c77b1b999868fb91225bf47f491cb0334cbc7461f42023e06c2b632a7aacc6228997d39b0e2e5a95cab490dc607d624bec06dcac85ff26693694b29c989502d374b5270b1d764cf", 0xa7}], 0x1, &(0x7f0000004380)=[{0x1010, 0x6, 0x3, "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"}, {0x58, 0x0, 0x6d842d8b, "aab71390691ef6cb61b1a50d82aa4aa8cc9df05aa7ddaa71621c578ed048d43d6b81e9abb61c11f569b1b6e988cc72e1bbef37a2d5c587fcfcf9458fd1eec704c7d1fc"}, {0x100, 0x10b, 0x1, "60ab1d96ddf4e6ed702a1c88860d03a5b8af5eec3b87566b7482befa6a9b47547f436b5cbcec8f213e26b76d7b48db7b39fc19ae5754a130ac0a9994a972b42abd0a053669947c4f9544c025ec3f88d889f61d0869d02dd7146b36dfc5a24df2fa7dbd29d56fea99a34a6d6d6b9aa3d49fa0528614f731b57b5dee6d6e61170d5ea2b529a6a570fd412ff68293769f09b6c7f549ca62e7f8c3f1739bc3a712d33cdc7c2b7c1a7eda4db626e481c1f3725a1de517cbc8cb852a249c3a052d717baac3aeba328d30c11a8867c9bdf4169bb6935c511ba068cf7391938f3da2d8b7fa3d7ff7bb55e46c228e2f34"}, {0x80, 0x115, 0x9, "210c25eeeeadf9d24e7a316581a8cd77e7319787726edd636410c4e774f060af4c0dd1bc1f3fc8ac795e9fdc05e71d5f7247cae9422a7330c96dc6651b6979f8106880cb8defaad56e5c8ceff0e675831599d9c2d12d6c86b435e400da658e166984f0b3ea309b7f9d155e55d3b49fbd"}], 0x11e8}}], 0x4, 0x400d) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) [ 413.982959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.028341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.072534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.117268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:10:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) bind(r2, &(0x7f00000000c0)=@rc={0x1f, @any, 0x3c}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x5}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) 06:10:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000000)=@null) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)}, {&(0x7f0000000440)="b349b7f2f55da05c31678206bbc897e825e723c003ce4cabdf59f4cb0557cc4845094d7a97aa47cf252b58ae885dc892f87e71371fbc254ca4", 0x39}, {&(0x7f00000005c0)="fd629296563cc28a2f0381f55a9b3124b38c874f9dc9a910681f7312a8ab0c6690ff17461be3b960db8339aff7c41e4f08673528a511eb49323334859af20badd67edd09c8f9d0dc35c62f8c609306f1a88d64ebc728c8d04c4dea04fbae128ca0666c62aaf466102a6a345e3348a79f0564bc6f03cb9dc52830cd89d0604c78f0668d1f26d91fbd84a6519767458e9f3ef0753fac7b8a89523599a7dbc4dfa4c53cb95e1fa6d081ad7c14a3e203145eda0575ff03f7bea43d637f1b1f3f898c87eb11eb52691079", 0xc8}, {&(0x7f0000000180)="2e2a5ebf5921a7ea29c31cdadb2ce047c933e8302ade0aed0dce6ccbb802d9e16931a515a1895ddd083a6f414ad08aa3af76a801ee7dd462e64af543a401c41c94fae24f029bf26219070727f9cffea8ef856cfe944fc709d2e7d7d94f80ecb0356e22eabb5b4b2bae7eb579ccef5033612ef54040a75cc18d421874655f43", 0x7f}], 0x4, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{@none}]}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(r1, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r5, &(0x7f00000017c0), 0x1d0, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r6, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f00000003c0)) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) [ 414.355059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.389163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:10:40 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="5dab6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:41 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'team0\x00', 0x800}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r5, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) dup3(r3, r4, 0x0) fcntl$setown(r1, 0x8, r0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r6, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) tkill(r0, 0x15) 06:10:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)="7cddb44a3e2c61b1db3c42cd86635eb0b8431b28e3d96c3211bf2c4c0ce731a1caeb734187f1889ab3d1e023bed4e0fbe4e6e5956aab7757e26d43ef9a480162e8ce4d613ea9b555db47d3e557564ac2546c3bb841ce1fe24293c68dd7842a61c8c211beed36eb4fbe81b8ed3e5f2630a5293343ca84800e3c678459276f59219c8142", 0x83, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000003c0)='eth1\x00', &(0x7f0000000400)) keyctl$describe(0x6, r4, &(0x7f0000000b00)=""/4096, 0x1000) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r6, &(0x7f00000017c0), 0x1d0, 0x0) write$P9_RRENAME(r6, &(0x7f0000000180)={0x7, 0x15, 0x2}, 0x7) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) fgetxattr(r5, &(0x7f00000000c0)=@random={'trusted.', '@security}\x00'}, &(0x7f0000000100)=""/19, 0x13) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:41 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x8a}, 0x16, 0x2) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x1) 06:10:41 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x18}, 0x2, 0x0, 0x2, 0x5, 0xe0, 0x7}, 0x20) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf6ffff68, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 06:10:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) semget$private(0x0, 0x3, 0x44) 06:10:41 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 415.275060] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 415.316258] EXT4-fs error (device loop2): ext4_iget:4727: inode #2: comm syz-executor.2: root inode unallocated 06:10:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x408801, 0x104) fsetxattr$security_capability(r1, &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)=@v2={0x2000000, [{0x5, 0x9}, {0x6, 0x9}]}, 0x14, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r5, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000340)={{0x3f, 0x85}, 'port0\x00', 0x20, 0x0, 0x6, 0x4bd, 0x3, 0x4, 0xff, 0x0, 0x0, 0xc0}) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) r7 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffff801, 0x30341) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000180)={[{0x2, 0x7, 0x1f, 0x3, 0x9, 0x3, 0x0, 0x2, 0x3f, 0x4, 0x7d, 0x2, 0xfffffffffffff801}, {0x49, 0x2, 0x5, 0x3, 0xd9, 0xce, 0x5, 0x3f, 0x1, 0x20, 0x56, 0xfa, 0x1}, {0x70f, 0x8001, 0x0, 0x1, 0x20, 0xbb, 0x34, 0x8, 0x85, 0x80, 0xff, 0x5d, 0x6}], 0x9}) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) bind(r2, &(0x7f00000000c0)=@rc={0x1f, @any, 0x3c}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x5}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) [ 415.361009] EXT4-fs (loop2): get root inode failed 06:10:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 415.420499] EXT4-fs (loop2): mount failed 06:10:42 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) lremovexattr(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="62747266000000001a05580a60732e74727573746664"]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) [ 415.526775] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 415.565173] EXT4-fs: failed to create workqueue [ 415.669332] EXT4-fs (loop2): mount failed 06:10:42 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x5, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x1000000a, 0xb0, 0x9, 0x4, 0x916, 0x4, 0x7ff, 0x4}, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) bind(r2, &(0x7f00000000c0)=@rc={0x1f, @any, 0x3c}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x5}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) 06:10:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x1) 06:10:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r5, &(0x7f00000017c0), 0x1d0, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) sendto$inet(r8, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x75, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYBLOB="a70000002f529d63c6e48ab01c3a2468f40990358195f273357d2f12fca0dc2ec02a076a8779031a47ff730ceb56f11ec688d02b63016cd82f4668eea8a7d7319bb210b2a8ada4680648f7a76cc05e4789e49c159cfecbf3d7271b869b01550502979a00000000000000000000000000000029d0543b506593a06072e94eb69befad60ee93f4827fbe02e62d4532454928620685d683d60081c971afd88309ecc965a219831ab9dded6522"], &(0x7f0000000000)=0xaf) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r10, 0x4, 0x1, 0x2}, 0x10) 06:10:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) bind(r2, &(0x7f00000000c0)=@rc={0x1f, @any, 0x3c}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x5}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) 06:10:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x40054}, 0x4000000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:43 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)=0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000700)={{0x0, r5, r6, r7, r8, 0x40, 0x7480}, 0x0, 0x0, 0x1, 0x0, 0x0, r9, 0x1}) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000000)=""/172) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x1) 06:10:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000108000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468315f746f5f6873720000000008001b0000000000"], 0x3c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0x1ff, 0x80, r2, 0x0, &(0x7f0000000080)={0x980910, 0x1, [], @ptr=0x16a}}) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000140)) tkill(r0, 0x9) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe02be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffc2) 06:10:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() shmget(0x3, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:43 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x3d091, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000180)={0x40, 0x8, [0x2, 0x0, 0x7f, 0x7fff, 0x4]}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000340)=""/217, 0xd9}, &(0x7f00000000c0)}, 0x20) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:43 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xc0000, 0x0) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 06:10:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffffffff}, 0x1214, 0xd, 0x1, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x8c1}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) clock_gettime(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r8, &(0x7f00000017c0), 0x1d0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r8, &(0x7f0000000340)="dd8edcae3df7269107112c8055906574314d4cc6ec1b60b8e78c60fa16c2785a8a9afb75242bf9fdae58306e8b5058fb34ef3ae754efcb56a8c093a0a06d88cea6df45e0bf46938e24ad6b13fb6dfd9208b5c9535eedc52ed7007ac0206f570095576aaa6a37ddc951bf7522c0f2bd8998e461544effae3e80e1aef5c3e36304a089ebdda3745648499655d4f26fd5b2dc193c5634cc98865b83cb902084bd90304d0190162d184d22b47f96dbc4ea33873e63f7cef9e1477a5557f4069d85382ca60d774d1433b0b3a8983c45", &(0x7f0000000180)="47240cdcba517217fa507b7199a8148d1c3ed7d0a18474a5d8973f67444f8888626033d57f550ebd16156a77e2826cbc3ec858ed5d033b75385caa0ccdd81d4555cd7ee1c11da1da8554a6fb0b91192932be4bad0ad730be9201978f9fa64ff398b6f8fe375b8eb3a16c20c01d3e296a03f6c9e734", 0x4}, 0x20) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) 06:10:43 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc}, 0x1020, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$P9_RLINK(r3, &(0x7f00000003c0)={0x7, 0x47, 0x1}, 0x7) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) mq_timedsend(r4, &(0x7f0000000340)="8bd7051529ef99b89e59a89b5680255287337f0593fd9b42b4b992b2b90da3c1b904aa99449ae92388379ab7facd94d9171669c5538e31d04081b12e36d1129cdca817266f713b9f602be14cd3d1720e229b27d093", 0x55, 0x7, &(0x7f00000001c0)={0x77359400}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) write$input_event(r5, &(0x7f00000000c0)={{0x0, 0x7530}, 0x13, 0x8, 0x1}, 0x18) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x1de0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/67, 0x43}], 0x1, &(0x7f00000007c0)=""/132, 0x84}, 0x10003}], 0x1, 0x102, 0x0) pipe(&(0x7f00000001c0)) chdir(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') r4 = creat(&(0x7f0000000100)='./bus\x00', 0x20) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000080)={0x3, 0x2}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x0, 0x2) r5 = socket(0x28, 0x4, 0x0) close(r5) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000880)="f2866ebf0187749422690734faa06e90110f9313df6aa3cc25130a44ebf5e20981d1c7e1819be99a7f1dffb4c8656636bdde8c7afc82f7874e8f8c952a902ed90b79201f35b566abc23e97cf678e4f1bb393f69b8bfa396ed34fba8303e24a3da0385ee6761e05e32071daf7653758ea91449b008f73d5bcb4a7f753c3408b12641e7f21688a2f", 0x87) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10) open(&(0x7f0000000780)='./file0\x00', 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) getgroups(0x2, &(0x7f0000000740)=[0x0, 0x0]) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x42, @remote}, 0x10) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x1) 06:10:44 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010000564d66564b98dcd4676ffa3754e05dbeff8600"/38, @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468315f746f5f6873720000000008001b0000000000"], 0x3c}}, 0x0) accept(r1, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:45 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x12e) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/uhid\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3b}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x408c0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/53, 0x35}, {0x0}, {&(0x7f0000000440)=""/243, 0xf3}], 0x3) 06:10:45 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x1a3040, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x200, @local}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x8, @rand_addr="39d54aa5d13c49763e34ddeea961b691", 0x6}, @in={0x2, 0x4e20, @rand_addr=0x7f}], 0x58) r1 = socket(0x10, 0x803, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000040)=""/48, 0x30}], 0x3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nvram\x00', 0x200000, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000580)=""/4096) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000080000000000000000f10000000000000000"], 0x28}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r8, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$FBIOPUTCMAP(r8, 0x4605, &(0x7f0000001700)={0xfffffff9, 0x7, &(0x7f0000001600)=[0x7, 0x1, 0x4, 0xa, 0x81, 0x2, 0x9], &(0x7f0000001640)=[0x4], &(0x7f0000001680)=[0x8], &(0x7f00000016c0)=[0x2, 0x4, 0x4, 0x3f, 0x0, 0xfffc, 0x7, 0x0, 0x4]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r7, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)=@newlink={0x68, 0x10, 0xffffff1f, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0xcca97d7a1d7c7883}, 0x0) 06:10:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 418.708375] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 418.720952] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 418.774623] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 418.798755] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 06:10:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) [ 418.816623] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on sz1 06:10:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, r5, r7}, 0xc) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x200100, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000100)={0x0, 0x3, 0x9, 0x1000, r9}) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) [ 419.013735] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max 06:10:45 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x3a}, 0x8000}}, 0x7, 0x0, 0x1, 0x5, 0x53, 0x8, 0x8}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r2, 0x5}, 0x8) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r3, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 419.108798] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on sz1 [ 419.202105] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 06:10:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$P9_RLINK(r3, &(0x7f00000003c0)={0x7, 0x47, 0x1}, 0x7) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) mq_timedsend(r4, &(0x7f0000000340)="8bd7051529ef99b89e59a89b5680255287337f0593fd9b42b4b992b2b90da3c1b904aa99449ae92388379ab7facd94d9171669c5538e31d04081b12e36d1129cdca817266f713b9f602be14cd3d1720e229b27d093", 0x55, 0x7, &(0x7f00000001c0)={0x77359400}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) write$input_event(r5, &(0x7f00000000c0)={{0x0, 0x7530}, 0x13, 0x8, 0x1}, 0x18) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f00000000c0)={0x3}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000100)=0x5) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a908498e0a9d347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) bind$unix(r0, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[]}}, 0x854) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0185879, &(0x7f0000000080)) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f00000001c0)=0x1) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, 0x4, 0x8, 0x0, 0x401, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x7b05, 0xfffffff7, 0x3ff, 0x7, 0x40}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYBLOB="c3000000a08c0033d8e8080c6e509ded325dc19887b9be6f6d80168e6ade81e8ecd779a52c6eaf097b6d73677e1fffb332d7d79f09762c680d071220c1c0929e8628d4122fb4e6d6bf5e3a3d63298575cf37e32a4f3453fa2beb1095a47f113a315aebcf0c67cc2c8841f94d465a61501497705922e6b4418a62fb0d47d39e20eae650122a1cd6ea9235242fc395c9cbd1ce2e52588bf3cdbe2f0fe19287dbaaa4b7f2595c0fcd45aa12bca7a8f5469577520e5a0541dec29361cc79761c60bd2f8048f8"], &(0x7f0000000400)=0xcb) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000800)={0x8, 0x888d, 0x0, 0x0, [], [], [], 0x8ed, 0x2, 0x1, 0x1b, "13cc6a7a45751f58c3e11dc3da0213a7"}) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') mount(&(0x7f0000000780)=@filename='./file1\x00', &(0x7f0000000940)='.//ile0\x00', &(0x7f0000000980)='exofs\x00', 0x20, &(0x7f00000009c0)='procwlan1-\x00') ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 06:10:46 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000041000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468315f746f5f6873720000000008001b0000000000"], 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'gretap0\x00', {0x100006}, 0x201}) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000a80)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) getpid() creat(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) chroot(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4000) 06:10:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) io_setup(0x7, &(0x7f0000000300)=0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) io_submit(r1, 0x1, &(0x7f0000001980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000000c0)="c0", 0x1}]) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) connect$l2tp(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000340)={0x5, 0x0, "3746c233316c44b40e699f60a28ee7b71b987d91d2ffb69112654f4da24454669d1da15e0dd4c8002b0f17e88babdad94605b88c16edf6966d0e022af74306c32cd65e17cd664b2fe71a1fc5ace730a29e4b8d812ad56daa6c29947fbde190e700047f0d8951d55aa00508794abebf0a08fa3bfaa763a7d1defa29d490f90722c8367beba3f7cb05746b2a5ac85ecae49071ae7798a567f76a252b640a5359232c18a7326422dd51da2194892183da044a67b2a56c9e088eb599fa9e3ff9cc7498f72af90a19b1bcc33c2c40b0e2b15cba3c976db96be66ef3d73e751c6f91a1f906b9c326816cea891577dc86742bccf81f6d52064c68e8b8a1b0e9a567c2a2"}) write$binfmt_misc(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="73797a315fe1a6b4aff2d52f4ea42d2ec103862e581a85a36a4a6191840943da7c3d3e79b1a095633d8890cf099a69ae0c8f0cd428f99bc5e5da0280cf4f0ca953686c3eefdbb78857d1103acb22e431f31f2484520de2ebada359b05d5ee62d86468d18d0459867529b260d33ea93f462088178e7ab6a827d6b62e4c9852f6caeb479f7fa0c5cebc57449e6562c7a5d4eded4ab82644025ef785e139805d1b22eee9e98da1a768f62117a1060053a426e5e14a94e9929ac005afd9d288d982f6db95cfde103a1bfecbcb1be0ac45b"], 0xe8) bind$isdn(r3, &(0x7f0000000040)={0x22, 0xa7, 0x7, 0x7f, 0x79}, 0x6) 06:10:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="30110000340000032abd7000fcdbdf2513000000e8108e80e3de771122a377557bb0b2e0feba2d83af29991adc18c46bcb300ae16fdcc005e86b49e6f6b64df420deb60f67fb3e8768291e77f45d62471faed4f6e3b8377d4e55426706f093e6325c208f2e678de3eb099afeff2fcb14e49858b857d624bfb514001300fe8000000000000000000000000000bb04000c0008005800ac1414bbd97a401cec8a7947e1eec460c3d648e25fb75010d0c02765eccb738e5ac0b027402b01262aa056c9ac009300d70217d7dd3973e19f80b96f8025cad657a03ca9273f7dd990536684f679f96c8846e577d72c74a7a2370e3bcd9e2ad7b1cb0d6fb085c05370f00fa791d06c468efa20d3faa03888a950aa59c9fdd55a02836c27466a411c1ffda62388ebdf8317a22e721463356ba11e42b5f4afc7052eca595a5bffd8ba56f3e08f26708e3c4eccd5d94b889a0a9d253defa70d3d09d1d4d9fda506926693bbfc05d151ba725f35e0f1e7790b0552b623cc6a80107c29124527ea1bce04f0e6e07c58f7ed5e3fc3c44d0726f3404d0637b4b0d90d128f690a4ef5e2af51cddf6a67502ec67dfa00beb747305d3526e45bb2447985f722fb378d69bb003122a377a39a5afd719f25210394b07bb44b6a7fac869b96d592fbb2d9a13acc6ce5929062978482d320927d186e43217312c4b2d02c369a1ceef8553e6a5f51ef374d6cda9b83e3571b51fbdc0040b34ded25d488e4f942882473b95e949173a9ef4264d6a2b1ed7e0ae122cc6016da3c1dfc0851bb10499fee79e22d32970a9066ceb1abc362b6fb457835127228ffc550e4a9b77d3d8404b1863d5065768661b09ffe465f206f21e849e5fca01c5b0e16459cfbc0fed5699bf84fbc0aabe4d6365d9793a82b86f9e872f93cdd370feee2a6f64878977e55875e3bb8aa6a6d12ee21fc1b6de8565c68d1d0113e89c8e2aded6f98cfde12b18695ffbde6124541ce7f9cb28868383bc28bff4eb1867db79d5d1c7ea711d891ce2e6ac2747963c2d09beb01b74b5ee3542017514e47955497b795a1c74d56e6ad9ad29904f9bc695401881394037e7c7ba549660e2a87b7dc03c0fa355b330a9746532107a0977cfaeeb8d460e7101a655de69bfd144ae229140c3a2d43ed97a64a5ffc5db47c5f3297f575d901f5c0761aee89cf6aa6465d04f9885c8f7025abcb3820c7e27b70b65f8b3b87e98312fed1593751dcff2fb25af8c844357a71a454702b66e1397b0bbd6824e6a082ed0bca6a6420401686f578128b427030b4c442cd553bb5f165e1c3351cb806d3cd225d37864145750a382c10a429aaf2283041ce7517d1f05c9eaaf341ea895171e66787e636f21898f7f14b073399e5624d08b2ea6a7f8a6e9e7eda7575946f1755927b72e868bab0c908509cdbc45ded4d5f6e0c33fe986234011ee6d08dcb51e66b5219ca612fe34db0b4cd8d1afaa178b232b2210f5ca95a54a65b5533ccd22fb949e8d28254e2e77a9a3e70f7bca215183788d5ca813074b977a4bfb0160d292363ce407e278e24e56822ab741de4b9cc5958e9205add93c9df940b3fe68b77a7a839607a3068958ae87034ca71a785b72fedc9c485ee7116309b7931b48553c721d141411e5777140f23352f3f7066eef89dfb2bd07c55a624d6eef86c762dfa55407d3b7b424a8b7ab2593c0b855360ad9cfdc7a625aa377270c598cbda71153e6e9273df07a13aa5b340c0f2ed69362492911bc94ef68f84f432b993ced546448f21796e6d1495c6520cf4eaf775904b25dc567ba9d2c624bd843221c5be1e70ad95fbe14650a39aedc5e23f52e6e628392c10a3fd62e9633c35c555bd2c7801e4399fc7f90677d24d6c2dc49b019a7bbe613545257ed37b5189ceda11c22c6986d06a1e19e70a5b3ef11597c4a8fbbc67c7fde77c90adf8fc252af098890233688370d836e053c415f03f4a7dd1cbc8b0d9f7f72b564e5f495844e4d7056c532d0214a7af037e515ede67c85ad0b2c47e86bda150ee6c89e9252af0b68b5477c708a1712d814e2f81655e1e1742661a1c23f8ac31a1d6c7029cdd4e0956ad98ff78fcf6597fa3ffb6a5400a702ee241a550cceeebc40a5f8c53c2adfeb8d49a44d2a8a2bec7091ac764636e5710a39b804513df503049b27e59e0c20d54ad178d6b5161b4d5e26a4d68765a51078d93877e855780f143e48576165326b96dcc5f2b44a99befaef196d61b28a2c6df626b64c30d6578e1ec48e2dc45192e7c0c64261be60e2ecf6f5616e7bb277131389c8469cc521b06f02bccbc667e2ffa1587c9f6e0342d447a851620cb694bbcb45577e01a328a87af1949bc127a361bb39b332ddadea5f18ccf4014e6f9ef3df528f783441b697a22100ff574f17d338004fdae4cc536578e355d420ea982e4ad61e8627e04f761e33bc14cea95beeb9f7a97546042bb8a46fbcd0e84d4c1869b61c3feeb686faf3e79e759c55d3850b482e66f2465ffd32e94bc923214edb072956fa224f765ebdf09bfd0d99b5166e319bcc15529dbabfc0bbb6465156d024a155512760beb485230e63450cb6745fc26fa5e8cf9ba97f724466904bd5cddff5e7af5939f2a74a323506ae9fde90b6e84e5d33122fb3e33f83ccdd3bbaa7aa2e8bba1c4b8d5528cf48837ad7a45e2dece9866af1df6b5f3b50d0c0e4d64583341976df3421e9081b04b6bdef8e14ca1edf53eda21a95dd51b470e581314b2d914d0785358b22143169d1b26a92658c3c592169c2c26c4b91326a6ba1ced3a9b4701e42adc722f53b45f4edb98acb64c30d1c0995f58bb76d37a0bcabc61879b78718e7fb7901ad49e40b1e58a4114b39d756aaeeee6c10e1de0afb3960ffccf3a4087c013d289bd53bfac48be6864777a36e1d0a646956c4468dde81c026c82061168f2f7ffa3ae98e80a6dbcc30501c3124c6bf6afebfff870f0a47fada8ea4cf2e94951031a234be6f468bc92f722d1061cb45aa8453b0887bec1faa0858bb498c423616badbd8cd9ffda2868c1070d391c559a9a3fa0f56be389b507d96a5d54f0e6a161db3b6acc6132c7ba30b75f864008e2f10f2757cb730ea4d744b806b103a4520295a6b7f88c28868f20170030b6878128217859fd594398db5ff5472e5f69b83216f086d08d24e91602c1653ee1195820ecb46ad52ab72655600bc411ecf224e607d5bf908d8501d71423cea64c6d25a81cea14b327abd5c7373daa21ba86176809d21d1354a131ca8f00cce88c4df66a61be1a95cd56cba315c55fddb5e5c7072ad02d905273a707a1e6195a72aaae82469e7ba76ddf2f425e66c5c1fdb4dba6ed64e651364ddcd0612bd1bc174e492531aedfde1908556c048c91742b141a46874efad9605a1360849e4875eeeeff0d68b978f03e14472ab2d65d20b02841e2ed6f8629bbaef0fb030065bbe0e9a03858ff81d4d01e8fa5b98e32541adf3256943377c1b470f8af45c89dd9e2259f90358ee385cb47d2003109d2a1f56e5cd3b4160191abd3897ab92d8daede7c5f6d26ccfe92deda88414a4459d2312438e8a19d00d6b3229973f74e0002eb0d9c81bb231ccde8a09ab3b129f347f9a51f47eb33872fdad0d12e8afdcfc1bee6addc211df8c3cd718e6b65d701b11369bf25bd151e6870660282f046971f76153e837efd4b395b0ed42fa21a58a8da293bc956e5de2c8cf82043f5fcdc3070eb9b9cb40b449605cc5dd89f9b6b597c2a20d3e2846e8c27d870bae47fc37244d15aafb3ccb6d8c17d5c80e28aafb167e5eea2bb01a2825efbd84d2b76e8aa8ca6d72ce1e5e077cd3b5c99e550f34e0432edbb5ca4e6763c8cb186c78b954f08748878929cba3583ae117d3bfa6161fd44914c4dc267e25ff3b094083f43eff78f099c74a981e41b60db62e417817e9480dd3aa990985fc4a694b9f9a9cb99da1416480ff96873e458fadd2cfd0003a63d103128731ba8f66e30bacab25aaace7bcd41bf4530e17272ac3023d22c2f2a7619c3cda7ed85e7b788912dcb15e3cb6b8aacda28ea482097bb638db45783129bfb46583e8ed9bf5ce6e95271c0a41500d157b36a9905d862c05880a01e96b78754a46ed11e99383796edd96c84f7a672948291fc1a3be2f27b8680435d79580cd98480e15d094c6984fd66fce5215c1667354036a810618d3d37b4f138e65e674cc590c83716c4aa0bbec4b70c0a9d4e571f6a3b82007e92f9b61359ffc06323bb0fc78c751b8f970f951b836f4f50fc51f906c6b3a6f7a71e636b655ff3173872f60cfad33d920c5bdf634ad2626735b8363a2b64697e544c4e482cfde5790d6baa7b86bb1ce4dc0840a6c9d7e32846cd45c00bf8e7f0c86f62c39d544f192b4f8257c0d6dcb5fced665eb1800aab8ae43f90cb3acc6070f9d2d6869d470804532c49dafe9e6bb90bb2b28eb64291ae1db769740c777a590f981246b8ba4a3447bc8a3a9a73d6aa904b555061dc7d646476c16794ec0ac7a3fcc5db1e976165985297af658ba1e5756bcd1863d48e968f5782cc1ab81720992718bfa4c04a97dfbd1a1f63350882d133339021a8d1fa0401d0d45f3de22283ab5a2f108934bd2139a4d8c7a9d8ef4ddd36d7cc4492bed26edc7e653798eb17f120cb34d7353e9e0dfba84911a1cff449d9530feb9aee6454dcec71a078efa541305698d79455f014db20a1a1f530da13dadd7b065a0185fd4736bb3fcbf65a433a072bd427ba931b0828ed58dba05c77a2068c4bde22c7c32bd8a4f23d905fd17de02f158b89c58ed0292bff73f429f27ba120785b1e4c6325b14ee3f6659637b0b2925d80a1e0452b851d02e6aa14da4a6cf1873617750701bb1b0de682dbb41e817f8c539728311dafec7ca39358d0c8dabeea02eb12727a82f885235d49021f249b766f8adce89511a5da14fe0aec99d964b9c11cee9228b3253c97c9da52d45127d82f269f73d2ef6e987479105c18de27b7fbc940b336be14aa9c5376cd21935024506b42534f3987b1a11de97eee06ed91ed9d73df43a3b8aa9fdf06a93b113a6e53e7b4f51d1302364b84ad6af93d613525ec745a505d202034efe6ed6dda9ddf2915114d8abc514bd7da8b76c7a9567bd179b399e1bbcee4fff903c7dd02faa3845119d3bdfe1637fe9970c21b4f43974a44c0ffb93492aa53bf43711e79879986c7c8c8eae1ce32c0ffa63c018895bba44ee7a050236c0dca550dd7789fbc0ab28599cdc7d898d009d3e839659f8c2b1738d6b8fc587b4cec9c662f576521c6ee56175b4c7821643f2f0ffc91d6672d248c42465da1881f3324971c325194aeee09d879cdc327fce628142fa2362ea53d949c61da67dc795f1776d5373676891d941bd8629c49b59011bf43e58567dfbbdfc2c51f6af29fd23a45013e92c73828cc5b8effa7d9c12d70133a395db90b6957e884ca7c50e458cf3008990ac695f3472618331807f90f81cc1cc4391e2f9dfc83edcbf0f4ea36efccac42fc818cba6f87ae412acd70b3f443dc1bedee9592e9a5f5c02e9f8e27a4daa119b426d7ec3a599b205bd688da2dd31e4e9a80e29b0bc510ffa52199291a43e0442c5dbd753769efc83d7c47ad27cdb0de04ea9a2c7948c5a56ccad56168a4651a95b417b5dcc6a6e22857ee41158fe2d177de7de43bba3d0c9a5c18cad566bfaf2334e7ce05d16dcb7aa36eca47fee28923d8cac66410da35e9d00d7fc1dc33b122c2823c65c5ba10c7e37f0cb8e83eaff62178742f06955a5b226d12da14df6781fbd76997c758d6c444069edc27dedaa24c8854175f834124e3718a08c3e78c6136e93208cbbb743815c55e682c48e6c1c1c25f33fa5dd747c3a44c854feeb0155d6e9be04fd32752a19508206ebab22f8d6e292d4fca52fad56c50ba9d7eee555c417c46dec208c265eb13d50ed3de7ae94cc46195a9f9417b0b78c01b40f8ec79aaf8ac584fcd51f1f974b4900a8a9aa72e3729d14baa97217c40b1efabb2d9a86eec454d05c4bba4c96ed22bc0b55d2cfe5b76dc7fdb75d2aaae8586ae5b58106445ad04a41fdbcd1c177012684845dfd835b5a5229138886ec3d81f7681452e8a4f5f31d7b3cdbad9e068fb42d23d4ed9ba131ec2128c14cf1c72e73fa3d1bd0fcf8b08003a00", @ANYRES32=r5, @ANYBLOB="6e84224edf7e55f9a164be1e2afd302e87fc39fd3f0fee520b8c1205000000df08533b9bb2d1742dfd000000"], 0x1130}}, 0x20000000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x42, 0x0, 0x3, 0xfffffffffffffff9, 0x401, 0x6, 0x4}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) [ 420.091419] overlayfs: filesystem on './file0' not supported as upperdir 06:10:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f00000000c0)={0x3}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000100)=0x5) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x800, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) vmsplice(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="dc34008f0425cd12570a38ee0a25564dccb68a926d94d285973e57929e7fa6b9cd94bc906949ad25c4bc7512589e72be3e218ac8d0ba3ec21ac40951656d6df7fef5e7d62e8dfc7bcfeffca221e22ec99a49cdb23e0a", 0x56}, {&(0x7f0000000340)="44d589b47f857ec7bcc86c488cc484825bce1f6a5931edc462a3b355829258cbd01e0e88487d6c0b575968576fba00c5b8cf573708448fe83617e61106d67db86da28546cdcf0d199df61162cf8b92d78bacd5dabf338125a974d5185226d100cf7818ee70ea6af260bd7f62f2fe0083ed5329385260946135291e699ca27a9ab08e884659af3e78d93af7e8cb0010ac49fe4590acf0f1378ada30f73e6dd31c7d8b8474b8374d4df63b2b7aeeaefc1ba1fcdf4011a0ce01c64d15fd84ed6aa8eb", 0xc1}, {&(0x7f00000005c0)="408735a6d467cae818e4f3c0949e1412ea9994929ea326cd4045f35563dd72b716b6092253765662c82a374d4ad132184827c5aab28e8ae7de27097096f106aee771f83b04d02bbd72d85e50e7fa50988f1cba3b966a685335d519b7e7aa7b9970865220a92ef1c68a8f1b938cef92c8a62f72d8f5d9ee207d4c27f9a89d369490ee765f3ac22feab6b744dc98c1ea391edb59f25f5a4ee06213", 0x9a}], 0x3, 0x2) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:46 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x8) 06:10:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getegid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, {0x6, @broadcast}, 0x8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'erspan0\x00'}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000340)="0122e116bcdf416714044274486bc17c864941bb9f57f03feeba0e1937b89954b7829a7130ebc649d6a924cb626de453773b8ceffd5aea56aad16a3b6bad3fe39198ffb3164fb5c7f869e8192510cff0c646e31fedb122e07fbe95309d166684a1ebdf99167fece65ffa39a41445518ee72a13c8e3447f66fc5bdf26f7480bc31369244ddcfd917073bb4d1da328955ebbf9267a220373008397de68ce6e3a16ee1313991b592f7566a70ca0a45121df202c21a1132dcb655acbfc96ac1a9109c424f34b3601b9d1f885516769f92716e9582291000000000000000000", 0xdd}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r7, &(0x7f00000017c0), 0x1d0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x800000, @remote, 0x4}, 0xb) fsync(r5) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setreuid(0xffffffffffffffff, 0xee01) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) getpgid(0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) epoll_create1(0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00230010000108000000120000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468315f746f5f6873720000000008001b0000000000"], 0x3}, 0x1, 0x0, 0x0, 0x400c490}, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r5, &(0x7f00000017c0), 0x1d0, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 06:10:47 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) prlimit64(r0, 0x6, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x0) 06:10:47 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000041000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468315f746f5f6873720000000008001b0000000000"], 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'gretap0\x00', {0x100006}, 0x201}) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000a80)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) getpid() creat(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) chroot(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4000) 06:10:47 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpgrp(0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x7fff, 0x5, 0x3, 0x80000000, 0x1, 0x0, 0x2000000}, 0x0) sched_setattr(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{&(0x7f0000000540)=@sco, 0x80, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/193, 0xc1}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f00000008c0)=""/51, 0x33}, {&(0x7f0000001140)=""/207, 0xd5}, {&(0x7f0000000c40)=""/239, 0xef}, {0x0}, {&(0x7f0000000e40)=""/159, 0x9f}, {&(0x7f0000000f00)=""/254, 0xfe}], 0x8, &(0x7f0000000980)=""/176, 0xb0}}], 0x0, 0x40, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r5 = gettid() sched_setattr(r5, &(0x7f00000002c0)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x2000000000}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB="a00100001000364144c8cce6ff1307a807380000000000000000fe880000000000000000000000000001ac1e000100000000000000000000000000000000000000000000000000000000c7974112e0cc10be5bc85e6fc5337500dde3d73ae0bf38e5c42dfbda51e452c69eddfbe5c067657c4470e52d38bd1efa18ea74b1d4368fd9f06bd1d5d738a794d6083f18adf509e59219ccb65c35472db29e7553b3b6c4c47f909bfe110ca27d015685dfe2f04903d5606c407cff9a1fe89ee250bf648c368b2bbdb53b590dd049918f01c6d0b9a7f840e2aaf84dee", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffff000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000096000000000000004800020063626328646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000010000004c0014007368613100"/344], 0x1a0}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x130, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22}, {@in6=@ipv4={[0xfffffff0], [], @loopback}, 0x4d6, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x96}, [@lifetime_val={0x24, 0x9, {0xe7, 0x40, 0x1}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0xffffffff}}]}, 0x130}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 06:10:48 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/250, 0xfa}], 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000001c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/ptype\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 06:10:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x0) 06:10:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:48 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf990000, 0x100, 0x8000, r5, 0x0, &(0x7f00000000c0)={0x9a0921, 0x40, [], @value=0x4}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r8, 0xa05}, 0x14}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x3c}}, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r20, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r22}]}, 0x3c}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r25}]}, 0x3c}}, 0x0) r26 = socket$netlink(0x10, 0x3, 0x0) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r26, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r28}]}, 0x3c}}, 0x0) r29 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r29, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r29, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r31, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r33}]}, 0x3c}}, 0x0) r34 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r34, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r34, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @loopback, @dev}, &(0x7f00000009c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@remote}}, &(0x7f0000000a00)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001580)=0x14) r39 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r39, &(0x7f00000017c0), 0x1d0, 0x0) getsockname$packet(r39, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001880)={@dev, @rand_addr, 0x0}, &(0x7f00000018c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', 0x0}) r43 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r43, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet_pktinfo(r43, 0x0, 0x8, &(0x7f0000001940)={0x0, @rand_addr, @broadcast}, &(0x7f0000001980)=0xc) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000002080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="7c060000", @ANYRES16=r8, @ANYBLOB="200029bd7000fbdbdf250000000008000100", @ANYRES32=r11, @ANYBLOB="6801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffff000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004009d06720703000000080004810100008040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400b73f9b4d08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r22, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r33, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r35, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r36, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r37, @ANYBLOB="08000100", @ANYRES32=r38, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000001038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r40, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000f0c000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r41, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r42, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r44, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x67c}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r45 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r45, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r45, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r45, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e24, 0x7f, @remote, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f00000001c0)=0x8) ftruncate(r2, 0x8200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) io_setup(0x0, 0x0) 06:10:48 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x2001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r9, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 06:10:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x0) [ 422.736789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.747624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.755093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.885950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:10:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @remote, @bcast, 0x0, [@default, @rose, @rose, @default, @rose, @bcast]}, &(0x7f0000000100)=0x40, 0xc0800) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) fcntl$setpipe(r3, 0x407, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000180)={0x3, 0x5edb}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r5, &(0x7f00000017c0), 0x1d0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000340)={0x80000000, {{0xa, 0x4e23, 0x1000000, @dev={0xfe, 0x80, [], 0x22}, 0xcb85}}, {{0xa, 0x4e21, 0x82, @loopback, 0x4}}}, 0x108) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x4e23, 0x7, @rand_addr="146761e138fb82e0d9028c905d1e477e", 0x1}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf990000, 0x100, 0x8000, r5, 0x0, &(0x7f00000000c0)={0x9a0921, 0x40, [], @value=0x4}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r8, 0xa05}, 0x14}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x3c}}, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r20, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r22}]}, 0x3c}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r25}]}, 0x3c}}, 0x0) r26 = socket$netlink(0x10, 0x3, 0x0) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r26, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r28}]}, 0x3c}}, 0x0) r29 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r29, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r29, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r31, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r33}]}, 0x3c}}, 0x0) r34 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r34, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r34, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @loopback, @dev}, &(0x7f00000009c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@remote}}, &(0x7f0000000a00)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001580)=0x14) r39 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r39, &(0x7f00000017c0), 0x1d0, 0x0) getsockname$packet(r39, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001880)={@dev, @rand_addr, 0x0}, &(0x7f00000018c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', 0x0}) r43 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r43, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet_pktinfo(r43, 0x0, 0x8, &(0x7f0000001940)={0x0, @rand_addr, @broadcast}, &(0x7f0000001980)=0xc) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000002080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="7c060000", @ANYRES16=r8, @ANYBLOB="200029bd7000fbdbdf250000000008000100", @ANYRES32=r11, @ANYBLOB="6801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffff000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004009d06720703000000080004810100008040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400b73f9b4d08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r22, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r33, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r35, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r36, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r37, @ANYBLOB="08000100", @ANYRES32=r38, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000001038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r40, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000f0c000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r41, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r42, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r44, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x67c}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r45 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r45, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r45, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r45, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) [ 422.938358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.998095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:10:49 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) write(r4, &(0x7f00000000c0)="0a7edbe91016a41c338170deefb015c08acdeed5000000437b23193e369a1e77f9f5e5d7d980692dea75f52281bbc70c240937a1de29247545b31ac9", 0x3c) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r5, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000000100)=0x9) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf990000, 0x100, 0x8000, r5, 0x0, &(0x7f00000000c0)={0x9a0921, 0x40, [], @value=0x4}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r8, 0xa05}, 0x14}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x3c}}, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r20, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r22}]}, 0x3c}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r25}]}, 0x3c}}, 0x0) r26 = socket$netlink(0x10, 0x3, 0x0) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r26, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r28}]}, 0x3c}}, 0x0) r29 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r29, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r29, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r31, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r33}]}, 0x3c}}, 0x0) r34 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r34, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r34, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @loopback, @dev}, &(0x7f00000009c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@remote}}, &(0x7f0000000a00)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001580)=0x14) r39 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r39, &(0x7f00000017c0), 0x1d0, 0x0) getsockname$packet(r39, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001880)={@dev, @rand_addr, 0x0}, &(0x7f00000018c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', 0x0}) r43 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r43, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet_pktinfo(r43, 0x0, 0x8, &(0x7f0000001940)={0x0, @rand_addr, @broadcast}, &(0x7f0000001980)=0xc) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000002080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="7c060000", @ANYRES16=r8, @ANYBLOB="200029bd7000fbdbdf250000000008000100", @ANYRES32=r11, @ANYBLOB="6801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffff000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004009d06720703000000080004810100008040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400b73f9b4d08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r22, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r33, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r35, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r36, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r37, @ANYBLOB="08000100", @ANYRES32=r38, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000001038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r40, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000f0c000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r41, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r42, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r44, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x67c}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r45 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r45, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r45, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r45, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 423.321710] selinux_nlmsg_perm: 23 callbacks suppressed [ 423.321722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5648 sclass=netlink_route_socket pig=18368 comm=syz-executor.5 06:10:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x800, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000180)=0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r5 = socket$inet6(0xa, 0x809, 0xff) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000001c0)={0xfffffffe, 0x43353039, 0x9, 0x400, 0x1, @discrete={0xfff, 0x73a15317}}) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:50 executing program 3 (fault-call:12 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf990000, 0x100, 0x8000, r5, 0x0, &(0x7f00000000c0)={0x9a0921, 0x40, [], @value=0x4}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r8, 0xa05}, 0x14}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x3c}}, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r20, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r22}]}, 0x3c}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r25}]}, 0x3c}}, 0x0) r26 = socket$netlink(0x10, 0x3, 0x0) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r26, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r28}]}, 0x3c}}, 0x0) r29 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r29, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r29, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r31, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r33}]}, 0x3c}}, 0x0) r34 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r34, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r34, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @loopback, @dev}, &(0x7f00000009c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@remote}}, &(0x7f0000000a00)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001580)=0x14) r39 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r39, &(0x7f00000017c0), 0x1d0, 0x0) getsockname$packet(r39, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001880)={@dev, @rand_addr, 0x0}, &(0x7f00000018c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', 0x0}) r43 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r43, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet_pktinfo(r43, 0x0, 0x8, &(0x7f0000001940)={0x0, @rand_addr, @broadcast}, &(0x7f0000001980)=0xc) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000002080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="7c060000", @ANYRES16=r8, @ANYBLOB="200029bd7000fbdbdf250000000008000100", @ANYRES32=r11, @ANYBLOB="6801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffff000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004009d06720703000000080004810100008040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400b73f9b4d08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r22, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r33, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r35, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r36, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r37, @ANYBLOB="08000100", @ANYRES32=r38, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000001038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r40, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000f0c000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r41, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r42, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r44, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x67c}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r45 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r45, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r45, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r45, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:50 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032abd7000fbdbdf250a0000006c00048014000780080002000900000008000400020000001300010062726f6164636173742d6c696e6b00000900010073797a30000000001c00078008000300d46700000800010001000000080001000b0000000900010073797a30000000000900010073797a3100000000"], 0x80}}, 0x40080c1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x5) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:10:50 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f0000001280)=@alg, 0x80, &(0x7f0000001300)=[{&(0x7f0000000080)=""/57, 0x39}], 0x1}, 0xa3b}, {{&(0x7f0000001340)=@tipc=@name, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/16, 0x10}, {&(0x7f0000001400)=""/4, 0x4}, {&(0x7f0000001440)=""/75, 0x4b}, {&(0x7f00000014c0)=""/154, 0x9a}, {&(0x7f0000001580)=""/32, 0x20}], 0x5, &(0x7f0000001640)=""/70, 0x46}, 0xff}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000016c0)=""/148, 0x94}, {&(0x7f0000001780)=""/117, 0x75}, {&(0x7f0000001800)=""/67, 0x43}, {&(0x7f0000001880)=""/94, 0x5e}, {&(0x7f0000001900)=""/248, 0xf8}, {&(0x7f0000001a00)=""/223, 0xdf}, {&(0x7f0000001b00)=""/249, 0xf9}, {&(0x7f0000001c00)=""/217, 0xd9}, {&(0x7f0000001d00)=""/21, 0x15}], 0x9, &(0x7f0000001e00)=""/234, 0xea}, 0x1000}, {{&(0x7f0000001f00)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001f80)=""/1, 0x1}, {&(0x7f0000001fc0)=""/91, 0x5b}, {&(0x7f0000002040)=""/223, 0xdf}, {&(0x7f0000002140)=""/99, 0x63}], 0x4, &(0x7f0000002200)=""/114, 0x72}, 0x800}, {{&(0x7f0000002280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002300), 0x0, &(0x7f0000002340)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000003340)=@nl=@proc, 0x80, &(0x7f0000003440)=[{&(0x7f00000033c0)=""/78, 0x4e}], 0x1, &(0x7f0000003480)=""/153, 0x99}, 0xfffffff8}, {{&(0x7f0000003540)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004700)=[{&(0x7f00000035c0)=""/18, 0x12}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/106, 0x6a}, {&(0x7f0000004680)=""/15, 0xf}, {&(0x7f00000046c0)=""/52, 0x34}], 0x5, &(0x7f0000004780)=""/171, 0xab}, 0x2}], 0x7, 0x10102, &(0x7f0000004a00)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000004a40)='lp\x00', 0x3) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) ftruncate(r2, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000180)='}eth0keyring\x00', 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000140)) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup(r4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x1000, "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"}, &(0x7f0000001240)=0x1024) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000b41ef40000000000000078"]) sendfile(r0, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 423.733283] FAULT_INJECTION: forcing a failure. [ 423.733283] name failslab, interval 1, probability 0, space 0, times 0 [ 423.744685] CPU: 0 PID: 18393 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 423.752618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.761973] Call Trace: [ 423.764615] dump_stack+0x142/0x197 [ 423.768263] should_fail.cold+0x10f/0x159 [ 423.772449] should_failslab+0xdb/0x130 [ 423.776444] kmem_cache_alloc+0x47/0x780 [ 423.780510] ? save_trace+0x290/0x290 [ 423.784317] ? find_held_lock+0x35/0x130 [ 423.788389] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 423.793939] dst_alloc+0xf3/0x1a0 [ 423.797402] rt_dst_alloc+0x73/0x440 [ 423.801127] ip_route_output_key_hash_rcu+0x731/0x2750 [ 423.806408] ? check_preemption_disabled+0x3c/0x250 [ 423.811443] ip_route_output_key_hash+0x1c0/0x2e0 [ 423.816295] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 423.819633] audit: type=1400 audit(1579932650.322:139): avc: denied { write } for pid=18394 comm="syz-executor.1" name="net" dev="proc" ino=61879 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 423.821833] ? udp_sendmsg+0xfb7/0x1da0 [ 423.821857] ip_route_output_flow+0x27/0xa0 [ 423.821869] udp_sendmsg+0x14a1/0x1da0 [ 423.821880] ? lock_downgrade+0x740/0x740 [ 423.821890] ? ip_reply_glue_bits+0xb0/0xb0 [ 423.821901] ? udp4_seq_show+0x520/0x520 [ 423.821910] ? save_trace+0x290/0x290 [ 423.821918] ? save_trace+0x290/0x290 [ 423.821926] ? copy_page_range+0x1de0/0x1de0 [ 423.821939] ? avc_has_perm+0x273/0x4b0 [ 423.821959] ? lock_downgrade+0x740/0x740 [ 423.821974] udpv6_sendmsg+0x1393/0x2610 [ 423.821991] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 423.822006] ? rw_copy_check_uvector+0x1f1/0x290 [ 423.906415] ? sock_has_perm+0x1ed/0x280 [ 423.910483] ? selinux_tun_dev_create+0xc0/0xc0 [ 423.915169] ? dup_iter+0x260/0x260 [ 423.918808] ? copy_msghdr_from_user+0x292/0x3f0 [ 423.923567] inet_sendmsg+0x122/0x500 [ 423.927372] ? inet_sendmsg+0x122/0x500 [ 423.931343] ? inet_recvmsg+0x500/0x500 [ 423.935319] sock_sendmsg+0xce/0x110 [ 423.939042] ___sys_sendmsg+0x349/0x840 [ 423.943277] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 423.948033] ? find_held_lock+0x35/0x130 [ 423.952127] ? __fget+0x210/0x370 [ 423.955599] ? lock_downgrade+0x740/0x740 [ 423.959768] ? __fget+0x237/0x370 [ 423.963248] ? __fget_light+0x172/0x1f0 [ 423.967353] ? __fdget+0x1b/0x20 [ 423.970730] ? sockfd_lookup_light+0xb4/0x160 [ 423.975237] __sys_sendmmsg+0x152/0x3a0 [ 423.979240] ? SyS_sendmsg+0x50/0x50 [ 423.982970] ? lock_downgrade+0x740/0x740 [ 423.987142] ? __mutex_unlock_slowpath+0x71/0x800 [ 423.992154] ? check_preemption_disabled+0x3c/0x250 [ 423.997189] ? wait_for_completion+0x420/0x420 [ 424.001785] ? __sb_end_write+0xc1/0x100 [ 424.005966] ? SyS_write+0x15e/0x230 [ 424.009696] SyS_sendmmsg+0x35/0x60 [ 424.013331] ? __sys_sendmmsg+0x3a0/0x3a0 [ 424.015578] audit: type=1400 audit(1579932650.362:140): avc: denied { add_name } for pid=18394 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 424.017491] do_syscall_64+0x1e8/0x640 [ 424.017509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.017529] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 424.017538] RIP: 0033:0x45b349 [ 424.017543] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 424.017555] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 424.017559] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 06:10:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0xffff, 0xb, 0x4, 0x70000, 0x7ff, {}, {0x2, 0x1, 0x3, 0x0, 0x80, 0x81, "ce07ff55"}, 0x121, 0x3, @offset=0xfc34, 0xb9bc, 0x0, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) sendto$inet(r4, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x75, &(0x7f0000000100)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r6, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={r7, 0xcce}, 0x8) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) [ 424.017583] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 424.051483] audit: type=1400 audit(1579932650.362:141): avc: denied { create } for pid=18394 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 424.055202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 424.055209] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000000 06:10:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:50 executing program 3 (fault-call:12 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb0ce}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffefffffffc]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:10:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r5, &(0x7f00000017c0), 0x1d0, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "14a53eb060330556", "1eceb72d54e2347547cf59d3ebb129a377d2d03ef755d2c3a09c33372954066b", "6dab1969", "c4c1cf29849af6c3"}, 0x38) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r6, &(0x7f00000017c0), 0x1d0, 0x0) sendmsg$unix(r6, &(0x7f00000001c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000b00)="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", 0x1000}], 0x1}, 0x49) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:51 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x5ab7, 0x7403}) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 424.797735] FAULT_INJECTION: forcing a failure. [ 424.797735] name failslab, interval 1, probability 0, space 0, times 0 [ 424.809198] CPU: 0 PID: 18461 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 424.817161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.826645] Call Trace: [ 424.829257] dump_stack+0x142/0x197 [ 424.832903] should_fail.cold+0x10f/0x159 [ 424.837063] should_failslab+0xdb/0x130 [ 424.841040] kmem_cache_alloc_node+0x287/0x780 [ 424.845677] ? __save_stack_trace+0x7b/0xd0 [ 424.850028] __alloc_skb+0x9c/0x500 [ 424.853681] ? skb_trim+0x180/0x180 [ 424.857471] ? save_stack+0xa9/0xd0 [ 424.861114] alloc_skb_with_frags+0x86/0x4b0 [ 424.865552] ? __lock_acquire+0x5f7/0x4620 [ 424.869802] ? inet_sendmsg+0x122/0x500 [ 424.873794] ? sock_sendmsg+0xce/0x110 [ 424.877703] sock_alloc_send_pskb+0x5db/0x740 [ 424.882569] ? trace_hardirqs_on+0x10/0x10 [ 424.886821] ? sock_wmalloc+0xf0/0xf0 [ 424.890933] ? save_trace+0x290/0x290 [ 424.894814] ? fib_rules_lookup+0x308/0x950 [ 424.899152] ? save_trace+0x290/0x290 [ 424.902964] ? find_held_lock+0x35/0x130 [ 424.907040] ? rt_add_uncached_list+0x139/0x190 [ 424.911812] ? find_held_lock+0x35/0x130 [ 424.915893] sock_alloc_send_skb+0x32/0x40 [ 424.920156] __ip_append_data.isra.0+0x1227/0x20f0 [ 424.925103] ? __local_bh_enable_ip+0x99/0x1a0 [ 424.929702] ? trace_hardirqs_on+0xd/0x10 [ 424.933871] ? ip_reply_glue_bits+0xb0/0xb0 [ 424.938219] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 424.943960] ? ipv4_mtu+0x25e/0x3a0 [ 424.947601] ? ip_reply_glue_bits+0xb0/0xb0 [ 424.952035] ip_make_skb+0x17a/0x1d0 [ 424.955771] ? ip_flush_pending_frames+0x30/0x30 [ 424.960558] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 424.966142] ? udp_sendmsg+0xfb7/0x1da0 [ 424.970218] ? xfrm_lookup_route+0x48/0x1b0 [ 424.974559] udp_sendmsg+0x16a6/0x1da0 [ 424.978487] ? lock_downgrade+0x740/0x740 [ 424.982655] ? ip_reply_glue_bits+0xb0/0xb0 [ 424.986999] ? udp4_seq_show+0x520/0x520 [ 424.991092] ? save_trace+0x290/0x290 [ 424.994947] ? save_trace+0x290/0x290 [ 424.998764] ? copy_page_range+0x1de0/0x1de0 [ 425.003193] ? avc_has_perm+0x273/0x4b0 [ 425.007195] ? lock_downgrade+0x740/0x740 [ 425.011476] udpv6_sendmsg+0x1393/0x2610 [ 425.015563] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 425.020860] ? rw_copy_check_uvector+0x1f1/0x290 [ 425.025642] ? sock_has_perm+0x1ed/0x280 [ 425.029738] ? selinux_tun_dev_create+0xc0/0xc0 [ 425.034431] ? dup_iter+0x260/0x260 [ 425.038117] ? copy_msghdr_from_user+0x292/0x3f0 [ 425.042903] inet_sendmsg+0x122/0x500 [ 425.046719] ? inet_sendmsg+0x122/0x500 [ 425.050714] ? inet_recvmsg+0x500/0x500 [ 425.054704] sock_sendmsg+0xce/0x110 [ 425.058638] ___sys_sendmsg+0x349/0x840 [ 425.062637] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 425.067416] ? find_held_lock+0x35/0x130 [ 425.071493] ? __fget+0x210/0x370 [ 425.074968] ? lock_downgrade+0x740/0x740 [ 425.079136] ? __fget+0x237/0x370 [ 425.082608] ? __fget_light+0x172/0x1f0 [ 425.086598] ? __fdget+0x1b/0x20 [ 425.090189] ? sockfd_lookup_light+0xb4/0x160 [ 425.094699] __sys_sendmmsg+0x152/0x3a0 06:10:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 425.098693] ? SyS_sendmsg+0x50/0x50 [ 425.102423] ? lock_downgrade+0x740/0x740 [ 425.106595] ? __mutex_unlock_slowpath+0x71/0x800 [ 425.111584] ? check_preemption_disabled+0x3c/0x250 [ 425.116627] ? wait_for_completion+0x420/0x420 [ 425.121224] ? __sb_end_write+0xc1/0x100 [ 425.125290] ? SyS_write+0x15e/0x230 [ 425.129017] SyS_sendmmsg+0x35/0x60 [ 425.132772] ? __sys_sendmmsg+0x3a0/0x3a0 [ 425.137078] do_syscall_64+0x1e8/0x640 [ 425.140976] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.145887] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 425.151083] RIP: 0033:0x45b349 [ 425.154267] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 425.162005] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 425.169283] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 425.176573] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 425.183891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 425.191161] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000001 06:10:51 executing program 0: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x5, @remote}}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5415, 0x0) 06:10:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14}, &(0x7f0000000040)) timer_delete(0x0) 06:10:51 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x700, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x80}, 0x10) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f0000002100)=[{{&(0x7f0000000180)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000340)="4133ec7ee3314b8641c1c80034dd257b52c7e408567fa99491b5124a0523b9aea2f6dd4aae85d02feb7289cd35c8ec0a0a1b3f3ee547d96db6ecce56c4a36f2f39665d4bfabee67eca2c93c3cb9c7cc867076149a8d01c75be4bb89526768f043ceb53ab612919e4a3e9b416a36b7b562585c24995d0d1c089f81f75859ffe395ca228acf0874545f05229660895c695a6146675f5d85b050f3366cae7908bb2090d2be0e9fda894b974fb1089fb4a1a73d96168db5d0f19e85799d1af0d92a9185c0f068c77731a8054cd6984a5000fe1dc01bd23c63aa3705d32d4f54828dd986086b5e28d26b3f6dd161f6cb536", 0xef}], 0x2, &(0x7f0000001b00)=[{0x80, 0x105, 0xa9, "bde444cfa9a665e31eecfeecf5467265d94b328ff41abc3bb28af304e8e39362c145dd7ca286e5bdf528a8e3108a3ffc56e385d54404e6e12c64b04745f6b83163e74e11d6961017d77820d163422b0e6f48f4ccc309a53b3a628566438833aacdd5c6794b9bc9a990c78d3d17ed2d"}, {0x58, 0x6, 0x200, "f3ecb1f62b49e16598a1727e308f1cf6148a7da756c3a63e4b179987ae93d83ae275f02c081643742726f28327e82f5666c0f6dfd166ede807cdd03623d8f16ac685e1"}, {0xc8, 0x119, 0x1, "0f937918405ec2d55f3815022ecc87d75b44cb406cdb79941783e04e9582ccfe7bd2b1665a9d5a355e2554b6aea9542c33bfca75eb7e01bbd49e584965da5053bcdb8cd2a17c4b4202fc84edaa8ee591365e54c2cd50108920987c5e711e634343d77ff882bd61ff6e52b9e30696d2c5ce953c8408537a6a83d9a148089bb622e5f72a44ab0c083039f582a7186e9b82e926ba313ae3de11fdb17ce04ba63af1c17b244d66786658251f9dab81a11b723e227ca0871d11e7"}, {0xb8, 0x104, 0x0, "86cdc1227ae33653fca4d787ba579e4609c46a4f201686fd0d9c9711576d2d5d05cda6418da9d07e4bd670cfc2a09ca67b0ffbe76d6fd6a2d83cb32ffa50087bda1edd294c848834619eb5268c6579998c988dc5fec10ebbda3dae1f54cc1c4b97f4a675713f2abe9747c38b5a27048b061730412de5e86732809798a7fdc1ed34c686747a4cd54778b9b14038606da43226a35189deec1a5893f4370659abb7b221"}], 0x258}}, {{&(0x7f00000005c0)=@llc={0x1a, 0x325, 0x84, 0x6, 0xeb, 0x3f, @random="b1d4d9d72065"}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="c34b11337bc6157ec52c4e7e51b96fe812b077ad49b85d304171fb07e2ed7bb57f0c31fada279e039c3f31665f109be6068c2ac71967ca801b8b380eee38ee5feaccc47a53", 0x45}, {&(0x7f00000009c0)="65d33be89e91cfbf186c07965d905f7acad0a53d4c91d0b3c34856daeb5b7e97f79671397853672ae392fc293310be2d8036c26cafb1634b6fc7d0d3549665edcd021033561c8170ae1615351bc2684d07f1d635cde8a4572e0ce5d37d87839ee5be3947b243575bf1c60e101394d3d16f0051cebb7fee2bb4b9a88ea68927b1b3097644", 0x84}, {&(0x7f0000001d80)="e6bc72846627e916011c87607c0e619d77f81ffca4e70e9479500a00e8936071971a8f5027ae63af31bc61e9ed1658b9433a5fd1a530dc502c223cfbb60f5e51bf1765c85d767dc2996c70ba330f8818c3aae00188376a50da8eb28f5f4b25c4fbae02ca93f9487958e6a2d6042c2da6d76a0edfa5319c416cc82326ee31d32f19a495d8cdaa8dd34d2c7e41d66b88b78af05350e5a85b41dc5b1577e02f0d0df4012ac1bc32107a1c4279378cacb676e3ca6baf0d102e550561a943cdf65e54ea1931ea4ab78be96291a589ca8af4638a351965364ca1bf75e99f032ea2fb45aa25d44d737c4e06ce74568dfce74ee9d26aec", 0xf3}], 0x3, &(0x7f0000001e80)=[{0x110, 0x100, 0x1, "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"}, {0xa0, 0x111, 0xfffffffb, "3e17b7e2d08fdffd820f6b911a65378b781c8b8b609d86202be28f96957f53459083ace31500749ded82db41527212f567afb2eafb5c489e67f3dc3fbd5ce412e0683be20222b511d803faa6b24f7bd619b8d8d25c19757b0a63c0f76a22dd3b5165b5a28ddcb6222a3238eae17b1a072e4abdd05892dbd56fc8f388ffa32933ce060c8d816ca253b7e82c"}, {0x38, 0x103, 0x5, "b62430582d1340d25558770935ae0c1ca89f1baa3cf03804eee01935ddb6687f91a7718fccc61e"}, {0x18, 0x29, 0xc2, "8a4f9a6466b64877"}, {0x68, 0x113, 0x81, "cafcd03ccd77a2f9b013e5a4ce4721571e0888789ebd700d5dcd67af33b438e149491728779d723dbdc63243371473270fe1437960269d863e526c289c7b651dc375daae31142a287b83b517a8fbcbcbf505056d4ce6"}], 0x268}}], 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:51 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), 0x4) 06:10:52 executing program 3 (fault-call:12 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:52 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x8, 0x8, 0x7, 0x1}, 0x6) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:52 executing program 0: tkill(0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x5, @remote}}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5415, 0x0) 06:10:52 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x80000001}, &(0x7f00000000c0)=0x8) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200003e8, 0x0, 0x0) [ 425.665253] FAULT_INJECTION: forcing a failure. [ 425.665253] name failslab, interval 1, probability 0, space 0, times 0 [ 425.676859] CPU: 1 PID: 18527 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 425.684910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.694289] Call Trace: [ 425.696908] dump_stack+0x142/0x197 [ 425.700566] should_fail.cold+0x10f/0x159 [ 425.704927] should_failslab+0xdb/0x130 [ 425.708963] kmem_cache_alloc_node_trace+0x280/0x770 [ 425.714205] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 425.719687] __kmalloc_node_track_caller+0x3d/0x80 [ 425.724635] __kmalloc_reserve.isra.0+0x40/0xe0 [ 425.729536] __alloc_skb+0xcf/0x500 [ 425.733176] ? skb_trim+0x180/0x180 [ 425.736820] ? save_stack+0xa9/0xd0 [ 425.740997] alloc_skb_with_frags+0x86/0x4b0 [ 425.745488] ? __lock_acquire+0x5f7/0x4620 [ 425.749862] ? inet_sendmsg+0x122/0x500 [ 425.753851] ? sock_sendmsg+0xce/0x110 [ 425.757756] sock_alloc_send_pskb+0x5db/0x740 [ 425.762276] ? trace_hardirqs_on+0x10/0x10 [ 425.766962] ? sock_wmalloc+0xf0/0xf0 [ 425.770772] ? save_trace+0x290/0x290 [ 425.774580] ? fib_rules_lookup+0x308/0x950 [ 425.779021] ? save_trace+0x290/0x290 [ 425.782826] ? find_held_lock+0x35/0x130 [ 425.786903] ? rt_add_uncached_list+0x139/0x190 [ 425.791585] ? find_held_lock+0x35/0x130 [ 425.795659] sock_alloc_send_skb+0x32/0x40 [ 425.799913] __ip_append_data.isra.0+0x1227/0x20f0 [ 425.804967] ? __local_bh_enable_ip+0x99/0x1a0 [ 425.810170] ? trace_hardirqs_on+0xd/0x10 [ 425.814471] ? ip_reply_glue_bits+0xb0/0xb0 [ 425.818826] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 425.824547] ? ipv4_mtu+0x25e/0x3a0 [ 425.828192] ? ip_reply_glue_bits+0xb0/0xb0 [ 425.832613] ip_make_skb+0x17a/0x1d0 [ 425.836329] ? ip_flush_pending_frames+0x30/0x30 [ 425.841090] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 425.846798] ? udp_sendmsg+0xfb7/0x1da0 [ 425.850788] ? xfrm_lookup_route+0x48/0x1b0 [ 425.855132] udp_sendmsg+0x16a6/0x1da0 [ 425.859045] ? lock_downgrade+0x740/0x740 [ 425.863211] ? ip_reply_glue_bits+0xb0/0xb0 [ 425.867553] ? udp4_seq_show+0x520/0x520 [ 425.871632] ? save_trace+0x290/0x290 [ 425.875534] ? save_trace+0x290/0x290 [ 425.879343] ? copy_page_range+0x1de0/0x1de0 [ 425.883792] ? avc_has_perm+0x273/0x4b0 [ 425.887790] ? lock_downgrade+0x740/0x740 [ 425.892045] udpv6_sendmsg+0x1393/0x2610 [ 425.896138] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 425.901431] ? rw_copy_check_uvector+0x1f1/0x290 [ 425.906253] ? sock_has_perm+0x1ed/0x280 [ 425.910510] ? selinux_tun_dev_create+0xc0/0xc0 [ 425.915192] ? dup_iter+0x260/0x260 [ 425.918837] ? copy_msghdr_from_user+0x292/0x3f0 [ 425.923728] inet_sendmsg+0x122/0x500 [ 425.927583] ? inet_sendmsg+0x122/0x500 [ 425.931579] ? inet_recvmsg+0x500/0x500 [ 425.935568] sock_sendmsg+0xce/0x110 [ 425.939295] ___sys_sendmsg+0x349/0x840 [ 425.943283] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 425.948050] ? find_held_lock+0x35/0x130 [ 425.952126] ? __fget+0x210/0x370 [ 425.955599] ? lock_downgrade+0x740/0x740 [ 425.959771] ? __fget+0x237/0x370 [ 425.963239] ? __fget_light+0x172/0x1f0 [ 425.967317] ? __fdget+0x1b/0x20 [ 425.970700] ? sockfd_lookup_light+0xb4/0x160 [ 425.975212] __sys_sendmmsg+0x152/0x3a0 [ 425.979196] ? SyS_sendmsg+0x50/0x50 [ 425.982927] ? lock_downgrade+0x740/0x740 [ 425.987104] ? __mutex_unlock_slowpath+0x71/0x800 [ 425.992001] ? check_preemption_disabled+0x3c/0x250 [ 425.997047] ? wait_for_completion+0x420/0x420 [ 426.001852] ? __sb_end_write+0xc1/0x100 [ 426.006017] ? SyS_write+0x15e/0x230 [ 426.009847] SyS_sendmmsg+0x35/0x60 [ 426.013624] ? __sys_sendmmsg+0x3a0/0x3a0 [ 426.017893] do_syscall_64+0x1e8/0x640 [ 426.021798] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.026655] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 426.031847] RIP: 0033:0x45b349 [ 426.035041] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.042854] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 426.050131] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 426.057516] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 06:10:52 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xfffffffc, [0x8, 0x10001], 0x20}, 0x10) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x5, 0x1ff, 0x4, 0xff}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) write(r0, &(0x7f0000000100)="947f373f7ec815eac322925c90ab0e7446437b49c1655e4105bbd0fa9eb476cbf3c884edefaaa790f8f75dd64da6c5b076a5a4f504bbcc51ee007e66fe12b80abd67c36237fb0ae9ced7e2e75793499d2a1b4bb01ef2d20f2034f4872cb821b48a803913bba071b69f7639ba5af398e39f81ae5af01f6842b068c670347a3bcdf27d1ad11f2953d82b736fabaed7e7b3fe2202b0b4b49ff81b7c982fdab796637ea4b89a2d", 0xa5) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:52 executing program 2: getpid() memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sync() sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clock_adjtime(0x2, &(0x7f0000000100)={0x8, 0x9, 0x3, 0x8d, 0x1f, 0x0, 0x0, 0x7, 0x3, 0xe49, 0x20, 0x8, 0xfffffffffffffffd, 0x693d, 0x6, 0xfffffffffffffffd, 0x9, 0x20, 0x401, 0x3, 0x10000, 0x81, 0x0, 0x200, 0x5, 0x518}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) 06:10:52 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) getsockopt$inet6_dccp_int(r0, 0x21, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x8d, &(0x7f0000000000)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8000, r2, &(0x7f0000000040)="0149919626801554b38255f188", 0xd, 0x5, 0x0, 0x2}, &(0x7f0000000100)) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r3, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 426.064885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 426.072193] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000002 06:10:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x2d, &(0x7f0000000180)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x280800, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r5, 0x80044dfc, &(0x7f0000000100)) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x400001) 06:10:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x892, 0x1ae) 06:10:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 426.286642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 426.297775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.305370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:10:52 executing program 3 (fault-call:12 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x3a00096}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40061}, 0x4004800) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) r7 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x9, 0x8002, 0x0, 0x4, 0xfffff000, 0x4, 0x7ff, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000340)={r8, @in={{0x2, 0x4e21, @remote}}, 0x6173, 0x29, 0x7, 0x3, 0x40, 0x2, 0x7f}, &(0x7f0000000400)=0x9c) 06:10:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 426.586046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 426.607784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:10:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0xa, 0x0, 0x0) 06:10:53 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x81) gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x1, 0x0, 0x9, 0x0, 0x7fffffff, 0x40, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x282d, 0x0, 0x0, 0x0, 0x6, 0x5, 0x1}, r2, 0x7, r0, 0x2) pipe(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) close(r1) [ 426.707184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.750385] FAULT_INJECTION: forcing a failure. [ 426.750385] name failslab, interval 1, probability 0, space 0, times 0 [ 426.762316] CPU: 0 PID: 18600 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 426.770303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.779668] Call Trace: [ 426.782372] dump_stack+0x142/0x197 [ 426.786070] should_fail.cold+0x10f/0x159 [ 426.790220] ? trace_hardirqs_on_caller+0x19b/0x590 [ 426.795256] should_failslab+0xdb/0x130 [ 426.799250] kmem_cache_alloc+0x47/0x780 [ 426.803422] skb_clone+0x129/0x320 [ 426.807135] neigh_probe+0x59/0x100 [ 426.810911] __neigh_event_send+0x2e4/0xe80 [ 426.815654] ? netlbl_enabled+0x9/0x60 [ 426.819628] ? selinux_peerlbl_enabled+0xa2/0xd0 [ 426.824398] neigh_resolve_output+0x529/0x8a0 [ 426.829104] ? check_preemption_disabled+0x3c/0x250 [ 426.834163] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 426.840244] ip_finish_output2+0x766/0x14a0 [ 426.844671] ? ip_output+0x3a4/0x590 [ 426.848486] ? find_held_lock+0x35/0x130 [ 426.852564] ? ip_copy_metadata+0x9b0/0x9b0 [ 426.856921] ip_finish_output+0x56d/0xc60 [ 426.861089] ? ip_finish_output+0x56d/0xc60 [ 426.865434] ip_output+0x1e6/0x590 [ 426.869097] ? ip_mc_output+0xd40/0xd40 [ 426.873282] ? ip_fragment.constprop.0+0x200/0x200 [ 426.878221] ? ip_flush_pending_frames+0x30/0x30 [ 426.883275] ip_local_out+0x97/0x170 [ 426.887091] ip_send_skb+0x3e/0xc0 [ 426.890651] udp_send_skb+0x616/0xb90 [ 426.894455] ? xfrm_lookup_route+0x48/0x1b0 [ 426.899493] udp_sendmsg+0x16df/0x1da0 [ 426.903442] ? lock_downgrade+0x740/0x740 [ 426.907594] ? ip_reply_glue_bits+0xb0/0xb0 [ 426.911933] ? udp4_seq_show+0x520/0x520 [ 426.916010] ? save_trace+0x290/0x290 [ 426.919922] ? save_trace+0x290/0x290 [ 426.923748] ? copy_page_range+0x1de0/0x1de0 [ 426.928151] ? avc_has_perm+0x273/0x4b0 [ 426.932224] ? lock_downgrade+0x740/0x740 [ 426.936375] udpv6_sendmsg+0x1393/0x2610 [ 426.940448] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 426.945727] ? rw_copy_check_uvector+0x1f1/0x290 [ 426.950549] ? sock_has_perm+0x1ed/0x280 [ 426.954620] ? selinux_tun_dev_create+0xc0/0xc0 [ 426.959293] ? dup_iter+0x260/0x260 [ 426.962916] ? copy_msghdr_from_user+0x292/0x3f0 [ 426.967681] inet_sendmsg+0x122/0x500 [ 426.971492] ? inet_sendmsg+0x122/0x500 [ 426.975468] ? inet_recvmsg+0x500/0x500 [ 426.979453] sock_sendmsg+0xce/0x110 [ 426.983174] ___sys_sendmsg+0x349/0x840 [ 426.987166] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 426.991982] ? find_held_lock+0x35/0x130 [ 426.996048] ? __fget+0x210/0x370 [ 426.999516] ? lock_downgrade+0x740/0x740 [ 427.003794] ? __fget+0x237/0x370 [ 427.007360] ? __fget_light+0x172/0x1f0 [ 427.011349] ? __fdget+0x1b/0x20 [ 427.014710] ? sockfd_lookup_light+0xb4/0x160 [ 427.019199] __sys_sendmmsg+0x152/0x3a0 [ 427.023176] ? SyS_sendmsg+0x50/0x50 [ 427.026911] ? lock_downgrade+0x740/0x740 [ 427.031068] ? __mutex_unlock_slowpath+0x71/0x800 [ 427.035932] ? check_preemption_disabled+0x3c/0x250 [ 427.040942] ? wait_for_completion+0x420/0x420 [ 427.045567] ? __sb_end_write+0xc1/0x100 [ 427.049640] ? SyS_write+0x15e/0x230 [ 427.053352] SyS_sendmmsg+0x35/0x60 [ 427.056962] ? __sys_sendmmsg+0x3a0/0x3a0 [ 427.061110] do_syscall_64+0x1e8/0x640 [ 427.065084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.069938] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 427.075118] RIP: 0033:0x45b349 [ 427.078297] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 427.086107] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 427.093520] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 427.100787] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 427.108055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 427.115320] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000003 06:10:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000001c0)='./file0\x00') openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:10:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:53 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) fcntl$getown(r0, 0x9) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x51, 0x10000000000, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x24}, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000001400140076657468315f746f5f68737200000073ff001b00"/36], 0x3c}}, 0x0) fsetxattr$security_evm(r6, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000180)=@v1={0x2, 'O'}, 0x2, 0x1) 06:10:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x10001, 0x1, &(0x7f0000000580)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000400010002000270fff8", 0x16}], 0x0, 0x0) [ 427.374903] FAT-fs (loop2): bogus sectors per cluster 0 [ 427.380823] FAT-fs (loop2): Can't find a valid FAT filesystem [ 427.408933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.418463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.426780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:10:54 executing program 3 (fault-call:12 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 427.501958] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 06:10:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000140)) 06:10:54 executing program 0: socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 06:10:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(r1, 0x10, 0x0, 0x8) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) syz_emit_ethernet(0x314b, &(0x7f0000004380)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 427.689131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:10:54 executing program 2: socket$inet6(0xa, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x1c28}) r0 = socket$inet6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) shutdown(r0, 0x0) [ 427.744868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.793169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.811073] FAULT_INJECTION: forcing a failure. [ 427.811073] name failslab, interval 1, probability 0, space 0, times 0 [ 427.822628] CPU: 0 PID: 18668 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 427.830540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.839996] Call Trace: [ 427.842614] dump_stack+0x142/0x197 [ 427.846269] should_fail.cold+0x10f/0x159 [ 427.850452] should_failslab+0xdb/0x130 [ 427.854569] kmem_cache_alloc+0x47/0x780 [ 427.858633] ? save_trace+0x290/0x290 [ 427.862549] ? find_held_lock+0x35/0x130 [ 427.866621] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 427.872168] dst_alloc+0xf3/0x1a0 [ 427.875632] rt_dst_alloc+0x73/0x440 [ 427.879447] ip_route_output_key_hash_rcu+0x731/0x2750 [ 427.884732] ? check_preemption_disabled+0x3c/0x250 [ 427.889765] ip_route_output_key_hash+0x1c0/0x2e0 [ 427.894620] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 427.900173] ? udp_sendmsg+0xfb7/0x1da0 [ 427.904161] ip_route_output_flow+0x27/0xa0 [ 427.908495] udp_sendmsg+0x14a1/0x1da0 [ 427.912395] ? __lock_acquire+0x5f7/0x4620 [ 427.916656] ? ip_reply_glue_bits+0xb0/0xb0 [ 427.921026] ? udp4_seq_show+0x520/0x520 [ 427.925111] ? save_trace+0x290/0x290 [ 427.928927] ? avc_has_perm+0x273/0x4b0 [ 427.933056] ? lock_downgrade+0x740/0x740 [ 427.937219] udpv6_sendmsg+0x1393/0x2610 [ 427.941311] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 427.946590] ? rw_copy_check_uvector+0x1f1/0x290 [ 427.951350] ? sock_has_perm+0x1ed/0x280 [ 427.955438] ? selinux_tun_dev_create+0xc0/0xc0 [ 427.960120] ? dup_iter+0x260/0x260 [ 427.963757] ? copy_msghdr_from_user+0x292/0x3f0 [ 427.968550] ? save_trace+0x290/0x290 [ 427.972460] inet_sendmsg+0x122/0x500 [ 427.976283] ? inet_sendmsg+0x122/0x500 [ 427.980268] ? inet_recvmsg+0x500/0x500 [ 427.984256] sock_sendmsg+0xce/0x110 [ 427.987999] ___sys_sendmsg+0x349/0x840 [ 427.991987] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 427.997559] ? up_read+0x1a/0x40 [ 428.000936] ? __do_page_fault+0x358/0xb80 [ 428.005180] ? retint_kernel+0x2d/0x2d [ 428.009579] ? trace_hardirqs_on_caller+0x400/0x590 [ 428.014610] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 428.019465] ? retint_kernel+0x2d/0x2d [ 428.023392] __sys_sendmmsg+0x152/0x3a0 [ 428.027383] ? SyS_sendmsg+0x50/0x50 [ 428.031105] ? lock_downgrade+0x740/0x740 [ 428.035273] ? __mutex_unlock_slowpath+0x71/0x800 [ 428.040387] ? check_preemption_disabled+0x3c/0x250 [ 428.045414] ? wait_for_completion+0x420/0x420 [ 428.050004] ? __sb_end_write+0xc1/0x100 [ 428.054081] ? SyS_write+0x15e/0x230 [ 428.057809] SyS_sendmmsg+0x35/0x60 [ 428.061449] ? __sys_sendmmsg+0x3a0/0x3a0 [ 428.065603] do_syscall_64+0x1e8/0x640 [ 428.069672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.074549] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.079741] RIP: 0033:0x45b349 [ 428.082928] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 06:10:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:54 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), 0x4) 06:10:54 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc0000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0040000000ff4498fc714f6100001400140076657468315f746f5f6873720000000008001b000000f900"], 0x3c}}, 0x0) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5a1a54b3fe) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 428.090647] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 428.097933] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 428.105213] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 428.112490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 428.119820] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000004 06:10:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/207, 0xcf}], 0x5, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macsec0\x00', 0x4}, 0x18) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:54 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5406, 0x0) 06:10:54 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sync() sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffff439}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) [ 428.379427] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 428.439467] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 06:10:55 executing program 3 (fault-call:12 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r0, r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 06:10:55 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, 0x0, &(0x7f0000000080)) 06:10:55 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000840)=""/62, 0x3e}, {&(0x7f00000008c0)=""/207, 0xcf}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/1, 0x1}, {&(0x7f00000005c0)=""/134, 0x86}], 0x8, &(0x7f0000000100)=""/57, 0x39}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}, 0x3}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:10:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000e40)={0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x9c) [ 428.762285] FAULT_INJECTION: forcing a failure. [ 428.762285] name failslab, interval 1, probability 0, space 0, times 0 [ 428.773917] CPU: 1 PID: 18753 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 428.781845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.791216] Call Trace: [ 428.793837] dump_stack+0x142/0x197 [ 428.797480] should_fail.cold+0x10f/0x159 [ 428.801650] should_failslab+0xdb/0x130 [ 428.805646] kmem_cache_alloc_node+0x287/0x780 [ 428.810241] ? __save_stack_trace+0x7b/0xd0 [ 428.814583] __alloc_skb+0x9c/0x500 [ 428.818230] ? skb_trim+0x180/0x180 [ 428.821931] ? save_stack+0xa9/0xd0 [ 428.825575] alloc_skb_with_frags+0x86/0x4b0 [ 428.830101] ? __lock_acquire+0x5f7/0x4620 [ 428.834345] ? inet_sendmsg+0x122/0x500 [ 428.838327] ? sock_sendmsg+0xce/0x110 [ 428.842238] sock_alloc_send_pskb+0x5db/0x740 [ 428.846944] ? trace_hardirqs_on+0x10/0x10 [ 428.851198] ? sock_wmalloc+0xf0/0xf0 [ 428.855010] ? save_trace+0x290/0x290 [ 428.858815] ? fib_rules_lookup+0x308/0x950 [ 428.863153] ? trace_hardirqs_on+0x10/0x10 [ 428.867400] sock_alloc_send_skb+0x32/0x40 [ 428.871649] __ip_append_data.isra.0+0x1227/0x20f0 [ 428.876589] ? rcu_read_unlock_special+0x639/0xd40 [ 428.881541] ? ip_reply_glue_bits+0xb0/0xb0 [ 428.885883] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 428.891609] ? ipv4_mtu+0x25e/0x3a0 [ 428.895298] ? ip_reply_glue_bits+0xb0/0xb0 [ 428.899631] ip_make_skb+0x17a/0x1d0 [ 428.903364] ? ip_flush_pending_frames+0x30/0x30 [ 428.908134] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 428.913681] ? udp_sendmsg+0xfb7/0x1da0 [ 428.917683] ? xfrm_lookup_route+0x48/0x1b0 [ 428.922018] udp_sendmsg+0x16a6/0x1da0 [ 428.925919] ? __lock_acquire+0x5f7/0x4620 [ 428.930161] ? ip_reply_glue_bits+0xb0/0xb0 [ 428.934495] ? udp4_seq_show+0x520/0x520 [ 428.938568] ? save_trace+0x290/0x290 [ 428.942382] ? avc_has_perm+0x273/0x4b0 [ 428.946398] ? lock_downgrade+0x740/0x740 [ 428.950607] udpv6_sendmsg+0x1393/0x2610 [ 428.954694] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 428.959982] ? rw_copy_check_uvector+0x1f1/0x290 [ 428.964755] ? sock_has_perm+0x1ed/0x280 [ 428.968829] ? selinux_tun_dev_create+0xc0/0xc0 [ 428.973509] ? dup_iter+0x260/0x260 [ 428.977154] ? copy_msghdr_from_user+0x292/0x3f0 [ 428.981919] ? save_trace+0x290/0x290 [ 428.985740] inet_sendmsg+0x122/0x500 [ 428.989546] ? inet_sendmsg+0x122/0x500 [ 428.993531] ? inet_recvmsg+0x500/0x500 [ 428.997529] sock_sendmsg+0xce/0x110 [ 429.001258] ___sys_sendmsg+0x349/0x840 [ 429.005247] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 429.010015] ? up_read+0x1a/0x40 [ 429.013393] ? __do_page_fault+0x358/0xb80 [ 429.017644] ? retint_kernel+0x2d/0x2d [ 429.021543] ? trace_hardirqs_on_caller+0x400/0x590 [ 429.026578] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.031353] ? retint_kernel+0x2d/0x2d [ 429.035297] __sys_sendmmsg+0x152/0x3a0 [ 429.039316] ? SyS_sendmsg+0x50/0x50 [ 429.043044] ? lock_downgrade+0x740/0x740 [ 429.047210] ? __mutex_unlock_slowpath+0x71/0x800 [ 429.052070] ? check_preemption_disabled+0x3c/0x250 [ 429.057097] ? wait_for_completion+0x420/0x420 [ 429.061694] ? __sb_end_write+0xc1/0x100 [ 429.065818] ? SyS_write+0x15e/0x230 [ 429.069571] SyS_sendmmsg+0x35/0x60 [ 429.073202] ? __sys_sendmmsg+0x3a0/0x3a0 [ 429.077392] do_syscall_64+0x1e8/0x640 [ 429.081370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.086250] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.091488] RIP: 0033:0x45b349 [ 429.094712] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.102442] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 06:10:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x2021}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0\x00', 0x0}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@remote, 0x36, r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffe48, 0x800, 0x0, 0x0) 06:10:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) dup(r1) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000240)={0xffffffff}, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @remote}], 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r4 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') getgid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) close(r3) 06:10:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xbc00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x3, r4}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x40}}, 0x0) [ 429.109829] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 429.117115] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 429.124394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 429.131674] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000005 06:10:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:10:55 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000100)="d0456574a8a14c37f139c748ffd032a2a08fd41f238c764163d2e55278563d0d0a739a1d3686277f4f71ad815b245d3c71441abdbf2186665b7fd51101a595291f9d30716d79c7913f2e171673ee4e86789ff1a0261c982c05d3f14d0069bdea297f4b3e62c4ce1d262e69d1301a5118bf564f74dab149675421b759b37033cb2c25a16d1404d822486df558457a264e37a919cbf8ad913df9a7a58b2ea849a6fcfc7d85cf30e284d3f8114ec6a1df065466dd404511acb58e2910e33cb09ce0e9290856ed5144083baf8a982d578096f569822c27b04d93e761260ca8a1dac6fd9a591ace346d", 0xe7) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x42082, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:56 executing program 3 (fault-call:12 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:56 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5409, 0x0) 06:10:56 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mlockall(0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000005c0)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) dup(r1) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000240)={0xffffffff}, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @remote}], 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r4 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') getgid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) close(r3) [ 429.589811] FAULT_INJECTION: forcing a failure. [ 429.589811] name failslab, interval 1, probability 0, space 0, times 0 [ 429.601570] CPU: 0 PID: 18820 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 429.609472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.618832] Call Trace: [ 429.621428] dump_stack+0x142/0x197 [ 429.625072] should_fail.cold+0x10f/0x159 [ 429.629341] should_failslab+0xdb/0x130 [ 429.633334] kmem_cache_alloc_node_trace+0x280/0x770 [ 429.638585] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 429.644063] __kmalloc_node_track_caller+0x3d/0x80 [ 429.649066] __kmalloc_reserve.isra.0+0x40/0xe0 [ 429.653758] __alloc_skb+0xcf/0x500 [ 429.657420] ? skb_trim+0x180/0x180 [ 429.661057] ? save_stack+0xa9/0xd0 [ 429.664702] alloc_skb_with_frags+0x86/0x4b0 [ 429.669129] ? __lock_acquire+0x5f7/0x4620 [ 429.673377] ? inet_sendmsg+0x122/0x500 [ 429.677355] ? sock_sendmsg+0xce/0x110 [ 429.681255] sock_alloc_send_pskb+0x5db/0x740 [ 429.685791] ? trace_hardirqs_on+0x10/0x10 [ 429.690037] ? sock_wmalloc+0xf0/0xf0 [ 429.693847] ? save_trace+0x290/0x290 [ 429.697650] ? fib_rules_lookup+0x308/0x950 [ 429.702093] ? save_trace+0x290/0x290 [ 429.705903] ? find_held_lock+0x35/0x130 [ 429.709973] ? rt_add_uncached_list+0x139/0x190 [ 429.714655] ? find_held_lock+0x35/0x130 [ 429.718726] sock_alloc_send_skb+0x32/0x40 [ 429.722982] __ip_append_data.isra.0+0x1227/0x20f0 [ 429.727923] ? __local_bh_enable_ip+0x99/0x1a0 [ 429.732526] ? trace_hardirqs_on+0xd/0x10 [ 429.736687] ? ip_reply_glue_bits+0xb0/0xb0 [ 429.741055] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 429.746774] ? ipv4_mtu+0x25e/0x3a0 [ 429.750419] ? ip_reply_glue_bits+0xb0/0xb0 [ 429.754777] ip_make_skb+0x17a/0x1d0 [ 429.758508] ? ip_flush_pending_frames+0x30/0x30 [ 429.763282] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 429.768922] ? udp_sendmsg+0xfb7/0x1da0 [ 429.772917] ? xfrm_lookup_route+0x48/0x1b0 [ 429.777256] udp_sendmsg+0x16a6/0x1da0 [ 429.781252] ? __lock_acquire+0x5f7/0x4620 [ 429.785505] ? ip_reply_glue_bits+0xb0/0xb0 [ 429.789837] ? udp4_seq_show+0x520/0x520 [ 429.793907] ? save_trace+0x290/0x290 [ 429.797718] ? avc_has_perm+0x273/0x4b0 [ 429.801716] ? lock_downgrade+0x740/0x740 [ 429.806416] udpv6_sendmsg+0x1393/0x2610 [ 429.810505] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 429.815787] ? rw_copy_check_uvector+0x1f1/0x290 [ 429.820567] ? sock_has_perm+0x1ed/0x280 [ 429.824640] ? selinux_tun_dev_create+0xc0/0xc0 [ 429.829320] ? dup_iter+0x260/0x260 [ 429.832963] ? copy_msghdr_from_user+0x292/0x3f0 [ 429.837720] ? save_trace+0x290/0x290 [ 429.841545] inet_sendmsg+0x122/0x500 [ 429.845354] ? inet_sendmsg+0x122/0x500 [ 429.849356] ? inet_recvmsg+0x500/0x500 [ 429.853359] sock_sendmsg+0xce/0x110 [ 429.857090] ___sys_sendmsg+0x349/0x840 [ 429.861176] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 429.865958] ? up_read+0x1a/0x40 [ 429.869339] ? __do_page_fault+0x358/0xb80 [ 429.873592] ? retint_kernel+0x2d/0x2d [ 429.877493] ? trace_hardirqs_on_caller+0x400/0x590 [ 429.882541] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.887315] ? retint_kernel+0x2d/0x2d 06:10:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:56 executing program 5: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002b40)=[{0x0}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f00000027c0)=""/219, 0xdb}, {&(0x7f0000002980)=""/152, 0x98}], 0x4, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r2, 0xa01}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x5c}}, 0x40840) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x8, 0x9, 0x0, 0x7f, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x4802, 0x8, 0x1, 0x2, 0x0, 0x1, 0x7}, 0x0, 0xc, r0, 0x9) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil) [ 429.891229] __sys_sendmmsg+0x152/0x3a0 [ 429.895214] ? SyS_sendmsg+0x50/0x50 [ 429.898942] ? lock_downgrade+0x740/0x740 [ 429.903112] ? __mutex_unlock_slowpath+0x71/0x800 [ 429.907964] ? check_preemption_disabled+0x3c/0x250 [ 429.912999] ? wait_for_completion+0x420/0x420 [ 429.917611] ? __sb_end_write+0xc1/0x100 [ 429.921800] ? SyS_write+0x15e/0x230 [ 429.925541] SyS_sendmmsg+0x35/0x60 [ 429.929176] ? __sys_sendmmsg+0x3a0/0x3a0 [ 429.933347] do_syscall_64+0x1e8/0x640 [ 429.937286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.942330] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.947537] RIP: 0033:0x45b349 [ 429.950743] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.958469] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 429.965742] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 429.973124] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 429.980513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 06:10:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="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", 0x117}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 429.987793] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000006 06:10:56 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {0x1ff, 0x1ff, 0x4, 0xfffd}, 0x22, [0xffffffff, 0x10001, 0x7, 0x1, 0x5, 0x102, 0x3f, 0x3, 0x8, 0x5, 0x8, 0x5, 0xfffeffff, 0x0, 0x3, 0x401, 0x0, 0x20, 0x7f, 0x0, 0x20000005, 0x9c, 0x1, 0x9, 0x7fffffff, 0x38d8, 0x1ff, 0xffffffff, 0x8000, 0x1, 0x7, 0x3f, 0x7f, 0x20, 0x0, 0x3, 0x3, 0x6, 0x3, 0x2, 0xbbca, 0x85d, 0x4, 0x0, 0x22e, 0x9, 0x7, 0x7, 0x3, 0x6, 0x9, 0x1, 0x200, 0x0, 0x8, 0x2c, 0xfff, 0x1f, 0x5, 0x101, 0x8, 0x7, 0xc7, 0x400], [0xf240, 0x8e02, 0x0, 0x2, 0x3, 0x80000001, 0x0, 0xfffff7ab, 0x0, 0x0, 0x3, 0x3, 0x7, 0x7ff, 0x40, 0x1, 0x7, 0x9, 0x80000000, 0x10001, 0xffffffff, 0x5, 0x2, 0x6, 0x101, 0x2, 0x1, 0x3ff, 0x8001, 0x0, 0x1ff, 0x3ff, 0x1, 0xfff, 0x0, 0x4, 0x2, 0x8, 0x174f, 0x807ff, 0x3f, 0x4, 0x1, 0x7ff, 0x8, 0x155f23ad, 0xec1, 0x3, 0x173, 0x3, 0x0, 0x200005, 0xff, 0x801, 0x40001, 0xc7b, 0x2, 0x0, 0x809, 0x200, 0x80000000, 0x0, 0x800, 0x75], [0x2b5, 0x100, 0x7, 0x3, 0x20, 0x4, 0x6, 0x8, 0x9, 0x7, 0x0, 0x1, 0xffffffff, 0x401, 0x3, 0x5, 0x8, 0xd, 0x800, 0x3, 0x401, 0x9, 0x7, 0x2a95, 0x20, 0x8, 0x5, 0x80, 0x89, 0x6, 0x2, 0x3, 0x5, 0x1, 0x1f, 0x1f, 0x4, 0x1, 0x7f, 0x3ff, 0xde, 0x6, 0x5, 0x5, 0x5, 0x2, 0x6, 0x6, 0x4ee, 0x8, 0x8001, 0x8, 0x3, 0x7, 0x9, 0x1d25cdb9, 0x1000, 0x800, 0x7, 0x1ff, 0x5e, 0x8c7, 0x80000000, 0x1], [0x0, 0xffffffff, 0x6e, 0xfffffe01, 0x5, 0x4, 0x1, 0x20, 0x5, 0x1000, 0x6df6, 0x10000, 0x8000, 0x5, 0x1, 0xfffffff7, 0x9, 0x2, 0x1, 0x0, 0x80000001, 0x800, 0x153, 0x3, 0x7fffffff, 0x1, 0x8, 0x8, 0x800, 0x8, 0x0, 0x5, 0x10001, 0x2, 0x7, 0xfffffbff, 0x2, 0x3, 0x41, 0x5, 0xfffffffd, 0x3, 0x60000000, 0x800, 0xffff86b0, 0x5, 0x0, 0x9, 0x200000, 0x3, 0x3, 0x4, 0x5, 0x10001, 0x8000, 0x4, 0x400, 0xda3, 0xfffffe01, 0x2, 0x3f, 0xc3, 0x5, 0xfff]}, 0x45c) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) setresgid(r3, r5, r7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="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", 0x106}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:10:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:10:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:58 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000000)) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:58 executing program 3 (fault-call:12 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:10:58 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x600940, 0x5d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100)="097d34d3cf7b630009b37c3f6f6e4ce10e72aa0cc4e1cb8a861ce5011fbfc8b7ca402f38017340528397ce3de621b876b316a113b2213b56bf0b830340a0196fb2a2a6a787f78a342f67cc14061f4e1b748c987af0debff387d1c513a6ab0aee10cce60574ae144665cab1b71eaa9eb0a0d5d6014546bb6566ac01f468608bbebd0cc7a4f88ee22d414ac2467071c6181995fbd9cd7ec01193d23253d4a3cd6f152483d7b5b2b5ac5fac781771d6f943f0d9e796ed7fac03321b968b6e2c90208f042329d17bac4209c6287184b245acd823040f6d8798ec19396ebf41a56c0bbdb3abd33399b55847246f60b3e94165730eecf6040f", &(0x7f0000000200)="83994c09bd7303a4c87a882e5c0c7e7ff30ee696d7db7fa0d473df1711911aa7f1712f9af0cf6a9373649a55f86f919a32db7b71f1bd127158dfad7988bb657fd357724873685da6511e7a3c47430a18aa1bb4dfdac1ad9ff697708b821c1fa3f061e53b842a8d10bacb5555c6cb583f2b0535b6bafff51037a4d091883dc6186746e3c354a6c52fa0efe7e32fa5ea62f2c742c9238a02ca1467295c11e70982da8a2246053fd458640ec62fd2f1030b", 0x1}, 0x20) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc0284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0xd7c}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={r3, 0x2, 0x3, 0x6}, &(0x7f0000000380)=0x10) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xf) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 432.389187] FAULT_INJECTION: forcing a failure. [ 432.389187] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.401410] CPU: 0 PID: 18878 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 432.409312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.418690] Call Trace: [ 432.421319] dump_stack+0x142/0x197 [ 432.425059] should_fail.cold+0x10f/0x159 [ 432.429223] ? __might_sleep+0x93/0xb0 [ 432.433112] __alloc_pages_nodemask+0x1d6/0x7a0 [ 432.437779] ? __alloc_pages_slowpath+0x2930/0x2930 [ 432.442807] ? lock_downgrade+0x740/0x740 [ 432.446973] alloc_pages_vma+0xc9/0x4c0 [ 432.450970] wp_page_copy+0xa5f/0x13d0 [ 432.454878] ? follow_pfn+0x220/0x220 [ 432.458689] ? do_raw_spin_unlock+0x174/0x260 [ 432.463196] do_wp_page+0x24b/0x1250 [ 432.466935] ? finish_mkwrite_fault+0x620/0x620 [ 432.471627] __handle_mm_fault+0x1cc3/0x33d0 [ 432.476052] ? copy_page_range+0x1de0/0x1de0 [ 432.480478] ? find_held_lock+0x35/0x130 [ 432.484561] ? handle_mm_fault+0x1b6/0x7c0 [ 432.488819] handle_mm_fault+0x293/0x7c0 [ 432.492898] __do_page_fault+0x4c1/0xb80 [ 432.497094] ? vmalloc_fault+0xe30/0xe30 [ 432.501171] do_page_fault+0x71/0x511 [ 432.504991] page_fault+0x25/0x50 [ 432.508450] RIP: 0010:__put_user_4+0x1c/0x30 [ 432.512855] RSP: 0018:ffff8881e3447cc8 EFLAGS: 00010293 [ 432.518221] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000200092f8 [ 432.525497] RDX: 0000000000000d6a RSI: ffffffff817cc688 RDI: 0000000000000286 06:10:59 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000800) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)={0xd, 0x6}) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x440001, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040), 0x4) [ 432.532800] RBP: ffff8881e3447eb8 R08: ffff88820a5c41c0 R09: 0000000000000000 [ 432.540083] R10: 0000000000000000 R11: ffff88820a5c41c0 R12: 0000000000000000 [ 432.547361] R13: 0000000000040000 R14: 00000000200092c0 R15: 00000000200092c0 [ 432.554657] ? __might_fault+0x188/0x1d0 [ 432.559171] ? __sys_sendmmsg+0x18b/0x3a0 [ 432.563437] ? SyS_sendmsg+0x50/0x50 [ 432.567166] ? lock_downgrade+0x740/0x740 [ 432.571337] ? __mutex_unlock_slowpath+0x71/0x800 [ 432.576186] ? check_preemption_disabled+0x3c/0x250 [ 432.581220] ? wait_for_completion+0x420/0x420 [ 432.585813] ? __sb_end_write+0xc1/0x100 [ 432.590006] ? SyS_write+0x15e/0x230 [ 432.593771] SyS_sendmmsg+0x35/0x60 [ 432.597410] ? __sys_sendmmsg+0x3a0/0x3a0 [ 432.601575] do_syscall_64+0x1e8/0x640 [ 432.605472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.610333] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 432.615530] RIP: 0033:0x45b349 [ 432.618723] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 432.626442] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 06:10:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 432.633731] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 432.641037] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 432.648316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 432.655606] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000007 06:10:59 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x5, 0x1}]}, 0xc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = creat(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x6c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xeb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7d}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x313cb9d6}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}]}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x384944b0}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x7b}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWRULE={0x37dc, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x345c, 0x4, 0x0, 0x1, [{0x4}, {0x1d64, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xffff}, @NFTA_PAYLOAD_DREG={0x8}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x11}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @void}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x1cd8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x2a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbb, 0x1, "f314d6815141c0ed1f19176cd0fa27823ac84dc95a48d32d3fd72f3fbc2f7d97c335c903605e53007aaba4c7ac1748abf5356418b03fa52b6419c4e47fe2e35be6bc8201df8ba6a23f31cf0c79fdccce79cf35aed8883f9656d50798b4127cba82fe9580bc23637a27571b51328fb4a2be5066b7f97f69b720c20f7a57b6556256c65e4326a6359471e8bcbe5f521fa1c0e18dbf90d2d6ceb8de240efac1f0fb44ca47b149d5b90b28d7cc2c6a96f0add972bb78a421b7"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5f, 0x1, "f09dcda6c86fa7f77e82b85511441743765567af29e5a0455d1ced1517d1e5b0e3700475e4de66a25df0f7b4f35b639b0bc9905bfcf904d1115345e8667a3af242e8f8473db3971628e53b1e2184c0243cc47441d6b54eb1dd7148"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x53, 0x1, "7a0bce575d9352d72d46fb9060e2d352f10ae3cfb1b983b63de889bc9852b61d7ed495926a5d231ccd553669553014784fe73809b214a61d624eb1ae9eb3f3c6627be07e0c05f87e61566d4c03435a"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x210, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "f1b52a738b4389b1198023e51521edcbcc0b8a2a93f633932808596c748ad353e4bf5b7a3b68f85d729406e8bb28f3381ce2edfa339feadcbb0c21ae4051e958ad98a65013670b70100c592cdb7c4c84464e7949263501406e25748e4f40b617bc6d3d40e410ea21b2857393b3798ffc65a9e938a3f768043347de43db703f7189c27f40a0ef78cdf6f4c22c9e1f95d9fd66adb5f63b423a78cf2d6816950a9656cfd914b34fbe024e48cf0f616ba72aff3f9aa604035207197121f1"}, @NFTA_DATA_VALUE={0xd4, 0x1, "0f32bbd174d343c4ab467b3819231d5f42f974b94f1b14cd87675de32e4b688d76a4ca06ed635d57602a13f00fed3d961d27467a8ccfcfd97428bee1c9aeda83492c4fe9610edf047b20ee7516f1cd44fa13d9067d7cf302796b22c8b804f4b246a84b17b658d0ec7d9a4229d984315607eab5f471b11c38c1e8a3f6fc58915f597e9d0eb35266e53a6974b46e71444af4a91d9403f5d0bf5877b948f55794c53da9d1a2155fa4a535e6b164804a0e1de3c1b95f9f2240debe9aa760efd0aa2d0e7ca981e6a6ac12538155abdf40c004"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x22, 0x1, "1c9d0579b79bbca24f26d2b0b617f9247bbfd29f2ea2a5078f4bf0b0c7d7"}]}, @NFTA_IMMEDIATE_DATA={0x3ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0xef, 0x1, "df2895cd6015d1b938285879da55b2808d1553b9409c723f39d768d7791066712a783015c69934679c87ff769acf99c6f909a2c4a5246ac96188b2d806c54d658cc263987d8e54094dcf46ca970dd22bf625b53f7bbd1bf4d021c21b5138e735106acf5c0fb275ea7918d846e9d36acb2b1da4b1b397f7d1a6155d4e13f4360cd0de1fc2f3b84ac72c92853fa4228197856a23381fef5fc73751ab0875aac63ae8575d0629e59855d24a0ae9ba10534d139a64d94b792f6a70bff3296b0c16c550cfe6c487ee37354841b148d7cc117275b9983e532f75095e3060180ef54f0a39dbe68d09224bf66b7725"}, @NFTA_DATA_VALUE={0xeb, 0x1, "1eb4803d252c57b26ed95d2f7408304cb0bf675d94841347221f603036d567e962f339f19ad38eb83a9284694be6382883db446ff95397ee21991cac1d7f0e8fd75a4f31649fad1f3844a2c5c1a2497c1002c73f64f60af7042eb96852b5fd2c642eb63d98a8e688c944efc7215ea5443796254aa462e8c651caf96d0e14a163d6e9998115e255bff0730d39acc92066d651a72aed0ace43524b1369bcaf849c269802d081cd01ead8ca50195b605831b0185aecb6dc513ee9156e4be0b344a6e60faf51006da240dc9dbf2c3fc1e422f57586a85e3e7a19e34f9e3328f493d533be23ef60a5b3"}, @NFTA_DATA_VALUE={0x98, 0x1, "4cfe1abad60e33f89e0db172f2c436fdc6ef0f70184d8b1bcbbd7b24dc2f3f5a31db81a4316cc7059ff0f24a7a8df557b625c3aa5272351e2856534baff7c786178a0b57f5ca3741b10d973c824a2aa3e3acbe11e7c7a9b4004a73b4c6c80dc1a5fea0cf36c1e1e0b61eb7d239aa2e4c8c6c61375a44cafeff3ae996309640383d9426c2328ecb0f52e00fe1431e4579a2ebba98"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf0, 0x1, "02c6a6291da030e590773162926934c572f4f5b1db3927d1464ff946fb382bd2683df2f5fd92c0d55f5c7b676ffd38ae466d76423323709e07850d974092a84576e67e7ce5f66f0fafe674e69a0b1c06f5a96eda616d547098049486c4d9f88c43a49649faac4a103ef754914079ae1c88a59ff0e9f5aa6cc2998a88dabf918d1d554f74e70e38688d9130681f377cd81c209fb7d84e12465c09f661cc15a027f71afc23299e9d0b1aa166ad6a2bb2cb6e95dc60d01454d1bd594bd56188e2101675e41c13d3639cb621622cd07e1ceed22bd0db5ac19fae7085af93a48eb44ea174b5fcaf3a0b14e515206a"}, @NFTA_DATA_VALUE={0x18, 0x1, "0c3a3879f072fe3dfa7275bbd4789a980fc33444"}]}, @NFTA_IMMEDIATE_DATA={0x1328, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "536dd016286f7337dc8a9b1f42edd0eb0af7c633a83b11aa109f12a15b915d828097dfabdae4febf74cac6472342df94551dc842a0c5b07aa5443ad60177ca3beb6c26da237189f2fe84a70e8e9ef139b3cd5d3a07211e2a39dd4b1b10d7124619b3c94198bafc8230bc8b8f0669be8ca0f32a0cb5b225909ec8c9e20c9a12324ec1177986fe2bb2081e25bfd55d40826f93d4d600a565920b01bee8e3a0ac7fece53364daac34489dec91504dd870dd565d8614d15fc88683215896078682df4c36c5"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "0d85484379b1c3f86a3e3d022ea61de0795e4a3865cd94c669622e6352417f34d0aa2189ebbec40c424d72fcfe27b20e447314afe7568757ffc4db71f95ce7f155d7747f8f2d8780c99d2dd7d1e1ee7a91e1158ac70b09010024611710435310e62f64a89762d8676d2480d88447e33f50390fb15c016d1959fe982b88c7b5af2b03e2264e7d54baab9e35085c8b5210f8b0cba60de895ae1127efb831dbdc52eaf14af5422b713e692692c597e070e3501535dfe0afeaea2c9c2e2c0afe6a60167c46477cbe3e2161110cfc182794a4d72fc11ed4353280aca058ebc8f535079ec5e548e9eba158923b03e8056c09"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xe2, 0x1, "ce9c0e48615750bd2494a971dde8210264903303af1db2601d6e2ebc1204400966a9cd964b722a7b513381841ef64930127191c3fa2fb5953bd3365a9bd2159a1dc1b67adbcdb81ffdc4105d986dbe78103ff6592dbb0d549970a039373bbbbde1d117ce6cd105d9ef5590c6c5112c600f5817bc5d151e78d1c0d85dff2c9c2b7f9e4093fd9c696ea8d744d5d2a5cf5e9efbc191fd515f5fee77b17c478c4fc5a8262455aea0cd91db6d24605b83d6ef4687253380f467e971b7535c901effbe6c64ab5564f781301eb3bb06acfb11a9a1501d51ff90ef233daab92f7805"}]}]}}]}, {0x1188, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}, @match={{0xa, 0x1, 'match\x00'}, @val={0x1128, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x1004, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'em1\x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'bdev\x00'}, @NFTA_MATCH_NAME={0x7, 0x1, '&@\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_MATCH_NAME={0x23, 0x1, '\'ppp1{)em1!vmnet1.\xaf\fselinux]--\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'em0\x00'}, @NFTA_MATCH_INFO={0xb3, 0x3, "8caee80903119abac7b1b3ebc2ef7e9aeeb167619f8c1dba588e3f35889634574b200ac616fcaf63f345ac7ec25fffe810f37ec8ca9291bf6038951909b703f60fcdab848c1e61bc646fc7568b02ea30ff83b297f33e64219fd15684ba8b4d91618f22118caa762b6cd65a88f5f120ba48cb759e002e6c518d86edcde46241cc9170b135054532aafd70a1ff9ddf015a5248646a3020259359221db41f4f98e9d91f29b6de0a0787dcbc320fcd14a9"}, @NFTA_MATCH_INFO={0x1c, 0x3, "282453c3a79b6cb5ebaaaf2e8eb5599bc6994bc0179723cf"}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}]}}]}, {0x184, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @val={0xe8, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xd0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6, 0x1, "09e8"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x31, 0x1, "e31deb50cfc613a959af57468650a4541cb59d2bd9b83cc09a84290f3739eebb5f3cc58819e8fb9e9def2c4474"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_RANGE_TO_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @void}, @redir={{0xa, 0x1, 'redir\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}]}}]}, {0x150, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x5b}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xd3}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xda}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6a}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x65}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_BYTEORDER_DREG={0x8}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x84}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xe2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xfb}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2b96}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1000}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}]}, {0x3c, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @val={0x4}}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}]}, {0x40, 0x1, 0x0, 0x1, [@flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}]}, {0x10c, 0x1, 0x0, 0x1, [@osf={{0x8, 0x1, 'osf\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8b}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @void}]}, {0x10c, 0x1, 0x0, 0x1, [@cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @void}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0xec, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x3c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0xa4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1e, 0x1, "69adb70b6def358fda4821b1ea5998b916e76a84051906d6df4c"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}]}]}, @NFTA_RULE_EXPRESSIONS={0x35c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@hash={{0x9, 0x1, 'hash\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}]}, {0x28, 0x1, 0x0, 0x1, [@dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x30, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}]}, {0x80, 0x1, 0x0, 0x1, [@fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}]}}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}]}, {0xc0, 0x1, 0x0, 0x1, [@bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @void}}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff8}]}}]}, {0xe4, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe0}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_SREG={0x8}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}]}, {0xa4, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @val={0x84, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x7e, 0x3, "2d525364b338857e75a51512ebaa4ff4ce838d6cde6c2d46f5c21a36baeac876b0389bb5ee9da6dc3f8f59677794d9f06064262ac952b58727410723ca2283cc53fa3a71b90cd5dc8ae8ce90a9ac33c6b1bace67762217f237a72fa4ae3469a36c79f68b20931042992db2f839038df4a0e206032bc6277df2e5"}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @val={0x4}}]}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14}}, 0x3a10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:59 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xc) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:10:59 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0xc30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = syz_open_dev$dri(0x0, 0x100, 0x111080) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$TCXONC(r7, 0x540a, 0x78828a2f) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r10 = dup(r9) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) r11 = syz_open_dev$dri(0x0, 0x7, 0x4a040) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7, 0x2000) r13 = syz_open_dev$dri(0x0, 0x0, 0x0) r14 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r14, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r16 = dup(r15) ioctl$DMA_BUF_IOCTL_SYNC(r16, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r13, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r16}) r17 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r18 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r18, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r20 = dup(r19) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r17, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r20}) r21 = syz_open_dev$dri(0x0, 0x0, 0x0) r22 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r21, 0xc00c642e, &(0x7f00000000c0)) r23 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r23}) accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000000)=0x2e4) pipe2(&(0x7f0000000400), 0x4800) r24 = socket$nl_generic(0x10, 0x3, 0x10) r25 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r25, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 06:10:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x1) 06:10:59 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002b40)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f00000027c0)=""/219, 0xdb}, {&(0x7f00000028c0)=""/179, 0xb3}, {&(0x7f0000002980)=""/152, 0x98}, {&(0x7f0000002a40)=""/236, 0xec}, {&(0x7f0000000480)=""/101, 0x65}], 0x8, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r3, 0xa01}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x4, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x2b}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x8, 0x9, 0x7, 0x7f, 0x0, 0x7, 0xc8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x4802, 0x8, 0x1, 0x2, 0x0, 0x1, 0x7}, 0x0, 0x0, r1, 0x9) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil) fcntl$getflags(0xffffffffffffffff, 0x408) [ 433.545449] ion_buffer_destroy: buffer still mapped in the kernel 06:11:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:01 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5a1a50bb3e) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:01 executing program 3 (fault-call:12 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:01 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) 06:11:01 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0xc30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = syz_open_dev$dri(0x0, 0x100, 0x111080) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$TCXONC(r7, 0x540a, 0x78828a2f) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r10 = dup(r9) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) r11 = syz_open_dev$dri(0x0, 0x7, 0x4a040) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7, 0x2000) r13 = syz_open_dev$dri(0x0, 0x0, 0x0) r14 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r14, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r16 = dup(r15) ioctl$DMA_BUF_IOCTL_SYNC(r16, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r13, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r16}) r17 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r18 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r18, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r20 = dup(r19) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r17, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r20}) r21 = syz_open_dev$dri(0x0, 0x0, 0x0) r22 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r21, 0xc00c642e, &(0x7f00000000c0)) r23 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r23}) accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000000)=0x2e4) pipe2(&(0x7f0000000400), 0x4800) r24 = socket$nl_generic(0x10, 0x3, 0x10) r25 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r25, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 06:11:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x1) [ 435.467863] ubi0: attaching mtd0 [ 435.482603] FAULT_INJECTION: forcing a failure. [ 435.482603] name failslab, interval 1, probability 0, space 0, times 0 [ 435.485188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 435.494077] CPU: 0 PID: 18968 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 435.494087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.494091] Call Trace: [ 435.494115] dump_stack+0x142/0x197 [ 435.494133] should_fail.cold+0x10f/0x159 [ 435.494150] should_failslab+0xdb/0x130 [ 435.494162] kmem_cache_alloc_node+0x287/0x780 [ 435.494178] ? __save_stack_trace+0x7b/0xd0 [ 435.494196] __alloc_skb+0x9c/0x500 [ 435.494207] ? skb_trim+0x180/0x180 [ 435.494216] ? save_stack+0xa9/0xd0 [ 435.494231] alloc_skb_with_frags+0x86/0x4b0 [ 435.494245] ? __lock_acquire+0x5f7/0x4620 [ 435.494255] ? inet_sendmsg+0x122/0x500 [ 435.494265] ? sock_sendmsg+0xce/0x110 [ 435.494278] sock_alloc_send_pskb+0x5db/0x740 [ 435.494295] ? trace_hardirqs_on+0x10/0x10 [ 435.494306] ? sock_wmalloc+0xf0/0xf0 [ 435.494316] ? save_trace+0x290/0x290 [ 435.494363] ? fib_rules_lookup+0x308/0x950 [ 435.494380] ? save_trace+0x290/0x290 [ 435.494387] ? find_held_lock+0x35/0x130 [ 435.494397] ? rt_add_uncached_list+0x139/0x190 [ 435.494405] ? find_held_lock+0x35/0x130 [ 435.494415] sock_alloc_send_skb+0x32/0x40 [ 435.494432] __ip_append_data.isra.0+0x1227/0x20f0 [ 435.494446] ? __local_bh_enable_ip+0x99/0x1a0 [ 435.494465] ? trace_hardirqs_on+0xd/0x10 [ 435.494476] ? ip_reply_glue_bits+0xb0/0xb0 [ 435.494499] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 435.494511] ? ipv4_mtu+0x25e/0x3a0 [ 435.494527] ? ip_reply_glue_bits+0xb0/0xb0 [ 435.494538] ip_make_skb+0x17a/0x1d0 [ 435.494553] ? ip_flush_pending_frames+0x30/0x30 [ 435.494567] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 435.494575] ? udp_sendmsg+0xfb7/0x1da0 [ 435.494592] ? xfrm_lookup_route+0x48/0x1b0 [ 435.494606] udp_sendmsg+0x16a6/0x1da0 [ 435.494618] ? __lock_acquire+0x5f7/0x4620 [ 435.494629] ? ip_reply_glue_bits+0xb0/0xb0 [ 435.494643] ? udp4_seq_show+0x520/0x520 [ 435.494657] ? save_trace+0x290/0x290 [ 435.494671] ? avc_has_perm+0x273/0x4b0 [ 435.494692] ? lock_downgrade+0x740/0x740 [ 435.494709] udpv6_sendmsg+0x1393/0x2610 [ 435.494740] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 435.494760] ? rw_copy_check_uvector+0x1f1/0x290 [ 435.494778] ? sock_has_perm+0x1ed/0x280 [ 435.494793] ? selinux_tun_dev_create+0xc0/0xc0 [ 435.494807] ? dup_iter+0x260/0x260 [ 435.494830] ? copy_msghdr_from_user+0x292/0x3f0 [ 435.494843] inet_sendmsg+0x122/0x500 [ 435.494931] ? inet_sendmsg+0x122/0x500 [ 435.494955] ? inet_recvmsg+0x500/0x500 [ 435.494970] sock_sendmsg+0xce/0x110 [ 435.494986] ___sys_sendmsg+0x349/0x840 [ 435.495003] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 435.495020] ? trace_hardirqs_on+0x10/0x10 [ 435.495033] ? save_trace+0x290/0x290 [ 435.495043] ? retint_kernel+0x2d/0x2d [ 435.495055] ? __might_fault+0x110/0x1d0 [ 435.495065] ? find_held_lock+0x35/0x130 [ 435.495075] ? __might_fault+0x110/0x1d0 [ 435.495099] __sys_sendmmsg+0x152/0x3a0 [ 435.495111] ? SyS_sendmsg+0x50/0x50 [ 435.495124] ? lock_downgrade+0x740/0x740 [ 435.495141] ? __mutex_unlock_slowpath+0x71/0x800 [ 435.495150] ? check_preemption_disabled+0x3c/0x250 [ 435.495163] ? wait_for_completion+0x420/0x420 [ 435.495174] ? __sb_end_write+0xc1/0x100 [ 435.495189] ? SyS_write+0x15e/0x230 [ 435.495202] SyS_sendmmsg+0x35/0x60 [ 435.495211] ? __sys_sendmmsg+0x3a0/0x3a0 [ 435.495224] do_syscall_64+0x1e8/0x640 [ 435.495233] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.495248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 435.495257] RIP: 0033:0x45b349 [ 435.495262] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 435.495274] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 06:11:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x1) [ 435.495280] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 435.495286] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 435.495292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 435.495297] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000008 [ 435.528974] ubi0: scanning is finished [ 435.847793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.937132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:11:02 executing program 3 (fault-call:12 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 436.147696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 436.163993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.172251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 436.255025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 436.287547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.312954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 436.362145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 436.375154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.389614] FAULT_INJECTION: forcing a failure. [ 436.389614] name failslab, interval 1, probability 0, space 0, times 0 [ 436.401023] CPU: 0 PID: 18990 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 436.408919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.418287] Call Trace: [ 436.420900] dump_stack+0x142/0x197 [ 436.424539] should_fail.cold+0x10f/0x159 [ 436.428703] should_failslab+0xdb/0x130 [ 436.432687] kmem_cache_alloc_node+0x287/0x780 [ 436.437279] ? __save_stack_trace+0x7b/0xd0 [ 436.441609] __alloc_skb+0x9c/0x500 [ 436.445234] ? skb_trim+0x180/0x180 [ 436.448866] ? save_stack+0xa9/0xd0 [ 436.452532] alloc_skb_with_frags+0x86/0x4b0 [ 436.456946] ? __lock_acquire+0x5f7/0x4620 [ 436.461184] ? inet_sendmsg+0x122/0x500 [ 436.465159] ? sock_sendmsg+0xce/0x110 [ 436.469053] sock_alloc_send_pskb+0x5db/0x740 [ 436.475203] ? trace_hardirqs_on+0x10/0x10 [ 436.479444] ? sock_wmalloc+0xf0/0xf0 [ 436.483240] ? save_trace+0x290/0x290 [ 436.487031] ? fib_rules_lookup+0x308/0x950 [ 436.491365] ? save_trace+0x290/0x290 [ 436.495155] ? find_held_lock+0x35/0x130 [ 436.499224] ? rt_add_uncached_list+0x139/0x190 [ 436.503921] ? find_held_lock+0x35/0x130 [ 436.507986] sock_alloc_send_skb+0x32/0x40 [ 436.512216] __ip_append_data.isra.0+0x1227/0x20f0 [ 436.517141] ? __local_bh_enable_ip+0x99/0x1a0 [ 436.521734] ? trace_hardirqs_on+0xd/0x10 [ 436.525867] ? ip_reply_glue_bits+0xb0/0xb0 [ 436.530178] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 436.535872] ? ipv4_mtu+0x25e/0x3a0 [ 436.539486] ? ip_reply_glue_bits+0xb0/0xb0 [ 436.544223] ip_make_skb+0x17a/0x1d0 [ 436.548028] ? ip_flush_pending_frames+0x30/0x30 [ 436.552772] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 436.558375] ? udp_sendmsg+0xfb7/0x1da0 [ 436.562374] ? xfrm_lookup_route+0x48/0x1b0 [ 436.566682] udp_sendmsg+0x16a6/0x1da0 [ 436.570570] ? __lock_acquire+0x5f7/0x4620 [ 436.574793] ? ip_reply_glue_bits+0xb0/0xb0 [ 436.579121] ? udp4_seq_show+0x520/0x520 [ 436.583170] ? save_trace+0x290/0x290 [ 436.586958] ? avc_has_perm+0x273/0x4b0 [ 436.590922] ? lock_downgrade+0x740/0x740 [ 436.595057] udpv6_sendmsg+0x1393/0x2610 [ 436.599136] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 436.604505] ? rw_copy_check_uvector+0x1f1/0x290 [ 436.609269] ? sock_has_perm+0x1ed/0x280 [ 436.613330] ? selinux_tun_dev_create+0xc0/0xc0 [ 436.618007] ? dup_iter+0x260/0x260 [ 436.621644] ? copy_msghdr_from_user+0x292/0x3f0 [ 436.626384] ? save_trace+0x290/0x290 [ 436.630173] inet_sendmsg+0x122/0x500 [ 436.633955] ? inet_sendmsg+0x122/0x500 [ 436.637913] ? inet_recvmsg+0x500/0x500 [ 436.641872] sock_sendmsg+0xce/0x110 [ 436.645573] ___sys_sendmsg+0x349/0x840 [ 436.649530] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 436.654317] ? up_read+0x1a/0x40 [ 436.657678] ? __do_page_fault+0x358/0xb80 [ 436.661911] ? retint_kernel+0x2d/0x2d [ 436.665794] ? trace_hardirqs_on_caller+0x400/0x590 [ 436.670814] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 436.675557] ? retint_kernel+0x2d/0x2d [ 436.679438] __sys_sendmmsg+0x152/0x3a0 [ 436.683396] ? SyS_sendmsg+0x50/0x50 [ 436.687097] ? lock_downgrade+0x740/0x740 [ 436.691235] ? __mutex_unlock_slowpath+0x71/0x800 [ 436.696071] ? check_preemption_disabled+0x3c/0x250 [ 436.701073] ? wait_for_completion+0x420/0x420 [ 436.705643] ? __sb_end_write+0xc1/0x100 [ 436.709733] ? SyS_write+0x15e/0x230 [ 436.713436] SyS_sendmmsg+0x35/0x60 [ 436.717058] ? __sys_sendmmsg+0x3a0/0x3a0 [ 436.721194] do_syscall_64+0x1e8/0x640 [ 436.725062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 436.729889] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 436.735058] RIP: 0033:0x45b349 [ 436.738229] RSP: 002b:00007f7b957a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 436.745919] RAX: ffffffffffffffda RBX: 00007f7b957a86d4 RCX: 000000000045b349 [ 436.753179] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 436.760438] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.767692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 436.774945] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000009 [ 436.797229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:11:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) [ 436.894620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:11:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}}) [ 436.937957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.959381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.006570] ubi0: empty MTD device detected [ 437.047796] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 437.057833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.068237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:11:03 executing program 3 (fault-call:12 fault-nth:10): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 437.093738] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 437.111999] ubi0: attaching mtd0 [ 437.119859] ubi0: scanning is finished 06:11:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) [ 437.213232] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 437.230982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 437.242368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.271264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.328633] FAULT_INJECTION: forcing a failure. [ 437.328633] name failslab, interval 1, probability 0, space 0, times 0 [ 437.342256] CPU: 0 PID: 19020 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 437.350170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.359780] Call Trace: [ 437.362392] dump_stack+0x142/0x197 [ 437.366039] should_fail.cold+0x10f/0x159 [ 437.370567] should_failslab+0xdb/0x130 [ 437.374567] kmem_cache_alloc+0x47/0x780 [ 437.378649] ? save_trace+0x290/0x290 [ 437.382564] ? find_held_lock+0x35/0x130 [ 437.386622] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 437.392162] dst_alloc+0xf3/0x1a0 [ 437.395611] rt_dst_alloc+0x73/0x440 [ 437.399327] ip_route_output_key_hash_rcu+0x731/0x2750 [ 437.404749] ? check_preemption_disabled+0x3c/0x250 [ 437.409809] ip_route_output_key_hash+0x1c0/0x2e0 [ 437.414670] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 437.420239] ? udp_sendmsg+0xfb7/0x1da0 [ 437.424235] ip_route_output_flow+0x27/0xa0 [ 437.428681] udp_sendmsg+0x14a1/0x1da0 [ 437.432577] ? __lock_acquire+0x5f7/0x4620 [ 437.436823] ? ip_reply_glue_bits+0xb0/0xb0 [ 437.441156] ? udp4_seq_show+0x520/0x520 [ 437.445460] ? save_trace+0x290/0x290 [ 437.449359] ? avc_has_perm+0x273/0x4b0 [ 437.453362] ? lock_downgrade+0x740/0x740 [ 437.457622] udpv6_sendmsg+0x1393/0x2610 [ 437.461697] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 437.467066] ? rw_copy_check_uvector+0x1f1/0x290 [ 437.471835] ? sock_has_perm+0x1ed/0x280 [ 437.475907] ? selinux_tun_dev_create+0xc0/0xc0 [ 437.481988] ? dup_iter+0x260/0x260 [ 437.485637] ? copy_msghdr_from_user+0x292/0x3f0 [ 437.490404] inet_sendmsg+0x122/0x500 [ 437.494206] ? inet_sendmsg+0x122/0x500 [ 437.498192] ? inet_recvmsg+0x500/0x500 [ 437.502172] sock_sendmsg+0xce/0x110 [ 437.505890] ___sys_sendmsg+0x349/0x840 [ 437.509909] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 437.514680] ? trace_hardirqs_on+0x10/0x10 [ 437.518926] ? save_trace+0x290/0x290 [ 437.522732] ? retint_kernel+0x2d/0x2d [ 437.526623] ? __might_fault+0x110/0x1d0 [ 437.530688] ? find_held_lock+0x35/0x130 [ 437.534759] ? __might_fault+0x110/0x1d0 [ 437.538904] __sys_sendmmsg+0x152/0x3a0 [ 437.542879] ? SyS_sendmsg+0x50/0x50 [ 437.546589] ? lock_downgrade+0x740/0x740 [ 437.550732] ? __mutex_unlock_slowpath+0x71/0x800 [ 437.555575] ? check_preemption_disabled+0x3c/0x250 [ 437.560619] ? wait_for_completion+0x420/0x420 [ 437.565214] ? __sb_end_write+0xc1/0x100 [ 437.569282] ? SyS_write+0x15e/0x230 [ 437.573007] SyS_sendmmsg+0x35/0x60 [ 437.576636] ? __sys_sendmmsg+0x3a0/0x3a0 [ 437.580786] do_syscall_64+0x1e8/0x640 [ 437.584681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.589543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 437.594731] RIP: 0033:0x45b349 [ 437.597916] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 437.605753] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 437.613118] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 437.620382] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 437.627653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 437.634963] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000000a 06:11:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:04 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) 06:11:04 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x1, 0x6}, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:04 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002e0007031dfffd940101830020200a000900000006000000000000000d00ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x2, 0x5, 0x2) r1 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000) accept4(r1, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x25c, 0x800) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f223c123f3188a070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r3, 0x0, 0x0, 0x20008000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0xfffa}, &(0x7f0000000300)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000019c0), 0x45d, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000019c0), 0x45d, 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) accept4(r13, 0x0, 0x0, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, 0x0, 0x0) r15 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r15, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$llc(r15, 0x0, 0x0, 0x24040080, &(0x7f0000000240)={0x1a, 0x300, 0x0, 0x0, 0x1, 0x800000000000, @remote}, 0x10) 06:11:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) 06:11:04 executing program 3 (fault-call:12 fault-nth:11): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 438.454386] ubi0: attaching mtd0 [ 438.480002] ubi0: scanning is finished 06:11:05 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000100)=""/122, 0x7a) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x17, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) ustat(0x3, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 438.518152] FAULT_INJECTION: forcing a failure. [ 438.518152] name failslab, interval 1, probability 0, space 0, times 0 [ 438.529534] CPU: 0 PID: 19048 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 438.537436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.546891] Call Trace: [ 438.549512] dump_stack+0x142/0x197 [ 438.553170] should_fail.cold+0x10f/0x159 [ 438.557559] should_failslab+0xdb/0x130 [ 438.561561] kmem_cache_alloc_node+0x287/0x780 [ 438.566155] ? __save_stack_trace+0x7b/0xd0 [ 438.570497] __alloc_skb+0x9c/0x500 [ 438.574130] ? skb_trim+0x180/0x180 [ 438.578208] ? save_stack+0xa9/0xd0 [ 438.581857] alloc_skb_with_frags+0x86/0x4b0 [ 438.586398] ? __lock_acquire+0x5f7/0x4620 [ 438.590651] ? inet_sendmsg+0x122/0x500 [ 438.594635] ? sock_sendmsg+0xce/0x110 [ 438.598544] sock_alloc_send_pskb+0x5db/0x740 [ 438.603057] ? trace_hardirqs_on+0x10/0x10 [ 438.607303] ? sock_wmalloc+0xf0/0xf0 [ 438.611113] ? save_trace+0x290/0x290 [ 438.614934] ? fib_rules_lookup+0x308/0x950 [ 438.619271] ? save_trace+0x290/0x290 [ 438.623083] ? find_held_lock+0x35/0x130 [ 438.627160] ? rt_add_uncached_list+0x139/0x190 [ 438.631848] ? find_held_lock+0x35/0x130 [ 438.635932] sock_alloc_send_skb+0x32/0x40 [ 438.640190] __ip_append_data.isra.0+0x1227/0x20f0 [ 438.645144] ? __local_bh_enable_ip+0x99/0x1a0 [ 438.649749] ? trace_hardirqs_on+0xd/0x10 [ 438.653909] ? ip_reply_glue_bits+0xb0/0xb0 [ 438.658251] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 438.663971] ? ipv4_mtu+0x25e/0x3a0 [ 438.667618] ? ip_reply_glue_bits+0xb0/0xb0 [ 438.671951] ip_make_skb+0x17a/0x1d0 [ 438.675693] ? ip_flush_pending_frames+0x30/0x30 [ 438.680461] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 438.686028] ? udp_sendmsg+0xfb7/0x1da0 [ 438.690021] ? xfrm_lookup_route+0x48/0x1b0 [ 438.694351] udp_sendmsg+0x16a6/0x1da0 [ 438.698246] ? __lock_acquire+0x5f7/0x4620 [ 438.702481] ? ip_reply_glue_bits+0xb0/0xb0 [ 438.706815] ? udp4_seq_show+0x520/0x520 [ 438.710880] ? save_trace+0x290/0x290 [ 438.714687] ? avc_has_perm+0x273/0x4b0 [ 438.718791] ? lock_downgrade+0x740/0x740 [ 438.722963] udpv6_sendmsg+0x1393/0x2610 [ 438.727044] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 438.732327] ? rw_copy_check_uvector+0x1f1/0x290 [ 438.737200] ? sock_has_perm+0x1ed/0x280 [ 438.741364] ? selinux_tun_dev_create+0xc0/0xc0 [ 438.746044] ? dup_iter+0x260/0x260 [ 438.749689] ? copy_msghdr_from_user+0x292/0x3f0 [ 438.754628] inet_sendmsg+0x122/0x500 [ 438.758433] ? inet_sendmsg+0x122/0x500 [ 438.762418] ? inet_recvmsg+0x500/0x500 [ 438.766402] sock_sendmsg+0xce/0x110 [ 438.770138] ___sys_sendmsg+0x349/0x840 [ 438.774139] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 438.778913] ? trace_hardirqs_on+0x10/0x10 [ 438.783162] ? save_trace+0x290/0x290 [ 438.786973] ? retint_kernel+0x2d/0x2d [ 438.790879] ? __might_fault+0x110/0x1d0 [ 438.795050] ? find_held_lock+0x35/0x130 [ 438.799131] ? __might_fault+0x110/0x1d0 [ 438.803226] __sys_sendmmsg+0x152/0x3a0 [ 438.807219] ? SyS_sendmsg+0x50/0x50 [ 438.810950] ? lock_downgrade+0x740/0x740 [ 438.815120] ? __mutex_unlock_slowpath+0x71/0x800 [ 438.820131] ? check_preemption_disabled+0x3c/0x250 [ 438.825260] ? wait_for_completion+0x420/0x420 [ 438.829851] ? __sb_end_write+0xc1/0x100 [ 438.833930] ? SyS_write+0x15e/0x230 [ 438.837657] SyS_sendmmsg+0x35/0x60 [ 438.841318] ? __sys_sendmmsg+0x3a0/0x3a0 [ 438.845476] do_syscall_64+0x1e8/0x640 [ 438.849381] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.854893] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 438.860090] RIP: 0033:0x45b349 06:11:05 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) accept(r1, &(0x7f0000000040)=@ax25={{0x3, @null}, [@rose, @remote, @default, @remote, @rose, @default, @null, @bcast]}, &(0x7f0000000100)=0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000e0ff13000a0076657468315f746f5f687372000000a757ec0691b2f9cf8c344609096c1f"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x101002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xc0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x1}, 0x0, 0x0, &(0x7f00000003c0)={0x1, 0x2, 0x4, 0x608900}, &(0x7f0000000400)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x78) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r5, 0x4) vmsplice(r6, 0x0, 0x2a65ed3bd4237428, 0x3) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) lseek(r7, 0x81, 0x6) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r8, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 438.863279] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 438.871949] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 438.879230] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 438.886511] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 438.893263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.893781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 438.893789] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000000b [ 439.007261] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 439.014465] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 439.025943] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 439.038384] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 439.043383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:11:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x0) [ 439.055108] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 439.063289] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 439.080373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 439.084331] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1724305859 [ 439.103991] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 439.110480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.118640] ubi0: background thread "ubi_bgt0d" started, PID 19077 [ 439.147210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:11:05 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) [ 439.154892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 439.189375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 439.197950] ubi0: detaching mtd0 [ 439.206597] ubi0: mtd0 is detached [ 439.219844] ubi0: attaching mtd0 [ 439.227216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:11:05 executing program 3 (fault-call:12 fault-nth:12): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 439.236351] ubi0: scanning is finished [ 439.243070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.255212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:11:05 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002e0007031dfffd940101830020200a000900000006000000000000000d00ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x2, 0x5, 0x2) r1 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000) accept4(r1, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x25c, 0x800) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f223c123f3188a070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r3, 0x0, 0x0, 0x20008000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0xfffa}, &(0x7f0000000300)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000019c0), 0x45d, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000019c0), 0x45d, 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) accept4(r13, 0x0, 0x0, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, 0x0, 0x0) r15 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r15, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$llc(r15, 0x0, 0x0, 0x24040080, &(0x7f0000000240)={0x1a, 0x300, 0x0, 0x0, 0x1, 0x800000000000, @remote}, 0x10) [ 439.427549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.429451] FAULT_INJECTION: forcing a failure. [ 439.429451] name failslab, interval 1, probability 0, space 0, times 0 [ 439.443314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.453100] CPU: 1 PID: 19101 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 439.461008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.470388] Call Trace: [ 439.472997] dump_stack+0x142/0x197 [ 439.476642] should_fail.cold+0x10f/0x159 [ 439.480811] should_failslab+0xdb/0x130 [ 439.484790] kmem_cache_alloc_node+0x287/0x780 [ 439.489375] ? __save_stack_trace+0x7b/0xd0 [ 439.493714] __alloc_skb+0x9c/0x500 [ 439.497358] ? skb_trim+0x180/0x180 [ 439.500989] ? save_stack+0xa9/0xd0 [ 439.504624] alloc_skb_with_frags+0x86/0x4b0 [ 439.509039] ? __lock_acquire+0x5f7/0x4620 [ 439.513274] ? inet_sendmsg+0x122/0x500 [ 439.517248] ? sock_sendmsg+0xce/0x110 [ 439.521140] sock_alloc_send_pskb+0x5db/0x740 [ 439.525638] ? trace_hardirqs_on+0x10/0x10 [ 439.529865] ? sock_wmalloc+0xf0/0xf0 [ 439.533662] ? save_trace+0x290/0x290 [ 439.537453] ? fib_rules_lookup+0x308/0x950 [ 439.541764] ? save_trace+0x290/0x290 [ 439.545554] ? find_held_lock+0x35/0x130 [ 439.549617] ? rt_add_uncached_list+0x139/0x190 [ 439.554278] ? find_held_lock+0x35/0x130 [ 439.558336] sock_alloc_send_skb+0x32/0x40 [ 439.562577] __ip_append_data.isra.0+0x1227/0x20f0 [ 439.567501] ? __local_bh_enable_ip+0x99/0x1a0 [ 439.572083] ? trace_hardirqs_on+0xd/0x10 [ 439.576224] ? ip_reply_glue_bits+0xb0/0xb0 [ 439.580544] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 439.586256] ? ipv4_mtu+0x25e/0x3a0 [ 439.589879] ? ip_reply_glue_bits+0xb0/0xb0 [ 439.594192] ip_make_skb+0x17a/0x1d0 [ 439.597906] ? ip_flush_pending_frames+0x30/0x30 [ 439.602663] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 439.608196] ? udp_sendmsg+0xfb7/0x1da0 [ 439.612192] ? xfrm_lookup_route+0x48/0x1b0 [ 439.616526] udp_sendmsg+0x16a6/0x1da0 [ 439.620412] ? __lock_acquire+0x5f7/0x4620 [ 439.624640] ? ip_reply_glue_bits+0xb0/0xb0 [ 439.628968] ? udp4_seq_show+0x520/0x520 [ 439.633025] ? save_trace+0x290/0x290 [ 439.636822] ? avc_has_perm+0x273/0x4b0 [ 439.640799] ? lock_downgrade+0x740/0x740 [ 439.644949] udpv6_sendmsg+0x1393/0x2610 [ 439.649024] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 439.654332] ? rw_copy_check_uvector+0x1f1/0x290 [ 439.659106] ? sock_has_perm+0x1ed/0x280 [ 439.663176] ? selinux_tun_dev_create+0xc0/0xc0 [ 439.667865] ? dup_iter+0x260/0x260 [ 439.671502] ? copy_msghdr_from_user+0x292/0x3f0 [ 439.676264] inet_sendmsg+0x122/0x500 [ 439.680062] ? inet_sendmsg+0x122/0x500 [ 439.684031] ? inet_recvmsg+0x500/0x500 [ 439.688018] sock_sendmsg+0xce/0x110 [ 439.691750] ___sys_sendmsg+0x349/0x840 [ 439.695757] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 439.700530] ? trace_hardirqs_on+0x10/0x10 [ 439.704784] ? save_trace+0x290/0x290 [ 439.708608] ? retint_kernel+0x2d/0x2d [ 439.712506] ? __might_fault+0x110/0x1d0 [ 439.716573] ? find_held_lock+0x35/0x130 [ 439.720635] ? __might_fault+0x110/0x1d0 [ 439.724711] __sys_sendmmsg+0x152/0x3a0 [ 439.728684] ? SyS_sendmsg+0x50/0x50 [ 439.732415] ? lock_downgrade+0x740/0x740 [ 439.736690] ? __mutex_unlock_slowpath+0x71/0x800 [ 439.741548] ? check_preemption_disabled+0x3c/0x250 [ 439.746593] ? wait_for_completion+0x420/0x420 [ 439.751190] ? __sb_end_write+0xc1/0x100 [ 439.755288] ? SyS_write+0x15e/0x230 [ 439.759019] SyS_sendmmsg+0x35/0x60 [ 439.762643] ? __sys_sendmmsg+0x3a0/0x3a0 [ 439.766798] do_syscall_64+0x1e8/0x640 [ 439.770801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.775670] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 439.780872] RIP: 0033:0x45b349 [ 439.784069] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.791794] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 439.799069] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 439.806350] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 439.813629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 439.829332] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000000c [ 439.876136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 439.907697] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 439.932940] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 439.954755] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 439.968822] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 439.985488] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 439.994464] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 440.010783] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1724305859 [ 440.020418] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 440.029808] ubi0: background thread "ubi_bgt0d" started, PID 19107 06:11:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r1, 0xb, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x40000) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="cc154e156a2d81aa548efd598e0c9b39b4e90b061233b57e4e3a09acf9c746604db48c2f5292b5522d20a7", 0x2b) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r2, &(0x7f0000000000)=@random={'osx.', '*\x00'}, 0x0, 0x0, 0x0) 06:11:07 executing program 3 (fault-call:12 fault-nth:13): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x0) 06:11:07 executing program 5: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r0, r3, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00009052946f02", 0x48}], 0x1) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 441.507453] audit: type=1400 audit(1579932668.012:142): avc: denied { setattr } for pid=19121 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=63401 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 441.549482] FAULT_INJECTION: forcing a failure. 06:11:08 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b2700"/248], 0x10094) write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYPTR64, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="e47e6d21f32a8aeb65365c54f972e7c2902bc0f68f797185f8765f5c2bd081734f6384ba364971c61be8b09843b60e04660fda3845934c6fc73ea87146955a609465704cfbc6e5d42d0a6171a2d8e9b240b86afa6e1c8ef02b91a424e93726b32c3fe24c325e7c8ffc06fa112b800653bdc003205bebd560d204a227fabad5c7f3af5d2828ba62bff95f796d2eecf3318952023ec24bf7813bb3d495bf7fb107a4bb686b4f5c33d16c6cd817f0fba783505c062c1c66afa9ac0d8bfbbcc50f5bcab20906dbaff2491e69e9e03f5a05f12ab1", @ANYRES16, @ANYRESHEX], @ANYRES32, @ANYRESOCT], @ANYRES16, @ANYRES64=0x0, @ANYBLOB="bdc75d69bcdf8cc36341bcefbcd717c2bc5aa7c2a878b9bfb0b854f09474fbbdc013411daf60ccb13bc3384e5eeb088a6cc9c4a040c884beadd4e5703da1332181492ae707d39f146d72673de4f2a1f3c7ee6d1eb92dfe34973cff889cef421f788cc9aec757bc09653082f2d56ae0e889842eed9fbb151459869da2f98fe504b49f84c2fdf95e0601aa37899ca67413bed1ac544014bb9ed3228d2cfbc5e4c62bf9992e70f21f5a5860f309002691e84f4e1d9b6f04a92466b5a3267bdce7847bf8ed02da87bde73f76c8282b43021e58dfac"], 0x10523) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="88"], 0x1) tkill(r0, 0x1000000000013) [ 441.549482] name failslab, interval 1, probability 0, space 0, times 0 [ 441.561154] CPU: 0 PID: 19131 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 441.569051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.578442] Call Trace: [ 441.581131] dump_stack+0x142/0x197 [ 441.584781] should_fail.cold+0x10f/0x159 [ 441.589015] should_failslab+0xdb/0x130 [ 441.593022] kmem_cache_alloc_node+0x287/0x780 [ 441.597633] ? __save_stack_trace+0x7b/0xd0 [ 441.602245] __alloc_skb+0x9c/0x500 [ 441.605901] ? skb_trim+0x180/0x180 [ 441.609539] ? save_stack+0xa9/0xd0 [ 441.613290] alloc_skb_with_frags+0x86/0x4b0 [ 441.617714] ? __lock_acquire+0x5f7/0x4620 [ 441.621962] ? inet_sendmsg+0x122/0x500 [ 441.626058] ? sock_sendmsg+0xce/0x110 [ 441.629964] sock_alloc_send_pskb+0x5db/0x740 [ 441.634486] ? trace_hardirqs_on+0x10/0x10 [ 441.638743] ? sock_wmalloc+0xf0/0xf0 [ 441.642552] ? save_trace+0x290/0x290 [ 441.646356] ? fib_rules_lookup+0x308/0x950 [ 441.650681] ? save_trace+0x290/0x290 06:11:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) [ 441.654480] ? find_held_lock+0x35/0x130 [ 441.658577] ? rt_add_uncached_list+0x139/0x190 [ 441.663250] ? find_held_lock+0x35/0x130 [ 441.667324] sock_alloc_send_skb+0x32/0x40 [ 441.671676] __ip_append_data.isra.0+0x1227/0x20f0 [ 441.676618] ? __local_bh_enable_ip+0x99/0x1a0 [ 441.679674] ptrace attach of "/root/syz-executor.0"[19140] was attempted by "/root/syz-executor.0"[19142] [ 441.681228] ? trace_hardirqs_on+0xd/0x10 [ 441.681240] ? ip_reply_glue_bits+0xb0/0xb0 [ 441.681256] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 06:11:08 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$can_raw(r1, &(0x7f0000000300), 0x10) dup2(r0, r1) [ 441.681265] ? ipv4_mtu+0x25e/0x3a0 [ 441.681276] ? ip_reply_glue_bits+0xb0/0xb0 [ 441.681288] ip_make_skb+0x17a/0x1d0 [ 441.716890] ? ip_flush_pending_frames+0x30/0x30 [ 441.721783] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 441.727337] ? udp_sendmsg+0xfb7/0x1da0 [ 441.731329] ? xfrm_lookup_route+0x48/0x1b0 [ 441.735788] udp_sendmsg+0x16a6/0x1da0 [ 441.739690] ? __lock_acquire+0x5f7/0x4620 [ 441.743946] ? ip_reply_glue_bits+0xb0/0xb0 [ 441.748292] ? udp4_seq_show+0x520/0x520 [ 441.752579] ? save_trace+0x290/0x290 [ 441.756429] ? avc_has_perm+0x273/0x4b0 [ 441.760432] ? lock_downgrade+0x740/0x740 [ 441.764599] udpv6_sendmsg+0x1393/0x2610 [ 441.768685] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 441.773985] ? rw_copy_check_uvector+0x1f1/0x290 [ 441.778761] ? sock_has_perm+0x1ed/0x280 [ 441.782834] ? selinux_tun_dev_create+0xc0/0xc0 [ 441.787516] ? dup_iter+0x260/0x260 [ 441.791260] ? copy_msghdr_from_user+0x292/0x3f0 [ 441.796145] inet_sendmsg+0x122/0x500 [ 441.800068] ? inet_sendmsg+0x122/0x500 [ 441.804075] ? inet_recvmsg+0x500/0x500 06:11:08 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0}}) 06:11:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)=ANY=[@ANYBLOB="c00000001b0001000000000000000000ac1e0101000000000000000000000000ac14140000000000000000de00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/120], 0xc0}}, 0x0) [ 441.808066] sock_sendmsg+0xce/0x110 [ 441.811805] ___sys_sendmsg+0x349/0x840 [ 441.815797] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 441.820572] ? trace_hardirqs_on+0x10/0x10 [ 441.824820] ? save_trace+0x290/0x290 [ 441.828671] ? retint_kernel+0x2d/0x2d [ 441.832572] ? __might_fault+0x110/0x1d0 [ 441.836639] ? find_held_lock+0x35/0x130 [ 441.840728] ? __might_fault+0x110/0x1d0 [ 441.844813] __sys_sendmmsg+0x152/0x3a0 [ 441.848797] ? SyS_sendmsg+0x50/0x50 [ 441.852528] ? lock_downgrade+0x740/0x740 [ 441.856833] ? __mutex_unlock_slowpath+0x71/0x800 [ 441.862126] ? check_preemption_disabled+0x3c/0x250 [ 441.867188] ? wait_for_completion+0x420/0x420 [ 441.871781] ? __sb_end_write+0xc1/0x100 [ 441.875859] ? SyS_write+0x15e/0x230 [ 441.879585] SyS_sendmmsg+0x35/0x60 [ 441.883336] ? __sys_sendmmsg+0x3a0/0x3a0 [ 441.887504] do_syscall_64+0x1e8/0x640 [ 441.891412] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.896277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 441.901473] RIP: 0033:0x45b349 06:11:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000", 0x17}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 441.904662] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.912527] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 441.919976] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 441.927342] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 441.934621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 441.941903] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000000d 06:11:08 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000140)=@ethtool_pauseparam}) 06:11:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000540)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002e80)=""/51, 0x33}}, {{&(0x7f0000004300)=@caif=@util, 0x80, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sysinfo(&(0x7f0000000340)=""/86) fallocate(0xffffffffffffffff, 0x10, 0x4004, 0x200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10400003) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x0) 06:11:08 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = geteuid() ioprio_set$uid(0x0, r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0xc, @sdr={0x3247504d, 0x8001}}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x20, 0x9986, 0x223, 0xc8f2, 0x100, 0x4}) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000240)={0x3, 0x6, 0x4, 0x17f201, 0x4, {r3, r4/1000+10000}, {0x4, 0x1, 0x7, 0x3, 0x6, 0x7, '6~:{'}, 0x363, 0x4, @offset=0x9e0f, 0xffffffff, 0x0, 0xffffffffffffffff}) fchdir(r5) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:08 executing program 3 (fault-call:12 fault-nth:14): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:08 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0}}) 06:11:08 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000002c0)=0x400000005) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) read(r2, &(0x7f0000001340)=""/102393, 0xff2f) r4 = syz_open_pts(r2, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$TCFLSH(r5, 0x540a, 0x0) 06:11:08 executing program 2: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=',', 0x1}], 0x1}, 0x0) [ 442.533288] FAULT_INJECTION: forcing a failure. [ 442.533288] name failslab, interval 1, probability 0, space 0, times 0 [ 442.546267] CPU: 0 PID: 19202 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 442.554397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.563874] Call Trace: [ 442.566495] dump_stack+0x142/0x197 [ 442.570156] should_fail.cold+0x10f/0x159 [ 442.574329] should_failslab+0xdb/0x130 [ 442.578334] kmem_cache_alloc_node+0x287/0x780 [ 442.582946] ? __save_stack_trace+0x7b/0xd0 [ 442.587285] __alloc_skb+0x9c/0x500 [ 442.590928] ? skb_trim+0x180/0x180 [ 442.594577] ? save_stack+0xa9/0xd0 [ 442.598230] alloc_skb_with_frags+0x86/0x4b0 [ 442.602658] ? __lock_acquire+0x5f7/0x4620 [ 442.606910] ? inet_sendmsg+0x122/0x500 [ 442.610905] ? sock_sendmsg+0xce/0x110 [ 442.614807] sock_alloc_send_pskb+0x5db/0x740 [ 442.619414] ? trace_hardirqs_on+0x10/0x10 [ 442.623677] ? sock_wmalloc+0xf0/0xf0 [ 442.627497] ? save_trace+0x290/0x290 [ 442.631316] ? fib_rules_lookup+0x308/0x950 [ 442.636450] ? save_trace+0x290/0x290 [ 442.640263] ? find_held_lock+0x35/0x130 [ 442.644768] ? rt_add_uncached_list+0x139/0x190 [ 442.649455] ? find_held_lock+0x35/0x130 [ 442.653706] sock_alloc_send_skb+0x32/0x40 [ 442.657958] __ip_append_data.isra.0+0x1227/0x20f0 [ 442.662898] ? __local_bh_enable_ip+0x99/0x1a0 [ 442.667496] ? trace_hardirqs_on+0xd/0x10 [ 442.671668] ? ip_reply_glue_bits+0xb0/0xb0 [ 442.676013] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 442.681921] ? ipv4_mtu+0x25e/0x3a0 [ 442.685556] ? ip_reply_glue_bits+0xb0/0xb0 [ 442.689996] ip_make_skb+0x17a/0x1d0 [ 442.693722] ? ip_flush_pending_frames+0x30/0x30 [ 442.698491] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 442.704037] ? udp_sendmsg+0xfb7/0x1da0 [ 442.708033] ? xfrm_lookup_route+0x48/0x1b0 [ 442.712367] udp_sendmsg+0x16a6/0x1da0 [ 442.716293] ? __lock_acquire+0x5f7/0x4620 [ 442.720672] ? ip_reply_glue_bits+0xb0/0xb0 [ 442.725013] ? udp4_seq_show+0x520/0x520 [ 442.729121] ? save_trace+0x290/0x290 [ 442.732969] ? avc_has_perm+0x273/0x4b0 [ 442.737058] ? lock_downgrade+0x740/0x740 [ 442.741220] udpv6_sendmsg+0x1393/0x2610 [ 442.745302] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 442.750592] ? rw_copy_check_uvector+0x1f1/0x290 [ 442.755370] ? sock_has_perm+0x1ed/0x280 [ 442.759569] ? selinux_tun_dev_create+0xc0/0xc0 [ 442.764259] ? dup_iter+0x260/0x260 [ 442.767914] ? copy_msghdr_from_user+0x292/0x3f0 [ 442.772693] inet_sendmsg+0x122/0x500 [ 442.776513] ? inet_sendmsg+0x122/0x500 [ 442.780502] ? inet_recvmsg+0x500/0x500 [ 442.784497] sock_sendmsg+0xce/0x110 [ 442.788262] ___sys_sendmsg+0x349/0x840 [ 442.792258] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 442.797132] ? trace_hardirqs_on+0x10/0x10 [ 442.801483] ? save_trace+0x290/0x290 [ 442.805324] ? retint_kernel+0x2d/0x2d [ 442.809317] ? __might_fault+0x110/0x1d0 [ 442.813418] ? find_held_lock+0x35/0x130 [ 442.817500] ? __might_fault+0x110/0x1d0 [ 442.821593] __sys_sendmmsg+0x152/0x3a0 [ 442.826140] ? SyS_sendmsg+0x50/0x50 [ 442.829881] ? lock_downgrade+0x740/0x740 [ 442.834176] ? __mutex_unlock_slowpath+0x71/0x800 [ 442.839031] ? check_preemption_disabled+0x3c/0x250 [ 442.844067] ? wait_for_completion+0x420/0x420 [ 442.848793] ? __sb_end_write+0xc1/0x100 [ 442.852891] ? SyS_write+0x15e/0x230 [ 442.856626] SyS_sendmmsg+0x35/0x60 [ 442.860357] ? __sys_sendmmsg+0x3a0/0x3a0 [ 442.864521] do_syscall_64+0x1e8/0x640 [ 442.868424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.873488] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 442.878795] RIP: 0033:0x45b349 [ 442.882078] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 442.889797] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 442.897082] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 442.904370] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 442.911651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 442.918935] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000000e 06:11:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:11 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0bff00000000000000167d4da3"], &(0x7f0000000040)=0x13) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:11 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xffffffffffffffae}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000001a}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/69, 0xfffffffffffffebb}], 0x3, 0x0, 0x159ae6f857735efc, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:11:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, 0x0, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff", 0x1c}], 0x1) fcntl$getown(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f000000020319000000070000", 0xd}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff3fff58", 0x1f}], 0x1) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000006ffc), 0x26d) 06:11:11 executing program 3 (fault-call:12 fault-nth:15): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:11 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)) 06:11:11 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 445.088854] FAULT_INJECTION: forcing a failure. [ 445.088854] name failslab, interval 1, probability 0, space 0, times 0 [ 445.100925] CPU: 0 PID: 19247 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 445.108822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.118193] Call Trace: [ 445.120806] dump_stack+0x142/0x197 [ 445.124463] should_fail.cold+0x10f/0x159 [ 445.128656] should_failslab+0xdb/0x130 [ 445.132649] kmem_cache_alloc_node+0x287/0x780 [ 445.137281] ? __save_stack_trace+0x7b/0xd0 [ 445.141618] __alloc_skb+0x9c/0x500 [ 445.146471] ? skb_trim+0x180/0x180 [ 445.150192] ? save_stack+0xa9/0xd0 [ 445.153858] alloc_skb_with_frags+0x86/0x4b0 [ 445.158370] ? __lock_acquire+0x5f7/0x4620 [ 445.162615] ? inet_sendmsg+0x122/0x500 [ 445.166694] ? sock_sendmsg+0xce/0x110 [ 445.171037] sock_alloc_send_pskb+0x5db/0x740 [ 445.175552] ? trace_hardirqs_on+0x10/0x10 [ 445.179818] ? sock_wmalloc+0xf0/0xf0 [ 445.183891] ? save_trace+0x290/0x290 06:11:11 executing program 1: prlimit64(0x0, 0xa, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000001680)='/dev/vcs#\x00', 0x8, 0x202000) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) mkdir(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0xfff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 445.187801] ? fib_rules_lookup+0x308/0x950 [ 445.192139] ? save_trace+0x290/0x290 [ 445.195950] ? find_held_lock+0x35/0x130 [ 445.200032] ? rt_add_uncached_list+0x139/0x190 [ 445.204723] ? find_held_lock+0x35/0x130 [ 445.208802] sock_alloc_send_skb+0x32/0x40 [ 445.213061] __ip_append_data.isra.0+0x1227/0x20f0 [ 445.218002] ? __local_bh_enable_ip+0x99/0x1a0 [ 445.222600] ? trace_hardirqs_on+0xd/0x10 [ 445.226762] ? ip_reply_glue_bits+0xb0/0xb0 [ 445.231103] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 445.236825] ? ipv4_mtu+0x25e/0x3a0 [ 445.240473] ? ip_reply_glue_bits+0xb0/0xb0 [ 445.244802] ip_make_skb+0x17a/0x1d0 [ 445.248530] ? ip_flush_pending_frames+0x30/0x30 [ 445.253301] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 445.258942] ? udp_sendmsg+0xfb7/0x1da0 [ 445.263181] ? xfrm_lookup_route+0x48/0x1b0 [ 445.267513] udp_sendmsg+0x16a6/0x1da0 [ 445.271430] ? __lock_acquire+0x5f7/0x4620 [ 445.275678] ? ip_reply_glue_bits+0xb0/0xb0 [ 445.280010] ? udp4_seq_show+0x520/0x520 [ 445.284081] ? save_trace+0x290/0x290 06:11:11 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 445.287894] ? avc_has_perm+0x273/0x4b0 [ 445.291928] ? lock_downgrade+0x740/0x740 [ 445.296107] udpv6_sendmsg+0x1393/0x2610 [ 445.300192] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 445.305567] ? rw_copy_check_uvector+0x1f1/0x290 [ 445.310459] ? sock_has_perm+0x1ed/0x280 [ 445.314546] ? selinux_tun_dev_create+0xc0/0xc0 [ 445.319232] ? dup_iter+0x260/0x260 [ 445.323313] ? copy_msghdr_from_user+0x292/0x3f0 [ 445.328180] inet_sendmsg+0x122/0x500 [ 445.332089] ? inet_sendmsg+0x122/0x500 [ 445.336069] ? inet_recvmsg+0x500/0x500 [ 445.340047] sock_sendmsg+0xce/0x110 [ 445.343860] ___sys_sendmsg+0x349/0x840 [ 445.347849] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 445.352619] ? trace_hardirqs_on+0x10/0x10 [ 445.356871] ? save_trace+0x290/0x290 [ 445.360680] ? retint_kernel+0x2d/0x2d [ 445.364579] ? __might_fault+0x110/0x1d0 [ 445.368651] ? find_held_lock+0x35/0x130 [ 445.372728] ? __might_fault+0x110/0x1d0 [ 445.377175] __sys_sendmmsg+0x152/0x3a0 [ 445.381161] ? SyS_sendmsg+0x50/0x50 [ 445.384890] ? lock_downgrade+0x740/0x740 06:11:11 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 445.389055] ? __mutex_unlock_slowpath+0x71/0x800 [ 445.393903] ? check_preemption_disabled+0x3c/0x250 [ 445.398932] ? wait_for_completion+0x420/0x420 [ 445.403528] ? __sb_end_write+0xc1/0x100 [ 445.407641] ? SyS_write+0x15e/0x230 [ 445.411367] SyS_sendmmsg+0x35/0x60 [ 445.415000] ? __sys_sendmmsg+0x3a0/0x3a0 [ 445.419154] do_syscall_64+0x1e8/0x640 [ 445.423041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.427895] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 445.433087] RIP: 0033:0x45b349 [ 445.436279] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 445.443988] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 445.451265] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 445.458535] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 445.465809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 445.473084] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000000f [ 445.509543] ldm_validate_privheads(): Disk read failed. [ 445.516425] loop5: p2 < > [ 445.519395] loop5: partition table partially beyond EOD, truncated [ 445.520002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 445.542226] loop5: p2 size 2 extends beyond EOD, truncated [ 445.549802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:11:12 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 445.563828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.732125] ldm_validate_privheads(): Disk read failed. [ 445.739072] loop5: p2 < > [ 445.750527] loop5: partition table partially beyond EOD, truncated [ 445.757436] loop5: p2 size 2 extends beyond EOD, truncated 06:11:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x11, @empty, 0x4e24, 0x4, 'lblcr\x00', 0x18, 0x80000000, 0x75}, 0x2c) prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x8005) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:14 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, 0x0, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff", 0x1c}], 0x1) fcntl$getown(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f000000020319000000070000", 0xd}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff3fff58", 0x1f}], 0x1) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000006ffc), 0x26d) 06:11:14 executing program 3 (fault-call:12 fault-nth:16): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, 0x0, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff", 0x1c}], 0x1) fcntl$getown(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f000000020319000000070000", 0xd}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff3fff58", 0x1f}], 0x1) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000006ffc), 0x26d) [ 447.898041] FAULT_INJECTION: forcing a failure. [ 447.898041] name failslab, interval 1, probability 0, space 0, times 0 [ 447.909371] CPU: 1 PID: 19310 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 447.917299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.926686] Call Trace: [ 447.929302] dump_stack+0x142/0x197 [ 447.932951] should_fail.cold+0x10f/0x159 [ 447.937129] should_failslab+0xdb/0x130 [ 447.941125] kmem_cache_alloc+0x47/0x780 [ 447.945795] ? save_trace+0x290/0x290 [ 447.949612] ? find_held_lock+0x35/0x130 [ 447.953689] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 447.959248] dst_alloc+0xf3/0x1a0 [ 447.962731] rt_dst_alloc+0x73/0x440 [ 447.966456] ip_route_output_key_hash_rcu+0x731/0x2750 [ 447.971745] ? check_preemption_disabled+0x3c/0x250 [ 447.976863] ip_route_output_key_hash+0x1c0/0x2e0 [ 447.981719] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 447.987270] ? udp_sendmsg+0xfb7/0x1da0 [ 447.991268] ip_route_output_flow+0x27/0xa0 [ 447.995612] udp_sendmsg+0x14a1/0x1da0 [ 447.999525] ? __lock_acquire+0x5f7/0x4620 [ 448.003769] ? ip_reply_glue_bits+0xb0/0xb0 [ 448.008105] ? udp4_seq_show+0x520/0x520 [ 448.012177] ? save_trace+0x290/0x290 [ 448.015996] ? avc_has_perm+0x273/0x4b0 [ 448.020119] ? lock_downgrade+0x740/0x740 [ 448.024281] udpv6_sendmsg+0x1393/0x2610 [ 448.028382] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 448.033671] ? rw_copy_check_uvector+0x1f1/0x290 [ 448.038551] ? sock_has_perm+0x1ed/0x280 [ 448.042629] ? selinux_tun_dev_create+0xc0/0xc0 [ 448.047414] ? dup_iter+0x260/0x260 [ 448.051067] ? copy_msghdr_from_user+0x292/0x3f0 [ 448.055845] inet_sendmsg+0x122/0x500 [ 448.059779] ? inet_sendmsg+0x122/0x500 [ 448.063772] ? inet_recvmsg+0x500/0x500 [ 448.067770] sock_sendmsg+0xce/0x110 [ 448.071502] ___sys_sendmsg+0x349/0x840 [ 448.075513] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 448.080288] ? trace_hardirqs_on+0x10/0x10 [ 448.084674] ? save_trace+0x290/0x290 [ 448.088494] ? retint_kernel+0x2d/0x2d [ 448.092402] ? __might_fault+0x110/0x1d0 [ 448.096757] ? find_held_lock+0x35/0x130 [ 448.100913] ? __might_fault+0x110/0x1d0 [ 448.105358] __sys_sendmmsg+0x152/0x3a0 [ 448.109357] ? SyS_sendmsg+0x50/0x50 [ 448.113086] ? lock_downgrade+0x740/0x740 [ 448.117262] ? __mutex_unlock_slowpath+0x71/0x800 [ 448.122202] ? check_preemption_disabled+0x3c/0x250 [ 448.127238] ? wait_for_completion+0x420/0x420 [ 448.132212] ? __sb_end_write+0xc1/0x100 [ 448.136464] ? SyS_write+0x15e/0x230 [ 448.140225] SyS_sendmmsg+0x35/0x60 [ 448.144131] ? __sys_sendmmsg+0x3a0/0x3a0 [ 448.148299] do_syscall_64+0x1e8/0x640 [ 448.152727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.157697] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 448.162900] RIP: 0033:0x45b349 [ 448.166097] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 448.173818] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 448.181189] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 448.188482] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 06:11:14 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0xfffffffffffffe7f) 06:11:14 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x75, &(0x7f0000000100)={r5}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5, 0x3}, &(0x7f0000000040)=0x8) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r6, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 448.196118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 448.203400] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000010 06:11:14 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 448.294487] ldm_validate_privheads(): Disk read failed. [ 448.306760] loop5: p2 < > [ 448.309870] loop5: partition table partially beyond EOD, truncated [ 448.323380] ldm_validate_privheads(): Disk read failed. [ 448.333787] loop5: p2 size 2 extends beyond EOD, truncated [ 448.342083] loop2: p2 < > 06:11:14 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 448.349130] loop2: partition table partially beyond EOD, truncated [ 448.418595] loop2: p2 size 2 extends beyond EOD, truncated 06:11:15 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8, 0x0, @remote, 0x80000000}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, 0x0, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff", 0x1c}], 0x1) fcntl$getown(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f000000020319000000070000", 0xd}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900efff07000000068100025b0509000100010100ff3fff58", 0x1f}], 0x1) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000006ffc), 0x26d) [ 448.768651] ldm_validate_privheads(): Disk read failed. [ 448.788337] loop5: p2 < > [ 448.797074] loop5: partition table partially beyond EOD, truncated [ 448.808657] loop5: p2 size 2 extends beyond EOD, truncated 06:11:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:17 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:17 executing program 2: socket$caif_seqpacket(0x25, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000600)={'sha3-224\x00'}}) 06:11:17 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={{0x1, 0x0, @reserved="1c6af027091c285a59d597786bb00911765ce88e072dc16f9d19c182e4db74f3"}}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:17 executing program 3 (fault-call:12 fault-nth:17): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) [ 450.912910] FAULT_INJECTION: forcing a failure. [ 450.912910] name failslab, interval 1, probability 0, space 0, times 0 [ 450.924347] CPU: 0 PID: 19405 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 450.932355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.932361] Call Trace: [ 450.932389] dump_stack+0x142/0x197 [ 450.932406] should_fail.cold+0x10f/0x159 [ 450.932424] should_failslab+0xdb/0x130 [ 450.932437] kmem_cache_alloc+0x47/0x780 [ 450.932449] ? save_trace+0x290/0x290 [ 450.932457] ? find_held_lock+0x35/0x130 [ 450.932470] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 450.932484] dst_alloc+0xf3/0x1a0 [ 450.932501] rt_dst_alloc+0x73/0x440 [ 450.932516] ip_route_output_key_hash_rcu+0x731/0x2750 [ 450.932527] ? check_preemption_disabled+0x3c/0x250 [ 450.932543] ip_route_output_key_hash+0x1c0/0x2e0 [ 450.932554] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 450.932562] ? udp_sendmsg+0xfb7/0x1da0 [ 450.932578] ip_route_output_flow+0x27/0xa0 [ 450.932591] udp_sendmsg+0x14a1/0x1da0 [ 450.932598] ? __lock_acquire+0x5f7/0x4620 [ 450.932609] ? ip_reply_glue_bits+0xb0/0xb0 [ 450.932620] ? udp4_seq_show+0x520/0x520 [ 451.028028] ? save_trace+0x290/0x290 [ 451.031822] ? avc_has_perm+0x273/0x4b0 [ 451.035811] ? lock_downgrade+0x740/0x740 [ 451.039983] udpv6_sendmsg+0x1393/0x2610 [ 451.044074] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 451.049356] ? rw_copy_check_uvector+0x1f1/0x290 [ 451.054127] ? sock_has_perm+0x1ed/0x280 [ 451.058192] ? selinux_tun_dev_create+0xc0/0xc0 [ 451.062869] ? dup_iter+0x260/0x260 [ 451.066631] ? copy_msghdr_from_user+0x292/0x3f0 [ 451.071401] inet_sendmsg+0x122/0x500 [ 451.075209] ? inet_sendmsg+0x122/0x500 [ 451.079198] ? inet_recvmsg+0x500/0x500 [ 451.083179] sock_sendmsg+0xce/0x110 [ 451.086902] ___sys_sendmsg+0x349/0x840 [ 451.090898] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 451.095671] ? trace_hardirqs_on+0x10/0x10 [ 451.099955] ? save_trace+0x290/0x290 [ 451.103779] ? retint_kernel+0x2d/0x2d [ 451.108021] ? __might_fault+0x110/0x1d0 [ 451.112200] ? find_held_lock+0x35/0x130 [ 451.116261] ? __might_fault+0x110/0x1d0 [ 451.120589] __sys_sendmmsg+0x152/0x3a0 [ 451.124570] ? SyS_sendmsg+0x50/0x50 [ 451.128304] ? lock_downgrade+0x740/0x740 [ 451.132456] ? __mutex_unlock_slowpath+0x71/0x800 [ 451.137417] ? check_preemption_disabled+0x3c/0x250 [ 451.142806] ? wait_for_completion+0x420/0x420 [ 451.147401] ? __sb_end_write+0xc1/0x100 [ 451.151470] ? SyS_write+0x15e/0x230 [ 451.155482] SyS_sendmmsg+0x35/0x60 [ 451.159122] ? __sys_sendmmsg+0x3a0/0x3a0 [ 451.163275] do_syscall_64+0x1e8/0x640 [ 451.167267] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.172130] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 451.177424] RIP: 0033:0x45b349 [ 451.180606] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 451.190105] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 451.198044] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 06:11:17 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000400)=[@increfs, @clear_death={0x40046307, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000080)={0x1, 0x7f, 0xfff, 0x6, 0x15, "0c30e45e16741731"}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 451.206389] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 451.214925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 451.222506] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000011 06:11:17 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 451.297792] audit: type=1400 audit(1579932677.802:143): avc: denied { set_context_mgr } for pid=19409 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:11:17 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x68002100, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r0 = getpid() semctl$IPC_RMID(0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x1, 0x1}, {0x5, 0x8}]}, 0x14, 0x1) tkill(r0, 0x9) 06:11:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100005070000fdffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023cd3741ce8074c5fe8524c0306554362ddd4c0617b1ed0cd8cb892ef805ab93a186423f124b7c6a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e3", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 06:11:18 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0xd, &(0x7f0000000000)='.wlan0-(eth1\x00'}, 0x30) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r3) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r4, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 451.474949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 451.500421] IPVS: ftp: loaded support on port[0] = 21 [ 451.517732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:11:18 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 451.526290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.539278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.584428] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 451.592634] team0: Device veth3 is up. Set it down before adding it as a team port [ 451.614677] team0: Device veth3 is up. Set it down before adding it as a team port [ 452.351148] IPVS: ftp: loaded support on port[0] = 21 06:11:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 06:11:20 executing program 3 (fault-call:12 fault-nth:18): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:20 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000100)=""/123, 0x7b}], 0x2, &(0x7f00000001c0)=""/82, 0x52}, 0x10040) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0xf7, 0x6, 0x0, 0x8, 0xff, 0x6, 0x8c, 0x3f, 0x2, 0x20, 0x3, 0x3, 0x3f, 0xda}, 0xe) pipe(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x51, ""/81}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r3, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000440)) 06:11:20 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffefe}, {0x0, 0xffffff22}, {&(0x7f0000000180)=""/72, 0x1}], 0x3, 0x0, 0xa3, 0x0) tkill(r0, 0x39) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) lsetxattr(0x0, 0x0, &(0x7f00000000c0)='-.selinux\x83#}!self\x00', 0x12, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:11:20 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') sendfile(r1, r2, 0x0, 0x320f) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x4, 0x0, 0x90, 0x6a, 0x0, 0x0, 0x8026e, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda1b, 0x2, @perf_config_ext={0x7, 0x9}, 0x800, 0x9, 0x100, 0x0, 0x100, 0x0, 0x4}, 0x0, 0xc, r2, 0x8) [ 453.955363] FAULT_INJECTION: forcing a failure. [ 453.955363] name failslab, interval 1, probability 0, space 0, times 0 [ 453.967899] CPU: 1 PID: 19470 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 453.977211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.986936] Call Trace: [ 453.989809] dump_stack+0x142/0x197 [ 453.993931] should_fail.cold+0x10f/0x159 [ 453.998461] should_failslab+0xdb/0x130 [ 454.003208] kmem_cache_alloc_node_trace+0x280/0x770 [ 454.009659] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 454.015482] __kmalloc_node_track_caller+0x3d/0x80 [ 454.020872] __kmalloc_reserve.isra.0+0x40/0xe0 [ 454.026004] __alloc_skb+0xcf/0x500 [ 454.029920] ? skb_trim+0x180/0x180 [ 454.034194] ? save_stack+0xa9/0xd0 [ 454.038038] alloc_skb_with_frags+0x86/0x4b0 [ 454.042654] ? __lock_acquire+0x5f7/0x4620 [ 454.047110] ? inet_sendmsg+0x122/0x500 [ 454.052151] ? sock_sendmsg+0xce/0x110 [ 454.056150] sock_alloc_send_pskb+0x5db/0x740 [ 454.061039] ? trace_hardirqs_on+0x10/0x10 [ 454.065302] ? sock_wmalloc+0xf0/0xf0 [ 454.069122] ? save_trace+0x290/0x290 [ 454.072940] ? fib_rules_lookup+0x308/0x950 [ 454.077725] ? save_trace+0x290/0x290 [ 454.082590] ? find_held_lock+0x35/0x130 [ 454.086661] ? rt_add_uncached_list+0x139/0x190 [ 454.091338] ? find_held_lock+0x35/0x130 [ 454.095399] sock_alloc_send_skb+0x32/0x40 [ 454.100181] __ip_append_data.isra.0+0x1227/0x20f0 [ 454.105396] ? __local_bh_enable_ip+0x99/0x1a0 [ 454.109994] ? trace_hardirqs_on+0xd/0x10 [ 454.114672] ? ip_reply_glue_bits+0xb0/0xb0 [ 454.119010] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 454.125287] ? ipv4_mtu+0x25e/0x3a0 [ 454.130668] ? ip_reply_glue_bits+0xb0/0xb0 [ 454.135003] ip_make_skb+0x17a/0x1d0 [ 454.139013] ? ip_flush_pending_frames+0x30/0x30 [ 454.143958] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 454.149912] ? udp_sendmsg+0xfb7/0x1da0 [ 454.154357] ? xfrm_lookup_route+0x48/0x1b0 [ 454.159774] udp_sendmsg+0x16a6/0x1da0 [ 454.164186] ? __lock_acquire+0x5f7/0x4620 [ 454.168415] ? ip_reply_glue_bits+0xb0/0xb0 [ 454.172756] ? udp4_seq_show+0x520/0x520 [ 454.176843] ? save_trace+0x290/0x290 [ 454.180841] ? avc_has_perm+0x273/0x4b0 [ 454.184917] ? lock_downgrade+0x740/0x740 [ 454.189288] udpv6_sendmsg+0x1393/0x2610 [ 454.193730] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 454.199014] ? rw_copy_check_uvector+0x1f1/0x290 [ 454.205124] ? sock_has_perm+0x1ed/0x280 [ 454.209294] ? selinux_tun_dev_create+0xc0/0xc0 [ 454.214063] ? dup_iter+0x260/0x260 [ 454.217867] ? copy_msghdr_from_user+0x292/0x3f0 [ 454.223262] inet_sendmsg+0x122/0x500 [ 454.227079] ? inet_sendmsg+0x122/0x500 [ 454.231270] ? inet_recvmsg+0x500/0x500 [ 454.235267] sock_sendmsg+0xce/0x110 [ 454.239023] ___sys_sendmsg+0x349/0x840 [ 454.243020] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 454.247794] ? trace_hardirqs_on+0x10/0x10 [ 454.253078] ? save_trace+0x290/0x290 [ 454.256883] ? retint_kernel+0x2d/0x2d [ 454.260975] ? __might_fault+0x110/0x1d0 [ 454.265046] ? find_held_lock+0x35/0x130 [ 454.269104] ? __might_fault+0x110/0x1d0 [ 454.273209] __sys_sendmmsg+0x152/0x3a0 [ 454.277198] ? SyS_sendmsg+0x50/0x50 [ 454.280925] ? lock_downgrade+0x740/0x740 [ 454.285100] ? __mutex_unlock_slowpath+0x71/0x800 [ 454.289948] ? check_preemption_disabled+0x3c/0x250 [ 454.295075] ? wait_for_completion+0x420/0x420 [ 454.299672] ? __sb_end_write+0xc1/0x100 [ 454.304565] ? SyS_write+0x15e/0x230 [ 454.308376] SyS_sendmmsg+0x35/0x60 [ 454.312004] ? __sys_sendmmsg+0x3a0/0x3a0 [ 454.316156] do_syscall_64+0x1e8/0x640 [ 454.320052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.324905] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 454.330095] RIP: 0033:0x45b349 [ 454.333277] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 454.341254] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 454.348571] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 06:11:20 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 06:11:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x20) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 454.355848] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 454.363123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 454.370395] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000012 [ 454.391727] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 06:11:20 executing program 2: 06:11:20 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:21 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x8) socket$inet(0x2, 0x0, 0xa2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x111540, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) [ 455.510539] NOHZ: local_softirq_pending 08 06:11:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:23 executing program 5: 06:11:23 executing program 2: 06:11:23 executing program 3 (fault-call:12 fault-nth:19): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:23 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xb9e, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:23 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:23 executing program 2: 06:11:23 executing program 5: [ 457.052148] FAULT_INJECTION: forcing a failure. [ 457.052148] name failslab, interval 1, probability 0, space 0, times 0 [ 457.063899] CPU: 1 PID: 19525 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 457.071805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.081415] Call Trace: [ 457.084039] dump_stack+0x142/0x197 [ 457.087706] should_fail.cold+0x10f/0x159 [ 457.091886] should_failslab+0xdb/0x130 [ 457.095877] kmem_cache_alloc_node_trace+0x280/0x770 [ 457.101011] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 457.106485] __kmalloc_node_track_caller+0x3d/0x80 [ 457.111434] __kmalloc_reserve.isra.0+0x40/0xe0 [ 457.116120] __alloc_skb+0xcf/0x500 [ 457.119762] ? skb_trim+0x180/0x180 [ 457.123515] ? save_stack+0xa9/0xd0 [ 457.127186] alloc_skb_with_frags+0x86/0x4b0 [ 457.131608] ? __lock_acquire+0x5f7/0x4620 [ 457.135954] ? inet_sendmsg+0x122/0x500 [ 457.140291] ? sock_sendmsg+0xce/0x110 [ 457.144194] sock_alloc_send_pskb+0x5db/0x740 [ 457.148709] ? trace_hardirqs_on+0x10/0x10 [ 457.153156] ? sock_wmalloc+0xf0/0xf0 [ 457.156967] ? save_trace+0x290/0x290 [ 457.160781] ? fib_rules_lookup+0x308/0x950 [ 457.165305] ? save_trace+0x290/0x290 [ 457.169120] ? find_held_lock+0x35/0x130 [ 457.173193] ? rt_add_uncached_list+0x139/0x190 [ 457.177872] ? find_held_lock+0x35/0x130 [ 457.181945] sock_alloc_send_skb+0x32/0x40 [ 457.186196] __ip_append_data.isra.0+0x1227/0x20f0 [ 457.191335] ? __local_bh_enable_ip+0x99/0x1a0 [ 457.195931] ? trace_hardirqs_on+0xd/0x10 06:11:23 executing program 5: 06:11:23 executing program 5: 06:11:23 executing program 5: 06:11:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 457.200205] ? ip_reply_glue_bits+0xb0/0xb0 [ 457.204552] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 457.217836] ? ipv4_mtu+0x25e/0x3a0 [ 457.221589] ? ip_reply_glue_bits+0xb0/0xb0 [ 457.225922] ip_make_skb+0x17a/0x1d0 [ 457.229649] ? ip_flush_pending_frames+0x30/0x30 [ 457.234417] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 457.240078] ? udp_sendmsg+0xfb7/0x1da0 [ 457.244193] ? xfrm_lookup_route+0x48/0x1b0 [ 457.248532] udp_sendmsg+0x16a6/0x1da0 06:11:23 executing program 2: [ 457.252436] ? __lock_acquire+0x5f7/0x4620 [ 457.256777] ? ip_reply_glue_bits+0xb0/0xb0 [ 457.261123] ? udp4_seq_show+0x520/0x520 [ 457.265197] ? save_trace+0x290/0x290 [ 457.269011] ? avc_has_perm+0x273/0x4b0 [ 457.273044] ? lock_downgrade+0x740/0x740 [ 457.277325] udpv6_sendmsg+0x1393/0x2610 [ 457.281537] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 457.286833] ? rw_copy_check_uvector+0x1f1/0x290 [ 457.291609] ? sock_has_perm+0x1ed/0x280 [ 457.296643] ? selinux_tun_dev_create+0xc0/0xc0 06:11:23 executing program 2: 06:11:23 executing program 5: [ 457.301331] ? dup_iter+0x260/0x260 [ 457.304987] ? copy_msghdr_from_user+0x292/0x3f0 [ 457.309770] inet_sendmsg+0x122/0x500 [ 457.313578] ? inet_sendmsg+0x122/0x500 [ 457.317570] ? inet_recvmsg+0x500/0x500 [ 457.321557] sock_sendmsg+0xce/0x110 [ 457.325396] ___sys_sendmsg+0x349/0x840 [ 457.329392] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 457.334177] ? trace_hardirqs_on+0x10/0x10 [ 457.338434] ? save_trace+0x290/0x290 [ 457.342257] ? retint_kernel+0x2d/0x2d [ 457.346161] ? __might_fault+0x110/0x1d0 [ 457.350243] ? find_held_lock+0x35/0x130 [ 457.354312] ? __might_fault+0x110/0x1d0 [ 457.358398] __sys_sendmmsg+0x152/0x3a0 [ 457.362730] ? SyS_sendmsg+0x50/0x50 [ 457.366466] ? lock_downgrade+0x740/0x740 [ 457.370639] ? __mutex_unlock_slowpath+0x71/0x800 [ 457.375498] ? check_preemption_disabled+0x3c/0x250 [ 457.380654] ? wait_for_completion+0x420/0x420 [ 457.385388] ? __sb_end_write+0xc1/0x100 [ 457.389467] ? SyS_write+0x15e/0x230 [ 457.393203] SyS_sendmmsg+0x35/0x60 [ 457.396843] ? __sys_sendmmsg+0x3a0/0x3a0 [ 457.401097] do_syscall_64+0x1e8/0x640 [ 457.405351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.410254] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 457.419538] RIP: 0033:0x45b349 [ 457.422736] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 457.430455] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 457.438002] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 457.445426] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 457.452754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 457.460028] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000013 06:11:24 executing program 3 (fault-call:12 fault-nth:20): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:24 executing program 2: 06:11:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb0ce}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffefffffffc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:24 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:24 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:24 executing program 2: 06:11:24 executing program 2: 06:11:24 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 458.016493] FAULT_INJECTION: forcing a failure. [ 458.016493] name failslab, interval 1, probability 0, space 0, times 0 [ 458.027882] CPU: 0 PID: 19573 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 458.035784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.045340] Call Trace: [ 458.047955] dump_stack+0x142/0x197 [ 458.051704] should_fail.cold+0x10f/0x159 [ 458.055900] should_failslab+0xdb/0x130 [ 458.059893] kmem_cache_alloc_node+0x287/0x780 [ 458.064794] ? __save_stack_trace+0x7b/0xd0 [ 458.069125] __alloc_skb+0x9c/0x500 [ 458.072745] ? skb_trim+0x180/0x180 [ 458.076368] ? save_stack+0xa9/0xd0 [ 458.080008] alloc_skb_with_frags+0x86/0x4b0 [ 458.085030] ? __lock_acquire+0x5f7/0x4620 [ 458.089257] ? inet_sendmsg+0x122/0x500 [ 458.093229] ? sock_sendmsg+0xce/0x110 [ 458.097184] sock_alloc_send_pskb+0x5db/0x740 [ 458.101686] ? trace_hardirqs_on+0x10/0x10 [ 458.105924] ? sock_wmalloc+0xf0/0xf0 [ 458.109799] ? save_trace+0x290/0x290 [ 458.113625] ? fib_rules_lookup+0x308/0x950 [ 458.118024] ? save_trace+0x290/0x290 [ 458.122346] ? find_held_lock+0x35/0x130 [ 458.126399] ? rt_add_uncached_list+0x139/0x190 [ 458.131189] ? find_held_lock+0x35/0x130 [ 458.135349] sock_alloc_send_skb+0x32/0x40 [ 458.139587] __ip_append_data.isra.0+0x1227/0x20f0 [ 458.144527] ? __local_bh_enable_ip+0x99/0x1a0 [ 458.149123] ? trace_hardirqs_on+0xd/0x10 [ 458.153323] ? ip_reply_glue_bits+0xb0/0xb0 [ 458.157647] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 458.163458] ? ipv4_mtu+0x25e/0x3a0 [ 458.167128] ? ip_reply_glue_bits+0xb0/0xb0 [ 458.171449] ip_make_skb+0x17a/0x1d0 [ 458.175166] ? ip_flush_pending_frames+0x30/0x30 [ 458.180042] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 458.185568] ? udp_sendmsg+0xfb7/0x1da0 [ 458.189653] ? xfrm_lookup_route+0x48/0x1b0 [ 458.193976] udp_sendmsg+0x16a6/0x1da0 [ 458.197864] ? __lock_acquire+0x5f7/0x4620 [ 458.202113] ? ip_reply_glue_bits+0xb0/0xb0 [ 458.206433] ? udp4_seq_show+0x520/0x520 [ 458.210486] ? save_trace+0x290/0x290 [ 458.214282] ? avc_has_perm+0x273/0x4b0 [ 458.218262] ? lock_downgrade+0x740/0x740 [ 458.222418] udpv6_sendmsg+0x1393/0x2610 [ 458.226492] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 458.231763] ? rw_copy_check_uvector+0x1f1/0x290 [ 458.236885] ? sock_has_perm+0x1ed/0x280 [ 458.240943] ? selinux_tun_dev_create+0xc0/0xc0 [ 458.245615] ? dup_iter+0x260/0x260 [ 458.249248] ? copy_msghdr_from_user+0x292/0x3f0 [ 458.254053] inet_sendmsg+0x122/0x500 [ 458.257844] ? inet_sendmsg+0x122/0x500 [ 458.261813] ? inet_recvmsg+0x500/0x500 [ 458.265891] sock_sendmsg+0xce/0x110 [ 458.269659] ___sys_sendmsg+0x349/0x840 [ 458.273644] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 458.278392] ? trace_hardirqs_on+0x10/0x10 [ 458.282614] ? save_trace+0x290/0x290 [ 458.286415] ? retint_kernel+0x2d/0x2d [ 458.290305] ? __might_fault+0x110/0x1d0 [ 458.294362] ? find_held_lock+0x35/0x130 [ 458.298451] ? __might_fault+0x110/0x1d0 [ 458.302530] __sys_sendmmsg+0x152/0x3a0 [ 458.306543] ? SyS_sendmsg+0x50/0x50 [ 458.310256] ? lock_downgrade+0x740/0x740 [ 458.314404] ? __mutex_unlock_slowpath+0x71/0x800 [ 458.319280] ? check_preemption_disabled+0x3c/0x250 [ 458.324286] ? wait_for_completion+0x420/0x420 [ 458.328864] ? __sb_end_write+0xc1/0x100 [ 458.332921] ? SyS_write+0x15e/0x230 [ 458.336643] SyS_sendmmsg+0x35/0x60 [ 458.340261] ? __sys_sendmmsg+0x3a0/0x3a0 [ 458.344412] do_syscall_64+0x1e8/0x640 [ 458.348382] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.353221] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 458.358415] RIP: 0033:0x45b349 [ 458.361601] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 458.369304] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 458.376555] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 458.383820] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 458.391206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 458.398467] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000014 06:11:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:26 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000140)={0x2, 0x1, @start={0x9, 0x1}}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x75, &(0x7f0000000100)={r6}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r6, 0x62}, 0x8) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x5, 0x60) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r7, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000040)) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:26 executing program 5: 06:11:26 executing program 2: 06:11:26 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:26 executing program 3 (fault-call:12 fault-nth:21): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rt_sigtimedwait(&(0x7f0000000140), 0x0, 0x0, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x1f, 0x80001) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB='m'], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rt_sigtimedwait(&(0x7f0000000140), 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb0ce}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 460.379191] FAULT_INJECTION: forcing a failure. [ 460.379191] name failslab, interval 1, probability 0, space 0, times 0 [ 460.390956] CPU: 1 PID: 19601 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 460.398862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.408228] Call Trace: [ 460.410827] dump_stack+0x142/0x197 [ 460.414457] should_fail.cold+0x10f/0x159 [ 460.418631] should_failslab+0xdb/0x130 [ 460.422599] kmem_cache_alloc_node_trace+0x280/0x770 [ 460.427693] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 460.433131] __kmalloc_node_track_caller+0x3d/0x80 [ 460.438048] __kmalloc_reserve.isra.0+0x40/0xe0 [ 460.442700] __alloc_skb+0xcf/0x500 [ 460.446311] ? skb_trim+0x180/0x180 [ 460.449919] ? save_stack+0xa9/0xd0 [ 460.453533] alloc_skb_with_frags+0x86/0x4b0 [ 460.457936] ? __lock_acquire+0x5f7/0x4620 [ 460.462158] ? inet_sendmsg+0x122/0x500 [ 460.466118] ? sock_sendmsg+0xce/0x110 [ 460.469989] sock_alloc_send_pskb+0x5db/0x740 [ 460.474475] ? trace_hardirqs_on+0x10/0x10 [ 460.478692] ? sock_wmalloc+0xf0/0xf0 [ 460.482473] ? save_trace+0x290/0x290 [ 460.486258] ? fib_rules_lookup+0x308/0x950 [ 460.490564] ? save_trace+0x290/0x290 [ 460.494359] ? find_held_lock+0x35/0x130 [ 460.498407] ? rt_add_uncached_list+0x139/0x190 [ 460.503058] ? find_held_lock+0x35/0x130 [ 460.507102] sock_alloc_send_skb+0x32/0x40 [ 460.511332] __ip_append_data.isra.0+0x1227/0x20f0 [ 460.516249] ? __local_bh_enable_ip+0x99/0x1a0 [ 460.520827] ? trace_hardirqs_on+0xd/0x10 [ 460.524960] ? ip_reply_glue_bits+0xb0/0xb0 [ 460.529271] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 460.534981] ? ipv4_mtu+0x25e/0x3a0 [ 460.538608] ? ip_reply_glue_bits+0xb0/0xb0 [ 460.542937] ip_make_skb+0x17a/0x1d0 [ 460.546652] ? ip_flush_pending_frames+0x30/0x30 [ 460.551502] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 460.557037] ? udp_sendmsg+0xfb7/0x1da0 [ 460.561021] ? xfrm_lookup_route+0x48/0x1b0 [ 460.565330] udp_sendmsg+0x16a6/0x1da0 [ 460.569209] ? __lock_acquire+0x5f7/0x4620 [ 460.573428] ? ip_reply_glue_bits+0xb0/0xb0 [ 460.577737] ? udp4_seq_show+0x520/0x520 [ 460.581798] ? save_trace+0x290/0x290 [ 460.585593] ? avc_has_perm+0x273/0x4b0 [ 460.589570] ? lock_downgrade+0x740/0x740 [ 460.593707] udpv6_sendmsg+0x1393/0x2610 [ 460.597761] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 460.603035] ? rw_copy_check_uvector+0x1f1/0x290 [ 460.607785] ? sock_has_perm+0x1ed/0x280 [ 460.611832] ? selinux_tun_dev_create+0xc0/0xc0 [ 460.616489] ? dup_iter+0x260/0x260 [ 460.620115] ? copy_msghdr_from_user+0x292/0x3f0 [ 460.624857] inet_sendmsg+0x122/0x500 [ 460.628638] ? inet_sendmsg+0x122/0x500 [ 460.632597] ? inet_recvmsg+0x500/0x500 [ 460.636559] sock_sendmsg+0xce/0x110 [ 460.640261] ___sys_sendmsg+0x349/0x840 [ 460.644225] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 460.648970] ? trace_hardirqs_on+0x10/0x10 [ 460.659829] ? save_trace+0x290/0x290 [ 460.663642] ? retint_kernel+0x2d/0x2d [ 460.667516] ? __might_fault+0x110/0x1d0 [ 460.671590] ? find_held_lock+0x35/0x130 [ 460.675660] ? __might_fault+0x110/0x1d0 [ 460.679731] __sys_sendmmsg+0x152/0x3a0 [ 460.683701] ? SyS_sendmsg+0x50/0x50 [ 460.687401] ? lock_downgrade+0x740/0x740 [ 460.691546] ? __mutex_unlock_slowpath+0x71/0x800 [ 460.696371] ? check_preemption_disabled+0x3c/0x250 [ 460.701372] ? wait_for_completion+0x420/0x420 [ 460.705940] ? __sb_end_write+0xc1/0x100 [ 460.710001] ? SyS_write+0x15e/0x230 [ 460.713704] SyS_sendmmsg+0x35/0x60 [ 460.717313] ? __sys_sendmmsg+0x3a0/0x3a0 [ 460.721474] do_syscall_64+0x1e8/0x640 [ 460.725341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.730181] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 460.735376] RIP: 0033:0x45b349 [ 460.738560] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 460.746273] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 460.753526] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 460.760778] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 460.768039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 06:11:27 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 460.775294] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000015 06:11:27 executing program 2: 06:11:27 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x81}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x481}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0xc011) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) kcmp(r1, r2, 0x4, 0xffffffffffffffff, r3) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r4, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:27 executing program 2: [ 460.951339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.959727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.978633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 461.056080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 461.075475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.084083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:11:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:29 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:29 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)=0x745) 06:11:29 executing program 3 (fault-call:12 fault-nth:22): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:29 executing program 5: 06:11:29 executing program 2: 06:11:29 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) [ 463.432637] FAULT_INJECTION: forcing a failure. [ 463.432637] name failslab, interval 1, probability 0, space 0, times 0 [ 463.443986] CPU: 1 PID: 19661 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 463.452010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.461446] Call Trace: [ 463.464058] dump_stack+0x142/0x197 [ 463.467715] should_fail.cold+0x10f/0x159 [ 463.471895] should_failslab+0xdb/0x130 [ 463.475896] kmem_cache_alloc_node_trace+0x280/0x770 06:11:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="66baf80cb81e8c0988ef66bafc0c66b8f9e866ef48b806000000000000000f23c80f21f835040090000f23f8b9800000c00f3235010000000f30d82af30f7f7432003667e800280000640fbc3d96b600000fda9333000000670f01df4598", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 463.481025] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 463.486504] __kmalloc_node_track_caller+0x3d/0x80 [ 463.491460] __kmalloc_reserve.isra.0+0x40/0xe0 [ 463.496158] __alloc_skb+0xcf/0x500 [ 463.499972] ? skb_trim+0x180/0x180 [ 463.503613] ? save_stack+0xa9/0xd0 [ 463.507254] alloc_skb_with_frags+0x86/0x4b0 [ 463.511676] ? __lock_acquire+0x5f7/0x4620 [ 463.515932] ? inet_sendmsg+0x122/0x500 [ 463.520040] ? sock_sendmsg+0xce/0x110 [ 463.523934] sock_alloc_send_pskb+0x5db/0x740 [ 463.528470] ? trace_hardirqs_on+0x10/0x10 [ 463.532728] ? sock_wmalloc+0xf0/0xf0 [ 463.536537] ? save_trace+0x290/0x290 [ 463.540348] ? fib_rules_lookup+0x308/0x950 [ 463.544679] ? save_trace+0x290/0x290 [ 463.548500] ? find_held_lock+0x35/0x130 [ 463.553523] ? rt_add_uncached_list+0x139/0x190 [ 463.558197] ? find_held_lock+0x35/0x130 [ 463.562453] sock_alloc_send_skb+0x32/0x40 [ 463.566719] __ip_append_data.isra.0+0x1227/0x20f0 [ 463.571654] ? __local_bh_enable_ip+0x99/0x1a0 [ 463.576247] ? trace_hardirqs_on+0xd/0x10 [ 463.580402] ? ip_reply_glue_bits+0xb0/0xb0 [ 463.584719] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 463.590436] ? ipv4_mtu+0x25e/0x3a0 [ 463.594080] ? ip_reply_glue_bits+0xb0/0xb0 [ 463.598439] ip_make_skb+0x17a/0x1d0 [ 463.602163] ? ip_flush_pending_frames+0x30/0x30 [ 463.606950] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 463.612489] ? udp_sendmsg+0xfb7/0x1da0 [ 463.616727] ? xfrm_lookup_route+0x48/0x1b0 [ 463.621063] udp_sendmsg+0x16a6/0x1da0 [ 463.624954] ? __lock_acquire+0x5f7/0x4620 [ 463.629379] ? ip_reply_glue_bits+0xb0/0xb0 [ 463.633701] ? udp4_seq_show+0x520/0x520 [ 463.637786] ? save_trace+0x290/0x290 [ 463.641594] ? avc_has_perm+0x273/0x4b0 [ 463.645582] ? lock_downgrade+0x740/0x740 [ 463.649746] udpv6_sendmsg+0x1393/0x2610 [ 463.653825] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 463.659220] ? rw_copy_check_uvector+0x1f1/0x290 [ 463.664110] ? sock_has_perm+0x1ed/0x280 [ 463.668167] ? selinux_tun_dev_create+0xc0/0xc0 [ 463.672847] ? dup_iter+0x260/0x260 [ 463.676475] ? copy_msghdr_from_user+0x292/0x3f0 [ 463.681251] inet_sendmsg+0x122/0x500 [ 463.685076] ? inet_sendmsg+0x122/0x500 [ 463.689041] ? inet_recvmsg+0x500/0x500 [ 463.693033] sock_sendmsg+0xce/0x110 [ 463.696785] ___sys_sendmsg+0x349/0x840 [ 463.700756] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 463.705534] ? trace_hardirqs_on+0x10/0x10 [ 463.709772] ? save_trace+0x290/0x290 [ 463.713591] ? retint_kernel+0x2d/0x2d [ 463.717505] ? __might_fault+0x110/0x1d0 [ 463.721588] ? find_held_lock+0x35/0x130 [ 463.725656] ? __might_fault+0x110/0x1d0 [ 463.729735] __sys_sendmmsg+0x152/0x3a0 [ 463.733713] ? SyS_sendmsg+0x50/0x50 [ 463.737550] ? lock_downgrade+0x740/0x740 [ 463.741796] ? __mutex_unlock_slowpath+0x71/0x800 [ 463.746632] ? check_preemption_disabled+0x3c/0x250 [ 463.751879] ? wait_for_completion+0x420/0x420 [ 463.756463] ? __sb_end_write+0xc1/0x100 [ 463.760525] ? SyS_write+0x15e/0x230 [ 463.764255] SyS_sendmmsg+0x35/0x60 [ 463.767925] ? __sys_sendmmsg+0x3a0/0x3a0 [ 463.772095] do_syscall_64+0x1e8/0x640 [ 463.775973] ? trace_hardirqs_off_thunk+0x1a/0x1c 06:11:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 463.780827] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 463.786044] RIP: 0033:0x45b349 [ 463.789359] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 463.797094] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 463.804376] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 463.811652] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 463.818930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 463.826213] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000016 06:11:30 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) fdatasync(0xffffffffffffffff) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:30 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:30 executing program 2: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x6, 0x0, 0x23, 0xfffffffc, 0x9}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 3 (fault-call:12 fault-nth:23): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:30 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) fdatasync(0xffffffffffffffff) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:30 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00') write$P9_RMKNOD(r2, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x84, 0x2, 0x2}}, 0x14) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffff00000001, 0x400) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000040)={@fixed={[], 0x11}, 0x3f}) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 464.387859] FAULT_INJECTION: forcing a failure. [ 464.387859] name failslab, interval 1, probability 0, space 0, times 0 [ 464.399507] CPU: 1 PID: 19723 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 464.407581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.416956] Call Trace: [ 464.419749] dump_stack+0x142/0x197 [ 464.423403] should_fail.cold+0x10f/0x159 [ 464.427589] should_failslab+0xdb/0x130 [ 464.431597] kmem_cache_alloc_node+0x287/0x780 [ 464.436207] ? __save_stack_trace+0x7b/0xd0 [ 464.440561] __alloc_skb+0x9c/0x500 [ 464.445073] ? skb_trim+0x180/0x180 [ 464.448715] ? save_stack+0xa9/0xd0 [ 464.452359] alloc_skb_with_frags+0x86/0x4b0 [ 464.456786] ? __lock_acquire+0x5f7/0x4620 [ 464.461034] ? inet_sendmsg+0x122/0x500 [ 464.465025] ? sock_sendmsg+0xce/0x110 [ 464.468938] sock_alloc_send_pskb+0x5db/0x740 [ 464.473460] ? trace_hardirqs_on+0x10/0x10 [ 464.477718] ? sock_wmalloc+0xf0/0xf0 [ 464.481551] ? save_trace+0x290/0x290 [ 464.485370] ? fib_rules_lookup+0x308/0x950 [ 464.489718] ? save_trace+0x290/0x290 [ 464.493535] ? find_held_lock+0x35/0x130 [ 464.497640] ? rt_add_uncached_list+0x139/0x190 [ 464.502335] ? find_held_lock+0x35/0x130 [ 464.506506] sock_alloc_send_skb+0x32/0x40 [ 464.510756] __ip_append_data.isra.0+0x1227/0x20f0 [ 464.515699] ? __local_bh_enable_ip+0x99/0x1a0 [ 464.520303] ? trace_hardirqs_on+0xd/0x10 [ 464.524470] ? ip_reply_glue_bits+0xb0/0xb0 [ 464.528819] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 464.534556] ? ipv4_mtu+0x25e/0x3a0 [ 464.538204] ? ip_reply_glue_bits+0xb0/0xb0 [ 464.542651] ip_make_skb+0x17a/0x1d0 [ 464.546387] ? ip_flush_pending_frames+0x30/0x30 [ 464.551171] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 464.556726] ? udp_sendmsg+0xfb7/0x1da0 [ 464.560728] ? xfrm_lookup_route+0x48/0x1b0 [ 464.565166] udp_sendmsg+0x16a6/0x1da0 [ 464.569098] ? __lock_acquire+0x5f7/0x4620 [ 464.573351] ? ip_reply_glue_bits+0xb0/0xb0 [ 464.577697] ? udp4_seq_show+0x520/0x520 [ 464.581786] ? save_trace+0x290/0x290 [ 464.586340] ? avc_has_perm+0x273/0x4b0 [ 464.590451] ? lock_downgrade+0x740/0x740 [ 464.594634] udpv6_sendmsg+0x1393/0x2610 [ 464.598742] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 464.604071] ? rw_copy_check_uvector+0x1f1/0x290 [ 464.608875] ? sock_has_perm+0x1ed/0x280 [ 464.613010] ? selinux_tun_dev_create+0xc0/0xc0 [ 464.617711] ? dup_iter+0x260/0x260 [ 464.621382] ? copy_msghdr_from_user+0x292/0x3f0 [ 464.626169] inet_sendmsg+0x122/0x500 [ 464.630142] ? inet_sendmsg+0x122/0x500 [ 464.634159] ? inet_recvmsg+0x500/0x500 [ 464.638288] sock_sendmsg+0xce/0x110 [ 464.642209] ___sys_sendmsg+0x349/0x840 [ 464.646239] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 464.651032] ? trace_hardirqs_on+0x10/0x10 [ 464.655294] ? save_trace+0x290/0x290 [ 464.659119] ? retint_kernel+0x2d/0x2d [ 464.663034] ? __might_fault+0x110/0x1d0 [ 464.667115] ? find_held_lock+0x35/0x130 [ 464.671195] ? __might_fault+0x110/0x1d0 [ 464.675300] __sys_sendmmsg+0x152/0x3a0 [ 464.679295] ? SyS_sendmsg+0x50/0x50 [ 464.683028] ? lock_downgrade+0x740/0x740 [ 464.687230] ? __mutex_unlock_slowpath+0x71/0x800 [ 464.692094] ? check_preemption_disabled+0x3c/0x250 [ 464.697147] ? wait_for_completion+0x420/0x420 [ 464.701751] ? __sb_end_write+0xc1/0x100 [ 464.705834] ? SyS_write+0x15e/0x230 [ 464.709564] SyS_sendmmsg+0x35/0x60 [ 464.713205] ? __sys_sendmmsg+0x3a0/0x3a0 [ 464.717373] do_syscall_64+0x1e8/0x640 [ 464.721284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 464.726165] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 464.731367] RIP: 0033:0x45b349 [ 464.734560] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 464.742288] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 464.749704] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 464.756995] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 464.764285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 464.771578] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000017 06:11:31 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) fdatasync(0xffffffffffffffff) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:31 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 06:11:31 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:31 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000010c0)={0x1, &(0x7f0000000040)=[{0x6}]}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 06:11:31 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:31 executing program 3 (fault-call:12 fault-nth:24): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:31 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20022}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:31 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 465.336418] FAULT_INJECTION: forcing a failure. [ 465.336418] name failslab, interval 1, probability 0, space 0, times 0 [ 465.348144] CPU: 0 PID: 19770 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 465.356231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.365594] Call Trace: [ 465.368221] dump_stack+0x142/0x197 [ 465.371851] should_fail.cold+0x10f/0x159 [ 465.376004] should_failslab+0xdb/0x130 [ 465.379981] kmem_cache_alloc_node_trace+0x280/0x770 [ 465.385101] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 465.390556] __kmalloc_node_track_caller+0x3d/0x80 [ 465.395493] __kmalloc_reserve.isra.0+0x40/0xe0 [ 465.400261] __alloc_skb+0xcf/0x500 [ 465.403899] ? skb_trim+0x180/0x180 [ 465.407523] ? save_stack+0xa9/0xd0 [ 465.411168] alloc_skb_with_frags+0x86/0x4b0 [ 465.415582] ? __lock_acquire+0x5f7/0x4620 [ 465.419809] ? inet_sendmsg+0x122/0x500 [ 465.423791] ? sock_sendmsg+0xce/0x110 [ 465.427699] sock_alloc_send_pskb+0x5db/0x740 [ 465.432228] ? trace_hardirqs_on+0x10/0x10 [ 465.436485] ? sock_wmalloc+0xf0/0xf0 [ 465.440291] ? save_trace+0x290/0x290 [ 465.444082] ? fib_rules_lookup+0x308/0x950 [ 465.448414] ? save_trace+0x290/0x290 [ 465.452221] ? find_held_lock+0x35/0x130 [ 465.456304] ? rt_add_uncached_list+0x139/0x190 [ 465.460981] ? find_held_lock+0x35/0x130 [ 465.465046] sock_alloc_send_skb+0x32/0x40 [ 465.469317] __ip_append_data.isra.0+0x1227/0x20f0 [ 465.474252] ? __local_bh_enable_ip+0x99/0x1a0 [ 465.478849] ? trace_hardirqs_on+0xd/0x10 [ 465.483128] ? ip_reply_glue_bits+0xb0/0xb0 [ 465.487449] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 465.493248] ? ipv4_mtu+0x25e/0x3a0 [ 465.496890] ? ip_reply_glue_bits+0xb0/0xb0 [ 465.501216] ip_make_skb+0x17a/0x1d0 [ 465.504923] ? ip_flush_pending_frames+0x30/0x30 [ 465.509687] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 465.515233] ? udp_sendmsg+0xfb7/0x1da0 [ 465.519216] ? xfrm_lookup_route+0x48/0x1b0 [ 465.523539] udp_sendmsg+0x16a6/0x1da0 [ 465.527442] ? __lock_acquire+0x5f7/0x4620 [ 465.531671] ? ip_reply_glue_bits+0xb0/0xb0 [ 465.536033] ? udp4_seq_show+0x520/0x520 [ 465.540092] ? save_trace+0x290/0x290 [ 465.543908] ? avc_has_perm+0x273/0x4b0 [ 465.547901] ? lock_downgrade+0x740/0x740 [ 465.552053] udpv6_sendmsg+0x1393/0x2610 [ 465.556233] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 465.561559] ? rw_copy_check_uvector+0x1f1/0x290 [ 465.566314] ? sock_has_perm+0x1ed/0x280 [ 465.570377] ? selinux_tun_dev_create+0xc0/0xc0 [ 465.575058] ? dup_iter+0x260/0x260 [ 465.578681] ? copy_msghdr_from_user+0x292/0x3f0 [ 465.583437] inet_sendmsg+0x122/0x500 [ 465.587236] ? inet_sendmsg+0x122/0x500 [ 465.591233] ? inet_recvmsg+0x500/0x500 [ 465.595221] sock_sendmsg+0xce/0x110 [ 465.598966] ___sys_sendmsg+0x349/0x840 [ 465.602979] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 465.607765] ? trace_hardirqs_on+0x10/0x10 [ 465.612015] ? save_trace+0x290/0x290 [ 465.615913] ? retint_kernel+0x2d/0x2d [ 465.619805] ? __might_fault+0x110/0x1d0 [ 465.623872] ? find_held_lock+0x35/0x130 [ 465.627936] ? __might_fault+0x110/0x1d0 [ 465.632020] __sys_sendmmsg+0x152/0x3a0 [ 465.636013] ? SyS_sendmsg+0x50/0x50 [ 465.639721] ? lock_downgrade+0x740/0x740 [ 465.643900] ? __mutex_unlock_slowpath+0x71/0x800 [ 465.648741] ? check_preemption_disabled+0x3c/0x250 [ 465.653783] ? wait_for_completion+0x420/0x420 [ 465.658376] ? __sb_end_write+0xc1/0x100 [ 465.662458] ? SyS_write+0x15e/0x230 [ 465.666169] SyS_sendmmsg+0x35/0x60 [ 465.669805] ? __sys_sendmmsg+0x3a0/0x3a0 [ 465.673977] do_syscall_64+0x1e8/0x640 [ 465.677884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 465.682723] entry_SYSCALL_64_after_hwframe+0x42/0xb7 06:11:32 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 465.687916] RIP: 0033:0x45b349 [ 465.691096] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 465.698808] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 465.706084] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 465.713352] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 465.720635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 465.727905] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000018 06:11:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:33 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x408800, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x7, 0x5, 0x7f, 0x3, 0x3, 0x6, 0x5, 0x395, 0x40, 0x2fe, 0x10001, 0x6, 0x38, 0x2, 0x6, 0x3, 0x2}, [{0x1, 0xf800000, 0x4, 0x7, 0x8, 0x400, 0x7fffffff, 0x9}, {0x1, 0x6, 0x2, 0x200, 0x4, 0x1f, 0xf38, 0x8}], "1b625477aced5274575a3f13d0b842b8ddbef86b57c3b1bd7cad782a87247600a701000a0f89ea62185ea2d5a0f8bb5d046c72dbbfedb6a85a22993ab7a7a99edbc9b6f420c03848dbbfc0809a80"}, 0xfe) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x4, {0x8, 0x7, 0x9, 0x80000001}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x92, &(0x7f000000d000)=""/146, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x10000362, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @local}, 0xba}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:11:33 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:33 executing program 3 (fault-call:12 fault-nth:25): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:33 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:11:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, r2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) getpeername(r4, 0x0, &(0x7f00000000c0)) [ 467.386329] ptrace attach of "/root/syz-executor.2"[19795] was attempted by "/root/syz-executor.2"[19800] [ 467.467809] FAULT_INJECTION: forcing a failure. [ 467.467809] name failslab, interval 1, probability 0, space 0, times 0 [ 467.479152] CPU: 0 PID: 19810 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 467.487153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.496606] Call Trace: [ 467.499240] dump_stack+0x142/0x197 [ 467.502890] should_fail.cold+0x10f/0x159 [ 467.507068] should_failslab+0xdb/0x130 [ 467.511068] kmem_cache_alloc_node_trace+0x280/0x770 [ 467.516189] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 467.521655] __kmalloc_node_track_caller+0x3d/0x80 [ 467.526596] __kmalloc_reserve.isra.0+0x40/0xe0 [ 467.531277] __alloc_skb+0xcf/0x500 [ 467.534914] ? skb_trim+0x180/0x180 [ 467.538551] ? save_stack+0xa9/0xd0 [ 467.542189] alloc_skb_with_frags+0x86/0x4b0 [ 467.546608] ? __lock_acquire+0x5f7/0x4620 [ 467.550847] ? inet_sendmsg+0x122/0x500 [ 467.554821] ? sock_sendmsg+0xce/0x110 [ 467.558709] sock_alloc_send_pskb+0x5db/0x740 [ 467.563219] ? trace_hardirqs_on+0x10/0x10 [ 467.567466] ? sock_wmalloc+0xf0/0xf0 [ 467.571270] ? save_trace+0x290/0x290 [ 467.575071] ? fib_rules_lookup+0x308/0x950 [ 467.579400] ? save_trace+0x290/0x290 [ 467.583203] ? find_held_lock+0x35/0x130 [ 467.587273] ? rt_add_uncached_list+0x139/0x190 [ 467.591947] ? find_held_lock+0x35/0x130 [ 467.596020] sock_alloc_send_skb+0x32/0x40 [ 467.600272] __ip_append_data.isra.0+0x1227/0x20f0 [ 467.605212] ? __local_bh_enable_ip+0x99/0x1a0 [ 467.609808] ? trace_hardirqs_on+0xd/0x10 [ 467.613960] ? ip_reply_glue_bits+0xb0/0xb0 [ 467.618297] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 467.624021] ? ipv4_mtu+0x25e/0x3a0 [ 467.627651] ? ip_reply_glue_bits+0xb0/0xb0 [ 467.632784] ip_make_skb+0x17a/0x1d0 [ 467.636515] ? ip_flush_pending_frames+0x30/0x30 [ 467.641291] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 467.646836] ? udp_sendmsg+0xfb7/0x1da0 [ 467.650831] ? xfrm_lookup_route+0x48/0x1b0 [ 467.655167] udp_sendmsg+0x16a6/0x1da0 [ 467.659069] ? __lock_acquire+0x5f7/0x4620 [ 467.663322] ? ip_reply_glue_bits+0xb0/0xb0 06:11:34 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x5f, 0x3, 0xc7, 0x1f, 0x7fff, 0x3, 0x38, 0xfff, 0x23a, 0x40, 0xe1, 0x81, 0x1f, 0x38, 0x2, 0x8, 0x8001, 0x7}, [{0x4, 0x4, 0x995, 0x727, 0x7, 0x5678, 0x0, 0x1d}, {0x4, 0x1, 0xfa43, 0x381f, 0x7, 0x0, 0x5, 0x7ff}], "3126424066f986c6ff1078f5779ab914d2329ab6aec0aa4fe3ffdfaaa7b05053efd02d7a9acc85d963ff7630113d284e6eacc4058835"}, 0xe6) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:34 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 467.667652] ? udp4_seq_show+0x520/0x520 [ 467.671723] ? save_trace+0x290/0x290 [ 467.675532] ? avc_has_perm+0x273/0x4b0 [ 467.679532] ? lock_downgrade+0x740/0x740 [ 467.683705] udpv6_sendmsg+0x1393/0x2610 [ 467.687787] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 467.693071] ? rw_copy_check_uvector+0x1f1/0x290 [ 467.697839] ? sock_has_perm+0x1ed/0x280 [ 467.701910] ? selinux_tun_dev_create+0xc0/0xc0 [ 467.706618] ? dup_iter+0x260/0x260 [ 467.710255] ? copy_msghdr_from_user+0x292/0x3f0 [ 467.715023] inet_sendmsg+0x122/0x500 [ 467.718834] ? inet_sendmsg+0x122/0x500 [ 467.722814] ? inet_recvmsg+0x500/0x500 [ 467.726797] sock_sendmsg+0xce/0x110 [ 467.730524] ___sys_sendmsg+0x349/0x840 [ 467.734533] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 467.739313] ? trace_hardirqs_on+0x10/0x10 [ 467.743566] ? save_trace+0x290/0x290 [ 467.747383] ? retint_kernel+0x2d/0x2d [ 467.751281] ? __might_fault+0x110/0x1d0 [ 467.755356] ? find_held_lock+0x35/0x130 [ 467.759435] ? __might_fault+0x110/0x1d0 [ 467.763532] __sys_sendmmsg+0x152/0x3a0 [ 467.767523] ? SyS_sendmsg+0x50/0x50 [ 467.771263] ? lock_downgrade+0x740/0x740 [ 467.775462] ? __mutex_unlock_slowpath+0x71/0x800 [ 467.780320] ? check_preemption_disabled+0x3c/0x250 [ 467.785354] ? wait_for_completion+0x420/0x420 [ 467.789954] ? __sb_end_write+0xc1/0x100 [ 467.794032] ? SyS_write+0x15e/0x230 [ 467.797888] SyS_sendmmsg+0x35/0x60 [ 467.801637] ? __sys_sendmmsg+0x3a0/0x3a0 [ 467.805803] do_syscall_64+0x1e8/0x640 [ 467.809701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.814564] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 467.819757] RIP: 0033:0x45b349 [ 467.822952] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 467.830803] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 467.838083] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 467.845362] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 467.852686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 467.859970] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000019 06:11:34 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) execve(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000140)=[&(0x7f0000000080)='\x00', &(0x7f0000000100)='\x00'], &(0x7f00000001c0)=[&(0x7f0000000180)='vboxnet1self\x00']) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:34 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:34 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0x7, 0x93, 0x6, 0x4, 0x8, 0x0, 0x1, 0x8d, 0x3, 0x4, 0x40, 0x400, 0x7, 0x6, 0x2000000, 0x7, 0x4, 0x405, 0xfffffffa, 0x5, 0x8000, 0x7, 0x1200, 0x4200, 0x101, 0xf818, 0x4, 0x6, 0xffffffff, 0x0, 0x6, 0x2]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}, 0x0, 0x0, 0x7ff, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x9, 0x1000, r1, 0x0, &(0x7f0000000100)={0x990a94, 0x7, [], @value64=0x9}}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr="ff3efc47d822996f60e400"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:36 executing program 3 (fault-call:12 fault-nth:26): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:36 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:36 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='cpuset%\x00', 0x3) fcntl$addseals(r0, 0x409, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14}, 0x14) 06:11:36 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 06:11:36 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) r1 = socket(0x26, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0xcb3e52c7041f3c6f, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x1}}}, 0x24}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r4, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) sendto$inet(r8, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="08000200", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x75, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYBLOB='\x00@\x00\x00'], &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r10, 0x0, 0x7, 0x9, 0x0, 0x8}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)={r11, 0x4, 0x4, [0x9, 0x400, 0x5, 0xec]}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x3) 06:11:37 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) [ 470.527141] FAULT_INJECTION: forcing a failure. [ 470.527141] name failslab, interval 1, probability 0, space 0, times 0 [ 470.538516] CPU: 0 PID: 19875 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 470.546415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.555782] Call Trace: [ 470.558397] dump_stack+0x142/0x197 [ 470.562048] should_fail.cold+0x10f/0x159 [ 470.566321] should_failslab+0xdb/0x130 [ 470.570319] kmem_cache_alloc_node+0x287/0x780 [ 470.574942] ? __save_stack_trace+0x7b/0xd0 [ 470.579281] __alloc_skb+0x9c/0x500 [ 470.582938] ? skb_trim+0x180/0x180 [ 470.586574] ? save_stack+0xa9/0xd0 [ 470.590220] alloc_skb_with_frags+0x86/0x4b0 [ 470.594641] ? __lock_acquire+0x5f7/0x4620 [ 470.598883] ? inet_sendmsg+0x122/0x500 [ 470.602868] ? sock_sendmsg+0xce/0x110 [ 470.606769] sock_alloc_send_pskb+0x5db/0x740 [ 470.611283] ? trace_hardirqs_on+0x10/0x10 [ 470.615534] ? sock_wmalloc+0xf0/0xf0 [ 470.619342] ? save_trace+0x290/0x290 [ 470.623154] ? fib_rules_lookup+0x308/0x950 [ 470.627484] ? save_trace+0x290/0x290 [ 470.631402] ? find_held_lock+0x35/0x130 [ 470.635484] ? rt_add_uncached_list+0x139/0x190 [ 470.640166] ? find_held_lock+0x35/0x130 [ 470.644240] sock_alloc_send_skb+0x32/0x40 [ 470.648490] __ip_append_data.isra.0+0x1227/0x20f0 [ 470.653430] ? __local_bh_enable_ip+0x99/0x1a0 [ 470.658033] ? trace_hardirqs_on+0xd/0x10 [ 470.662192] ? ip_reply_glue_bits+0xb0/0xb0 [ 470.666660] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 470.672543] ? ipv4_mtu+0x25e/0x3a0 06:11:37 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) alarm(0x8000000000000000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x119080, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)={0x0, 0x800, 0x7, &(0x7f0000000040)=0x8}) [ 470.676187] ? ip_reply_glue_bits+0xb0/0xb0 [ 470.680514] ip_make_skb+0x17a/0x1d0 [ 470.684250] ? ip_flush_pending_frames+0x30/0x30 [ 470.689024] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 470.694570] ? udp_sendmsg+0xfb7/0x1da0 [ 470.698571] ? xfrm_lookup_route+0x48/0x1b0 [ 470.702926] udp_sendmsg+0x16a6/0x1da0 [ 470.706827] ? __lock_acquire+0x5f7/0x4620 [ 470.711077] ? ip_reply_glue_bits+0xb0/0xb0 [ 470.715417] ? udp4_seq_show+0x520/0x520 [ 470.719490] ? save_trace+0x290/0x290 [ 470.723306] ? avc_has_perm+0x273/0x4b0 [ 470.727303] ? lock_downgrade+0x740/0x740 [ 470.731462] udpv6_sendmsg+0x1393/0x2610 [ 470.735549] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 470.740835] ? rw_copy_check_uvector+0x1f1/0x290 [ 470.745604] ? sock_has_perm+0x1ed/0x280 [ 470.749681] ? selinux_tun_dev_create+0xc0/0xc0 [ 470.754362] ? dup_iter+0x260/0x260 [ 470.758028] ? copy_msghdr_from_user+0x292/0x3f0 [ 470.762801] inet_sendmsg+0x122/0x500 [ 470.766621] ? inet_sendmsg+0x122/0x500 [ 470.770612] ? inet_recvmsg+0x500/0x500 [ 470.774602] sock_sendmsg+0xce/0x110 06:11:37 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xa0, 0x0, 0x1, 0x800}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x1, r1, 0x0, 0xf4}) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 470.778335] ___sys_sendmsg+0x349/0x840 [ 470.782324] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 470.787094] ? trace_hardirqs_on+0x10/0x10 [ 470.791341] ? save_trace+0x290/0x290 [ 470.795147] ? retint_kernel+0x2d/0x2d [ 470.799042] ? __might_fault+0x110/0x1d0 [ 470.803113] ? find_held_lock+0x35/0x130 [ 470.807180] ? __might_fault+0x110/0x1d0 [ 470.811290] __sys_sendmmsg+0x152/0x3a0 [ 470.815283] ? SyS_sendmsg+0x50/0x50 [ 470.819010] ? lock_downgrade+0x740/0x740 [ 470.823175] ? __mutex_unlock_slowpath+0x71/0x800 [ 470.828029] ? check_preemption_disabled+0x3c/0x250 [ 470.833068] ? wait_for_completion+0x420/0x420 [ 470.837677] ? __sb_end_write+0xc1/0x100 [ 470.841764] ? SyS_write+0x15e/0x230 [ 470.845499] SyS_sendmmsg+0x35/0x60 [ 470.849131] ? __sys_sendmmsg+0x3a0/0x3a0 [ 470.853299] do_syscall_64+0x1e8/0x640 [ 470.857199] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.862101] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 470.867298] RIP: 0033:0x45b349 [ 470.870493] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 470.878213] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 470.885489] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 470.892767] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 470.900044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 470.907334] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000001a 06:11:37 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @local}, {}, 0x8, {0x2, 0x0, @loopback}, 'veth1_to_bridge\x00'}) 06:11:37 executing program 3 (fault-call:12 fault-nth:27): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 471.333318] FAULT_INJECTION: forcing a failure. [ 471.333318] name failslab, interval 1, probability 0, space 0, times 0 [ 471.345874] CPU: 1 PID: 19925 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 471.353752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.363110] Call Trace: [ 471.365699] dump_stack+0x142/0x197 [ 471.369324] should_fail.cold+0x10f/0x159 [ 471.373460] should_failslab+0xdb/0x130 [ 471.377435] kmem_cache_alloc_node+0x287/0x780 [ 471.382018] ? __save_stack_trace+0x7b/0xd0 [ 471.386341] __alloc_skb+0x9c/0x500 [ 471.390048] ? skb_trim+0x180/0x180 [ 471.393671] ? save_stack+0xa9/0xd0 [ 471.397319] alloc_skb_with_frags+0x86/0x4b0 [ 471.401736] ? __lock_acquire+0x5f7/0x4620 [ 471.405975] ? inet_sendmsg+0x122/0x500 [ 471.409943] ? sock_sendmsg+0xce/0x110 [ 471.413832] sock_alloc_send_pskb+0x5db/0x740 [ 471.418337] ? trace_hardirqs_on+0x10/0x10 [ 471.422559] ? sock_wmalloc+0xf0/0xf0 [ 471.426357] ? save_trace+0x290/0x290 [ 471.430163] ? fib_rules_lookup+0x308/0x950 [ 471.434509] ? save_trace+0x290/0x290 [ 471.438292] ? find_held_lock+0x35/0x130 [ 471.442342] ? rt_add_uncached_list+0x139/0x190 [ 471.447000] ? find_held_lock+0x35/0x130 [ 471.451058] sock_alloc_send_skb+0x32/0x40 [ 471.455291] __ip_append_data.isra.0+0x1227/0x20f0 [ 471.460396] ? __local_bh_enable_ip+0x99/0x1a0 [ 471.465088] ? trace_hardirqs_on+0xd/0x10 [ 471.469227] ? ip_reply_glue_bits+0xb0/0xb0 [ 471.473538] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 471.479240] ? ipv4_mtu+0x25e/0x3a0 [ 471.482859] ? ip_reply_glue_bits+0xb0/0xb0 [ 471.487176] ip_make_skb+0x17a/0x1d0 [ 471.490888] ? ip_flush_pending_frames+0x30/0x30 [ 471.495640] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 471.501166] ? udp_sendmsg+0xfb7/0x1da0 [ 471.505141] ? xfrm_lookup_route+0x48/0x1b0 [ 471.509445] udp_sendmsg+0x16a6/0x1da0 [ 471.513327] ? __lock_acquire+0x5f7/0x4620 [ 471.517559] ? ip_reply_glue_bits+0xb0/0xb0 [ 471.521872] ? udp4_seq_show+0x520/0x520 [ 471.525916] ? save_trace+0x290/0x290 [ 471.529704] ? avc_has_perm+0x273/0x4b0 [ 471.533678] ? lock_downgrade+0x740/0x740 [ 471.537823] udpv6_sendmsg+0x1393/0x2610 [ 471.541870] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 471.547138] ? rw_copy_check_uvector+0x1f1/0x290 [ 471.551879] ? sock_has_perm+0x1ed/0x280 [ 471.555948] ? selinux_tun_dev_create+0xc0/0xc0 [ 471.560607] ? dup_iter+0x260/0x260 [ 471.564227] ? copy_msghdr_from_user+0x292/0x3f0 [ 471.568966] inet_sendmsg+0x122/0x500 [ 471.572747] ? inet_sendmsg+0x122/0x500 [ 471.576714] ? inet_recvmsg+0x500/0x500 [ 471.580676] sock_sendmsg+0xce/0x110 [ 471.584379] ___sys_sendmsg+0x349/0x840 [ 471.588339] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 471.593083] ? trace_hardirqs_on+0x10/0x10 [ 471.597300] ? save_trace+0x290/0x290 [ 471.601083] ? retint_kernel+0x2d/0x2d [ 471.604953] ? __might_fault+0x110/0x1d0 [ 471.608995] ? find_held_lock+0x35/0x130 [ 471.613036] ? __might_fault+0x110/0x1d0 [ 471.617090] __sys_sendmmsg+0x152/0x3a0 [ 471.621050] ? SyS_sendmsg+0x50/0x50 [ 471.624747] ? lock_downgrade+0x740/0x740 [ 471.628899] ? __mutex_unlock_slowpath+0x71/0x800 [ 471.633737] ? check_preemption_disabled+0x3c/0x250 [ 471.638752] ? wait_for_completion+0x420/0x420 [ 471.643331] ? __sb_end_write+0xc1/0x100 [ 471.647396] ? SyS_write+0x15e/0x230 [ 471.651108] SyS_sendmmsg+0x35/0x60 [ 471.654815] ? __sys_sendmmsg+0x3a0/0x3a0 [ 471.658955] do_syscall_64+0x1e8/0x640 [ 471.662827] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.667685] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 471.672870] RIP: 0033:0x45b349 [ 471.676045] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 471.683743] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 471.691059] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 471.698495] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 471.705752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 471.713222] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000001b 06:11:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:39 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:39 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:39 executing program 2: r0 = socket(0x11, 0x3, 0x81) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000b80)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88, 0x0, 0x2100}, "", [[]]}, 0x120) 06:11:39 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:39 executing program 3 (fault-call:12 fault-nth:28): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 473.579468] FAULT_INJECTION: forcing a failure. [ 473.579468] name failslab, interval 1, probability 0, space 0, times 0 [ 473.590936] CPU: 1 PID: 19944 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 473.598834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.608202] Call Trace: [ 473.610832] dump_stack+0x142/0x197 [ 473.614484] should_fail.cold+0x10f/0x159 [ 473.618662] should_failslab+0xdb/0x130 [ 473.622696] kmem_cache_alloc+0x47/0x780 [ 473.626795] ? save_trace+0x290/0x290 [ 473.632697] ? find_held_lock+0x35/0x130 [ 473.636776] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 473.642337] dst_alloc+0xf3/0x1a0 [ 473.645986] rt_dst_alloc+0x73/0x440 [ 473.649719] ip_route_output_key_hash_rcu+0x731/0x2750 [ 473.655012] ? check_preemption_disabled+0x3c/0x250 [ 473.660167] ip_route_output_key_hash+0x1c0/0x2e0 [ 473.665022] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 473.670582] ? udp_sendmsg+0xfb7/0x1da0 [ 473.674580] ip_route_output_flow+0x27/0xa0 [ 473.678914] udp_sendmsg+0x14a1/0x1da0 [ 473.682817] ? __lock_acquire+0x5f7/0x4620 [ 473.687065] ? ip_reply_glue_bits+0xb0/0xb0 [ 473.691529] ? udp4_seq_show+0x520/0x520 [ 473.695618] ? save_trace+0x290/0x290 [ 473.699431] ? avc_has_perm+0x273/0x4b0 [ 473.703434] ? lock_downgrade+0x740/0x740 [ 473.707598] udpv6_sendmsg+0x1393/0x2610 [ 473.711678] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 473.716964] ? rw_copy_check_uvector+0x1f1/0x290 [ 473.721737] ? sock_has_perm+0x1ed/0x280 [ 473.725814] ? selinux_tun_dev_create+0xc0/0xc0 06:11:40 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0xa20000, 0x7f, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa00905, 0x9, [], @p_u32=&(0x7f0000000080)=0x4}}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180)=0x1, 0x4) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000001c0)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) stat(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:40 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x800, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x1, 0x8, 0xfff, 0x4, 0x3, 0xfffffffffffffffe}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 473.730496] ? dup_iter+0x260/0x260 [ 473.734136] ? copy_msghdr_from_user+0x292/0x3f0 [ 473.738900] inet_sendmsg+0x122/0x500 [ 473.742706] ? inet_sendmsg+0x122/0x500 [ 473.746706] ? inet_recvmsg+0x500/0x500 [ 473.750738] sock_sendmsg+0xce/0x110 [ 473.754472] ___sys_sendmsg+0x349/0x840 [ 473.758472] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 473.763245] ? trace_hardirqs_on+0x10/0x10 [ 473.767489] ? save_trace+0x290/0x290 [ 473.771298] ? retint_kernel+0x2d/0x2d [ 473.775195] ? __might_fault+0x110/0x1d0 [ 473.779271] ? find_held_lock+0x35/0x130 [ 473.783338] ? __might_fault+0x110/0x1d0 [ 473.787423] __sys_sendmmsg+0x152/0x3a0 [ 473.791407] ? SyS_sendmsg+0x50/0x50 [ 473.795139] ? lock_downgrade+0x740/0x740 [ 473.799308] ? __mutex_unlock_slowpath+0x71/0x800 [ 473.804162] ? check_preemption_disabled+0x3c/0x250 [ 473.809198] ? wait_for_completion+0x420/0x420 [ 473.813804] ? __sb_end_write+0xc1/0x100 [ 473.817894] ? SyS_write+0x15e/0x230 [ 473.821623] SyS_sendmmsg+0x35/0x60 [ 473.825290] ? __sys_sendmmsg+0x3a0/0x3a0 06:11:40 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x6, {0x0, 0x6}}, 0x20) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = getpid() write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0x0, 0x1, {{0x80000000, 0x3f, 0x0, r2}}}, 0x28) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 473.829453] do_syscall_64+0x1e8/0x640 [ 473.833358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 473.838230] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 473.843425] RIP: 0033:0x45b349 [ 473.846618] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 473.854367] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 473.861660] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 473.868937] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 473.876322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 473.883634] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000001c 06:11:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000008c030000cc000000000000005402000000000000cc00000088030000880300008803000088030000880300000500000000000000ac14f9ffffffffffffff0000ffffffff76657468315f746f5f6272696467650076657468315f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000007000cc0000000000000000000000000000000000000000005c00434c5553544552495000000000000000000000000000000000000000000001000000ffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bbe000000100000000000000007665746830000000000000000000000076657468305f746f5f68737200000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a4000000000000000000000000000000000000000000340052"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 06:11:40 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:40 executing program 2: 06:11:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:43 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101480, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000100)={0xffff, [0x9, 0x3, 0x2400, 0x6, 0xcc8, 0x3f, 0x1, 0x1f, 0x7, 0x3, 0x9, 0x5, 0x8001, 0x4f9, 0xed5, 0x3, 0xd83, 0xfffb, 0x7f, 0xffff, 0x4, 0x8, 0x0, 0x7, 0x8, 0x29d8, 0x7, 0xf99, 0x7, 0x8, 0x7, 0x20, 0x8000, 0x5, 0x6, 0xbac, 0x5, 0xf200, 0x7ff, 0xd6, 0x15, 0x3, 0x7ee, 0x7bfc, 0x46c4, 0x40, 0x0, 0x7], 0xb}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0xfffffffffffffe00}}], 0xc6, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:43 executing program 2: 06:11:43 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:43 executing program 3 (fault-call:12 fault-nth:29): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:43 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendto(0xffffffffffffffff, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:43 executing program 2: [ 476.624628] FAULT_INJECTION: forcing a failure. [ 476.624628] name failslab, interval 1, probability 0, space 0, times 0 [ 476.636255] CPU: 0 PID: 20010 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 476.644163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.653548] Call Trace: [ 476.656258] dump_stack+0x142/0x197 [ 476.659906] should_fail.cold+0x10f/0x159 [ 476.664082] should_failslab+0xdb/0x130 [ 476.668160] kmem_cache_alloc+0x47/0x780 [ 476.672244] ? save_trace+0x290/0x290 [ 476.676069] ? find_held_lock+0x35/0x130 [ 476.680143] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 476.685690] dst_alloc+0xf3/0x1a0 [ 476.689157] rt_dst_alloc+0x73/0x440 [ 476.692888] ip_route_output_key_hash_rcu+0x731/0x2750 [ 476.698171] ? check_preemption_disabled+0x3c/0x250 [ 476.703191] ip_route_output_key_hash+0x1c0/0x2e0 [ 476.708158] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 476.713691] ? udp_sendmsg+0xfb7/0x1da0 [ 476.717673] ip_route_output_flow+0x27/0xa0 [ 476.721989] udp_sendmsg+0x14a1/0x1da0 [ 476.725884] ? __lock_acquire+0x5f7/0x4620 [ 476.730185] ? ip_reply_glue_bits+0xb0/0xb0 [ 476.734515] ? udp4_seq_show+0x520/0x520 [ 476.738570] ? save_trace+0x290/0x290 [ 476.743325] ? avc_has_perm+0x273/0x4b0 [ 476.747316] ? lock_downgrade+0x740/0x740 [ 476.751476] udpv6_sendmsg+0x1393/0x2610 [ 476.755551] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 476.760827] ? rw_copy_check_uvector+0x1f1/0x290 [ 476.765597] ? sock_has_perm+0x1ed/0x280 [ 476.769668] ? selinux_tun_dev_create+0xc0/0xc0 [ 476.774327] ? dup_iter+0x260/0x260 [ 476.778050] ? copy_msghdr_from_user+0x292/0x3f0 [ 476.782801] inet_sendmsg+0x122/0x500 [ 476.786620] ? inet_sendmsg+0x122/0x500 [ 476.790597] ? inet_recvmsg+0x500/0x500 [ 476.794576] sock_sendmsg+0xce/0x110 [ 476.798314] ___sys_sendmsg+0x349/0x840 [ 476.802296] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 476.807173] ? trace_hardirqs_on+0x10/0x10 [ 476.811416] ? save_trace+0x290/0x290 [ 476.815208] ? retint_kernel+0x2d/0x2d [ 476.819105] ? __might_fault+0x110/0x1d0 [ 476.823161] ? find_held_lock+0x35/0x130 [ 476.827221] ? __might_fault+0x110/0x1d0 [ 476.831293] __sys_sendmmsg+0x152/0x3a0 [ 476.835273] ? SyS_sendmsg+0x50/0x50 [ 476.838999] ? lock_downgrade+0x740/0x740 [ 476.843151] ? __mutex_unlock_slowpath+0x71/0x800 [ 476.847999] ? check_preemption_disabled+0x3c/0x250 [ 476.853018] ? wait_for_completion+0x420/0x420 [ 476.857602] ? __sb_end_write+0xc1/0x100 [ 476.861667] ? SyS_write+0x15e/0x230 [ 476.865473] SyS_sendmmsg+0x35/0x60 [ 476.869182] ? __sys_sendmmsg+0x3a0/0x3a0 [ 476.873349] do_syscall_64+0x1e8/0x640 [ 476.877235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 476.882261] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 476.887442] RIP: 0033:0x45b349 [ 476.890742] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 476.898460] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 476.905739] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 476.913008] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 06:11:43 executing program 2: 06:11:43 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendto(0xffffffffffffffff, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:43 executing program 2: 06:11:43 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 476.920333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 476.927802] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000001d 06:11:43 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendto(0xffffffffffffffff, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:46 executing program 2: 06:11:46 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0xa2) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) sendto$inet(r4, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000b48f4bb9868dfba690ed54edb98524f8e675384ed6d3e1466c12eacb9f37cd9aad3d6d36d44a22c9775ba134b9b3bc674efbd368fa1f9fbe12f69958cd38fafc5d049c283a4e89f035317ed2b1e5ecef5afa51f4eac433a72750869bf134e05508b95284a0c49cab50042b7a1c25f762", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x75, &(0x7f0000000100)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r6, 0x425502bc}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r7, 0xf7}, &(0x7f0000000100)=0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r8, &(0x7f00000017c0), 0x1d0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r9, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r10 = dup(0xffffffffffffffff) ioctl$UI_SET_PHYS(r10, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:46 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:46 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:46 executing program 3 (fault-call:12 fault-nth:30): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:46 executing program 2: 06:11:46 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 479.691822] FAULT_INJECTION: forcing a failure. [ 479.691822] name failslab, interval 1, probability 0, space 0, times 0 [ 479.703794] CPU: 0 PID: 20051 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 479.711733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.721108] Call Trace: [ 479.723729] dump_stack+0x142/0x197 [ 479.727392] should_fail.cold+0x10f/0x159 [ 479.731745] should_failslab+0xdb/0x130 [ 479.735911] kmem_cache_alloc_node_trace+0x280/0x770 [ 479.741040] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 479.746516] __kmalloc_node_track_caller+0x3d/0x80 [ 479.751483] __kmalloc_reserve.isra.0+0x40/0xe0 [ 479.756161] __alloc_skb+0xcf/0x500 [ 479.759897] ? skb_trim+0x180/0x180 [ 479.763713] ? save_stack+0xa9/0xd0 [ 479.767439] alloc_skb_with_frags+0x86/0x4b0 [ 479.771876] ? __lock_acquire+0x5f7/0x4620 [ 479.776400] ? inet_sendmsg+0x122/0x500 [ 479.780439] ? sock_sendmsg+0xce/0x110 [ 479.784343] sock_alloc_send_pskb+0x5db/0x740 [ 479.788837] ? trace_hardirqs_on+0x10/0x10 [ 479.793081] ? sock_wmalloc+0xf0/0xf0 [ 479.796877] ? save_trace+0x290/0x290 [ 479.800683] ? fib_rules_lookup+0x308/0x950 [ 479.805017] ? save_trace+0x290/0x290 [ 479.808862] ? find_held_lock+0x35/0x130 [ 479.812930] ? rt_add_uncached_list+0x139/0x190 [ 479.817628] ? find_held_lock+0x35/0x130 [ 479.821688] sock_alloc_send_skb+0x32/0x40 [ 479.825939] __ip_append_data.isra.0+0x1227/0x20f0 [ 479.830944] ? __local_bh_enable_ip+0x99/0x1a0 [ 479.835546] ? trace_hardirqs_on+0xd/0x10 [ 479.839746] ? ip_reply_glue_bits+0xb0/0xb0 [ 479.844108] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 479.849829] ? ipv4_mtu+0x25e/0x3a0 [ 479.853465] ? ip_reply_glue_bits+0xb0/0xb0 [ 479.857791] ip_make_skb+0x17a/0x1d0 [ 479.861513] ? ip_flush_pending_frames+0x30/0x30 [ 479.866271] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 479.872002] ? udp_sendmsg+0xfb7/0x1da0 [ 479.876172] ? xfrm_lookup_route+0x48/0x1b0 [ 479.880507] udp_sendmsg+0x16a6/0x1da0 [ 479.884410] ? __lock_acquire+0x5f7/0x4620 [ 479.888749] ? ip_reply_glue_bits+0xb0/0xb0 [ 479.893067] ? udp4_seq_show+0x520/0x520 [ 479.897472] ? save_trace+0x290/0x290 [ 479.901285] ? avc_has_perm+0x273/0x4b0 [ 479.905378] ? lock_downgrade+0x740/0x740 [ 479.909547] udpv6_sendmsg+0x1393/0x2610 [ 479.913617] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 479.918918] ? rw_copy_check_uvector+0x1f1/0x290 [ 479.923711] ? sock_has_perm+0x1ed/0x280 [ 479.927811] ? selinux_tun_dev_create+0xc0/0xc0 [ 479.932476] ? dup_iter+0x260/0x260 [ 479.936119] ? copy_msghdr_from_user+0x292/0x3f0 [ 479.940904] inet_sendmsg+0x122/0x500 [ 479.944701] ? inet_sendmsg+0x122/0x500 [ 479.948670] ? inet_recvmsg+0x500/0x500 [ 479.952825] sock_sendmsg+0xce/0x110 [ 479.956728] ___sys_sendmsg+0x349/0x840 [ 479.960711] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 479.965508] ? trace_hardirqs_on+0x10/0x10 [ 479.969769] ? save_trace+0x290/0x290 [ 479.973570] ? retint_kernel+0x2d/0x2d [ 479.977521] ? __might_fault+0x110/0x1d0 [ 479.981583] ? find_held_lock+0x35/0x130 [ 479.985653] ? __might_fault+0x110/0x1d0 [ 479.989718] __sys_sendmmsg+0x152/0x3a0 [ 479.993740] ? SyS_sendmsg+0x50/0x50 [ 479.997498] ? lock_downgrade+0x740/0x740 [ 480.001999] ? __mutex_unlock_slowpath+0x71/0x800 [ 480.006852] ? check_preemption_disabled+0x3c/0x250 [ 480.011878] ? wait_for_completion+0x420/0x420 [ 480.016458] ? __sb_end_write+0xc1/0x100 [ 480.020528] ? SyS_write+0x15e/0x230 [ 480.024260] SyS_sendmmsg+0x35/0x60 [ 480.027891] ? __sys_sendmmsg+0x3a0/0x3a0 [ 480.032036] do_syscall_64+0x1e8/0x640 [ 480.035917] ? trace_hardirqs_off_thunk+0x1a/0x1c 06:11:46 executing program 2: 06:11:46 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:46 executing program 2: [ 480.040766] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 480.045988] RIP: 0033:0x45b349 [ 480.049171] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 480.056884] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 480.064161] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 480.071494] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 480.078785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 480.086064] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000001e 06:11:46 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:49 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20000004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8884) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:49 executing program 2: 06:11:49 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:49 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:49 executing program 3 (fault-call:12 fault-nth:31): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:49 executing program 2: 06:11:49 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 482.751730] FAULT_INJECTION: forcing a failure. [ 482.751730] name failslab, interval 1, probability 0, space 0, times 0 [ 482.763748] CPU: 0 PID: 20090 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 482.771653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.781246] Call Trace: [ 482.783856] dump_stack+0x142/0x197 [ 482.787513] should_fail.cold+0x10f/0x159 [ 482.791685] should_failslab+0xdb/0x130 [ 482.795680] kmem_cache_alloc_node_trace+0x280/0x770 [ 482.800978] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 482.806561] __kmalloc_node_track_caller+0x3d/0x80 [ 482.811511] __kmalloc_reserve.isra.0+0x40/0xe0 [ 482.816210] __alloc_skb+0xcf/0x500 [ 482.819847] ? skb_trim+0x180/0x180 [ 482.823483] ? save_stack+0xa9/0xd0 [ 482.827132] alloc_skb_with_frags+0x86/0x4b0 [ 482.831557] ? __lock_acquire+0x5f7/0x4620 [ 482.835797] ? inet_sendmsg+0x122/0x500 [ 482.839812] ? sock_sendmsg+0xce/0x110 [ 482.843726] sock_alloc_send_pskb+0x5db/0x740 [ 482.848344] ? trace_hardirqs_on+0x10/0x10 [ 482.852580] ? sock_wmalloc+0xf0/0xf0 [ 482.856389] ? save_trace+0x290/0x290 [ 482.860205] ? fib_rules_lookup+0x308/0x950 [ 482.864540] ? save_trace+0x290/0x290 [ 482.868345] ? find_held_lock+0x35/0x130 [ 482.872402] ? rt_add_uncached_list+0x139/0x190 [ 482.877080] ? find_held_lock+0x35/0x130 [ 482.881166] sock_alloc_send_skb+0x32/0x40 [ 482.885412] __ip_append_data.isra.0+0x1227/0x20f0 [ 482.890347] ? __local_bh_enable_ip+0x99/0x1a0 [ 482.894939] ? trace_hardirqs_on+0xd/0x10 [ 482.899085] ? ip_reply_glue_bits+0xb0/0xb0 [ 482.903419] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 482.909136] ? ipv4_mtu+0x25e/0x3a0 [ 482.912772] ? ip_reply_glue_bits+0xb0/0xb0 [ 482.917102] ip_make_skb+0x17a/0x1d0 [ 482.920900] ? ip_flush_pending_frames+0x30/0x30 [ 482.925771] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 482.931323] ? udp_sendmsg+0xfb7/0x1da0 [ 482.935318] ? xfrm_lookup_route+0x48/0x1b0 [ 482.939660] udp_sendmsg+0x16a6/0x1da0 [ 482.943813] ? __lock_acquire+0x5f7/0x4620 [ 482.948213] ? ip_reply_glue_bits+0xb0/0xb0 [ 482.952533] ? udp4_seq_show+0x520/0x520 [ 482.956604] ? save_trace+0x290/0x290 [ 482.960408] ? avc_has_perm+0x273/0x4b0 [ 482.964391] ? lock_downgrade+0x740/0x740 [ 482.968591] udpv6_sendmsg+0x1393/0x2610 [ 482.972663] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 482.978049] ? rw_copy_check_uvector+0x1f1/0x290 [ 482.982815] ? sock_has_perm+0x1ed/0x280 [ 482.986874] ? selinux_tun_dev_create+0xc0/0xc0 [ 482.991546] ? dup_iter+0x260/0x260 [ 482.995192] ? copy_msghdr_from_user+0x292/0x3f0 [ 482.999957] inet_sendmsg+0x122/0x500 [ 483.003764] ? inet_sendmsg+0x122/0x500 [ 483.007775] ? inet_recvmsg+0x500/0x500 [ 483.011757] sock_sendmsg+0xce/0x110 [ 483.015560] ___sys_sendmsg+0x349/0x840 [ 483.019615] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 483.024392] ? trace_hardirqs_on+0x10/0x10 [ 483.028643] ? save_trace+0x290/0x290 [ 483.032441] ? retint_kernel+0x2d/0x2d [ 483.036435] ? __might_fault+0x110/0x1d0 [ 483.040501] ? find_held_lock+0x35/0x130 [ 483.044605] ? __might_fault+0x110/0x1d0 [ 483.048673] __sys_sendmmsg+0x152/0x3a0 [ 483.052660] ? SyS_sendmsg+0x50/0x50 [ 483.056385] ? lock_downgrade+0x740/0x740 [ 483.060580] ? __mutex_unlock_slowpath+0x71/0x800 [ 483.065435] ? check_preemption_disabled+0x3c/0x250 [ 483.070473] ? wait_for_completion+0x420/0x420 [ 483.075065] ? __sb_end_write+0xc1/0x100 [ 483.079134] ? SyS_write+0x15e/0x230 [ 483.082868] SyS_sendmmsg+0x35/0x60 [ 483.086518] ? __sys_sendmmsg+0x3a0/0x3a0 [ 483.090673] do_syscall_64+0x1e8/0x640 [ 483.094566] ? trace_hardirqs_off_thunk+0x1a/0x1c 06:11:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:49 executing program 2: [ 483.099421] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 483.104665] RIP: 0033:0x45b349 [ 483.107939] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 483.115645] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 483.122914] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 483.130218] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 483.137504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 483.145134] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000001f 06:11:49 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 06:11:49 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) io_getevents(0x0, 0x4, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000080)={0x77359400}) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x24) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5a3a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:49 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000061, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/77) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) 06:11:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 06:11:49 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:49 executing program 3 (fault-call:12 fault-nth:32): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:49 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 06:11:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:50 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:50 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x2008002) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) [ 483.597766] FAULT_INJECTION: forcing a failure. [ 483.597766] name failslab, interval 1, probability 0, space 0, times 0 [ 483.609213] CPU: 0 PID: 20153 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 483.617112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.627001] Call Trace: [ 483.629610] dump_stack+0x142/0x197 [ 483.633257] should_fail.cold+0x10f/0x159 [ 483.637432] should_failslab+0xdb/0x130 [ 483.641422] kmem_cache_alloc_node+0x287/0x780 06:11:50 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x3, &(0x7f0000000040)={[0x7]}, 0x8) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)="7cddb44a3e2c61b1db3c42cd86635eb0b8431b28e3d96c3211bf2c4c0ce731a1caeb734187f1889ab3d1e023bed4e0fbe4e6e5956aab7757e26d43ef9a480162e8ce4d613ea9b555db47d3e557564ac2546c3bb841ce1fe24293c68dd7842a61c8c211beed36eb4fbe81b8ed3e5f2630a5293343ca84800e3c678459276f59219c8142", 0x83, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000003c0)='eth1\x00', &(0x7f0000000400)) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="022aad9d5037d243601e13fc02c1be13897256000001", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x34, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@initdev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000280)=0xe8) r7 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)="7cddb44a3e2c61b1db3c42cd86635eb0b8431b28e3d96c3211bf2c4c0ce731a1caeb734187f1889ab3d1e023bed4e0fbe4e6e5956aab7757e26d43ef9a480162e8ce4d613ea9b555db47d3e557564ac2546c3bb841ce1fe24293c68dd7842a61c8c211beed36eb4fbe81b8ed3e5f2630a5293343ca84800e3c678459276f59219c8142", 0x83, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r7, 0x0, &(0x7f00000003c0)='eth1\x00', &(0x7f0000000400)) keyctl$chown(0x4, r7, r6, r4) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) ioctl$RTC_AIE_ON(r0, 0x7001) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)) [ 483.646010] ? __save_stack_trace+0x7b/0xd0 [ 483.650354] __alloc_skb+0x9c/0x500 [ 483.654000] ? skb_trim+0x180/0x180 [ 483.657636] ? save_stack+0xa9/0xd0 [ 483.661276] alloc_skb_with_frags+0x86/0x4b0 [ 483.665697] ? __lock_acquire+0x5f7/0x4620 [ 483.669949] ? inet_sendmsg+0x122/0x500 [ 483.673925] ? sock_sendmsg+0xce/0x110 [ 483.677824] sock_alloc_send_pskb+0x5db/0x740 [ 483.682333] ? trace_hardirqs_on+0x10/0x10 [ 483.686578] ? sock_wmalloc+0xf0/0xf0 [ 483.690379] ? save_trace+0x290/0x290 [ 483.694290] ? fib_rules_lookup+0x308/0x950 [ 483.698622] ? save_trace+0x290/0x290 [ 483.702431] ? find_held_lock+0x35/0x130 [ 483.706665] ? rt_add_uncached_list+0x139/0x190 [ 483.711345] ? find_held_lock+0x35/0x130 [ 483.715423] sock_alloc_send_skb+0x32/0x40 [ 483.719668] __ip_append_data.isra.0+0x1227/0x20f0 [ 483.724608] ? __local_bh_enable_ip+0x99/0x1a0 [ 483.729200] ? trace_hardirqs_on+0xd/0x10 [ 483.733339] ? ip_reply_glue_bits+0xb0/0xb0 [ 483.740191] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 483.745912] ? ipv4_mtu+0x25e/0x3a0 [ 483.749620] ? ip_reply_glue_bits+0xb0/0xb0 [ 483.753931] ip_make_skb+0x17a/0x1d0 [ 483.757645] ? ip_flush_pending_frames+0x30/0x30 [ 483.762395] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 483.767926] ? udp_sendmsg+0xfb7/0x1da0 [ 483.771907] ? xfrm_lookup_route+0x48/0x1b0 [ 483.776217] udp_sendmsg+0x16a6/0x1da0 [ 483.780095] ? __lock_acquire+0x5f7/0x4620 [ 483.784324] ? ip_reply_glue_bits+0xb0/0xb0 [ 483.788633] ? udp4_seq_show+0x520/0x520 [ 483.792684] ? save_trace+0x290/0x290 [ 483.796470] ? avc_has_perm+0x273/0x4b0 [ 483.800437] ? lock_downgrade+0x740/0x740 [ 483.804575] udpv6_sendmsg+0x1393/0x2610 [ 483.808630] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 483.813906] ? rw_copy_check_uvector+0x1f1/0x290 [ 483.818670] ? sock_has_perm+0x1ed/0x280 [ 483.822726] ? selinux_tun_dev_create+0xc0/0xc0 [ 483.827395] ? dup_iter+0x260/0x260 [ 483.831019] ? copy_msghdr_from_user+0x292/0x3f0 [ 483.835774] inet_sendmsg+0x122/0x500 [ 483.839565] ? inet_sendmsg+0x122/0x500 [ 483.843541] ? inet_recvmsg+0x500/0x500 [ 483.847505] sock_sendmsg+0xce/0x110 [ 483.851208] ___sys_sendmsg+0x349/0x840 [ 483.855169] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 483.859914] ? trace_hardirqs_on+0x10/0x10 [ 483.864137] ? save_trace+0x290/0x290 [ 483.867937] ? retint_kernel+0x2d/0x2d [ 483.871900] ? __might_fault+0x110/0x1d0 [ 483.875948] ? find_held_lock+0x35/0x130 [ 483.879992] ? __might_fault+0x110/0x1d0 [ 483.884057] __sys_sendmmsg+0x152/0x3a0 [ 483.888192] ? SyS_sendmsg+0x50/0x50 [ 483.891894] ? lock_downgrade+0x740/0x740 [ 483.896029] ? __mutex_unlock_slowpath+0x71/0x800 [ 483.900870] ? check_preemption_disabled+0x3c/0x250 [ 483.905871] ? wait_for_completion+0x420/0x420 [ 483.910437] ? __sb_end_write+0xc1/0x100 [ 483.914574] ? SyS_write+0x15e/0x230 [ 483.918278] SyS_sendmmsg+0x35/0x60 [ 483.921904] ? __sys_sendmmsg+0x3a0/0x3a0 [ 483.926039] do_syscall_64+0x1e8/0x640 [ 483.929910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 483.934742] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 483.940004] RIP: 0033:0x45b349 [ 483.943185] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 483.950911] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 483.958190] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 483.965465] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 483.972737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 483.980016] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000020 06:11:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:50 executing program 2: geteuid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@mcast1, @dev={0xfe, 0x80, [], 0x37}, @local, 0xffff, 0x800, 0xb87, 0xdfdbb216e049d0d8, 0xff}) recvmmsg(r1, &(0x7f0000008880), 0x400000000000061, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1}}, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) fstatfs(r3, &(0x7f00000002c0)=""/77) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x2f, 0x1be) connect$inet(r4, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 06:11:50 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x2008002) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) 06:11:50 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, "a853f4923ea1db4cda6360"}, 0xc, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:50 executing program 3 (fault-call:12 fault-nth:33): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:50 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:50 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:50 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:50 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x2008002) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) 06:11:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 484.475932] ptrace attach of "/root/syz-executor.0"[20209] was attempted by "/root/syz-executor.0"[20211] [ 484.595977] FAULT_INJECTION: forcing a failure. [ 484.595977] name failslab, interval 1, probability 0, space 0, times 0 [ 484.607551] CPU: 1 PID: 20218 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 484.615564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.625209] Call Trace: [ 484.627813] dump_stack+0x142/0x197 [ 484.631445] should_fail.cold+0x10f/0x159 [ 484.635619] should_failslab+0xdb/0x130 [ 484.639608] kmem_cache_alloc_node_trace+0x280/0x770 [ 484.644711] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 484.650265] __kmalloc_node_track_caller+0x3d/0x80 [ 484.656015] __kmalloc_reserve.isra.0+0x40/0xe0 [ 484.660700] __alloc_skb+0xcf/0x500 [ 484.664342] ? skb_trim+0x180/0x180 [ 484.667980] ? finish_task_switch+0x178/0x650 [ 484.672494] alloc_skb_with_frags+0x86/0x4b0 [ 484.676921] ? _raw_spin_unlock_irq+0x28/0x90 [ 484.681434] sock_alloc_send_pskb+0x5db/0x740 [ 484.685947] ? __schedule+0x7c0/0x1cd0 [ 484.689856] ? sock_wmalloc+0xf0/0xf0 [ 484.693668] ? save_trace+0x290/0x290 [ 484.697475] ? trace_hardirqs_on+0x10/0x10 [ 484.701728] sock_alloc_send_skb+0x32/0x40 [ 484.705979] __ip_append_data.isra.0+0x1227/0x20f0 [ 484.710919] ? rcu_report_unblock_qs_rnp.constprop.0+0xac/0x1e0 [ 484.716989] ? ip_reply_glue_bits+0xb0/0xb0 [ 484.720185] ptrace attach of "/root/syz-executor.0"[20228] was attempted by "/root/syz-executor.0"[20229] [ 484.721329] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 484.721342] ? ipv4_mtu+0x25e/0x3a0 [ 484.721360] ? ip_reply_glue_bits+0xb0/0xb0 [ 484.721371] ip_make_skb+0x17a/0x1d0 [ 484.748710] ? ip_flush_pending_frames+0x30/0x30 [ 484.753495] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 484.759037] ? udp_sendmsg+0xfb7/0x1da0 [ 484.763033] ? xfrm_lookup_route+0x48/0x1b0 [ 484.767373] udp_sendmsg+0x16a6/0x1da0 [ 484.771283] ? ip_reply_glue_bits+0xb0/0xb0 [ 484.775620] ? udp4_seq_show+0x520/0x520 [ 484.779820] ? save_trace+0x290/0x290 [ 484.783639] ? avc_has_perm+0x273/0x4b0 [ 484.787636] ? lock_downgrade+0x740/0x740 [ 484.787642] ptrace attach of "/root/syz-executor.0"[20233] was attempted by "/root/syz-executor.0"[20234] [ 484.801511] udpv6_sendmsg+0x1393/0x2610 [ 484.805634] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 484.810929] ? rw_copy_check_uvector+0x1f1/0x290 [ 484.815806] ? sock_has_perm+0x1ed/0x280 [ 484.819969] ? selinux_tun_dev_create+0xc0/0xc0 [ 484.824663] ? dup_iter+0x260/0x260 [ 484.828305] ? copy_msghdr_from_user+0x292/0x3f0 [ 484.834328] inet_sendmsg+0x122/0x500 [ 484.838146] ? inet_sendmsg+0x122/0x500 [ 484.842132] ? inet_recvmsg+0x500/0x500 [ 484.846121] sock_sendmsg+0xce/0x110 [ 484.849849] ___sys_sendmsg+0x349/0x840 [ 484.853838] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 484.858609] ? mark_held_locks+0xb1/0x100 [ 484.862769] ? trace_hardirqs_on+0x10/0x10 [ 484.867014] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 484.871781] ? save_trace+0x290/0x290 [ 484.875593] ? __might_fault+0x110/0x1d0 [ 484.879663] ? find_held_lock+0x35/0x130 [ 484.883736] ? __might_fault+0x110/0x1d0 [ 484.887823] __sys_sendmmsg+0x152/0x3a0 [ 484.891807] ? SyS_sendmsg+0x50/0x50 [ 484.895624] ? lock_downgrade+0x740/0x740 [ 484.899793] ? __mutex_unlock_slowpath+0x71/0x800 [ 484.904286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 484.904640] ? check_preemption_disabled+0x3c/0x250 [ 484.904658] ? wait_for_completion+0x420/0x420 [ 484.920740] ? __sb_end_write+0xc1/0x100 [ 484.924817] ? SyS_write+0x15e/0x230 [ 484.928554] SyS_sendmmsg+0x35/0x60 [ 484.932200] ? __sys_sendmmsg+0x3a0/0x3a0 [ 484.936366] do_syscall_64+0x1e8/0x640 [ 484.940273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 484.945353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 484.950562] RIP: 0033:0x45b349 [ 484.953845] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 484.954577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 484.961561] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 06:11:51 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x214200) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468315f746f5f6873720000874224000008001b0000000000"], 0x3}}, 0x4000000) flock(0xffffffffffffffff, 0x8) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 484.961568] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 484.961573] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 484.961578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 484.961583] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000021 [ 485.051780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:11:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:51 executing program 2: ioprio_get$uid(0x0, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00'}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="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", 0x48b, 0xc001, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000280)="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", 0x122, 0x400c020, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 06:11:51 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:51 executing program 3 (fault-call:12 fault-nth:34): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:51 executing program 4: r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:51 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) lseek(r1, 0x7, 0x3) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:51 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) 06:11:51 executing program 5: fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 485.498023] FAULT_INJECTION: forcing a failure. [ 485.498023] name failslab, interval 1, probability 0, space 0, times 0 [ 485.509402] CPU: 1 PID: 20284 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 485.517299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.526674] Call Trace: [ 485.529291] dump_stack+0x142/0x197 [ 485.532966] should_fail.cold+0x10f/0x159 [ 485.537139] should_failslab+0xdb/0x130 [ 485.541131] kmem_cache_alloc+0x47/0x780 [ 485.545204] ? save_trace+0x290/0x290 [ 485.549010] ? find_held_lock+0x35/0x130 [ 485.553083] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 485.558637] dst_alloc+0xf3/0x1a0 [ 485.562106] rt_dst_alloc+0x73/0x440 [ 485.565832] ip_route_output_key_hash_rcu+0x731/0x2750 [ 485.571231] ? check_preemption_disabled+0x3c/0x250 [ 485.576284] ip_route_output_key_hash+0x1c0/0x2e0 [ 485.581146] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 485.586698] ? udp_sendmsg+0xfb7/0x1da0 [ 485.588823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 485.590691] ip_route_output_flow+0x27/0xa0 [ 485.590705] udp_sendmsg+0x14a1/0x1da0 [ 485.605436] ? __lock_acquire+0x5f7/0x4620 [ 485.609704] ? ip_reply_glue_bits+0xb0/0xb0 [ 485.614060] ? udp4_seq_show+0x520/0x520 [ 485.618149] ? save_trace+0x290/0x290 [ 485.621970] ? avc_has_perm+0x273/0x4b0 [ 485.625991] ? lock_downgrade+0x740/0x740 [ 485.630160] udpv6_sendmsg+0x1393/0x2610 [ 485.634250] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 485.639545] ? rw_copy_check_uvector+0x1f1/0x290 [ 485.644323] ? sock_has_perm+0x1ed/0x280 [ 485.648413] ? selinux_tun_dev_create+0xc0/0xc0 [ 485.653100] ? dup_iter+0x260/0x260 [ 485.656753] ? copy_msghdr_from_user+0x292/0x3f0 [ 485.661530] inet_sendmsg+0x122/0x500 [ 485.665344] ? inet_sendmsg+0x122/0x500 [ 485.669413] ? inet_recvmsg+0x500/0x500 [ 485.673403] sock_sendmsg+0xce/0x110 [ 485.677222] ___sys_sendmsg+0x349/0x840 [ 485.681214] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 485.685987] ? trace_hardirqs_on+0x10/0x10 [ 485.687775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.690226] ? save_trace+0x290/0x290 [ 485.690239] ? retint_kernel+0x2d/0x2d [ 485.690251] ? __might_fault+0x110/0x1d0 [ 485.690262] ? find_held_lock+0x35/0x130 [ 485.690271] ? __might_fault+0x110/0x1d0 [ 485.690299] __sys_sendmmsg+0x152/0x3a0 [ 485.690310] ? SyS_sendmsg+0x50/0x50 [ 485.690322] ? lock_downgrade+0x740/0x740 [ 485.690339] ? __mutex_unlock_slowpath+0x71/0x800 [ 485.690350] ? check_preemption_disabled+0x3c/0x250 [ 485.690369] ? wait_for_completion+0x420/0x420 [ 485.712229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.712751] ? __sb_end_write+0xc1/0x100 [ 485.712791] ? SyS_write+0x15e/0x230 [ 485.712809] SyS_sendmmsg+0x35/0x60 [ 485.761561] ? __sys_sendmmsg+0x3a0/0x3a0 [ 485.765818] do_syscall_64+0x1e8/0x640 [ 485.769755] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 485.774705] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 485.779905] RIP: 0033:0x45b349 [ 485.783108] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 485.790918] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 06:11:52 executing program 4: r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 485.798205] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 485.805487] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 485.812765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 485.820055] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000022 06:11:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:52 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x4000000000101842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28}, 0x28) 06:11:52 executing program 4: r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x47}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:52 executing program 3 (fault-call:12 fault-nth:35): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:52 executing program 2: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081ff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'L+', 0x9646000}, 0x28, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)='y\x00', 0x2, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 06:11:52 executing program 5: fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:52 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(0x0, 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 486.413559] FAULT_INJECTION: forcing a failure. [ 486.413559] name failslab, interval 1, probability 0, space 0, times 0 [ 486.424905] CPU: 1 PID: 20332 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 486.432912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.442291] Call Trace: [ 486.444911] dump_stack+0x142/0x197 [ 486.448564] should_fail.cold+0x10f/0x159 [ 486.452749] should_failslab+0xdb/0x130 [ 486.456848] kmem_cache_alloc+0x47/0x780 [ 486.461040] ? save_trace+0x290/0x290 [ 486.464857] ? find_held_lock+0x35/0x130 [ 486.468936] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 486.474489] dst_alloc+0xf3/0x1a0 [ 486.477965] rt_dst_alloc+0x73/0x440 [ 486.481693] ip_route_output_key_hash_rcu+0x731/0x2750 [ 486.487335] ? check_preemption_disabled+0x3c/0x250 [ 486.492370] ip_route_output_key_hash+0x1c0/0x2e0 [ 486.497346] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 486.502893] ? udp_sendmsg+0xfb7/0x1da0 [ 486.506887] ip_route_output_flow+0x27/0xa0 [ 486.511229] udp_sendmsg+0x14a1/0x1da0 [ 486.515138] ? __lock_acquire+0x5f7/0x4620 [ 486.519417] ? ip_reply_glue_bits+0xb0/0xb0 [ 486.523764] ? udp4_seq_show+0x520/0x520 [ 486.527845] ? save_trace+0x290/0x290 [ 486.533587] ? avc_has_perm+0x273/0x4b0 [ 486.537590] ? lock_downgrade+0x740/0x740 [ 486.541760] udpv6_sendmsg+0x1393/0x2610 [ 486.545847] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 486.551141] ? rw_copy_check_uvector+0x1f1/0x290 [ 486.555921] ? sock_has_perm+0x1ed/0x280 [ 486.560012] ? selinux_tun_dev_create+0xc0/0xc0 [ 486.564822] ? dup_iter+0x260/0x260 [ 486.568470] ? copy_msghdr_from_user+0x292/0x3f0 [ 486.573365] inet_sendmsg+0x122/0x500 [ 486.577177] ? inet_sendmsg+0x122/0x500 [ 486.581163] ? inet_recvmsg+0x500/0x500 [ 486.585162] sock_sendmsg+0xce/0x110 [ 486.588894] ___sys_sendmsg+0x349/0x840 [ 486.593005] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 486.597785] ? trace_hardirqs_on+0x10/0x10 [ 486.602035] ? save_trace+0x290/0x290 [ 486.605842] ? retint_kernel+0x2d/0x2d [ 486.609747] ? __might_fault+0x110/0x1d0 [ 486.613827] ? find_held_lock+0x35/0x130 [ 486.617907] ? __might_fault+0x110/0x1d0 [ 486.622008] __sys_sendmmsg+0x152/0x3a0 [ 486.626006] ? SyS_sendmsg+0x50/0x50 [ 486.629758] ? lock_downgrade+0x740/0x740 [ 486.634037] ? __mutex_unlock_slowpath+0x71/0x800 [ 486.638896] ? check_preemption_disabled+0x3c/0x250 [ 486.643934] ? wait_for_completion+0x420/0x420 [ 486.648533] ? __sb_end_write+0xc1/0x100 [ 486.652609] ? SyS_write+0x15e/0x230 [ 486.656344] SyS_sendmmsg+0x35/0x60 [ 486.659988] ? __sys_sendmmsg+0x3a0/0x3a0 [ 486.664156] do_syscall_64+0x1e8/0x640 [ 486.668174] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 486.673054] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 486.678392] RIP: 0033:0x45b349 [ 486.681593] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 486.689409] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 486.696803] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 486.704262] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 486.711549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 486.718856] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000023 06:11:53 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(0x0, 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:53 executing program 2: getpid() r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000), 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x2143, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xc001, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x400c020, 0x0, 0x0) dup2(r2, r3) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:11:53 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(0x0, 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:53 executing program 2: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) 06:11:53 executing program 3 (fault-call:12 fault-nth:36): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:53 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 487.306833] FAULT_INJECTION: forcing a failure. [ 487.306833] name failslab, interval 1, probability 0, space 0, times 0 [ 487.318949] CPU: 1 PID: 20362 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 487.326958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.336448] Call Trace: [ 487.339069] dump_stack+0x142/0x197 [ 487.342724] should_fail.cold+0x10f/0x159 [ 487.346904] should_failslab+0xdb/0x130 [ 487.350893] kmem_cache_alloc_node_trace+0x280/0x770 [ 487.356013] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 487.361493] __kmalloc_node_track_caller+0x3d/0x80 [ 487.366442] __kmalloc_reserve.isra.0+0x40/0xe0 [ 487.371125] __alloc_skb+0xcf/0x500 [ 487.374766] ? skb_trim+0x180/0x180 [ 487.378504] ? save_stack+0xa9/0xd0 [ 487.382142] alloc_skb_with_frags+0x86/0x4b0 [ 487.386570] ? __lock_acquire+0x5f7/0x4620 [ 487.390954] ? inet_sendmsg+0x122/0x500 [ 487.394938] ? sock_sendmsg+0xce/0x110 [ 487.398861] sock_alloc_send_pskb+0x5db/0x740 [ 487.403377] ? trace_hardirqs_on+0x10/0x10 [ 487.408056] ? sock_wmalloc+0xf0/0xf0 [ 487.411954] ? save_trace+0x290/0x290 [ 487.415760] ? fib_rules_lookup+0x308/0x950 [ 487.420103] ? save_trace+0x290/0x290 [ 487.423896] ? find_held_lock+0x35/0x130 [ 487.428079] ? rt_add_uncached_list+0x139/0x190 [ 487.432900] ? find_held_lock+0x35/0x130 [ 487.436988] sock_alloc_send_skb+0x32/0x40 [ 487.441230] __ip_append_data.isra.0+0x1227/0x20f0 [ 487.446165] ? __local_bh_enable_ip+0x99/0x1a0 [ 487.450746] ? trace_hardirqs_on+0xd/0x10 [ 487.454918] ? ip_reply_glue_bits+0xb0/0xb0 [ 487.459260] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 487.464979] ? ipv4_mtu+0x25e/0x3a0 [ 487.468620] ? ip_reply_glue_bits+0xb0/0xb0 [ 487.472940] ip_make_skb+0x17a/0x1d0 [ 487.476669] ? ip_flush_pending_frames+0x30/0x30 [ 487.481427] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 487.486968] ? udp_sendmsg+0xfb7/0x1da0 [ 487.490948] ? xfrm_lookup_route+0x48/0x1b0 [ 487.495395] udp_sendmsg+0x16a6/0x1da0 [ 487.499294] ? __lock_acquire+0x5f7/0x4620 [ 487.503516] ? ip_reply_glue_bits+0xb0/0xb0 [ 487.507839] ? udp4_seq_show+0x520/0x520 [ 487.511900] ? save_trace+0x290/0x290 [ 487.515693] ? avc_has_perm+0x273/0x4b0 [ 487.519731] ? scsi_end_request+0x67e/0xa10 [ 487.524110] ? lock_downgrade+0x740/0x740 [ 487.528273] udpv6_sendmsg+0x1393/0x2610 [ 487.532350] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 487.537654] ? rw_copy_check_uvector+0x1f1/0x290 [ 487.542438] ? sock_has_perm+0x1ed/0x280 [ 487.546517] ? selinux_tun_dev_create+0xc0/0xc0 [ 487.551226] ? dup_iter+0x260/0x260 [ 487.554875] ? copy_msghdr_from_user+0x292/0x3f0 [ 487.559642] inet_sendmsg+0x122/0x500 [ 487.563442] ? inet_sendmsg+0x122/0x500 [ 487.567419] ? inet_recvmsg+0x500/0x500 [ 487.571399] sock_sendmsg+0xce/0x110 [ 487.575123] ___sys_sendmsg+0x349/0x840 [ 487.579108] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 487.583861] ? trace_hardirqs_on+0x10/0x10 [ 487.588109] ? save_trace+0x290/0x290 [ 487.591898] ? retint_kernel+0x2d/0x2d [ 487.595792] ? __might_fault+0x110/0x1d0 [ 487.599952] ? find_held_lock+0x35/0x130 [ 487.604028] ? __might_fault+0x110/0x1d0 [ 487.608113] __sys_sendmmsg+0x152/0x3a0 [ 487.612094] ? SyS_sendmsg+0x50/0x50 [ 487.615808] ? lock_downgrade+0x740/0x740 [ 487.619964] ? __mutex_unlock_slowpath+0x71/0x800 [ 487.624995] ? check_preemption_disabled+0x3c/0x250 [ 487.630009] ? wait_for_completion+0x420/0x420 [ 487.634605] ? __sb_end_write+0xc1/0x100 [ 487.638684] ? SyS_write+0x15e/0x230 [ 487.642423] SyS_sendmmsg+0x35/0x60 [ 487.646060] ? __sys_sendmmsg+0x3a0/0x3a0 [ 487.650218] do_syscall_64+0x1e8/0x640 [ 487.654118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 487.658970] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 487.664161] RIP: 0033:0x45b349 [ 487.667351] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.675058] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 487.682336] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 487.689613] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 487.696883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 487.704166] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000024 [ 487.716950] audit: type=1804 audit(1579932714.222:144): pid=20366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir690240400/syzkaller.gdP3Uq/320/bus" dev="sda1" ino=17718 res=1 [ 487.770221] audit: type=1804 audit(1579932714.222:145): pid=20366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir690240400/syzkaller.gdP3Uq/320/bus" dev="sda1" ino=17718 res=1 06:11:54 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 487.978720] audit: type=1804 audit(1579932714.482:146): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir690240400/syzkaller.gdP3Uq/321/bus" dev="sda1" ino=17718 res=1 [ 488.034881] audit: type=1804 audit(1579932714.512:147): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir690240400/syzkaller.gdP3Uq/321/bus" dev="sda1" ino=17718 res=1 06:11:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:55 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:55 executing program 3 (fault-call:12 fault-nth:37): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xad}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffd71}, {0x0, 0x1e1}, {&(0x7f00000002c0)=""/66, 0x9}], 0x3, 0x0, 0xb9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IE_RIC={0x19, 0xb2, "fb820c4ed14a9fc0e3ad3699a3c51e66269fea2fc3"}]}, 0x30}}, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:11:55 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 489.403394] audit: type=1804 audit(1579932715.912:148): pid=20382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir690240400/syzkaller.gdP3Uq/322/bus" dev="sda1" ino=16773 res=1 [ 489.454461] audit: type=1804 audit(1579932715.942:149): pid=20382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir690240400/syzkaller.gdP3Uq/322/bus" dev="sda1" ino=16773 res=1 [ 489.498853] FAULT_INJECTION: forcing a failure. [ 489.498853] name failslab, interval 1, probability 0, space 0, times 0 [ 489.510234] CPU: 0 PID: 20390 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 489.518131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.527498] Call Trace: [ 489.530113] dump_stack+0x142/0x197 [ 489.533775] should_fail.cold+0x10f/0x159 [ 489.537953] should_failslab+0xdb/0x130 [ 489.541950] kmem_cache_alloc+0x47/0x780 [ 489.546028] ? save_trace+0x290/0x290 [ 489.549842] ? find_held_lock+0x35/0x130 [ 489.553915] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 489.559578] dst_alloc+0xf3/0x1a0 [ 489.563060] rt_dst_alloc+0x73/0x440 [ 489.566916] ip_route_output_key_hash_rcu+0x731/0x2750 [ 489.572220] ? check_preemption_disabled+0x3c/0x250 [ 489.577263] ip_route_output_key_hash+0x1c0/0x2e0 [ 489.582127] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 489.587692] ? udp_sendmsg+0xfb7/0x1da0 [ 489.591699] ip_route_output_flow+0x27/0xa0 [ 489.596043] udp_sendmsg+0x14a1/0x1da0 [ 489.600066] ? __lock_acquire+0x5f7/0x4620 [ 489.604491] ? ip_reply_glue_bits+0xb0/0xb0 [ 489.608836] ? udp4_seq_show+0x520/0x520 [ 489.612917] ? save_trace+0x290/0x290 [ 489.616734] ? avc_has_perm+0x273/0x4b0 [ 489.620736] ? lock_downgrade+0x740/0x740 [ 489.624909] udpv6_sendmsg+0x1393/0x2610 [ 489.628996] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 489.634293] ? rw_copy_check_uvector+0x1f1/0x290 [ 489.639083] ? sock_has_perm+0x1ed/0x280 [ 489.643166] ? selinux_tun_dev_create+0xc0/0xc0 [ 489.647851] ? dup_iter+0x260/0x260 [ 489.651499] ? copy_msghdr_from_user+0x292/0x3f0 [ 489.656271] inet_sendmsg+0x122/0x500 [ 489.660082] ? inet_sendmsg+0x122/0x500 [ 489.664099] ? inet_recvmsg+0x500/0x500 [ 489.668119] sock_sendmsg+0xce/0x110 [ 489.671853] ___sys_sendmsg+0x349/0x840 [ 489.675966] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 489.680738] ? trace_hardirqs_on+0x10/0x10 [ 489.684989] ? save_trace+0x290/0x290 [ 489.688796] ? retint_kernel+0x2d/0x2d [ 489.692692] ? __might_fault+0x110/0x1d0 [ 489.696763] ? find_held_lock+0x35/0x130 [ 489.700831] ? __might_fault+0x110/0x1d0 [ 489.705050] __sys_sendmmsg+0x152/0x3a0 [ 489.709038] ? SyS_sendmsg+0x50/0x50 [ 489.712771] ? lock_downgrade+0x740/0x740 [ 489.716939] ? __mutex_unlock_slowpath+0x71/0x800 [ 489.721799] ? check_preemption_disabled+0x3c/0x250 [ 489.726831] ? wait_for_completion+0x420/0x420 [ 489.731427] ? __sb_end_write+0xc1/0x100 [ 489.735547] ? SyS_write+0x15e/0x230 [ 489.739280] SyS_sendmmsg+0x35/0x60 [ 489.742923] ? __sys_sendmmsg+0x3a0/0x3a0 [ 489.747084] do_syscall_64+0x1e8/0x640 [ 489.750985] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 489.755854] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 489.761051] RIP: 0033:0x45b349 [ 489.764252] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 489.772059] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 489.779384] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 489.786668] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 489.793953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 06:11:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 489.801344] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000025 06:11:56 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:56 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:56 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:56 executing program 3 (fault-call:12 fault-nth:38): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) [ 490.356211] FAULT_INJECTION: forcing a failure. [ 490.356211] name failslab, interval 1, probability 0, space 0, times 0 [ 490.367987] CPU: 1 PID: 20413 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 490.375934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.385299] Call Trace: [ 490.387911] dump_stack+0x142/0x197 [ 490.391604] should_fail.cold+0x10f/0x159 [ 490.395796] should_failslab+0xdb/0x130 [ 490.399791] kmem_cache_alloc+0x47/0x780 [ 490.403986] ? save_trace+0x290/0x290 [ 490.407794] ? find_held_lock+0x35/0x130 [ 490.411880] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 490.417432] dst_alloc+0xf3/0x1a0 [ 490.420950] rt_dst_alloc+0x73/0x440 [ 490.424849] ip_route_output_key_hash_rcu+0x731/0x2750 [ 490.430137] ? check_preemption_disabled+0x3c/0x250 [ 490.435171] ip_route_output_key_hash+0x1c0/0x2e0 [ 490.440037] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 490.446023] ? udp_sendmsg+0xfb7/0x1da0 [ 490.450025] ip_route_output_flow+0x27/0xa0 [ 490.454360] udp_sendmsg+0x14a1/0x1da0 [ 490.458260] ? __lock_acquire+0x5f7/0x4620 [ 490.462507] ? ip_reply_glue_bits+0xb0/0xb0 [ 490.466838] ? udp4_seq_show+0x520/0x520 [ 490.471031] ? save_trace+0x290/0x290 [ 490.474842] ? avc_has_perm+0x273/0x4b0 [ 490.478844] ? lock_downgrade+0x740/0x740 [ 490.483009] udpv6_sendmsg+0x1393/0x2610 [ 490.487092] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 490.492393] ? rw_copy_check_uvector+0x1f1/0x290 [ 490.497159] ? sock_has_perm+0x1ed/0x280 [ 490.501226] ? selinux_tun_dev_create+0xc0/0xc0 [ 490.505900] ? dup_iter+0x260/0x260 [ 490.509657] ? copy_msghdr_from_user+0x292/0x3f0 [ 490.514419] inet_sendmsg+0x122/0x500 [ 490.518222] ? inet_sendmsg+0x122/0x500 [ 490.522208] ? inet_recvmsg+0x500/0x500 [ 490.526190] sock_sendmsg+0xce/0x110 [ 490.529919] ___sys_sendmsg+0x349/0x840 [ 490.534043] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 490.538817] ? trace_hardirqs_on+0x10/0x10 [ 490.543060] ? save_trace+0x290/0x290 [ 490.546869] ? retint_kernel+0x2d/0x2d [ 490.550761] ? __might_fault+0x110/0x1d0 [ 490.554970] ? find_held_lock+0x35/0x130 [ 490.559058] ? __might_fault+0x110/0x1d0 [ 490.563149] __sys_sendmmsg+0x152/0x3a0 [ 490.567630] ? SyS_sendmsg+0x50/0x50 [ 490.571363] ? lock_downgrade+0x740/0x740 [ 490.575531] ? __mutex_unlock_slowpath+0x71/0x800 [ 490.580383] ? check_preemption_disabled+0x3c/0x250 [ 490.585587] ? wait_for_completion+0x420/0x420 [ 490.590177] ? __sb_end_write+0xc1/0x100 [ 490.594260] ? SyS_write+0x15e/0x230 [ 490.597987] SyS_sendmmsg+0x35/0x60 [ 490.601676] ? __sys_sendmmsg+0x3a0/0x3a0 [ 490.605849] do_syscall_64+0x1e8/0x640 [ 490.609749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 490.614613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 490.619827] RIP: 0033:0x45b349 [ 490.623164] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 490.630905] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 490.638363] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 490.646209] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 490.653493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 490.660776] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000026 06:11:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:58 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:58 executing program 3 (fault-call:12 fault-nth:39): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:11:58 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0x19, &(0x7f0000000040)="18d8caf4e5e547bf742f74756ffe14ae82439c95026becf52e"}) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) 06:11:58 executing program 2: geteuid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000340)={@mcast1, @dev={0xfe, 0x80, [], 0x37}, @local, 0xffff, 0x800, 0xb87, 0xdfdbb216e049d0d8, 0xff}) recvmmsg(r1, &(0x7f0000008880), 0x400000000000061, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000208012400000000000000000200000705000300c300000000050003003a000000060002408864000005000300880000000900010073797a310000000004000480221de414d42a4cd5b5917eb8d999f77f41d1c82f222450d62b7a6363bcddcb23c81b35788ba32f88cebc704f77250e700e66b08704162003fc4ffb4d1126fb8d40cf857ff5289cf76a69f13a48"], 0x54}}, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) fstatfs(r3, &(0x7f00000002c0)=""/77) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x2f, 0x1be) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x40000000000002f, 0x0) [ 492.486633] FAULT_INJECTION: forcing a failure. [ 492.486633] name failslab, interval 1, probability 0, space 0, times 0 [ 492.498201] CPU: 1 PID: 20433 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 492.506104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.515471] Call Trace: [ 492.518157] dump_stack+0x142/0x197 [ 492.521815] should_fail.cold+0x10f/0x159 [ 492.526019] should_failslab+0xdb/0x130 [ 492.530013] kmem_cache_alloc_node_trace+0x280/0x770 [ 492.535257] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 492.540909] __kmalloc_node_track_caller+0x3d/0x80 [ 492.546035] __kmalloc_reserve.isra.0+0x40/0xe0 [ 492.550726] __alloc_skb+0xcf/0x500 [ 492.554369] ? skb_trim+0x180/0x180 [ 492.558012] ? save_stack+0xa9/0xd0 [ 492.561658] alloc_skb_with_frags+0x86/0x4b0 [ 492.566088] ? __lock_acquire+0x5f7/0x4620 [ 492.570346] ? inet_sendmsg+0x122/0x500 [ 492.574331] ? sock_sendmsg+0xce/0x110 [ 492.578259] sock_alloc_send_pskb+0x5db/0x740 [ 492.582778] ? trace_hardirqs_on+0x10/0x10 06:11:59 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000005c0)="1fe6dab62eb50f57022a7fc7de4182dbad6b8aab3968637013f4f62d1753d0c4ef7f4d3d0b1b81080ba7ebb8601afbb472a8f1d8b550e21dd917ecedfb2de847e8287acd91b514247f1a500b3de44958874950aa43ed1db0b2eb7a5f40e62ee9848543e8b0eb6c7a54ad9fb84873815481322afc02a335d3b1e4a644f4ca54fba9bb10b1efa224ea659f8546b205424a838442ad3aedd8708decc98358d600599f745cbb1d66c9767ce23b57e94ce7a5cb5cca626bea2522654fc2de739f219939bedfe7dac4f6663839869fd32c7d3b413e04fa22606f5a81a794fffe5b0a3a40cdcd7a7de042eb7ccf25425b8895c8c480553620f1b2e969f679e79b54b3c6a63e02902b0f21034b0703e6226fc846f80e004c23de31ba96e8550715bf4e2004b0a1986d363ef86bfa14bbd2e3dbcb0af3b1ead0dc967ee276fefa9922ea3c647a58d1d9d7a062699135218b9f75cfaf04ddf279fbc1c5a7bbd0054a560644fa11a4c1a243681e6720c742050321ca44204469e7d0f10943f3701ae66269a04416354a4f78666083d77d0732b8d18df7f6d7614aa54b48e14ea6f1543503692b844eaf12478570a1970ff4880c0d51df1ba3de89abb3325c18eae42712d51900b813a4f1867f831129a23a4bf0fafaa2216715bf9fc88869b4d3aa2746fdb809aa1ec8b4b9ad62df5d247927b044c03f04f6ca12656dae0494a7ef37406ddd8739b0c9ac8fefc698ec39167d9dbfa0bcd525528f95103d1c599e34ba83c47a7886628781e68b3162472723afb4f561a8096c232cbc7d78dc8baa28635c6b68dc6fbda4276e57be1566f791ee717ec0991a2fefafdeeb0b0810358e95e03d95b68abb0ba88852c3f02783ae46cd31b4b085bddd2906b47b135e4ede96d6c8114a915d4f8469d8fdb02fabd135e117db4836efea9b3195407770c579351bffb9b671c468175fcacb633259e4d69e8e8bb27b2e919d30f7375b1cf74fdbb7f691d6220354caf62607e0fbd03258a966574b2bb5164727593067b76d9705a0eba4b5b3d257b7e3892e28effa85af6991813d4b5758b58c293b4ea9e17d4f2709e3359cbf1331dcdbe99040eb903b1ee53939519b1bb3d1b255155bcaadb59e36f95f9cbcff1785fc4977a3f9726137bf05b87c8184e8f0400dd9f647267fb9ef352f7683e9036fa7f94801ce06b0f92530e932a6de96d958c1b58f4e92e5a23825fe9cab5afed1e236130cf658fd5e2736a3b7d6deead943e9ac452e986d95ee3665521d2a1467ff2076271921c272a1d304fb7c2d2c1be8bb74af2945f3201d7b55a107c9c23b94fed1ad915018aaebafbe93643e64d82572873337a43adde2899c573dd1d5064f5f58235ffd53fc813ab21b8beb24bcff69fa5016b695c149ab6e8076048eae87dd08e4bfa04fd62de29a8d141dfd032c6b7ccee14fbbb3d3bd058bfb6a9f3afccbd35e9e69895d79e9fed87a49bfe40f38017b2412a31137e6f24df58ca23255c37eb895169db099d91bc7b17c9edf0e66fd4a4d21b95ff0c8b0d744353d9653206afd706ed7c37a2e3a2641954f711dac8eeff105471ed6ac6999fb536e86a0f0aeefa5cb2fa543f5fa23ee3af00e0fff90b241b0dbc2d89fbc063e57c5750ba631d369de4d63f7973fd1754ae692e0dbab214f7d7d2edb7e42c2a0a49c84d9fe226b4017b672e0b7968590b7a7ad479c0f073b27305540a239799f0dc6b69c16990ae17e726c92920e593566d78a8162bda701f5d31b0dcbcc106b1055fdb9af98a6224c97ad9d91e15d6b113524eeff4dcd5ef4bb4f8fe3545ff62b7dc7ce8f9dd6b2b7ed493e8639331d999a977258e8cbad79207fee500c022c453fe5ebef33d1ad7cbb09688311a7643db4fb62bd7bec4f9bb688544e8ced1e695f280e3655f8d0fd8b4be02d14082ff9c267d1a2ca4b7bc096e1a7afcaf93972712a5aaeed79802c242c5710fe05b5af2420dbb64b789c5b6a669fa391b72306c0ec5886a28a24a2e79ac8911b3d8b26480582e49c78fae9983c99270dc2bb79ba8e8b28dc79270077a25ec4b1e9a0377ef4458e8d70fe26baef97de5341df8e888ae45aa805603985578ce4590f5889e60aa0485cc8a34e1460a2f7e52b8349ced6aaf889d7c8c36775ef12c7493e972b3eb92e5ec1eb166cb528f332e8262e4dc923c0addf1d769fa6ff4e77b99d5a04a33a55c2d57aed94d0d2dadd7604f29feaf7cb7b47c80175a2baa16b98ee51013e4fe6404a88433e05b5d60487acf2eb3bd96ba13b8c9e72e36befdba10b1b6c8c948b0536478bb05e08e6b81072cf34bf33a40068b4041d0fcaa6884543f95680635c2a118c243e5c13495df49257e17ae35a6ee18e390b033fba6a4333c2e6ce5255d1f0abde01d86378686073c8bc9c26ede20ce7d1ac126ad34d4f580aebd83b1918cd7f6e1e4d4fc85eac3c0ebd1ee5f37d333c2ecbfee49102427ccf9d988a750deab53cfb5ef648ea98671dfff2b0d11cc5a6f0b10cf7e2c85b756adbafb15619d95446f143f431d468edda1b053cdb9a9ed9a2884c6cbf78c39fcedc956632c8e8064ecce04938c716c66410a0b9d360a354ed592663e03412dddc7d214cb4727d3c9c1c836e87b1d6a8444fbbede78c62961ff0db9696346f99e117da3b2638ff3048ee01c7bf4ed2cd88e33b1c3261b8ee35d5efe5411ad5a90d67a7171b6faee2d5840b5fd6a9b58a82df4270962ed78d482ea6df24f1c131465344375f46bd7d44c25f52cba889ac93ebf405a84ea1ed3629e2067880985935308e3ef0385dcc7eb354c235cd87c1ca354687289399faa39b755e4ecd135c602e98d4316c1a8ea7946ba1764926483cbcf51f2cff318c9dd6c4f0128675bfb02381d64d4a16ae3e2c4b3305a583d52ff867d78dcf40dacbe95007a51a759f6bcf6194c94c98c49492202bbf0057522859c0f00e3729228ca658c4a248209fad6eb0e8159c03f2684dfc1e480cb75cabb22719d68b3a41a4110c9535d0ef6ed48208e94ca9787802d518cec97e5b9de7ab3a9be8065676cfefed503e79eb2cd12b1d90de08dca58205a7c9c2b81ec849f75e72936238af58773faccb6e97078cc02e29b0e1b61bcb4de37de3ac9db41c822cafd99ad35cef282d4e2e6db4a4191f807f0ade962d9e9532c8bf88f3688ef464323f59ed62e98e7dfa4a7b1080184b98a2b13920bd38ffaebfbb425f6b3dda12f24212fa5399aad4260bb97ce92e0b0e4bf01dab108e763a3c5872f93e7c4c496eb85a32e85b50971e8154fd8ec0083481f05b4eaff8193818655256845d8ab45512fc89c7909276b22d017d27efc1e336fdf9ed651eeb9da1af3bb03d9e9f1f8205db42f4a47545dee7a38222385b647d32afe08033e7053d699ebdc989d9bee383eb821a004f41d8478d1e2a797c116c63d10da542b0382617543f503d71e5f1f1825cc9fea96888fed596fb456a4313e4109fd4ccdbe5c65ea117db5647ae16b51277d60ba7e479b253457ecbf7bd53e8d8ca1b4af1efed9c003a3c88543bb3e1c2cccb028d7a74e2953100cf360c7fa2ee3bc2e7f5ee54a3000592605bbb2ed189c769ebdfded3b07d74a6be8211723900903f15f8fd9fcf94660fd52310b79a920be139717cb2bdf1cc2e6f0a8b39a71626b09baf13cdeb0815c7c3068f5c158956f14a6e7786e679aeb7b3f55fe5c12c8b305bfc33edfb544ab9e3e5e010352f858a3ce2dbaf2724fb606120766ccc1c8a8021efa84a846b78b21b9f32f24d7389ac6983efab58df3e2998eb6d87301bb016ad217a01d89fdf47833a6d20a48df39a4b9a74db6f38f4ecbfee5afa8df475c517fbc7b094b53242ad6d831a9e1f5144e5d8701b964d10eb5e5e30fbc02e8b7aac2376aef80ef12c2a0692a5593e4f9a0a38412e66882c0b68a6e51abbbd674fd0aa573d2c015d7bf72ea8a0e2da9d943926a2b9c23b0791538f846b1088a493b7cf5dc27f4d329128eb32ea0c0c5c7f6843472b0c83397f2f55a21b9530c0a9766c393b3ab0595b23d33dcb929478103e19aa5d48fc892e125ba9409635478ef1f82d33c946e4ec92c5e8a2f8bc7f24db2f223fa6773d79c5f231d12de03f1400761f3422206377adaa8f2fc6fe04e5d1b80e2a9e81f938ba4f21224d9b2282c6a29b54fdaf639bb44c407f84b9e241a923d3a80355c6cf0866706a1991f21185e93b23161f76938cde705fd6d0e9193a5cdaaf5416d76a9d12ebb6c97fa0842beb16dab954169ac51c42b3e642498ccaedfbbd3b17386aa93b72f67767e3914b435e5982a6d9697d4d97d69d188666f939325513c2fca3e53b418db082af6a6f1fec005bda175dd801a53a7e875faf3a9b481015c5ccfe88e63e1bc3d728a7705831e32c47c0c2d36b0883de62fbc237f1e01cd06cb128913053dfb9ce5660062c6d4d5e4e8fe989ce8a7ac95d9f336ed0ccddb13eeca26fa43722a288fc951dd8cff1d40c87129cd6a9cb6438c279857c29dc25ee4fd28239e33745edaea095e586fa33b449bc3f49ab36aca38d6df03d2982cdab671691133202ab0fea3e3ddc11cefd4d0faab5e976a69a9f1b2ef4609863481280d7b4024b3c7c60510a09e3a65e1accc8f20acf04382a532c0a081b976fb9f77eaf8532a472cf9759f6ad45efd45c1b5ebba5165c17836a012f2cbf1ece9177939857d74825cb12dd9d62c1e9c70b4505aa116955e0ac02c69543e03a834e6bc575bb09fc656809020bd3b04a411e06f2f6041a8c985a137233dfb186986c58522868b885c34145b2cc6c8e2e0c1d2ee7a85639d036ba57629086a9e5308965e0e2790d3a9a036df15602cc924b2be3cf158da18f442efe0764d96404dc750e8cb6683ff13ffc24e239e6beb8638d7e4973a6bf0476cbbefeedba3f43cef6bce35c17e889426cf4327f661e71f3c8b298f9dc79b52abf2b34c66e601bb7453ac7d59de6bba486dab41ca51395bb83ab892e814431123a804623c3170e45e0130483422bf251d44dd6f2aca46f941e1d9332fcc6b2282cb2d8021a80eef22a23ea6722158176a8757c861868e335ed080a1f77c7371ef6b42b18f93c703ddee3b0a2bcfc201f5f4d87f28159bbf3d765058a91febde3a8b195ccf8cf6d865856719b32771103ff3ea4bd763e0b093e45c2cf76008e22dbc7acab059fe441cf1ad2cde498c781b869c2d2af73aa410aa0c2b9e41e47b822621c2bf24bdca810f7e158fcccbc531c56a677bc0a48302335d05f2171c3cfa2f7e7192ac6db89d03ea7dba3f99fbe45221e051a278da11d85a66c2aa16353a00b27a14f32fc2331b454079e149b58b2bbc1519e3e52f0c4cd4d63ab46b21fdc49543999cef0baaad37e0c67657b77ffe921db08491141fa29cf44ccee629ff562bac730d6263d40863424462ec95e3817f115df2b4feb403acda05198bc1b16c4a470e7b1cb2b476edfbe21c204b37f47be35fca09a8a0aa7d6ba71c1354a738b578f0d18c875eb56148abd35718c7a02a74312e8a3caa2b71117b28e8e946d006dd17d950c9c80d1dd1aa7be265a34b9650e6def66ef87d4c5e4363a7873837efe05b3e9f6f8acd0157ec2e084b0c2246df0dc3c8cfaaf02ede673886417668f89852942a2b489765d3818a735041554c453a859d3f8b7b8e7fe15742f5a15a7b2a4ae00581606fd681f7a643c66c09162296de27d270601cae2a82d59ca57b91f9ab6a31ac7fe5183b6a29d86af44be823af851327d39f44624cb6cdc4735fed6db1b4b1808fedd85e72c5630cf9328e120e5a1c9eef0", 0x1000}, {&(0x7f0000000000)="9dfc59888a6ddd5f76fbe3942607106b86", 0x11}, {&(0x7f0000000040)="f6cae049847c6c4fd7d19c610253d53e34c56a814c0ae67a9e0f2a18e664130a97497d04347dade7927e881151705e9d3f5205c1c300dbceee8c1f342d3405360aea", 0x42}, {&(0x7f0000000100)="61cafaa48af055e1dedd1c0e60d15f4bdd2c45d3377782e15659d7c10b717f5e6eddce5db15ba77c7fc42d6158f166bf4ac3e451209e205d84", 0x39}, {&(0x7f0000000140)="0b4d00c4344ce1fa4b45d438a7ca11ccc200c9f28c9ba2138a85cc96dcf5e8c3d77a6218594163b7c9b64c3ec21d5ec9ddbc54744a8a8e1fe859c6ae65817621fd31dca4fed43efcceb1a527656d29a62bd8ac00d3", 0x55}, {&(0x7f00000001c0)="e0cfea1d6b2a21695403f103a8ec358da549b08990a9d0dbbac93152e1c5fba344e01e2539540b434bbe7c9dc8eba761736bbbb1392d198b4a0379177437172255dd04c67ecad42855a072cb5e4be0a46d53f6064904086c5210aeda5abbee6dc7a2cf401acf97b53068e4ec13eb1b09bc2c70cce9501bfbae5b6e37058d126884481217e6925c63cc95ce00e66837eca9f2e84316a1cd63189b7e9827e4c924723c19ddee0c3e2f099b044e6214659b623751aeec18f964c2dccb", 0xbb}, {&(0x7f0000000280)="ccb2d865ed935f01ffca31d16db8597c2277d86ebc060e507967c2dd2e4b0e52ed33cd48792dc372df8336cd999000443a910ccfcd4e137ce705ab835b1e47b35db45a06c94c5c69837d6a7f8005d3cc92bba3dee45e4dc540c81cf9b2f15cbff333f6c4c415c5f66a623de43713d009cbfd6d27894c7f04abc563e5751fb88fe9f9e52a0d5938e871d80e84fbcb49f2700b6979a971a2c500d3ff31bbbde36649bd2a547f4c371897314e73f650a449abc7edd840cb99a25904928fdedfcfa711231927b37d092c46e5dbf7dfeba45464", 0xd1}, {&(0x7f0000000380)="4b66ec25c621cd4ee2d8e660064617c2d94d56213816e11ccffc450f7748ad838d893b8c4b9034cb5f04293102f2ba976485b42322e4eb49162c60ca7656a32d47cb707b0f5f9c911c4be59e505aee5a4f1260e51184d8423c9d29dcaf9f8f74c5f9f1f0d437759c8de354e5955b302c2c51da77d2f353ab478f6a28aea9fa2e3f71176d36457e34720da176df1c416f74c053358918437e110b32bf76bdea4203863224bf471e9159819e5f28b45634d6eecdf525a9f63f8a73f3f78cb7aa8a5173c7618f9db0ba85cfa54cad51da5397149cc42e54d7f03564aa19f4ee07dadd0ff608f3", 0xe5}], 0x8, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x41c1, 0x44000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0xa240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x5a1a54b33b) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r1, &(0x7f0000001640)="14e0220a7bfc12f75674795ccef5815c1cf307a71aac3580fe565c9502bac9cef492fb1bfd98d52c50f4d8629bc8373918add6d297f178a9ac9394b6fbf7ffaaba", &(0x7f00000016c0)=""/104, 0x4}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001740)='/proc/partitions\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001840)={&(0x7f0000001780), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x38, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="7724b2587db1"}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x38}}, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)) [ 492.587037] ? sock_wmalloc+0xf0/0xf0 [ 492.590852] ? save_trace+0x290/0x290 [ 492.594667] ? fib_rules_lookup+0x308/0x950 [ 492.599004] ? save_trace+0x290/0x290 [ 492.602974] ? find_held_lock+0x35/0x130 [ 492.607062] ? rt_add_uncached_list+0x139/0x190 [ 492.611750] ? find_held_lock+0x35/0x130 [ 492.615837] sock_alloc_send_skb+0x32/0x40 [ 492.620089] __ip_append_data.isra.0+0x1227/0x20f0 [ 492.625031] ? __local_bh_enable_ip+0x99/0x1a0 [ 492.629640] ? trace_hardirqs_on+0xd/0x10 [ 492.633931] ? ip_reply_glue_bits+0xb0/0xb0 [ 492.638278] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 492.644437] ? ipv4_mtu+0x25e/0x3a0 [ 492.648083] ? ip_reply_glue_bits+0xb0/0xb0 [ 492.652444] ip_make_skb+0x17a/0x1d0 [ 492.656172] ? ip_flush_pending_frames+0x30/0x30 [ 492.660940] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 492.666492] ? udp_sendmsg+0xfb7/0x1da0 [ 492.670482] ? xfrm_lookup_route+0x48/0x1b0 [ 492.674820] udp_sendmsg+0x16a6/0x1da0 [ 492.678724] ? __lock_acquire+0x5f7/0x4620 [ 492.683086] ? ip_reply_glue_bits+0xb0/0xb0 [ 492.687422] ? udp4_seq_show+0x520/0x520 [ 492.691639] ? save_trace+0x290/0x290 [ 492.695451] ? avc_has_perm+0x273/0x4b0 [ 492.699566] ? lock_downgrade+0x740/0x740 [ 492.703732] udpv6_sendmsg+0x1393/0x2610 [ 492.707948] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 492.713286] ? rw_copy_check_uvector+0x1f1/0x290 [ 492.718201] ? sock_has_perm+0x1ed/0x280 [ 492.722276] ? selinux_tun_dev_create+0xc0/0xc0 [ 492.726963] ? dup_iter+0x260/0x260 [ 492.730661] ? copy_msghdr_from_user+0x292/0x3f0 [ 492.735410] inet_sendmsg+0x122/0x500 [ 492.739201] ? inet_sendmsg+0x122/0x500 [ 492.743219] ? inet_recvmsg+0x500/0x500 [ 492.747221] sock_sendmsg+0xce/0x110 [ 492.750936] ___sys_sendmsg+0x349/0x840 [ 492.754916] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 492.759693] ? trace_hardirqs_on+0x10/0x10 [ 492.763925] ? save_trace+0x290/0x290 [ 492.767723] ? retint_kernel+0x2d/0x2d [ 492.771623] ? __might_fault+0x110/0x1d0 [ 492.775745] ? find_held_lock+0x35/0x130 [ 492.779810] ? __might_fault+0x110/0x1d0 [ 492.788231] __sys_sendmmsg+0x152/0x3a0 [ 492.792213] ? SyS_sendmsg+0x50/0x50 [ 492.795950] ? lock_downgrade+0x740/0x740 [ 492.800122] ? __mutex_unlock_slowpath+0x71/0x800 [ 492.804977] ? check_preemption_disabled+0x3c/0x250 [ 492.810011] ? wait_for_completion+0x420/0x420 [ 492.814611] ? __sb_end_write+0xc1/0x100 [ 492.819132] ? SyS_write+0x15e/0x230 [ 492.823216] SyS_sendmmsg+0x35/0x60 [ 492.826852] ? __sys_sendmmsg+0x3a0/0x3a0 [ 492.831018] do_syscall_64+0x1e8/0x640 [ 492.834914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.839897] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 492.845124] RIP: 0033:0x45b349 [ 492.848326] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 492.856054] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 492.863336] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 492.870621] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 492.879207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 06:11:59 executing program 1: geteuid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000061, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x4ffe0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000208012400000000000000000200000705000300c300000000050003003a000000060002408864000005000300880000000900010073797a310000000004000480221de414d42a4cd5b5917eb8d999f77f41d1c82f222450d62b7a6363bcddcb23c81b35788ba32f88cebc704f77250e700e66b08704162003fc4ffb"], 0x1}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) fstatfs(r4, &(0x7f00000002c0)=""/77) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x2f, 0x1be) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x40000000000002f, 0x0) [ 492.886493] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000027 06:11:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockname(r2, &(0x7f00000000c0)=@ethernet={0x0, @remote}, &(0x7f0000000240)=0x80) 06:11:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:11:59 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:11:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 06:12:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 06:12:01 executing program 3 (fault-call:12 fault-nth:40): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:01 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:01 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) tkill(r0, 0x3c) 06:12:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, 0x0) dup2(r0, 0xffffffffffffffff) pipe2(&(0x7f0000000000), 0x4000) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) syz_genetlink_get_family_id$team(0x0) r1 = socket(0x10, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040), 0xc, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'}) r2 = syz_open_procfs(0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0102000800050001000000"], 0x3c}}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x0) r7 = socket(0x0, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) socket(0x0, 0x803, 0x0) 06:12:02 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x99f9ea76e6d8616e, 0x0, 0x0}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492bd3aa3d41fd", 0x3e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) [ 495.548709] FAULT_INJECTION: forcing a failure. [ 495.548709] name failslab, interval 1, probability 0, space 0, times 0 [ 495.560074] CPU: 0 PID: 20496 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 495.567999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.577374] Call Trace: [ 495.579989] dump_stack+0x142/0x197 [ 495.583651] should_fail.cold+0x10f/0x159 [ 495.587831] should_failslab+0xdb/0x130 [ 495.591830] kmem_cache_alloc_node_trace+0x280/0x770 06:12:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 495.596948] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 495.602500] __kmalloc_node_track_caller+0x3d/0x80 [ 495.607453] __kmalloc_reserve.isra.0+0x40/0xe0 [ 495.612276] __alloc_skb+0xcf/0x500 [ 495.615922] ? skb_trim+0x180/0x180 [ 495.619667] ? save_stack+0xa9/0xd0 [ 495.623309] alloc_skb_with_frags+0x86/0x4b0 [ 495.627788] ? __lock_acquire+0x5f7/0x4620 [ 495.632067] ? inet_sendmsg+0x122/0x500 [ 495.636161] ? sock_sendmsg+0xce/0x110 [ 495.640066] sock_alloc_send_pskb+0x5db/0x740 [ 495.644582] ? trace_hardirqs_on+0x10/0x10 [ 495.648836] ? sock_wmalloc+0xf0/0xf0 [ 495.652649] ? save_trace+0x290/0x290 [ 495.656466] ? fib_rules_lookup+0x308/0x950 [ 495.660798] ? save_trace+0x290/0x290 [ 495.664637] ? find_held_lock+0x35/0x130 [ 495.668825] ? rt_add_uncached_list+0x139/0x190 [ 495.673608] ? find_held_lock+0x35/0x130 [ 495.677691] sock_alloc_send_skb+0x32/0x40 [ 495.682051] __ip_append_data.isra.0+0x1227/0x20f0 [ 495.686992] ? __local_bh_enable_ip+0x99/0x1a0 [ 495.691588] ? trace_hardirqs_on+0xd/0x10 06:12:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 495.695747] ? ip_reply_glue_bits+0xb0/0xb0 [ 495.700089] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 495.705838] ? ipv4_mtu+0x25e/0x3a0 [ 495.709491] ? ip_reply_glue_bits+0xb0/0xb0 [ 495.713827] ip_make_skb+0x17a/0x1d0 [ 495.717556] ? ip_flush_pending_frames+0x30/0x30 [ 495.722432] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 495.728089] ? udp_sendmsg+0xfb7/0x1da0 [ 495.732269] ? xfrm_lookup_route+0x48/0x1b0 [ 495.736601] udp_sendmsg+0x16a6/0x1da0 [ 495.740505] ? __lock_acquire+0x5f7/0x4620 [ 495.744775] ? ip_reply_glue_bits+0xb0/0xb0 [ 495.749110] ? udp4_seq_show+0x520/0x520 [ 495.753188] ? save_trace+0x290/0x290 [ 495.757011] ? avc_has_perm+0x273/0x4b0 [ 495.761012] ? lock_downgrade+0x740/0x740 [ 495.765183] udpv6_sendmsg+0x1393/0x2610 [ 495.769271] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 495.774556] ? rw_copy_check_uvector+0x1f1/0x290 [ 495.779338] ? sock_has_perm+0x1ed/0x280 [ 495.783418] ? selinux_tun_dev_create+0xc0/0xc0 [ 495.788106] ? dup_iter+0x260/0x260 [ 495.791750] ? copy_msghdr_from_user+0x292/0x3f0 06:12:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 495.796512] inet_sendmsg+0x122/0x500 [ 495.800460] ? inet_sendmsg+0x122/0x500 [ 495.804453] ? inet_recvmsg+0x500/0x500 [ 495.808979] sock_sendmsg+0xce/0x110 [ 495.812722] ___sys_sendmsg+0x349/0x840 [ 495.816715] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 495.821492] ? trace_hardirqs_on+0x10/0x10 [ 495.828441] ? save_trace+0x290/0x290 [ 495.832276] ? retint_kernel+0x2d/0x2d [ 495.836173] ? __might_fault+0x110/0x1d0 [ 495.840284] ? find_held_lock+0x35/0x130 [ 495.844358] ? __might_fault+0x110/0x1d0 [ 495.849329] __sys_sendmmsg+0x152/0x3a0 [ 495.853344] ? SyS_sendmsg+0x50/0x50 [ 495.857074] ? lock_downgrade+0x740/0x740 [ 495.861241] ? __mutex_unlock_slowpath+0x71/0x800 [ 495.866094] ? check_preemption_disabled+0x3c/0x250 [ 495.871132] ? wait_for_completion+0x420/0x420 [ 495.875749] ? __sb_end_write+0xc1/0x100 [ 495.879830] ? SyS_write+0x15e/0x230 [ 495.883565] SyS_sendmmsg+0x35/0x60 [ 495.887233] ? __sys_sendmmsg+0x3a0/0x3a0 [ 495.891441] do_syscall_64+0x1e8/0x640 [ 495.893066] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 495.895338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 495.895362] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 495.895371] RIP: 0033:0x45b349 [ 495.895377] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 495.895388] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 495.895394] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 495.895400] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 06:12:02 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 495.895406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 495.895412] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000028 [ 496.047739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 06:12:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:05 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @local}, &(0x7f0000000300)=0x2) 06:12:05 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:05 executing program 3 (fault-call:12 fault-nth:41): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:05 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x2, 0x3, 0x350, 0x1e0, 0x0, 0x1e0, 0x0, 0x1e0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x3, 0x0, {[{{@uncond, 0x0, 0x178, 0x1e0, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x9}}, @common=@unspec=@conntrack2={{0xc0, 'conntrack\x00'}, {{@ipv6=@remote, [], @ipv6=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0) [ 498.593402] FAULT_INJECTION: forcing a failure. [ 498.593402] name failslab, interval 1, probability 0, space 0, times 0 [ 498.604999] CPU: 1 PID: 20542 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 498.613112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.622603] Call Trace: [ 498.625600] dump_stack+0x142/0x197 [ 498.629331] should_fail.cold+0x10f/0x159 [ 498.633599] should_failslab+0xdb/0x130 [ 498.637713] kmem_cache_alloc_node+0x287/0x780 [ 498.642322] ? __save_stack_trace+0x7b/0xd0 [ 498.646670] __alloc_skb+0x9c/0x500 [ 498.650318] ? skb_trim+0x180/0x180 [ 498.654072] ? save_stack+0xa9/0xd0 [ 498.657751] alloc_skb_with_frags+0x86/0x4b0 [ 498.662179] ? __lock_acquire+0x5f7/0x4620 [ 498.666467] ? inet_sendmsg+0x122/0x500 [ 498.670572] ? sock_sendmsg+0xce/0x110 [ 498.674494] sock_alloc_send_pskb+0x5db/0x740 [ 498.679095] ? trace_hardirqs_on+0x10/0x10 [ 498.683368] ? sock_wmalloc+0xf0/0xf0 [ 498.687189] ? save_trace+0x290/0x290 [ 498.691005] ? fib_rules_lookup+0x308/0x950 [ 498.695341] ? save_trace+0x290/0x290 [ 498.699151] ? find_held_lock+0x35/0x130 [ 498.703231] ? rt_add_uncached_list+0x139/0x190 [ 498.708010] ? find_held_lock+0x35/0x130 [ 498.712092] sock_alloc_send_skb+0x32/0x40 [ 498.716347] __ip_append_data.isra.0+0x1227/0x20f0 [ 498.721297] ? __local_bh_enable_ip+0x99/0x1a0 [ 498.725900] ? trace_hardirqs_on+0xd/0x10 [ 498.726692] xt_conntrack: cannot load conntrack support for proto=2 [ 498.730076] ? ip_reply_glue_bits+0xb0/0xb0 [ 498.730094] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 498.730106] ? ipv4_mtu+0x25e/0x3a0 [ 498.730119] ? ip_reply_glue_bits+0xb0/0xb0 [ 498.730129] ip_make_skb+0x17a/0x1d0 [ 498.730143] ? ip_flush_pending_frames+0x30/0x30 [ 498.730156] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 498.730165] ? udp_sendmsg+0xfb7/0x1da0 [ 498.730180] ? xfrm_lookup_route+0x48/0x1b0 [ 498.730195] udp_sendmsg+0x16a6/0x1da0 [ 498.781499] ? __lock_acquire+0x5f7/0x4620 [ 498.785749] ? ip_reply_glue_bits+0xb0/0xb0 [ 498.790084] ? udp4_seq_show+0x520/0x520 [ 498.794153] ? save_trace+0x290/0x290 [ 498.797959] ? avc_has_perm+0x273/0x4b0 [ 498.801959] ? lock_downgrade+0x740/0x740 [ 498.806132] udpv6_sendmsg+0x1393/0x2610 [ 498.810219] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 498.815509] ? rw_copy_check_uvector+0x1f1/0x290 [ 498.820282] ? sock_has_perm+0x1ed/0x280 [ 498.824358] ? selinux_tun_dev_create+0xc0/0xc0 [ 498.829047] ? dup_iter+0x260/0x260 [ 498.832695] ? copy_msghdr_from_user+0x292/0x3f0 [ 498.837465] inet_sendmsg+0x122/0x500 [ 498.842318] ? inet_sendmsg+0x122/0x500 [ 498.846307] ? inet_recvmsg+0x500/0x500 [ 498.850288] sock_sendmsg+0xce/0x110 [ 498.854012] ___sys_sendmsg+0x349/0x840 [ 498.858143] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 498.862933] ? trace_hardirqs_on+0x10/0x10 [ 498.867384] ? save_trace+0x290/0x290 [ 498.871629] ? retint_kernel+0x2d/0x2d [ 498.875614] ? __might_fault+0x110/0x1d0 [ 498.879683] ? find_held_lock+0x35/0x130 [ 498.883749] ? __might_fault+0x110/0x1d0 [ 498.887831] __sys_sendmmsg+0x152/0x3a0 [ 498.891815] ? SyS_sendmsg+0x50/0x50 [ 498.895567] ? lock_downgrade+0x740/0x740 [ 498.899742] ? __mutex_unlock_slowpath+0x71/0x800 [ 498.904610] ? check_preemption_disabled+0x3c/0x250 [ 498.909640] ? wait_for_completion+0x420/0x420 [ 498.914227] ? __sb_end_write+0xc1/0x100 [ 498.918297] ? SyS_write+0x15e/0x230 [ 498.922020] SyS_sendmmsg+0x35/0x60 [ 498.925645] ? __sys_sendmmsg+0x3a0/0x3a0 [ 498.929799] do_syscall_64+0x1e8/0x640 [ 498.933690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 498.938545] entry_SYSCALL_64_after_hwframe+0x42/0xb7 06:12:05 executing program 2: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x19) [ 498.943752] RIP: 0033:0x45b349 [ 498.946937] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.954645] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 498.961916] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 498.969188] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 498.976455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 498.983730] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000029 06:12:05 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x99f9ea76e6d8616e, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492bd3aa3d41fd", 0x3e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(&(0x7f0000000000), 0x4000) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) syz_genetlink_get_family_id$team(0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'}) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0102000800050001000000"], 0x3c}}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x100000) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 06:12:05 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 499.237918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 499.377430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 06:12:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:08 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:08 executing program 3 (fault-call:12 fault-nth:42): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:08 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x2, 0x3, 0x350, 0x1e0, 0x0, 0x1e0, 0x0, 0x1e0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x3, 0x0, {[{{@uncond, 0x0, 0x178, 0x1e0, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x9}}, @common=@unspec=@conntrack2={{0xc0, 'conntrack\x00'}, {{@ipv6=@remote, [], @ipv6=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0) 06:12:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d6", 0x60}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 501.662862] xt_conntrack: cannot load conntrack support for proto=2 [ 501.706342] FAULT_INJECTION: forcing a failure. [ 501.706342] name failslab, interval 1, probability 0, space 0, times 0 [ 501.717780] CPU: 1 PID: 20597 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 501.725703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.735075] Call Trace: [ 501.737711] dump_stack+0x142/0x197 [ 501.741453] should_fail.cold+0x10f/0x159 [ 501.745744] should_failslab+0xdb/0x130 [ 501.749734] kmem_cache_alloc_node+0x287/0x780 [ 501.754322] ? __save_stack_trace+0x7b/0xd0 [ 501.759187] __alloc_skb+0x9c/0x500 [ 501.762830] ? skb_trim+0x180/0x180 [ 501.766483] ? save_stack+0xa9/0xd0 [ 501.770125] alloc_skb_with_frags+0x86/0x4b0 [ 501.774543] ? __lock_acquire+0x5f7/0x4620 [ 501.778797] ? inet_sendmsg+0x122/0x500 [ 501.782779] ? sock_sendmsg+0xce/0x110 [ 501.786682] sock_alloc_send_pskb+0x5db/0x740 [ 501.791183] ? trace_hardirqs_on+0x10/0x10 [ 501.795425] ? sock_wmalloc+0xf0/0xf0 [ 501.799217] ? save_trace+0x290/0x290 [ 501.803975] ? save_trace+0x290/0x290 [ 501.807780] ? rt_add_uncached_list+0x139/0x190 [ 501.812465] ? find_held_lock+0x35/0x130 [ 501.816556] sock_alloc_send_skb+0x32/0x40 [ 501.820815] __ip_append_data.isra.0+0x1227/0x20f0 [ 501.825750] ? __local_bh_enable_ip+0x99/0x1a0 [ 501.830368] ? trace_hardirqs_on+0xd/0x10 [ 501.834527] ? ip_reply_glue_bits+0xb0/0xb0 [ 501.838853] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 501.844560] ? ipv4_mtu+0x25e/0x3a0 [ 501.848239] ? ip_reply_glue_bits+0xb0/0xb0 [ 501.852568] ip_make_skb+0x17a/0x1d0 [ 501.856296] ? ip_flush_pending_frames+0x30/0x30 [ 501.861070] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 501.866615] ? udp_sendmsg+0xfb7/0x1da0 [ 501.870588] ? xfrm_lookup_route+0x48/0x1b0 [ 501.874907] udp_sendmsg+0x16a6/0x1da0 [ 501.878794] ? __lock_acquire+0x5f7/0x4620 [ 501.883036] ? ip_reply_glue_bits+0xb0/0xb0 [ 501.887452] ? udp4_seq_show+0x520/0x520 [ 501.891522] ? retint_kernel+0x2d/0x2d [ 501.895416] ? save_trace+0x290/0x290 [ 501.899228] ? avc_has_perm+0x273/0x4b0 [ 501.903216] ? lock_downgrade+0x740/0x740 [ 501.907373] udpv6_sendmsg+0x1393/0x2610 [ 501.911442] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 501.916721] ? rw_copy_check_uvector+0x1f1/0x290 [ 501.921493] ? sock_has_perm+0x1ed/0x280 [ 501.925630] ? selinux_tun_dev_create+0xc0/0xc0 [ 501.930365] ? dup_iter+0x260/0x260 [ 501.934199] ? copy_msghdr_from_user+0x292/0x3f0 [ 501.938970] inet_sendmsg+0x122/0x500 [ 501.942787] ? inet_sendmsg+0x122/0x500 [ 501.946782] ? inet_recvmsg+0x500/0x500 [ 501.950764] sock_sendmsg+0xce/0x110 [ 501.954490] ___sys_sendmsg+0x349/0x840 [ 501.958476] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 501.963245] ? trace_hardirqs_on+0x10/0x10 [ 501.967488] ? save_trace+0x290/0x290 [ 501.971282] ? retint_kernel+0x2d/0x2d [ 501.975310] ? __might_fault+0x110/0x1d0 [ 501.979367] ? find_held_lock+0x35/0x130 [ 501.983558] ? __might_fault+0x110/0x1d0 [ 501.987645] __sys_sendmmsg+0x152/0x3a0 [ 501.991647] ? SyS_sendmsg+0x50/0x50 [ 501.995365] ? lock_downgrade+0x740/0x740 [ 501.999511] ? __mutex_unlock_slowpath+0x71/0x800 [ 502.005222] ? check_preemption_disabled+0x3c/0x250 [ 502.010360] ? wait_for_completion+0x420/0x420 [ 502.014963] ? __sb_end_write+0xc1/0x100 [ 502.019026] ? SyS_write+0x15e/0x230 [ 502.022752] SyS_sendmmsg+0x35/0x60 [ 502.026399] ? __sys_sendmmsg+0x3a0/0x3a0 [ 502.030546] do_syscall_64+0x1e8/0x640 [ 502.034438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.039541] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 502.044734] RIP: 0033:0x45b349 [ 502.047925] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 502.055632] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 502.062935] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 502.070651] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 502.077930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 502.085288] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000002a 06:12:08 executing program 1: 06:12:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:08 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:08 executing program 1: 06:12:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:11 executing program 1: 06:12:11 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:11 executing program 3 (fault-call:12 fault-nth:43): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:11 executing program 2: 06:12:11 executing program 1: [ 504.741421] FAULT_INJECTION: forcing a failure. [ 504.741421] name failslab, interval 1, probability 0, space 0, times 0 [ 504.752860] CPU: 0 PID: 20634 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 504.760762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.770481] Call Trace: [ 504.773102] dump_stack+0x142/0x197 [ 504.776754] should_fail.cold+0x10f/0x159 [ 504.780929] should_failslab+0xdb/0x130 [ 504.784919] kmem_cache_alloc+0x47/0x780 [ 504.788993] ? save_trace+0x290/0x290 [ 504.792805] ? find_held_lock+0x35/0x130 [ 504.796890] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 504.802443] dst_alloc+0xf3/0x1a0 [ 504.805916] rt_dst_alloc+0x73/0x440 [ 504.809643] ip_route_output_key_hash_rcu+0x731/0x2750 [ 504.815016] ? check_preemption_disabled+0x3c/0x250 [ 504.820044] ip_route_output_key_hash+0x1c0/0x2e0 [ 504.824907] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 504.830456] ? udp_sendmsg+0xfb7/0x1da0 [ 504.834450] ip_route_output_flow+0x27/0xa0 [ 504.838780] udp_sendmsg+0x14a1/0x1da0 [ 504.842678] ? __lock_acquire+0x5f7/0x4620 [ 504.846919] ? ip_reply_glue_bits+0xb0/0xb0 [ 504.851275] ? udp4_seq_show+0x520/0x520 [ 504.855352] ? save_trace+0x290/0x290 [ 504.859164] ? avc_has_perm+0x273/0x4b0 [ 504.863156] ? lock_downgrade+0x740/0x740 [ 504.867318] udpv6_sendmsg+0x1393/0x2610 [ 504.871406] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 504.876692] ? rw_copy_check_uvector+0x1f1/0x290 [ 504.881546] ? sock_has_perm+0x1ed/0x280 [ 504.885614] ? selinux_tun_dev_create+0xc0/0xc0 06:12:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:11 executing program 2: 06:12:11 executing program 1: 06:12:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 504.890289] ? dup_iter+0x260/0x260 [ 504.893939] ? copy_msghdr_from_user+0x292/0x3f0 [ 504.899410] inet_sendmsg+0x122/0x500 [ 504.903247] ? inet_sendmsg+0x122/0x500 [ 504.907234] ? inet_recvmsg+0x500/0x500 [ 504.911230] sock_sendmsg+0xce/0x110 [ 504.914954] ___sys_sendmsg+0x349/0x840 [ 504.918937] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 504.923715] ? trace_hardirqs_on+0x10/0x10 [ 504.927981] ? save_trace+0x290/0x290 [ 504.931788] ? retint_kernel+0x2d/0x2d [ 504.935737] ? __might_fault+0x110/0x1d0 [ 504.939810] ? find_held_lock+0x35/0x130 [ 504.943879] ? __might_fault+0x110/0x1d0 [ 504.947959] __sys_sendmmsg+0x152/0x3a0 [ 504.951932] ? SyS_sendmsg+0x50/0x50 [ 504.955638] ? lock_downgrade+0x740/0x740 [ 504.960019] ? __mutex_unlock_slowpath+0x71/0x800 [ 504.964865] ? check_preemption_disabled+0x3c/0x250 [ 504.969944] ? wait_for_completion+0x420/0x420 [ 504.974528] ? __sb_end_write+0xc1/0x100 [ 504.978601] ? SyS_write+0x15e/0x230 [ 504.982324] SyS_sendmmsg+0x35/0x60 [ 504.985941] ? __sys_sendmmsg+0x3a0/0x3a0 [ 504.990081] do_syscall_64+0x1e8/0x640 [ 504.993981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 504.998815] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 505.004006] RIP: 0033:0x45b349 [ 505.007187] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 505.014909] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 505.022271] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 505.029545] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 505.036806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 505.044066] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000002b [ 506.710782] NOHZ: local_softirq_pending 08 06:12:14 executing program 1: 06:12:14 executing program 2: 06:12:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 06:12:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:14 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x0, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:14 executing program 3 (fault-call:12 fault-nth:44): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:14 executing program 1: 06:12:14 executing program 2: [ 507.816761] FAULT_INJECTION: forcing a failure. [ 507.816761] name failslab, interval 1, probability 0, space 0, times 0 [ 507.828334] CPU: 0 PID: 20665 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 507.836231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.845599] Call Trace: [ 507.848211] dump_stack+0x142/0x197 [ 507.851861] should_fail.cold+0x10f/0x159 [ 507.856037] should_failslab+0xdb/0x130 [ 507.860027] kmem_cache_alloc+0x47/0x780 06:12:14 executing program 1: 06:12:14 executing program 2: 06:12:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) [ 507.864107] ? save_trace+0x290/0x290 [ 507.867915] ? find_held_lock+0x35/0x130 [ 507.871984] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 507.877534] dst_alloc+0xf3/0x1a0 [ 507.881052] rt_dst_alloc+0x73/0x440 [ 507.884778] ip_route_output_key_hash_rcu+0x731/0x2750 [ 507.890064] ? check_preemption_disabled+0x3c/0x250 [ 507.895151] ip_route_output_key_hash+0x1c0/0x2e0 [ 507.900015] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 507.906090] ? udp_sendmsg+0xfb7/0x1da0 [ 507.910099] ip_route_output_flow+0x27/0xa0 06:12:14 executing program 1: [ 507.914470] udp_sendmsg+0x14a1/0x1da0 [ 507.918374] ? __lock_acquire+0x5f7/0x4620 [ 507.922623] ? ip_reply_glue_bits+0xb0/0xb0 [ 507.926962] ? udp4_seq_show+0x520/0x520 [ 507.931040] ? save_trace+0x290/0x290 [ 507.934858] ? avc_has_perm+0x273/0x4b0 [ 507.938859] ? lock_downgrade+0x740/0x740 [ 507.943026] udpv6_sendmsg+0x1393/0x2610 [ 507.947108] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 507.952392] ? rw_copy_check_uvector+0x1f1/0x290 [ 507.957638] ? sock_has_perm+0x1ed/0x280 [ 507.961717] ? selinux_tun_dev_create+0xc0/0xc0 [ 507.966401] ? dup_iter+0x260/0x260 [ 507.970046] ? copy_msghdr_from_user+0x292/0x3f0 [ 507.974931] inet_sendmsg+0x122/0x500 [ 507.978744] ? inet_sendmsg+0x122/0x500 [ 507.982746] ? inet_recvmsg+0x500/0x500 [ 507.986734] sock_sendmsg+0xce/0x110 [ 507.990586] ___sys_sendmsg+0x349/0x840 [ 507.994585] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 507.999358] ? trace_hardirqs_on+0x10/0x10 [ 508.003608] ? save_trace+0x290/0x290 [ 508.007421] ? retint_kernel+0x2d/0x2d [ 508.011321] ? __might_fault+0x110/0x1d0 06:12:14 executing program 2: 06:12:14 executing program 1: [ 508.015389] ? find_held_lock+0x35/0x130 [ 508.019531] ? __might_fault+0x110/0x1d0 [ 508.023633] __sys_sendmmsg+0x152/0x3a0 [ 508.027632] ? SyS_sendmsg+0x50/0x50 [ 508.031367] ? lock_downgrade+0x740/0x740 [ 508.035529] ? __mutex_unlock_slowpath+0x71/0x800 [ 508.040380] ? check_preemption_disabled+0x3c/0x250 [ 508.045405] ? wait_for_completion+0x420/0x420 [ 508.051066] ? __sb_end_write+0xc1/0x100 [ 508.055145] ? SyS_write+0x15e/0x230 [ 508.058882] SyS_sendmmsg+0x35/0x60 [ 508.062552] ? __sys_sendmmsg+0x3a0/0x3a0 06:12:14 executing program 2: [ 508.066717] do_syscall_64+0x1e8/0x640 [ 508.070621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 508.075509] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 508.080704] RIP: 0033:0x45b349 [ 508.083898] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 508.091613] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 508.098903] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 508.106186] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 508.113469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 508.120775] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000002c 06:12:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:17 executing program 1: 06:12:17 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x0, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 06:12:17 executing program 2: 06:12:17 executing program 3 (fault-call:12 fault-nth:45): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:17 executing program 2: 06:12:17 executing program 1: 06:12:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 06:12:17 executing program 1: [ 510.866482] FAULT_INJECTION: forcing a failure. [ 510.866482] name failslab, interval 1, probability 0, space 0, times 0 [ 510.878040] CPU: 0 PID: 20702 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 510.886117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.895498] Call Trace: [ 510.898109] dump_stack+0x142/0x197 [ 510.901774] should_fail.cold+0x10f/0x159 [ 510.905950] should_failslab+0xdb/0x130 [ 510.910035] kmem_cache_alloc_node_trace+0x280/0x770 06:12:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 510.915422] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 510.921771] __kmalloc_node_track_caller+0x3d/0x80 [ 510.926726] __kmalloc_reserve.isra.0+0x40/0xe0 [ 510.931415] __alloc_skb+0xcf/0x500 [ 510.935163] ? skb_trim+0x180/0x180 [ 510.938804] ? __lock_acquire+0x5f7/0x4620 [ 510.943052] alloc_skb_with_frags+0x86/0x4b0 [ 510.947470] ? __lock_acquire+0x5f7/0x4620 [ 510.951976] sock_alloc_send_pskb+0x5db/0x740 [ 510.956491] ? trace_hardirqs_on+0x10/0x10 [ 510.960741] ? sock_wmalloc+0xf0/0xf0 06:12:17 executing program 1: [ 510.964688] ? save_trace+0x290/0x290 [ 510.968557] ? percpu_counter_add_batch+0xf3/0x160 [ 510.973503] ? rt_add_uncached_list+0x139/0x190 [ 510.978182] ? find_held_lock+0x35/0x130 [ 510.982257] sock_alloc_send_skb+0x32/0x40 [ 510.986508] __ip_append_data.isra.0+0x1227/0x20f0 [ 510.991560] ? __local_bh_enable_ip+0x99/0x1a0 [ 510.996156] ? trace_hardirqs_on+0xd/0x10 [ 511.000321] ? ip_reply_glue_bits+0xb0/0xb0 [ 511.004665] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 511.010385] ? ipv4_mtu+0x25e/0x3a0 [ 511.014027] ? ip_reply_glue_bits+0xb0/0xb0 [ 511.018358] ip_make_skb+0x17a/0x1d0 [ 511.022087] ? ip_flush_pending_frames+0x30/0x30 [ 511.027348] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 511.032893] ? udp_sendmsg+0xfb7/0x1da0 [ 511.036889] ? xfrm_lookup_route+0x48/0x1b0 [ 511.041235] udp_sendmsg+0x16a6/0x1da0 [ 511.045139] ? __lock_acquire+0x5f7/0x4620 [ 511.049649] ? ip_reply_glue_bits+0xb0/0xb0 [ 511.054423] ? udp4_seq_show+0x520/0x520 [ 511.058500] ? save_trace+0x290/0x290 [ 511.062315] ? avc_has_perm+0x273/0x4b0 [ 511.066317] ? lock_downgrade+0x740/0x740 [ 511.070480] udpv6_sendmsg+0x1393/0x2610 [ 511.074562] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 511.079980] ? rw_copy_check_uvector+0x1f1/0x290 [ 511.084752] ? sock_has_perm+0x1ed/0x280 [ 511.088953] ? selinux_tun_dev_create+0xc0/0xc0 [ 511.093758] ? dup_iter+0x260/0x260 [ 511.097412] ? copy_msghdr_from_user+0x292/0x3f0 [ 511.102183] inet_sendmsg+0x122/0x500 [ 511.106003] ? inet_sendmsg+0x122/0x500 [ 511.109992] ? inet_recvmsg+0x500/0x500 [ 511.113981] sock_sendmsg+0xce/0x110 [ 511.117712] ___sys_sendmsg+0x349/0x840 [ 511.121701] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 511.126479] ? trace_hardirqs_on+0x10/0x10 [ 511.130733] ? save_trace+0x290/0x290 [ 511.134855] ? retint_kernel+0x2d/0x2d [ 511.138756] ? __might_fault+0x110/0x1d0 [ 511.142821] ? find_held_lock+0x35/0x130 [ 511.146918] ? __might_fault+0x110/0x1d0 [ 511.151009] __sys_sendmmsg+0x152/0x3a0 [ 511.155005] ? SyS_sendmsg+0x50/0x50 [ 511.158732] ? lock_downgrade+0x740/0x740 [ 511.162922] ? __mutex_unlock_slowpath+0x71/0x800 [ 511.167877] ? check_preemption_disabled+0x3c/0x250 [ 511.172916] ? wait_for_completion+0x420/0x420 [ 511.177515] ? __sb_end_write+0xc1/0x100 [ 511.181595] ? SyS_write+0x15e/0x230 [ 511.185328] SyS_sendmmsg+0x35/0x60 [ 511.188997] ? __sys_sendmmsg+0x3a0/0x3a0 [ 511.194969] do_syscall_64+0x1e8/0x640 [ 511.198856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 511.203702] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 511.208947] RIP: 0033:0x45b349 [ 511.212219] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 511.219925] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 511.227257] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 511.234535] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 511.241919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 511.249209] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000002d 06:12:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:20 executing program 5: 06:12:20 executing program 1: 06:12:20 executing program 2: 06:12:20 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x0, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:20 executing program 3 (fault-call:12 fault-nth:46): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:20 executing program 5: 06:12:20 executing program 2: 06:12:20 executing program 1: 06:12:20 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 513.947590] FAULT_INJECTION: forcing a failure. [ 513.947590] name failslab, interval 1, probability 0, space 0, times 0 [ 513.959477] CPU: 0 PID: 20736 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 513.967382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.976890] Call Trace: [ 513.979502] dump_stack+0x142/0x197 [ 513.983158] should_fail.cold+0x10f/0x159 [ 513.987340] should_failslab+0xdb/0x130 [ 513.991337] kmem_cache_alloc_node_trace+0x280/0x770 06:12:20 executing program 5: 06:12:20 executing program 2: [ 513.996467] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 514.001950] __kmalloc_node_track_caller+0x3d/0x80 [ 514.007001] __kmalloc_reserve.isra.0+0x40/0xe0 [ 514.011695] __alloc_skb+0xcf/0x500 [ 514.015346] ? skb_trim+0x180/0x180 [ 514.018988] ? save_stack+0xa9/0xd0 [ 514.022641] alloc_skb_with_frags+0x86/0x4b0 [ 514.027066] ? __lock_acquire+0x5f7/0x4620 [ 514.031312] ? inet_sendmsg+0x122/0x500 [ 514.035300] ? sock_sendmsg+0xce/0x110 [ 514.039203] sock_alloc_send_pskb+0x5db/0x740 [ 514.043712] ? trace_hardirqs_on+0x10/0x10 [ 514.047962] ? sock_wmalloc+0xf0/0xf0 [ 514.051776] ? save_trace+0x290/0x290 [ 514.055594] ? fib_rules_lookup+0x308/0x950 [ 514.059925] ? save_trace+0x290/0x290 [ 514.063739] ? find_held_lock+0x35/0x130 [ 514.067817] ? rt_add_uncached_list+0x139/0x190 [ 514.072507] ? find_held_lock+0x35/0x130 [ 514.076586] sock_alloc_send_skb+0x32/0x40 [ 514.080836] __ip_append_data.isra.0+0x1227/0x20f0 [ 514.085804] ? __local_bh_enable_ip+0x99/0x1a0 [ 514.090404] ? trace_hardirqs_on+0xd/0x10 [ 514.094772] ? ip_reply_glue_bits+0xb0/0xb0 [ 514.099219] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 514.104940] ? ipv4_mtu+0x25e/0x3a0 [ 514.108712] ? ip_reply_glue_bits+0xb0/0xb0 [ 514.113064] ip_make_skb+0x17a/0x1d0 [ 514.116928] ? ip_flush_pending_frames+0x30/0x30 [ 514.121797] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 514.127343] ? udp_sendmsg+0xfb7/0x1da0 [ 514.131445] ? xfrm_lookup_route+0x48/0x1b0 [ 514.135795] udp_sendmsg+0x16a6/0x1da0 [ 514.139701] ? __lock_acquire+0x5f7/0x4620 [ 514.143953] ? ip_reply_glue_bits+0xb0/0xb0 [ 514.148293] ? udp4_seq_show+0x520/0x520 [ 514.152374] ? save_trace+0x290/0x290 [ 514.156192] ? avc_has_perm+0x273/0x4b0 [ 514.160209] ? lock_downgrade+0x740/0x740 [ 514.164383] udpv6_sendmsg+0x1393/0x2610 [ 514.168471] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 514.173757] ? rw_copy_check_uvector+0x1f1/0x290 [ 514.178536] ? sock_has_perm+0x1ed/0x280 [ 514.182605] ? selinux_tun_dev_create+0xc0/0xc0 [ 514.187285] ? dup_iter+0x260/0x260 [ 514.190931] ? copy_msghdr_from_user+0x292/0x3f0 [ 514.195705] inet_sendmsg+0x122/0x500 [ 514.199517] ? inet_sendmsg+0x122/0x500 [ 514.203640] ? inet_recvmsg+0x500/0x500 [ 514.207637] sock_sendmsg+0xce/0x110 [ 514.211369] ___sys_sendmsg+0x349/0x840 [ 514.215358] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 514.223090] ? trace_hardirqs_on+0x10/0x10 [ 514.227331] ? save_trace+0x290/0x290 [ 514.231137] ? retint_kernel+0x2d/0x2d [ 514.235037] ? __might_fault+0x110/0x1d0 [ 514.239355] ? find_held_lock+0x35/0x130 [ 514.243422] ? __might_fault+0x110/0x1d0 [ 514.247573] __sys_sendmmsg+0x152/0x3a0 [ 514.251560] ? SyS_sendmsg+0x50/0x50 [ 514.255518] ? lock_downgrade+0x740/0x740 [ 514.259668] ? __mutex_unlock_slowpath+0x71/0x800 [ 514.264506] ? check_preemption_disabled+0x3c/0x250 [ 514.269733] ? wait_for_completion+0x420/0x420 [ 514.274310] ? __sb_end_write+0xc1/0x100 [ 514.278386] ? SyS_write+0x15e/0x230 [ 514.282103] SyS_sendmmsg+0x35/0x60 [ 514.285732] ? __sys_sendmmsg+0x3a0/0x3a0 [ 514.290008] do_syscall_64+0x1e8/0x640 [ 514.293902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 514.298768] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 514.303957] RIP: 0033:0x45b349 [ 514.307137] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 514.314968] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 514.322230] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 514.329498] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 514.336852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 514.344238] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000002e 06:12:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:23 executing program 1: 06:12:23 executing program 2: 06:12:23 executing program 5: 06:12:23 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:23 executing program 3 (fault-call:12 fault-nth:47): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:23 executing program 1: 06:12:23 executing program 2: 06:12:23 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{0x16}, {0x6}]}) 06:12:23 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:23 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="02016300000079480000ff07000000ff1000a9000800000000000000002500ffffffa6000000e1000000887700720030b5829237c30000000000008000da55aa", 0x40, 0x1c0}]) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") [ 516.992779] FAULT_INJECTION: forcing a failure. [ 516.992779] name failslab, interval 1, probability 0, space 0, times 0 [ 517.004303] CPU: 0 PID: 20768 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 517.012740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.022106] Call Trace: [ 517.024720] dump_stack+0x142/0x197 [ 517.028369] should_fail.cold+0x10f/0x159 [ 517.032539] should_failslab+0xdb/0x130 [ 517.036533] kmem_cache_alloc_node+0x287/0x780 [ 517.041131] ? __save_stack_trace+0x7b/0xd0 [ 517.045484] __alloc_skb+0x9c/0x500 [ 517.049122] ? skb_trim+0x180/0x180 [ 517.052752] ? save_stack+0xa9/0xd0 [ 517.056387] alloc_skb_with_frags+0x86/0x4b0 [ 517.061069] ? __lock_acquire+0x5f7/0x4620 [ 517.065302] ? inet_sendmsg+0x122/0x500 [ 517.069268] ? sock_sendmsg+0xce/0x110 [ 517.073151] sock_alloc_send_pskb+0x5db/0x740 [ 517.077651] ? trace_hardirqs_on+0x10/0x10 [ 517.083013] ? sock_wmalloc+0xf0/0xf0 [ 517.086814] ? save_trace+0x290/0x290 [ 517.090612] ? fib_rules_lookup+0x308/0x950 [ 517.094931] ? save_trace+0x290/0x290 [ 517.098727] ? find_held_lock+0x35/0x130 [ 517.102788] ? rt_add_uncached_list+0x139/0x190 [ 517.107454] ? find_held_lock+0x35/0x130 [ 517.111513] sock_alloc_send_skb+0x32/0x40 [ 517.115750] __ip_append_data.isra.0+0x1227/0x20f0 [ 517.120669] ? __local_bh_enable_ip+0x99/0x1a0 [ 517.125348] ? trace_hardirqs_on+0xd/0x10 [ 517.129496] ? ip_reply_glue_bits+0xb0/0xb0 [ 517.133820] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 517.139557] ? ipv4_mtu+0x25e/0x3a0 [ 517.144138] ? ip_reply_glue_bits+0xb0/0xb0 [ 517.148461] ip_make_skb+0x17a/0x1d0 [ 517.152195] ? ip_flush_pending_frames+0x30/0x30 [ 517.156986] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 517.162531] ? udp_sendmsg+0xfb7/0x1da0 [ 517.166511] ? xfrm_lookup_route+0x48/0x1b0 [ 517.170853] udp_sendmsg+0x16a6/0x1da0 [ 517.174753] ? __lock_acquire+0x5f7/0x4620 [ 517.178985] ? ip_reply_glue_bits+0xb0/0xb0 [ 517.183358] ? udp4_seq_show+0x520/0x520 [ 517.187417] ? save_trace+0x290/0x290 [ 517.191931] ? avc_has_perm+0x273/0x4b0 [ 517.195935] ? lock_downgrade+0x740/0x740 [ 517.200176] udpv6_sendmsg+0x1393/0x2610 [ 517.204258] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 517.209576] ? rw_copy_check_uvector+0x1f1/0x290 [ 517.214342] ? sock_has_perm+0x1ed/0x280 [ 517.218393] ? selinux_tun_dev_create+0xc0/0xc0 [ 517.223062] ? dup_iter+0x260/0x260 [ 517.226696] ? copy_msghdr_from_user+0x292/0x3f0 [ 517.231451] inet_sendmsg+0x122/0x500 [ 517.235366] ? inet_sendmsg+0x122/0x500 [ 517.239343] ? inet_recvmsg+0x500/0x500 [ 517.243321] sock_sendmsg+0xce/0x110 [ 517.247062] ___sys_sendmsg+0x349/0x840 [ 517.251038] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 517.255798] ? trace_hardirqs_on+0x10/0x10 [ 517.260046] ? save_trace+0x290/0x290 [ 517.263870] ? retint_kernel+0x2d/0x2d [ 517.267762] ? __might_fault+0x110/0x1d0 [ 517.271827] ? find_held_lock+0x35/0x130 [ 517.275945] ? __might_fault+0x110/0x1d0 [ 517.280011] __sys_sendmmsg+0x152/0x3a0 [ 517.283996] ? SyS_sendmsg+0x50/0x50 [ 517.287704] ? lock_downgrade+0x740/0x740 [ 517.291860] ? __mutex_unlock_slowpath+0x71/0x800 [ 517.296791] ? check_preemption_disabled+0x3c/0x250 [ 517.301814] ? wait_for_completion+0x420/0x420 [ 517.306412] ? __sb_end_write+0xc1/0x100 [ 517.310482] ? SyS_write+0x15e/0x230 [ 517.314204] SyS_sendmmsg+0x35/0x60 [ 517.317835] ? __sys_sendmmsg+0x3a0/0x3a0 [ 517.321992] do_syscall_64+0x1e8/0x640 [ 517.325885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 517.330747] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 517.335936] RIP: 0033:0x45b349 [ 517.339112] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 517.346825] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 517.354094] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 517.361365] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 517.368730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 517.376011] R13: 00000000000008a7 R14: 00000000004ca021 R15: 000000000000002f 06:12:23 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 517.511534] loop1: p1 p2 p3 p4 [ 517.514863] loop1: partition table partially beyond EOD, truncated [ 517.540347] loop1: p1 start 18553 is beyond EOD, truncated [ 517.546471] loop1: p2 size 620756992 extends beyond EOD, truncated [ 517.560322] loop1: p3 start 225 is beyond EOD, truncated [ 517.566221] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 517.587908] audit: type=1326 audit(1579932744.092:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=20772 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45e18a code=0x0 [ 517.671487] loop1: p1 p2 p3 p4 [ 517.676097] loop1: partition table partially beyond EOD, truncated [ 517.683508] loop1: p1 start 18553 is beyond EOD, truncated [ 517.689183] loop1: p2 size 620756992 extends beyond EOD, truncated [ 517.698891] loop1: p3 start 225 is beyond EOD, truncated [ 517.705137] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 517.823256] audit: type=1326 audit(1579932744.332:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=20772 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45e18a code=0x0 06:12:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:26 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10444, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x800000000006) 06:12:26 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:26 executing program 3 (fault-call:12 fault-nth:48): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) 06:12:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') 06:12:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') [ 520.024341] FAULT_INJECTION: forcing a failure. [ 520.024341] name failslab, interval 1, probability 0, space 0, times 0 [ 520.035695] CPU: 1 PID: 20816 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 520.043594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.052967] Call Trace: [ 520.055579] dump_stack+0x142/0x197 [ 520.059229] should_fail.cold+0x10f/0x159 [ 520.063406] should_failslab+0xdb/0x130 [ 520.067410] kmem_cache_alloc_node+0x287/0x780 [ 520.072010] ? __save_stack_trace+0x7b/0xd0 [ 520.076355] __alloc_skb+0x9c/0x500 [ 520.079992] ? skb_trim+0x180/0x180 [ 520.083651] ? save_stack+0xa9/0xd0 [ 520.087292] alloc_skb_with_frags+0x86/0x4b0 [ 520.091710] ? __lock_acquire+0x5f7/0x4620 [ 520.095947] ? inet_sendmsg+0x122/0x500 [ 520.099946] ? sock_sendmsg+0xce/0x110 [ 520.103844] sock_alloc_send_pskb+0x5db/0x740 [ 520.108350] ? trace_hardirqs_on+0x10/0x10 [ 520.112593] ? sock_wmalloc+0xf0/0xf0 [ 520.116398] ? save_trace+0x290/0x290 [ 520.120207] ? fib_rules_lookup+0x308/0x950 [ 520.124534] ? save_trace+0x290/0x290 [ 520.128340] ? find_held_lock+0x35/0x130 [ 520.132435] ? rt_add_uncached_list+0x139/0x190 [ 520.137117] ? find_held_lock+0x35/0x130 [ 520.141182] sock_alloc_send_skb+0x32/0x40 [ 520.145415] __ip_append_data.isra.0+0x1227/0x20f0 [ 520.150339] ? __local_bh_enable_ip+0x99/0x1a0 [ 520.154918] ? trace_hardirqs_on+0xd/0x10 [ 520.159056] ? ip_reply_glue_bits+0xb0/0xb0 [ 520.163368] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 520.169063] ? ipv4_mtu+0x25e/0x3a0 [ 520.172823] ? ip_reply_glue_bits+0xb0/0xb0 [ 520.177145] ip_make_skb+0x17a/0x1d0 [ 520.180935] ? ip_flush_pending_frames+0x30/0x30 [ 520.185677] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 520.191283] ? udp_sendmsg+0xfb7/0x1da0 [ 520.195248] ? xfrm_lookup_route+0x48/0x1b0 [ 520.199564] udp_sendmsg+0x16a6/0x1da0 [ 520.203445] ? __lock_acquire+0x5f7/0x4620 [ 520.207670] ? ip_reply_glue_bits+0xb0/0xb0 [ 520.211977] ? udp4_seq_show+0x520/0x520 [ 520.216023] ? save_trace+0x290/0x290 [ 520.219809] ? avc_has_perm+0x273/0x4b0 [ 520.223774] ? lock_downgrade+0x740/0x740 [ 520.227909] udpv6_sendmsg+0x1393/0x2610 [ 520.231961] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 520.237228] ? rw_copy_check_uvector+0x1f1/0x290 [ 520.241969] ? sock_has_perm+0x1ed/0x280 [ 520.246013] ? selinux_tun_dev_create+0xc0/0xc0 [ 520.250670] ? dup_iter+0x260/0x260 [ 520.254287] ? copy_msghdr_from_user+0x292/0x3f0 [ 520.259029] inet_sendmsg+0x122/0x500 [ 520.262823] ? inet_sendmsg+0x122/0x500 [ 520.266778] ? inet_recvmsg+0x500/0x500 [ 520.270736] sock_sendmsg+0xce/0x110 [ 520.274434] ___sys_sendmsg+0x349/0x840 [ 520.278755] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 520.283525] ? trace_hardirqs_on+0x10/0x10 [ 520.287780] ? save_trace+0x290/0x290 [ 520.291584] ? retint_kernel+0x2d/0x2d [ 520.295460] ? __might_fault+0x110/0x1d0 [ 520.299507] ? find_held_lock+0x35/0x130 [ 520.303558] ? __might_fault+0x110/0x1d0 [ 520.307627] __sys_sendmmsg+0x152/0x3a0 [ 520.311596] ? SyS_sendmsg+0x50/0x50 [ 520.315315] ? lock_downgrade+0x740/0x740 [ 520.319455] ? __mutex_unlock_slowpath+0x71/0x800 [ 520.324285] ? check_preemption_disabled+0x3c/0x250 [ 520.329290] ? wait_for_completion+0x420/0x420 [ 520.333863] ? __sb_end_write+0xc1/0x100 [ 520.337912] ? SyS_write+0x15e/0x230 [ 520.341614] SyS_sendmmsg+0x35/0x60 [ 520.345224] ? __sys_sendmmsg+0x3a0/0x3a0 [ 520.349356] do_syscall_64+0x1e8/0x640 [ 520.353226] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 520.358069] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 520.363243] RIP: 0033:0x45b349 [ 520.366415] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 06:12:26 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, 0x0, 0x1c) 06:12:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') 06:12:26 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 520.374108] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 520.381374] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 520.388627] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 520.395880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 520.403138] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000030 06:12:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') 06:12:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='schedstat\x00') sendfile(r0, r1, 0x0, 0x1) 06:12:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a11052", 0x24}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:29 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') 06:12:29 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa283ff07b8008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3ce}}], 0x69f, 0x3a, 0x0) 06:12:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x440000, 0x0) 06:12:29 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:29 executing program 3 (fault-call:12 fault-nth:49): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:29 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') [ 523.002421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 523.059533] FAULT_INJECTION: forcing a failure. [ 523.059533] name failslab, interval 1, probability 0, space 0, times 0 [ 523.065978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 523.070947] CPU: 1 PID: 20866 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 523.087297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.096657] Call Trace: [ 523.099264] dump_stack+0x142/0x197 [ 523.102905] should_fail.cold+0x10f/0x159 06:12:29 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') 06:12:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x5605, 0x0) [ 523.107067] should_failslab+0xdb/0x130 [ 523.111076] kmem_cache_alloc+0x47/0x780 [ 523.115154] ? save_trace+0x290/0x290 [ 523.118963] ? find_held_lock+0x35/0x130 [ 523.123039] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 523.128605] dst_alloc+0xf3/0x1a0 [ 523.132074] rt_dst_alloc+0x73/0x440 [ 523.135800] ip_route_output_key_hash_rcu+0x731/0x2750 [ 523.141087] ? check_preemption_disabled+0x3c/0x250 [ 523.146124] ip_route_output_key_hash+0x1c0/0x2e0 [ 523.150984] ? ip_route_output_key_hash_rcu+0x2750/0x2750 06:12:29 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') 06:12:29 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') [ 523.156878] ? udp_sendmsg+0xfb7/0x1da0 [ 523.160910] ip_route_output_flow+0x27/0xa0 [ 523.165238] udp_sendmsg+0x14a1/0x1da0 [ 523.169139] ? __lock_acquire+0x5f7/0x4620 [ 523.173487] ? ip_reply_glue_bits+0xb0/0xb0 [ 523.177824] ? udp4_seq_show+0x520/0x520 [ 523.181891] ? save_trace+0x290/0x290 [ 523.185701] ? avc_has_perm+0x273/0x4b0 [ 523.189701] ? lock_downgrade+0x740/0x740 [ 523.193866] udpv6_sendmsg+0x1393/0x2610 [ 523.197948] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 523.203242] ? rw_copy_check_uvector+0x1f1/0x290 06:12:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x58, r1, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c}}]}, 0x58}}, 0x0) [ 523.208012] ? sock_has_perm+0x1ed/0x280 [ 523.212086] ? selinux_tun_dev_create+0xc0/0xc0 [ 523.216764] ? dup_iter+0x260/0x260 [ 523.220417] ? copy_msghdr_from_user+0x292/0x3f0 [ 523.225184] inet_sendmsg+0x122/0x500 [ 523.228993] ? inet_sendmsg+0x122/0x500 [ 523.232976] ? inet_recvmsg+0x500/0x500 [ 523.236979] sock_sendmsg+0xce/0x110 [ 523.240718] ___sys_sendmsg+0x349/0x840 [ 523.244705] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 523.249480] ? trace_hardirqs_on+0x10/0x10 [ 523.253834] ? save_trace+0x290/0x290 [ 523.257687] ? retint_kernel+0x2d/0x2d [ 523.261584] ? __might_fault+0x110/0x1d0 [ 523.265653] ? find_held_lock+0x35/0x130 [ 523.269756] ? __might_fault+0x110/0x1d0 [ 523.273836] __sys_sendmmsg+0x152/0x3a0 [ 523.277821] ? SyS_sendmsg+0x50/0x50 [ 523.281547] ? lock_downgrade+0x740/0x740 [ 523.285708] ? __mutex_unlock_slowpath+0x71/0x800 [ 523.290562] ? check_preemption_disabled+0x3c/0x250 [ 523.295599] ? wait_for_completion+0x420/0x420 [ 523.300190] ? __sb_end_write+0xc1/0x100 [ 523.304264] ? SyS_write+0x15e/0x230 [ 523.308123] SyS_sendmmsg+0x35/0x60 [ 523.311756] ? __sys_sendmmsg+0x3a0/0x3a0 [ 523.315907] do_syscall_64+0x1e8/0x640 [ 523.319789] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 523.324775] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 523.329953] RIP: 0033:0x45b349 [ 523.333137] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 523.340848] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 523.348109] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 523.355370] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 523.362629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 523.369991] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000031 06:12:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a11052", 0x24}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:32 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') 06:12:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x6, 0x20d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x11c, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000370f7f8", 0xfffffffffffffda9, 0x4}], 0x800000, 0x0) 06:12:32 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:32 executing program 3 (fault-call:12 fault-nth:50): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:32 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x6, 0x20d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x11c, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000370f7f8", 0xfffffffffffffda9, 0x4}], 0x800000, 0x0) 06:12:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 06:12:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') [ 526.112102] FAULT_INJECTION: forcing a failure. [ 526.112102] name failslab, interval 1, probability 0, space 0, times 0 [ 526.123943] CPU: 0 PID: 20908 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 526.131853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.141222] Call Trace: [ 526.143830] dump_stack+0x142/0x197 [ 526.147475] should_fail.cold+0x10f/0x159 [ 526.151646] should_failslab+0xdb/0x130 [ 526.155636] kmem_cache_alloc+0x47/0x780 [ 526.159703] ? save_trace+0x290/0x290 [ 526.163505] ? find_held_lock+0x35/0x130 [ 526.167572] ? ip_route_output_key_hash_rcu+0x1147/0x2750 [ 526.173118] dst_alloc+0xf3/0x1a0 [ 526.176571] rt_dst_alloc+0x73/0x440 [ 526.180283] ip_route_output_key_hash_rcu+0x731/0x2750 [ 526.185563] ? check_preemption_disabled+0x3c/0x250 [ 526.190594] ip_route_output_key_hash+0x1c0/0x2e0 [ 526.195444] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 526.200991] ? udp_sendmsg+0xfb7/0x1da0 [ 526.204981] ip_route_output_flow+0x27/0xa0 [ 526.209333] udp_sendmsg+0x14a1/0x1da0 [ 526.213229] ? __lock_acquire+0x5f7/0x4620 [ 526.217479] ? ip_reply_glue_bits+0xb0/0xb0 [ 526.221814] ? udp4_seq_show+0x520/0x520 [ 526.225882] ? save_trace+0x290/0x290 [ 526.229694] ? avc_has_perm+0x273/0x4b0 [ 526.233684] ? lock_downgrade+0x740/0x740 [ 526.237846] udpv6_sendmsg+0x1393/0x2610 [ 526.241926] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 526.247206] ? rw_copy_check_uvector+0x1f1/0x290 [ 526.251987] ? sock_has_perm+0x1ed/0x280 [ 526.256066] ? selinux_tun_dev_create+0xc0/0xc0 06:12:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') [ 526.260744] ? dup_iter+0x260/0x260 [ 526.264381] ? copy_msghdr_from_user+0x292/0x3f0 [ 526.269141] inet_sendmsg+0x122/0x500 [ 526.272946] ? inet_sendmsg+0x122/0x500 [ 526.276946] ? inet_recvmsg+0x500/0x500 [ 526.280975] sock_sendmsg+0xce/0x110 [ 526.284725] ___sys_sendmsg+0x349/0x840 [ 526.288715] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 526.293508] ? trace_hardirqs_on+0x10/0x10 [ 526.297789] ? save_trace+0x290/0x290 [ 526.301609] ? retint_kernel+0x2d/0x2d [ 526.305512] ? __might_fault+0x110/0x1d0 [ 526.309585] ? find_held_lock+0x35/0x130 [ 526.313661] ? __might_fault+0x110/0x1d0 [ 526.317756] __sys_sendmmsg+0x152/0x3a0 [ 526.321747] ? SyS_sendmsg+0x50/0x50 [ 526.325472] ? lock_downgrade+0x740/0x740 [ 526.329637] ? __mutex_unlock_slowpath+0x71/0x800 [ 526.334591] ? check_preemption_disabled+0x3c/0x250 [ 526.339623] ? wait_for_completion+0x420/0x420 [ 526.344216] ? __sb_end_write+0xc1/0x100 [ 526.348392] ? SyS_write+0x15e/0x230 [ 526.352123] SyS_sendmmsg+0x35/0x60 [ 526.355845] ? __sys_sendmmsg+0x3a0/0x3a0 06:12:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') [ 526.360009] do_syscall_64+0x1e8/0x640 [ 526.363901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 526.368819] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 526.374010] RIP: 0033:0x45b349 [ 526.377197] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 526.384920] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 526.392335] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 526.399620] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 06:12:32 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@utf8='utf8'}]}) [ 526.406904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 526.414191] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000032 06:12:33 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{0x1c}, {0x6, 0x0, 0x0, 0x50000}]}) [ 526.493976] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 526.519212] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 526.565715] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 526.585674] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 527.190976] NOHZ: local_softirq_pending 08 06:12:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a11052", 0x24}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0, 0x92bc7f5ed32c69c3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:12:35 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') 06:12:35 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) write$binfmt_script(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 06:12:35 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}}, 0x0) 06:12:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb903044865160b0011002f004c00000020140e000a0002009d0edc2976d153b4", 0x235}], 0x1}, 0x0) 06:12:35 executing program 3 (fault-call:12 fault-nth:51): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/71, 0x47}, {0x0}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/67, 0x43}], 0x4, &(0x7f0000002e80)=""/51, 0x33}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x800, 0x1) 06:12:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x4c, 0x0, 0x4) 06:12:35 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b36, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00$\x00\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') [ 529.158446] FAULT_INJECTION: forcing a failure. [ 529.158446] name failslab, interval 1, probability 0, space 0, times 0 [ 529.169946] CPU: 0 PID: 20956 Comm: syz-executor.3 Not tainted 4.14.167-syzkaller #0 [ 529.177845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.187214] Call Trace: [ 529.189077] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 529.189849] dump_stack+0x142/0x197 [ 529.189898] should_fail.cold+0x10f/0x159 [ 529.189919] should_failslab+0xdb/0x130 [ 529.189936] kmem_cache_alloc_node_trace+0x280/0x770 [ 529.189950] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 529.189970] __kmalloc_node_track_caller+0x3d/0x80 [ 529.209918] ------------[ cut here ]------------ [ 529.214023] __kmalloc_reserve.isra.0+0x40/0xe0 [ 529.219546] WARNING: CPU: 1 PID: 20959 at fs/sysfs/dir.c:30 sysfs_warn_dup.cold+0x17/0x31 [ 529.219556] Kernel panic - not syncing: panic_on_warn set ... [ 529.219556] [ 529.224498] __alloc_skb+0xcf/0x500 [ 529.253311] ? skb_trim+0x180/0x180 [ 529.256945] ? save_stack+0xa9/0xd0 [ 529.260575] alloc_skb_with_frags+0x86/0x4b0 [ 529.265000] ? __lock_acquire+0x5f7/0x4620 [ 529.269245] ? inet_sendmsg+0x122/0x500 [ 529.273219] ? sock_sendmsg+0xce/0x110 [ 529.277112] sock_alloc_send_pskb+0x5db/0x740 [ 529.281618] ? trace_hardirqs_on+0x10/0x10 [ 529.285854] ? sock_wmalloc+0xf0/0xf0 [ 529.289641] ? save_trace+0x290/0x290 [ 529.293427] ? fib_rules_lookup+0x308/0x950 [ 529.297753] ? save_trace+0x290/0x290 [ 529.301549] ? find_held_lock+0x35/0x130 [ 529.305625] ? rt_add_uncached_list+0x139/0x190 [ 529.310298] ? find_held_lock+0x35/0x130 [ 529.314363] sock_alloc_send_skb+0x32/0x40 [ 529.318604] __ip_append_data.isra.0+0x1227/0x20f0 [ 529.323532] ? __local_bh_enable_ip+0x99/0x1a0 [ 529.328106] ? trace_hardirqs_on+0xd/0x10 [ 529.332255] ? ip_reply_glue_bits+0xb0/0xb0 [ 529.336587] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 529.342312] ? ipv4_mtu+0x25e/0x3a0 [ 529.345950] ? ip_reply_glue_bits+0xb0/0xb0 [ 529.350271] ip_make_skb+0x17a/0x1d0 [ 529.353992] ? ip_flush_pending_frames+0x30/0x30 [ 529.358755] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 529.364292] ? udp_sendmsg+0xfb7/0x1da0 [ 529.368269] ? xfrm_lookup_route+0x48/0x1b0 [ 529.372595] udp_sendmsg+0x16a6/0x1da0 [ 529.376480] ? __lock_acquire+0x5f7/0x4620 [ 529.380724] ? ip_reply_glue_bits+0xb0/0xb0 [ 529.385041] ? udp4_seq_show+0x520/0x520 [ 529.389111] ? save_trace+0x290/0x290 [ 529.393099] ? avc_has_perm+0x273/0x4b0 [ 529.397083] ? lock_downgrade+0x740/0x740 [ 529.401227] udpv6_sendmsg+0x1393/0x2610 [ 529.405294] ? udp6_unicast_rcv_skb.isra.0+0x2c0/0x2c0 [ 529.410662] ? rw_copy_check_uvector+0x1f1/0x290 [ 529.415423] ? sock_has_perm+0x1ed/0x280 [ 529.419479] ? selinux_tun_dev_create+0xc0/0xc0 [ 529.424154] ? dup_iter+0x260/0x260 [ 529.427809] ? copy_msghdr_from_user+0x292/0x3f0 [ 529.432574] inet_sendmsg+0x122/0x500 [ 529.436386] ? inet_sendmsg+0x122/0x500 [ 529.440348] ? inet_recvmsg+0x500/0x500 [ 529.444395] sock_sendmsg+0xce/0x110 [ 529.448111] ___sys_sendmsg+0x349/0x840 [ 529.452091] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 529.456858] ? trace_hardirqs_on+0x10/0x10 [ 529.461102] ? save_trace+0x290/0x290 [ 529.464911] ? retint_kernel+0x2d/0x2d [ 529.468796] ? __might_fault+0x110/0x1d0 [ 529.472886] ? find_held_lock+0x35/0x130 [ 529.476952] ? __might_fault+0x110/0x1d0 [ 529.481032] __sys_sendmmsg+0x152/0x3a0 [ 529.485011] ? SyS_sendmsg+0x50/0x50 [ 529.488822] ? lock_downgrade+0x740/0x740 [ 529.492982] ? __mutex_unlock_slowpath+0x71/0x800 [ 529.497815] ? check_preemption_disabled+0x3c/0x250 [ 529.502843] ? wait_for_completion+0x420/0x420 [ 529.507421] ? __sb_end_write+0xc1/0x100 [ 529.511485] ? SyS_write+0x15e/0x230 [ 529.515193] SyS_sendmmsg+0x35/0x60 [ 529.518807] ? __sys_sendmmsg+0x3a0/0x3a0 [ 529.522954] do_syscall_64+0x1e8/0x640 [ 529.526855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 529.531834] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 529.537023] RIP: 0033:0x45b349 [ 529.540207] RSP: 002b:00007f7b95786c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 529.547916] RAX: ffffffffffffffda RBX: 00007f7b957876d4 RCX: 000000000045b349 [ 529.555184] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000007 [ 529.562459] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 529.569740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 529.577022] R13: 00000000000008a7 R14: 00000000004ca021 R15: 0000000000000033 [ 529.584308] CPU: 1 PID: 20959 Comm: syz-executor.2 Not tainted 4.14.167-syzkaller #0 [ 529.592206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.601569] Call Trace: [ 529.604176] dump_stack+0x142/0x197 [ 529.607823] panic+0x1f9/0x42d [ 529.611031] ? add_taint.cold+0x16/0x16 [ 529.615021] ? sysfs_warn_dup.cold+0x17/0x31 [ 529.619440] ? __warn.cold+0x14/0x2f [ 529.623168] ? sysfs_warn_dup.cold+0x17/0x31 [ 529.627584] __warn.cold+0x2f/0x2f [ 529.631144] ? ist_end_non_atomic+0x10/0x10 [ 529.635461] ? sysfs_warn_dup.cold+0x17/0x31 [ 529.641790] report_bug+0x216/0x254 [ 529.645864] do_error_trap+0x1bb/0x310 [ 529.649761] ? math_error+0x360/0x360 [ 529.653561] ? vprintk_emit+0x21c/0x600 [ 529.657534] ? vprintk_emit+0x171/0x600 [ 529.661505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 529.666404] do_invalid_op+0x1b/0x20 [ 529.670105] invalid_op+0x1b/0x40 [ 529.673643] RIP: 0010:sysfs_warn_dup.cold+0x17/0x31 [ 529.678647] RSP: 0018:ffff8881f02a7220 EFLAGS: 00010286 [ 529.684015] RAX: 000000000000003c RBX: ffffffffffffffef RCX: 0000000000000000 [ 529.691279] RDX: 000000000001238f RSI: ffffffff814b6655 RDI: ffffed103e054e3a [ 529.698548] RBP: ffff8881f02a7238 R08: 000000000000003c R09: ffff88804b144b30 [ 529.705892] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881d37bac80 [ 529.713164] R13: ffff8880a7d52700 R14: ffff8880a87b5d00 R15: 0000000000000001 [ 529.720444] ? vprintk_func+0x65/0x159 [ 529.724509] sysfs_do_create_link_sd.isra.0+0xff/0x120 [ 529.729784] sysfs_create_link+0x65/0xc0 [ 529.733887] device_add+0x735/0x1490 [ 529.737610] ? device_private_init+0x190/0x190 [ 529.742276] wiphy_register+0x133c/0x1d20 [ 529.746415] ? __lock_is_held+0xb6/0x140 [ 529.750477] ? wiphy_unregister+0xfb0/0xfb0 [ 529.754899] ? __kmalloc+0x376/0x7a0 [ 529.759440] ? trace_hardirqs_on_caller+0x400/0x590 [ 529.764454] ? save_trace+0x290/0x290 [ 529.768324] ? ieee80211_cs_list_valid+0x15d/0x210 [ 529.773345] ieee80211_register_hw+0x1152/0x2f30 [ 529.778095] ? __lock_is_held+0xb6/0x140 [ 529.782152] ? ieee80211_ifa_changed+0xb30/0xb30 [ 529.786956] ? hrtimer_init+0x71/0x2e0 [ 529.790895] ? mac80211_hwsim_set_tsf+0x220/0x220 [ 529.795745] mac80211_hwsim_new_radio+0x19a1/0x2980 [ 529.800771] ? hwsim_cloned_frame_received_nl+0xcf0/0xcf0 [ 529.806372] hwsim_new_radio_nl+0x3f2/0x62e [ 529.810692] ? mac80211_hwsim_new_radio+0x2980/0x2980 [ 529.815875] ? validate_nla+0x201/0x5f0 [ 529.819901] genl_family_rcv_msg+0x614/0xc30 [ 529.824308] ? genl_unregister_family+0x6a0/0x6a0 [ 529.829155] genl_rcv_msg+0xb4/0x150 [ 529.832880] netlink_rcv_skb+0x14f/0x3c0 [ 529.836945] ? genl_family_rcv_msg+0xc30/0xc30 [ 529.841530] ? netlink_ack+0x9a0/0x9a0 [ 529.845413] ? genl_rcv+0x1a/0x40 [ 529.848862] genl_rcv+0x29/0x40 [ 529.852136] netlink_unicast+0x44d/0x650 [ 529.856327] ? netlink_attachskb+0x6a0/0x6a0 [ 529.860812] ? security_netlink_send+0x81/0xb0 [ 529.865609] netlink_sendmsg+0x7c4/0xc60 [ 529.869679] ? netlink_unicast+0x650/0x650 [ 529.873952] ? security_socket_sendmsg+0x89/0xb0 [ 529.878700] ? netlink_unicast+0x650/0x650 [ 529.882944] sock_sendmsg+0xce/0x110 [ 529.886688] ___sys_sendmsg+0x70a/0x840 [ 529.890666] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 529.895435] ? __fget+0x210/0x370 [ 529.898893] ? find_held_lock+0x35/0x130 [ 529.903007] ? __fget+0x210/0x370 [ 529.906459] ? lock_downgrade+0x740/0x740 [ 529.910661] ? __fget+0x237/0x370 [ 529.914116] ? __fget_light+0x172/0x1f0 [ 529.918098] ? __fdget+0x1b/0x20 [ 529.921459] ? sockfd_lookup_light+0xb4/0x160 [ 529.925949] __sys_sendmsg+0xb9/0x140 [ 529.929750] ? SyS_shutdown+0x170/0x170 [ 529.933760] ? put_timespec64+0xb4/0x100 [ 529.937861] ? SyS_clock_gettime+0xf8/0x180 [ 529.942197] SyS_sendmsg+0x2d/0x50 [ 529.945741] ? __sys_sendmsg+0x140/0x140 [ 529.949815] do_syscall_64+0x1e8/0x640 [ 529.953705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 529.958548] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 529.963729] RIP: 0033:0x45b349 [ 529.966938] RSP: 002b:00007fc452f07c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.974638] RAX: ffffffffffffffda RBX: 00007fc452f086d4 RCX: 000000000045b349 [ 529.981896] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 529.989162] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 529.996532] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 530.003978] R13: 0000000000000997 R14: 00000000004cb0df R15: 000000000075bfd4 [ 530.013329] Kernel Offset: disabled [ 530.017143] Rebooting in 86400 seconds..