a1/0x910 [ 419.009546][T15375] ? fs_reclaim_release+0xf/0x30 [ 419.014497][T15375] ? __alloc_pages_slowpath+0x2900/0x2900 [ 419.020229][T15375] ? fs_reclaim_release+0xf/0x30 [ 419.025220][T15375] ? fault_create_debugfs_attr+0x180/0x180 [ 419.031045][T15375] cache_grow_begin+0x90/0xc60 [ 419.035823][T15375] ? __kmalloc_node_track_caller+0x3d/0x70 [ 419.041643][T15375] ? trace_hardirqs_off+0x62/0x240 [ 419.046774][T15375] kmem_cache_alloc_node_trace+0x689/0x750 [ 419.052602][T15375] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 419.058603][T15375] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 419.064429][T15375] __kmalloc_node_track_caller+0x3d/0x70 [ 419.070084][T15375] __kmalloc_reserve.isra.0+0x40/0xf0 [ 419.075472][T15375] __alloc_skb+0x10b/0x5e0 [ 419.079898][T15375] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 419.085463][T15375] ? raw6_getfrag+0x164/0x230 [ 419.090141][T15375] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 419.095864][T15375] __ip6_append_data.isra.0+0x2c64/0x3950 [ 419.101596][T15375] ? rawv6_mh_filter_unregister+0x20/0x20 [ 419.107327][T15375] ? ip6_setup_cork+0x18f0/0x18f0 [ 419.112359][T15375] ? ip6_fraglist_init+0x8a0/0x8a0 [ 419.117494][T15375] ip6_append_data+0x1ec/0x330 [ 419.122261][T15375] ? rawv6_mh_filter_unregister+0x20/0x20 [ 419.127981][T15375] ? rawv6_mh_filter_unregister+0x20/0x20 [ 419.133710][T15375] rawv6_sendmsg+0x133e/0x36d0 [ 419.138496][T15375] ? lock_downgrade+0x920/0x920 [ 419.143366][T15375] ? rawv6_bind+0x9a0/0x9a0 [ 419.147894][T15375] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 419.153626][T15375] ? rw_copy_check_uvector+0x2ce/0x390 [ 419.159117][T15375] ? ___might_sleep+0x163/0x2c0 [ 419.163980][T15375] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 419.170242][T15375] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 419.175805][T15375] inet_sendmsg+0x9e/0xe0 [ 419.180155][T15375] ? inet_sendmsg+0x9e/0xe0 [ 419.184669][T15375] ? inet_send_prepare+0x4e0/0x4e0 [ 419.189797][T15375] sock_sendmsg+0xd7/0x130 [ 419.194227][T15375] ___sys_sendmsg+0x3e2/0x920 [ 419.198924][T15375] ? copy_msghdr_from_user+0x440/0x440 [ 419.204395][T15375] ? lock_downgrade+0x920/0x920 [ 419.209253][T15375] ? rcu_read_lock_held+0x9c/0xb0 [ 419.214288][T15375] ? __kasan_check_read+0x11/0x20 [ 419.219327][T15375] ? __fget+0x37f/0x550 [ 419.223493][T15375] ? ksys_dup3+0x3e0/0x3e0 [ 419.227915][T15375] ? find_held_lock+0x35/0x130 [ 419.232693][T15375] ? get_pid_task+0xc9/0x180 [ 419.237303][T15375] ? __fget_light+0x1a9/0x230 [ 419.241990][T15375] ? __fdget+0x1b/0x20 [ 419.246059][T15375] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 419.252304][T15375] ? sockfd_lookup_light+0xcb/0x180 [ 419.257530][T15375] __sys_sendmmsg+0x1bf/0x4d0 [ 419.262225][T15375] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 419.267270][T15375] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 419.273513][T15375] ? fput_many+0x12c/0x1a0 [ 419.277932][T15375] ? fput+0x1b/0x20 [ 419.281747][T15375] ? ksys_write+0x1cf/0x290 [ 419.286282][T15375] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 419.291776][T15375] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 419.297248][T15375] ? do_syscall_64+0x26/0x790 [ 419.301967][T15375] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.308038][T15375] ? do_syscall_64+0x26/0x790 [ 419.312729][T15375] __x64_sys_sendmmsg+0x9d/0x100 [ 419.317682][T15375] do_syscall_64+0xfa/0x790 [ 419.322204][T15375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.328102][T15375] RIP: 0033:0x45a639 [ 419.332004][T15375] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 419.351621][T15375] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 419.360075][T15375] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 419.362623][T15385] ptrace attach of "/root/syz-executor.3"[15384] was attempted by "/root/syz-executor.3"[15385] 22:11:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x80086301, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x8070ae9f, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:01 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2, 0x14, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 22:11:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x80dc5521, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x8138ae83, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 419.368057][T15375] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 419.386556][T15375] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 419.394542][T15375] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 419.402540][T15375] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:02 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x3) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5eb857) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10043, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 22:11:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x81785501, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x500, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:02 executing program 3: creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000000c0)={{'y\xa1', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x80000005) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) recvmsg$can_j1939(r6, &(0x7f0000000340)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)=""/221, 0xdd}], 0x2}, 0x84bb5eed87337fcb) write$FUSE_LK(r3, &(0x7f0000000180)={0x28, 0x0, 0x5, {{0x10001, 0x1, 0x1, r4}}}, 0x28) 22:11:02 executing program 4 (fault-call:6 fault-nth:19): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x8818564c, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 419.748162][T15419] FAULT_INJECTION: forcing a failure. [ 419.748162][T15419] name failslab, interval 1, probability 0, space 0, times 0 [ 419.763106][T15412] fuse: Unknown parameter 'y' [ 419.792562][T15419] CPU: 0 PID: 15419 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 419.802520][T15419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.812596][T15419] Call Trace: [ 419.815912][T15419] dump_stack+0x197/0x210 [ 419.820396][T15419] should_fail.cold+0xa/0x15 [ 419.825014][T15419] ? fault_create_debugfs_attr+0x180/0x180 [ 419.830841][T15419] ? ___might_sleep+0x163/0x2c0 [ 419.835719][T15419] __should_failslab+0x121/0x190 [ 419.840679][T15419] should_failslab+0x9/0x14 [ 419.845206][T15419] kmem_cache_alloc_node+0x268/0x740 [ 419.850513][T15419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.856768][T15419] ? ip_generic_getfrag+0x144/0x260 [ 419.861993][T15419] __alloc_skb+0xd5/0x5e0 [ 419.866342][T15419] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 419.871902][T15419] ? raw6_getfrag+0x164/0x230 [ 419.876588][T15419] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 419.882326][T15419] __ip6_append_data.isra.0+0x2c64/0x3950 [ 419.888064][T15419] ? rawv6_mh_filter_unregister+0x20/0x20 [ 419.893806][T15419] ? ip6_setup_cork+0x18f0/0x18f0 [ 419.898844][T15419] ? ip6_fraglist_init+0x8a0/0x8a0 [ 419.903975][T15419] ip6_append_data+0x1ec/0x330 [ 419.908750][T15419] ? rawv6_mh_filter_unregister+0x20/0x20 [ 419.914485][T15419] ? rawv6_mh_filter_unregister+0x20/0x20 [ 419.920223][T15419] rawv6_sendmsg+0x133e/0x36d0 [ 419.925008][T15419] ? lock_downgrade+0x920/0x920 [ 419.929974][T15419] ? rawv6_bind+0x9a0/0x9a0 [ 419.934502][T15419] ? __sanitizer_cov_trace_cmp8+0x18/0x20 22:11:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000200)="05", 0x1}]) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@nl=@proc, &(0x7f0000000100)=0x80) fcntl$dupfd(r5, 0x406, r2) 22:11:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0044306, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0045516, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 419.940773][T15419] ? rw_copy_check_uvector+0x2ce/0x390 [ 419.946254][T15419] ? ___might_sleep+0x163/0x2c0 [ 419.951114][T15419] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 419.957386][T15419] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 419.962948][T15419] inet_sendmsg+0x9e/0xe0 [ 419.967299][T15419] ? inet_sendmsg+0x9e/0xe0 [ 419.971817][T15419] ? inet_send_prepare+0x4e0/0x4e0 [ 419.976943][T15419] sock_sendmsg+0xd7/0x130 [ 419.981390][T15419] ___sys_sendmsg+0x3e2/0x920 [ 419.986094][T15419] ? copy_msghdr_from_user+0x440/0x440 22:11:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc00455d0, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 419.991578][T15419] ? lock_downgrade+0x920/0x920 [ 419.996442][T15419] ? rcu_read_lock_held+0x9c/0xb0 [ 420.001620][T15419] ? __kasan_check_read+0x11/0x20 [ 420.006663][T15419] ? __fget+0x37f/0x550 [ 420.010834][T15419] ? ksys_dup3+0x3e0/0x3e0 [ 420.015263][T15419] ? find_held_lock+0x35/0x130 [ 420.020040][T15419] ? get_pid_task+0xc9/0x180 [ 420.024641][T15419] ? __fget_light+0x1a9/0x230 [ 420.029329][T15419] ? __fdget+0x1b/0x20 [ 420.033411][T15419] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 22:11:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0045878, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 420.039667][T15419] ? sockfd_lookup_light+0xcb/0x180 [ 420.044877][T15419] __sys_sendmmsg+0x1bf/0x4d0 [ 420.049570][T15419] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 420.054628][T15419] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.060882][T15419] ? fput_many+0x12c/0x1a0 [ 420.065310][T15419] ? fput+0x1b/0x20 [ 420.069127][T15419] ? ksys_write+0x1cf/0x290 [ 420.073643][T15419] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 420.079113][T15419] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 420.084590][T15419] ? do_syscall_64+0x26/0x790 22:11:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0045878, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 420.089274][T15419] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.095347][T15419] ? do_syscall_64+0x26/0x790 [ 420.100040][T15419] __x64_sys_sendmmsg+0x9d/0x100 [ 420.102361][T15412] fuse: Unknown parameter 'y' [ 420.104989][T15419] do_syscall_64+0xfa/0x790 [ 420.105012][T15419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.105024][T15419] RIP: 0033:0x45a639 [ 420.105047][T15419] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 420.143859][T15419] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.152287][T15419] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 420.160274][T15419] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 420.168254][T15419] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 420.176241][T15419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 420.184410][T15419] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:02 executing program 3: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6e7400000100ce156385b1080f5ca66310f90900563039e444cd7a746fca63c33cb775870020002bed000000000000c75e00800000000000000000ba78030400cc000000ac01000000003f49590000e66600fece8503000021f1ffffff9f34096a6a7f8bc9d6db697d2705f9642419515506ed0f365f4b31dbb8b6e6c6e3a731bed0a1ba19ac3bba971e80a914a341130b760049608baad68cac676f64ae96bf1d5ed36d21e00046ca090000002c3ecaf20080006d9849de3cbd"], 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0xb669ec207a88ae58, &(0x7f0000000340), &(0x7f00000003c0)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_bp={&(0x7f0000000200), 0x3}}, 0x0, 0x2, 0xffffffffffffffff, 0xe) close(r3) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-0\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x1000}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000240)) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x101}, 0xc) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000300)='/dev/rtc#\x00', 0x8, 0x6100) ioctl$RTC_PIE_OFF(r4, 0x7006) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff\x04\x00\x00\xbf\xef\xa9\xac\x03x\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) 22:11:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc004743e, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x600, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:02 executing program 4 (fault-call:6 fault-nth:20): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:02 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$BLKPG(r0, 0x125f, 0x0) 22:11:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet6_int(r2, 0x29, 0xb9, &(0x7f0000000080)=0xfe66, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc008240a, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 420.616767][T15451] FAULT_INJECTION: forcing a failure. [ 420.616767][T15451] name failslab, interval 1, probability 0, space 0, times 0 [ 420.678364][T15451] CPU: 0 PID: 15451 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 420.688430][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.698495][T15451] Call Trace: [ 420.701809][T15451] dump_stack+0x197/0x210 [ 420.706159][T15451] should_fail.cold+0xa/0x15 [ 420.710769][T15451] ? fault_create_debugfs_attr+0x180/0x180 [ 420.716595][T15451] ? ___might_sleep+0x163/0x2c0 [ 420.721460][T15451] __should_failslab+0x121/0x190 [ 420.721477][T15451] should_failslab+0x9/0x14 [ 420.721493][T15451] kmem_cache_alloc_node+0x268/0x740 [ 420.721510][T15451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.721524][T15451] ? ip_generic_getfrag+0x144/0x260 [ 420.721545][T15451] __alloc_skb+0xd5/0x5e0 [ 420.752103][T15451] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 420.757663][T15451] ? raw6_getfrag+0x164/0x230 [ 420.762357][T15451] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 420.762383][T15451] __ip6_append_data.isra.0+0x2c64/0x3950 [ 420.773816][T15451] ? rawv6_mh_filter_unregister+0x20/0x20 [ 420.773843][T15451] ? ip6_setup_cork+0x18f0/0x18f0 [ 420.773860][T15451] ? ip6_fraglist_init+0x8a0/0x8a0 [ 420.773877][T15451] ip6_append_data+0x1ec/0x330 [ 420.773895][T15451] ? rawv6_mh_filter_unregister+0x20/0x20 [ 420.784614][T15451] ? rawv6_mh_filter_unregister+0x20/0x20 [ 420.784631][T15451] rawv6_sendmsg+0x133e/0x36d0 [ 420.784652][T15451] ? lock_downgrade+0x920/0x920 [ 420.794520][T15451] ? rawv6_bind+0x9a0/0x9a0 [ 420.794546][T15451] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 420.805946][T15451] ? rw_copy_check_uvector+0x2ce/0x390 [ 420.805971][T15451] ? ___might_sleep+0x163/0x2c0 [ 420.805991][T15451] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 420.815583][T15451] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 420.815604][T15451] inet_sendmsg+0x9e/0xe0 [ 420.825830][T15451] ? inet_sendmsg+0x9e/0xe0 [ 420.825844][T15451] ? inet_send_prepare+0x4e0/0x4e0 [ 420.825863][T15451] sock_sendmsg+0xd7/0x130 [ 420.836159][T15451] ___sys_sendmsg+0x3e2/0x920 [ 420.836182][T15451] ? copy_msghdr_from_user+0x440/0x440 [ 420.847938][T15451] ? lock_downgrade+0x920/0x920 [ 420.847954][T15451] ? rcu_read_lock_held+0x9c/0xb0 [ 420.847973][T15451] ? __kasan_check_read+0x11/0x20 [ 420.857030][T15451] ? __fget+0x37f/0x550 [ 420.857053][T15451] ? ksys_dup3+0x3e0/0x3e0 [ 420.866548][T15451] ? find_held_lock+0x35/0x130 [ 420.866569][T15451] ? get_pid_task+0xc9/0x180 [ 420.900082][T15451] ? __fget_light+0x1a9/0x230 [ 420.909402][T15451] ? __fdget+0x1b/0x20 [ 420.909416][T15451] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 420.909431][T15451] ? sockfd_lookup_light+0xcb/0x180 22:11:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x700, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc008551a, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 420.909448][T15451] __sys_sendmmsg+0x1bf/0x4d0 [ 420.909469][T15451] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 420.939285][T15451] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.945541][T15451] ? fput_many+0x12c/0x1a0 [ 420.949975][T15451] ? fput+0x1b/0x20 [ 420.953801][T15451] ? ksys_write+0x1cf/0x290 [ 420.958316][T15451] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 420.963801][T15451] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 420.969270][T15451] ? do_syscall_64+0x26/0x790 [ 420.973959][T15451] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 22:11:03 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) io_setup(0xd, &(0x7f00000001c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}]) pwritev(r3, &(0x7f0000002380)=[{&(0x7f0000000040)="9c3ad357c6c94fcd39c8388bbef1df3288530bcda76406231a0016ac81d1cf6a693a9876a06a79aa4a536dc3ba052b9adbd5b1539ca7f191cc470b4e3a501ff2d0a19ad92ef7f6f1ffd4588cc749ce4876ae49ad379610091d911219aa6edfae1f593c954120", 0x66}, {&(0x7f00000000c0)="bddbf00a98ae860362af512ebdaf794954f4adb3904c5afa2502fc8edf04a187b48cbf2d9f28be3468a05873765065ae85c2d8e93107d209dbba2d57acc883a64c6cd03d401b1de7e206714ee0e7a1f1a7e1f040ecad93a3b07fade9ee049d97df8b5ea8190c3c81153e37eeabcb3ac9709a517f7d496f1c5e713f46a540c2b3865f8e706316529b5f0432eb54a99bd14816fda0c06764cb2bd226764a4055ffbb585e8b00e4eb12b6176b30c95590fe0b3052e8c5803855fb433422879d", 0xbe}, {&(0x7f0000000180)="4b1a97885fdc8a99fb6c74811ecd5f77dca96039b0640bbddb7a31c6c0f74d30a72d9c187aad39536bc0a77268afb3bbe6a0fe660aee19a155357ffd3543", 0x3e}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="48a3293eacce26f632e6f5f67d9662c8d9628270d4cfe05baf994d27b2e44b9431bda68101fb382a67970de0b68352ea86fe9809bc78c3438a2909f3500b594d9a7eec", 0x43}, {&(0x7f0000001240)="69a071d11b29c7665e", 0x9}, {&(0x7f0000001280)="d7c452c33179d3340345f066218abe4b365750393ce99e837433b1cd99194022519d254c7cde334ec4756770a360ab88fcf3cc21ca8ea55c086ebd092d65ee6f6f56f4c6c0e4538a747ae31e2713af", 0x4f}, {&(0x7f0000001300)="b2f45dd9c32c6489637695877c4503bb02762373583febd19b624201b8010b9748", 0x21}, {&(0x7f0000001340)="12f3b8cdfab58969906595f4874feeda9f9791ba02c00ae86fcf5d86379a9dfa6c85115bf6e4", 0x26}, {&(0x7f0000001380)="5252cdaebd14c41ae0f6c33e23e64d7b0819a38547f48cd2491cdbe96ae86cd45fafd3b85e5ca5c07285f304e61c9bcf842edde003d251e8b6eca00d1ffb03b9693504eac6b787c561d7af76eccd904deb9eaed2fd0700b8b00d06109ecec81b596f7f3f054b6c53102dfd76a8e8838390adddcf5a04a569e9488a6699b8c309962fa2bb648aa14aa5726a4a6caa069d92175226adb7726a77fda7ed1b695f3df3bd20704db6bd936211347b2e7353f6d8c7c6bdc180f367fb2bc7b4eb0b9abd6ef8a499885b12073f9430937e3247c4f145bef5bd409a9561dfd5f5b12063882f39b991a59433090c97863dd4bcd880bf351f50ad95cad9977e6e1d7057638131e845bfac40cff5d83e8ec2fd7c2bf053e07d53c8a5189ba2ec60201bee325e7607a6aca48f318e2e9e13db6b27dd2e1783aa1943d5e5fee08a750041a99120783b9058087e8587d0a4ccfa1acf05789dd3c843cd02c7dc085cb63b1d1ad896f2ec7f3727f6cea0369d13d904e2176c44981b4d66fc7d534907aa93d970c2e6050181acb0b6b33eb611fa6fb12eea80af17309df38ff239578528ee9c563004369cd4caeaf1419b736b4db2476903de29b6ff29daee288fae8cd89bda9987a2ce9d1a8aee3a53286a411c2ed676cae5f4c548ddd571f9967c7245fd2c987269158e6b0b729b74e85ad746459812cceb842306db5b33398f127b55906a39ab48ef1529e51092e8554e12628c4484068fef539a3a1d8603fc5a61a1045784f870f40ee3f3763cfe57877488c3631da7346a0e50bfffcba12447fc99c964d5b843c40b0af9071d757c909b8d360a2a18617efe732af502ea0a982c9bb1dbe57158ca6a828558921ca8d3cc9ad9226b96e1af9571c72cb3c918bd12867ec271b6761b175179a90bbcf0d83d0b90af743f4614e3e1847f029e692b571e196ab5e753b6b401f7557b54541107fc15bb2ca41ca3e46ed1d1eaaaf2a8797cec8010845d4da8f60574464139bdab0281835e1d1850ab6d748f94a43d70f4a7b5e7997f60149680ac6877bb9e08e7bdb1a73336058167b519c2e406ebe601c462aef74fbfa9a493539218c69ca147f78304bd30840fb6d3ea6604f9e48016c64e98df41758793ed22952f8d43908af420369f48eab6b304a03410d25f375c6939e3c6a6d66e249ff55332d5aebbce396d853d557778e35bb88ed1f70cfbffb8fd8d6eac4a49c3be1f6ac5f8c34827ef982e07d6c53847be4a2b702dbf9534edb5c855c90ce8554216565d42f7b6d1edf2a5a0a0cef9c531954f8f0a9d7a4e3d4d3a4195b882a43be90204896e0ef85139e8702d85277ef7cff91c575db0c7421a3093c39608221c95c8a08be08fbc5380ce977cc9f568f55c02f1998b40673fdcf145442219d1581e2b42d35b4f6a6458e4d1192f774534743b5ab1132431d55908d8376ca155319f0a0480795734b40bcbb2d57876a8ce6d41baa875287ae2d11d8b60fe212a41c225ba2c63259d449cc562c5353ad071c3938fc609b6d68821b8a9095d7822be773ba8f92c367ea1014cafb12af97400fa298cc2e729115ea3a63085448da2c96c4a7727461e5d8cfd8194fe9b9ee4fddca56ec25224ea2b471c2778cbd41b3b348629c8b5331df750d36f89341b391442e2f8818af44f9a52c75ee364d904bf38b3c40c9a390784487853a313b7f5cf30eced0e229ba9a92d1e5ac8f8efa9034f6116c52b294aa16585c675722c7aea484991b848f3163a15f2850e97e047e29f68bee172c84bf8ef50318c5905fb56d720c9acfeb26e84cf0ecb25cfe3783d8aef90afc21a20469086adf4da510f26038ab4f629f3d320341c500f22216cae42b483f465212bfb662f3ba4b0aa8f9fd056c9f89d58cc532b3644c2daccbb7cd93b4f2dcef073872f54eeae8ac52d3b805b4294e02efbe150f99b6f5bcf8dc89213f029632e20946261d7b495fb608c3070445ba85de5ab24dcc309862f8b06930b32b153dd190a62e665112e7ed9bb6f455889ff119d57da177945f759ba2e6874b7a63d582dbc208f1dd55b4835bd4e0aaad10799f10512b7259decd7761539f6e4b157498a42d735f5200140adf42fbf8fd55a5f160069ba4fd35ec86f9041a58b896f19e009e0b59253075d12dc312e725c5cc006983231e5ea0efe41e559dcaa38baf604a76d3f3c514d4eda4736a747ed5f895d3b76244944fdfd6da5eea4159585e54654efcc9819058b17c9b0344d0f34cd6008ecac745ebe8203aeca1229254707bc2537fd4f733a1f0030b834ec6352ffc5cc90088c5b50dff7cd4584dcbbeb14e207ac02ce14e6039efb0a4dbc6652dd11f2b2eec2d6d6bf3c23b2ea9ca78145a1827086a1f94356a04f9a22d13c6829653bc30cefc289503c50f7183f84c07eb39fa38ac9a43f6c59b558f5379ed04fb7d06350146163fd12a108c631f1f06425ef86a6b5c13cd1d552baa8b837d54175d25ffeadc0f41d7ce27a58884409775667d3d84383ee97ddb1723927157dbeb433d03e98f72d0c1d4a8ff63a0d9564454e1185d4f9a104cd72d246ebcdd3649f31c5c8083440f7512aa94d6c7317aa2ac2c03d99bc7178e8b5ef7f5c5e889c205c4674da30fa4c6db6326f15c0d77fc550581e38cd64b9d8dace93be28d7b58c8c3302231f57b25c8a2049e3af7e724656523efd67ac6005fa57fa7a05afbe351723fd12f13553b2e0b08d4121877ed87721ed927281665e0c797ce239004d98cdb8b5497cc5ffd3798aea50a02ddbb1958fb2ba7988b78cbdac39ad1fb3bb5f04983efa2474cd34ecc9491e9acdf0e41a323b05aa5dc48a42124c22d94ed6104acb4aaf3bf0c8d8685eed5a0c14ef4cd7b8c40fdc3ecdd9ec28d2e28756a7cf317e4c1e3bdda9c646262ae0656eaa7bd4c2ed14f43f63c96c553ac842a7876957053623c1d117190768b7f842165ea67766bbe80a75eeeb81e93823c6d22daa947c0f11f785e009295b7a09cc7869a50111d9c7e28e0c289fe5a5cb7281de18f8813e0847cca59f32b679cb791edb5df9cb6f53706d31fa933168364239dbaebd7a9b82fb641905f49e6d8f00eaf51224e3bc17177c4c1d6214fe9d75eee886c523964b50f58414281fa2a12a41bd73cfca0829839bc62f8bad774da2a0f2a7429d1c0d0b597f85d14188f5983495c30c076752e12812c83e3986af7178dee29608f411dc6999e73d2caff4a31ef05881d06d43f3929017738b2f2ac235792a0fe3a887992c7b1dd1046757a206094672bc47f05ea8365f1e3b5dc8b0b4257bdf25d74f77f15104d232862bb8a6cd76f0febbf75f92a669d4af21eecd848c300675147bdc27f1d165da727c2d3e29957d6dc093008f62927c638290868b2c9c763faad0f5eeab57b79620b261d6c62c297e5538aa4b99177178a1469fddbe0d23c2d4a49467bf5ca4e09ddb4eec649e6efa1458f3734dcff574fbcb189d0b525998bdec1163ea034fd12abe75f5b438dee45c64af0ace5fe3bbdeca78e0ce49a6d2ed278036f85050d59127cc15e649fa809b83b96b5f7addcbbc8da45769ade60919598834daf378cc7ba736ef515604849b679242c7a560b90fe9f4f1b6be10371ae909f36509a25ddcd0579de60ebac19e220f51b838c90ab1870a5e650edfb1b76c652bdc2229675af896a1993fad1b2b81ad3b7c93171e54607a8eb717423badf7e7286b0fc7c2092d02bdd063e9ca85f0b9aa00ddfa38bcfad2d40d5a13ca8bfc70a955a8b9a644e8ff3107015f64549e0f58b818acf15e625ae9401e3260a21609c164a07f2971e45dfd843674deaade1983534046dc0464ae7c97f81a7e0b0cddd47c762a6f7dc74382430c6432609f7a1e8c89e8f49d9d3f530eadba1deca33055aa00155d8757e9543dc81516255e95b2318c82b80cd360a7c3a4c3960296e8d37153184a5bbd789a6a8d90a22131d6d4513d077669f1961e7517799bd0eb5c1757f0c5035b392bb264868919609d85cf22f1b71aab7e704a4528acd6cfa97b8fd78a7a52004abba02171154704989477f41b5caf16cb7174832f48a12c07eb4623b9c0c612f87f6be639e8af7ea189783fde9bf7eccc637ce7e04791521f1d34c8d1e2628f5f00dc1b7f175bbbeaa4a70974e4166ff49d24ace62637b4cb90615c8a4a331d1609275f311dee5701a9af2b3950a1173e68e92e8aab885987060a55b81ab85931a2d7111565db110b9b4066f9daad000452701eb94b0e02558e2675432009a7ff740680372b0f5596eeca6c1c79b7a42635a861608ae9babac6540ed56c20935ac0c445329ed8eef60a35a366c71416745b83edc3254d8f3395c1d7a10f3235dfe64b5754fbd6ff80f62a763baca3ced319f9fb0b587740e0d47e1f73c64841779457933fa948598914da09b45636dfa5a1244d087b2fa08ccc6e6a6de8d8574dbac2ca88b4e409bf4ab3ec8373cfaf07e93529f77002998794ee82e23c77c844694a8aa2a2e6b46270d66d92dc93e99abe65ebfa30cec7201581ca33dc3e0f059536645a0151b861070df474a99f9398a5c13ea26ccae53f2914bef2fb59cf1afc394d18553178133107e84ff0d7b22c06af3224dff1d882b5f1e91f9f1e96ff3559717e1ea0ad12ad463e22357e6c02e8b525b397cd265e58536aec45ea9c0124b9ded53f34c8d43e199554b1718441d658bd60b0aae4ccca87accdd645db5af69e8f51f685ed0951214bc095add07532f4f81171e87930d5a02b8c9833fbb82857c111227ed5d693050aa22bd21ca11f57fb57d5abde425c852e22ffb1f4583f0bb1deab9c6077601eac72e452c9ee6b30da442384cf65d6a2a3b187ce08dab94ebbb210d0a01f56b7e039fce7f5388fae723778718f2ff14760e7e4dddea53be0d7004134665b970a9d27e2f20980791966adfc2e59a4a72ac6b53abc9812038cfa2652eb6c6fb769f259eae8263296e31a94a9a8509548f9d9cab18037b208212f49809adb7d2abf65cd360e133324e24097b5d26b3d740ad189565294762948e642a1efcfd00d838dbb8d5c2905eb52448a5e98bbcfdf93d2b00c0aa22719e76d233bc2b6800c3180877bd6492eca1558db5ff9db7b30c7656bc93dac447bb22c2321c77f68fa41bca4433c5a306189b74cfbdd389c2ba1db77c2bf2ddd66648a9a2fc3a2e97700ecf63615264fdb2ccfd72b3acff53838bfbba51931af39c284d51a2305c6904ddd4f5455a222d4b55a142a51b1749d762aa7823d5f899022ee1b7fd2faa40afbfcb61ec48280c989e8532fe2c133ca017785ff3a40c44344a21b9105eea45794ae3a84eac381482d836a29eb72005d394b2fd0b22d907c2186bc7a5e0ac16bb58cb65e9b1af518f41b601847bbf1fef4f2410c4613a96a893c42e96e34724a687e7a29e9ea3a3768eb530d872ef9e5cc7689155c77253e396b9abbd6acedd6c7e3c387be36a8d74b0c4c1413446c71f55120a511d67e883b93767b0c0b88c16fea9ae9353f95f9a065c4f14825d8bc652d018edf3e7eea3f5ff780c3b176b5c0f58ce84701033523c53a45148f6c7024cec23b12701cee6a7ec55d1844211783f85568758e63a432d3f6be9454da66bcd976834f0eca7996c67c92ff28447aa71856799fde7fe18c7ac3c75e14572a391dfb68121cc28b7b6793f09059225276745bd7c828abf41d89c6a0616bc546fa4535088dc57dd004e0943bc90bc9b73e734716c6ebbc3eef58fe2d0a8dfc09cc9c70933c4055d5eff45d957ea353fb9c1bd43415c78dc2d13639714312db9d11", 0x1000}], 0xa, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002440)='/dev/qat_adf_ctl\x00', 0x6e8200, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f0000002540)={0x8, 0x4, 0x87}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) getsockname$packet(r8, &(0x7f00000024c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002500)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000002480)={0x8100, 0x1, 0x1000, 0x1000, &(0x7f00007f8000/0x1000)=nil}) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="2dc9696473202d696f202b637075202b696f200072646d61202b6d656d6f7279200c70696473202d6d656d6f727920"], 0x2f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) [ 420.980040][T15451] ? do_syscall_64+0x26/0x790 [ 420.984738][T15451] __x64_sys_sendmmsg+0x9d/0x100 [ 420.989695][T15451] do_syscall_64+0xfa/0x790 [ 420.994218][T15451] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.000276][T15451] RIP: 0033:0x45a639 [ 421.004179][T15451] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:11:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x4000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc008551b, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 421.023823][T15451] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.032267][T15451] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 421.040687][T15451] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 421.048666][T15451] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 421.056652][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 421.064635][T15451] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:03 executing program 4 (fault-call:6 fault-nth:21): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0xff00, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x26c9, @loopback, 0x1}, 0xfffffffffffffe6d) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080), 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000100)={0x40, 0x2, 0x3, 0x0, 0x1}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KDENABIO(r4, 0x4b36) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\xf7\xff\xff\xff\x00\x02g\x00', 0x422002) 22:11:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc008551c, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x1000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc008ae05, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 421.429747][T15486] FAULT_INJECTION: forcing a failure. [ 421.429747][T15486] name failslab, interval 1, probability 0, space 0, times 0 [ 421.478320][ C1] net_ratelimit: 12 callbacks suppressed [ 421.478328][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 421.478355][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 421.484048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 421.497819][T15486] CPU: 0 PID: 15486 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 421.511112][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.521177][T15486] Call Trace: [ 421.524480][T15486] dump_stack+0x197/0x210 [ 421.528835][T15486] should_fail.cold+0xa/0x15 [ 421.533454][T15486] ? fault_create_debugfs_attr+0x180/0x180 [ 421.539276][T15486] ? ___might_sleep+0x163/0x2c0 [ 421.544148][T15486] __should_failslab+0x121/0x190 [ 421.549101][T15486] should_failslab+0x9/0x14 [ 421.553621][T15486] kmem_cache_alloc_node_trace+0x274/0x750 [ 421.559445][T15486] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 421.565439][T15486] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 421.571278][T15486] __kmalloc_node_track_caller+0x3d/0x70 22:11:03 executing program 3: socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x800, 0x804800) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) r2 = open(0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/124) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) socket(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r4, r3) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 22:11:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x2000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 421.576930][T15486] __kmalloc_reserve.isra.0+0x40/0xf0 [ 421.582316][T15486] __alloc_skb+0x10b/0x5e0 [ 421.586750][T15486] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 421.592319][T15486] ? raw6_getfrag+0x164/0x230 [ 421.596999][T15486] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 421.602720][T15486] __ip6_append_data.isra.0+0x2c64/0x3950 [ 421.602740][T15486] ? rawv6_mh_filter_unregister+0x20/0x20 [ 421.602769][T15486] ? ip6_setup_cork+0x18f0/0x18f0 [ 421.602784][T15486] ? ip6_fraglist_init+0x8a0/0x8a0 [ 421.602801][T15486] ip6_append_data+0x1ec/0x330 [ 421.629788][T15486] ? rawv6_mh_filter_unregister+0x20/0x20 [ 421.635518][T15486] ? rawv6_mh_filter_unregister+0x20/0x20 [ 421.641253][T15486] rawv6_sendmsg+0x133e/0x36d0 [ 421.646034][T15486] ? lock_downgrade+0x920/0x920 [ 421.650905][T15486] ? rawv6_bind+0x9a0/0x9a0 [ 421.655437][T15486] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 421.661283][T15486] ? rw_copy_check_uvector+0x2ce/0x390 [ 421.666772][T15486] ? ___might_sleep+0x163/0x2c0 [ 421.671640][T15486] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 421.677928][T15486] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 421.683499][T15486] inet_sendmsg+0x9e/0xe0 [ 421.687839][T15486] ? inet_sendmsg+0x9e/0xe0 [ 421.692354][T15486] ? inet_send_prepare+0x4e0/0x4e0 [ 421.697477][T15486] sock_sendmsg+0xd7/0x130 [ 421.701903][T15486] ___sys_sendmsg+0x3e2/0x920 [ 421.706679][T15486] ? copy_msghdr_from_user+0x440/0x440 [ 421.712150][T15486] ? lock_downgrade+0x920/0x920 [ 421.717018][T15486] ? rcu_read_lock_held+0x9c/0xb0 [ 421.722065][T15486] ? __kasan_check_read+0x11/0x20 [ 421.727104][T15486] ? __fget+0x37f/0x550 [ 421.731279][T15486] ? ksys_dup3+0x3e0/0x3e0 [ 421.735709][T15486] ? find_held_lock+0x35/0x130 [ 421.740483][T15486] ? get_pid_task+0xc9/0x180 [ 421.747439][T15486] ? __fget_light+0x1a9/0x230 [ 421.752131][T15486] ? __fdget+0x1b/0x20 [ 421.756225][T15486] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 421.762476][T15486] ? sockfd_lookup_light+0xcb/0x180 [ 421.767785][T15486] __sys_sendmmsg+0x1bf/0x4d0 [ 421.772483][T15486] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 421.777544][T15486] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 421.783800][T15486] ? fput_many+0x12c/0x1a0 [ 421.788235][T15486] ? fput+0x1b/0x20 [ 421.792064][T15486] ? ksys_write+0x1cf/0x290 [ 421.796583][T15486] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 421.802060][T15486] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 421.807532][T15486] ? do_syscall_64+0x26/0x790 [ 421.812230][T15486] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.818312][T15486] ? do_syscall_64+0x26/0x790 [ 421.823010][T15486] __x64_sys_sendmmsg+0x9d/0x100 [ 421.827962][T15486] do_syscall_64+0xfa/0x790 [ 421.832473][T15486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.838363][T15486] RIP: 0033:0x45a639 [ 421.842279][T15486] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.861874][T15486] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.870271][T15486] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 421.878236][T15486] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 421.886207][T15486] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 421.894164][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 421.902118][T15486] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 421.910483][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 421.916364][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 421.918623][ C1] protocol 88fb is buggy, dev hsr_slave_0 22:11:04 executing program 1: gettid() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc7e8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x73f}]}, 0x54}}, 0x21) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r1, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 22:11:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x3000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x2000) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x0, 0x8, 0x77fffc, 0x0, 0x15, 0x0, 0x1, [], 0x0, r3, 0x0, 0x4}, 0x3c) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0185879, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:04 executing program 4 (fault-call:6 fault-nth:22): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 422.095607][T15514] FAULT_INJECTION: forcing a failure. [ 422.095607][T15514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.108857][T15514] CPU: 1 PID: 15514 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 422.118756][T15514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.128818][T15514] Call Trace: [ 422.132127][T15514] dump_stack+0x197/0x210 [ 422.136480][T15514] should_fail.cold+0xa/0x15 [ 422.141091][T15514] ? fault_create_debugfs_attr+0x180/0x180 [ 422.147177][T15514] ? __kasan_check_read+0x11/0x20 [ 422.152212][T15514] ? __lock_acquire+0x16f2/0x4a00 [ 422.157251][T15514] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 422.163162][T15514] should_fail_alloc_page+0x50/0x60 [ 422.168372][T15514] __alloc_pages_nodemask+0x1a1/0x910 [ 422.173761][T15514] ? fs_reclaim_release+0xf/0x30 [ 422.178711][T15514] ? __alloc_pages_slowpath+0x2900/0x2900 [ 422.184438][T15514] ? fs_reclaim_release+0xf/0x30 [ 422.189392][T15514] ? fault_create_debugfs_attr+0x180/0x180 [ 422.195208][T15514] cache_grow_begin+0x90/0xc60 [ 422.199978][T15514] ? __kmalloc_node_track_caller+0x3d/0x70 [ 422.205787][T15514] ? trace_hardirqs_off+0x62/0x240 [ 422.210908][T15514] kmem_cache_alloc_node_trace+0x689/0x750 [ 422.216731][T15514] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 422.222713][T15514] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 422.228540][T15514] __kmalloc_node_track_caller+0x3d/0x70 [ 422.234177][T15514] __kmalloc_reserve.isra.0+0x40/0xf0 [ 422.234197][T15514] __alloc_skb+0x10b/0x5e0 [ 422.234212][T15514] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 422.234233][T15514] ? raw6_getfrag+0x164/0x230 [ 422.234249][T15514] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 422.260049][T15514] __ip6_append_data.isra.0+0x2c64/0x3950 [ 422.265783][T15514] ? rawv6_mh_filter_unregister+0x20/0x20 [ 422.271527][T15514] ? ip6_setup_cork+0x18f0/0x18f0 [ 422.276578][T15514] ? ip6_fraglist_init+0x8a0/0x8a0 [ 422.281703][T15514] ip6_append_data+0x1ec/0x330 [ 422.286478][T15514] ? rawv6_mh_filter_unregister+0x20/0x20 [ 422.292234][T15514] ? rawv6_mh_filter_unregister+0x20/0x20 [ 422.297952][T15514] rawv6_sendmsg+0x133e/0x36d0 [ 422.302733][T15514] ? lock_downgrade+0x920/0x920 [ 422.307601][T15514] ? rawv6_bind+0x9a0/0x9a0 [ 422.312129][T15514] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 422.317863][T15514] ? rw_copy_check_uvector+0x2ce/0x390 [ 422.323344][T15514] ? ___might_sleep+0x163/0x2c0 [ 422.328207][T15514] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.334469][T15514] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 422.340034][T15514] inet_sendmsg+0x9e/0xe0 22:11:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x4000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 422.344372][T15514] ? inet_sendmsg+0x9e/0xe0 [ 422.348883][T15514] ? inet_send_prepare+0x4e0/0x4e0 [ 422.354531][T15514] sock_sendmsg+0xd7/0x130 [ 422.358974][T15514] ___sys_sendmsg+0x3e2/0x920 [ 422.363667][T15514] ? copy_msghdr_from_user+0x440/0x440 [ 422.369145][T15514] ? lock_downgrade+0x920/0x920 [ 422.374010][T15514] ? rcu_read_lock_held+0x9c/0xb0 [ 422.379051][T15514] ? __kasan_check_read+0x11/0x20 [ 422.384110][T15514] ? __fget+0x37f/0x550 [ 422.388365][T15514] ? ksys_dup3+0x3e0/0x3e0 22:11:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x5000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 422.392786][T15514] ? find_held_lock+0x35/0x130 [ 422.397554][T15514] ? get_pid_task+0xc9/0x180 [ 422.402152][T15514] ? __fget_light+0x1a9/0x230 [ 422.406836][T15514] ? __fdget+0x1b/0x20 [ 422.410912][T15514] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.417161][T15514] ? sockfd_lookup_light+0xcb/0x180 [ 422.422456][T15514] __sys_sendmmsg+0x1bf/0x4d0 [ 422.428017][T15514] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 422.433072][T15514] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.439317][T15514] ? fput_many+0x12c/0x1a0 22:11:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0189436, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 422.439330][T15514] ? fput+0x1b/0x20 [ 422.439347][T15514] ? ksys_write+0x1cf/0x290 [ 422.439366][T15514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 422.439380][T15514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 422.439394][T15514] ? do_syscall_64+0x26/0x790 [ 422.439411][T15514] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.439422][T15514] ? do_syscall_64+0x26/0x790 [ 422.439443][T15514] __x64_sys_sendmmsg+0x9d/0x100 [ 422.447638][T15514] do_syscall_64+0xfa/0x790 [ 422.447659][T15514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.447671][T15514] RIP: 0033:0x45a639 [ 422.447691][T15514] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.517214][T15514] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 422.525639][T15514] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 422.533626][T15514] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 422.541612][T15514] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 422.549599][T15514] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 422.557579][T15514] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 422.566064][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 422.571903][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x6000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 422.598315][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 422.604162][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x7000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0xc0802, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x442, 0x80000001}, 0x2, 0x0, 0x0, 0x0, 0x400000000000}, 0xffffffffffffffff, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='nobarrier,decompose,nodecompose,nls=iso8859-3']) 22:11:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc020660b, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40000, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180)={r5, 0x1000}, &(0x7f00000001c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f0000000080)={0xec8884fc0c5a5116, 0x1, @raw_data=[0x0, 0x3, 0x1, 0x4, 0x9, 0xffff, 0x80000000, 0x0, 0x1, 0x7, 0x6, 0x0, 0xecc2, 0x4, 0x20, 0xba]}) 22:11:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x8000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:05 executing program 4 (fault-call:6 fault-nth:23): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 422.880294][T15541] hfsplus: unable to find HFS+ superblock 22:11:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x40000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:05 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40400) ioctl$KDMKTONE(r1, 0x4b30, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"]}}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 423.017152][T15552] FAULT_INJECTION: forcing a failure. [ 423.017152][T15552] name failslab, interval 1, probability 0, space 0, times 0 [ 423.064098][T15552] CPU: 1 PID: 15552 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 423.074042][T15552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.084105][T15552] Call Trace: [ 423.087413][T15552] dump_stack+0x197/0x210 [ 423.091761][T15552] should_fail.cold+0xa/0x15 [ 423.096369][T15552] ? fault_create_debugfs_attr+0x180/0x180 [ 423.102191][T15552] ? __should_failslab+0x79/0x190 [ 423.107235][T15552] __should_failslab+0x121/0x190 [ 423.107262][T15552] should_failslab+0x9/0x14 [ 423.116695][T15552] kmem_cache_alloc_node+0x268/0x740 [ 423.121986][T15552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.128228][T15552] ? ip_generic_getfrag+0x144/0x260 [ 423.128249][T15552] __alloc_skb+0xd5/0x5e0 [ 423.128265][T15552] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 423.128282][T15552] ? raw6_getfrag+0x164/0x230 [ 423.128295][T15552] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 423.128316][T15552] __ip6_append_data.isra.0+0x2c64/0x3950 [ 423.128339][T15552] ? rawv6_mh_filter_unregister+0x20/0x20 [ 423.128364][T15552] ? ip6_setup_cork+0x18f0/0x18f0 [ 423.128379][T15552] ? ip6_fraglist_init+0x8a0/0x8a0 [ 423.128399][T15552] ip6_append_data+0x1ec/0x330 [ 423.128411][T15552] ? rawv6_mh_filter_unregister+0x20/0x20 [ 423.128431][T15552] ? rawv6_mh_filter_unregister+0x20/0x20 [ 423.143567][T15552] rawv6_sendmsg+0x133e/0x36d0 [ 423.143587][T15552] ? lock_downgrade+0x920/0x920 [ 423.143606][T15552] ? rawv6_bind+0x9a0/0x9a0 [ 423.153988][T15552] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 423.170392][T15552] ? rw_copy_check_uvector+0x2ce/0x390 [ 423.170417][T15552] ? ___might_sleep+0x163/0x2c0 [ 423.170434][T15552] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 423.170462][T15552] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 423.170483][T15552] inet_sendmsg+0x9e/0xe0 [ 423.170496][T15552] ? inet_sendmsg+0x9e/0xe0 [ 423.170508][T15552] ? inet_send_prepare+0x4e0/0x4e0 [ 423.170522][T15552] sock_sendmsg+0xd7/0x130 [ 423.170539][T15552] ___sys_sendmsg+0x3e2/0x920 [ 423.191810][T15552] ? copy_msghdr_from_user+0x440/0x440 [ 423.191831][T15552] ? lock_downgrade+0x920/0x920 [ 423.201421][T15552] ? rcu_read_lock_held+0x9c/0xb0 [ 423.201440][T15552] ? __kasan_check_read+0x11/0x20 [ 423.201456][T15552] ? __fget+0x37f/0x550 [ 423.201476][T15552] ? ksys_dup3+0x3e0/0x3e0 [ 423.201491][T15552] ? find_held_lock+0x35/0x130 [ 423.201506][T15552] ? get_pid_task+0xc9/0x180 [ 423.201524][T15552] ? __fget_light+0x1a9/0x230 [ 423.201540][T15552] ? __fdget+0x1b/0x20 [ 423.201554][T15552] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 22:11:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0xff000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc028660f, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=r2], @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYBLOB="7888981a7f3cacd36c6fb8e8cdf28f9ce016d1a8cbdad3b77910550229e0843f8f9ea0ffe3b1380d4173edbf6a377db9fa2659bcae299704f76483bf654f2b2a5ff416690d6d35294bb7b342a4049f749c3ae4c55a883c72e59e486dcf3dc160fc198f5a5e4ab3010fa5394e7ad10b6407e81f361b3e50a7229f983df4ff41c1beca769bb85294bcca8c9ba071d8c173baf3d49c1806339e8e26f610ad9800ec141732dbff9374ef6283108f47bb31d998a6a3cf6ce23cc3d58460d7c3d86ca75f69123c79db327e9078dde6dd6ddf9653aca77eaeb55a2497cf01b54a43efe9a820d3a3c841", @ANYBLOB="b7660e4bf778547cdd5a30e613ff16a6b03bf0cd3fcece35d1a2eb5938fe0fdf5520585157842cda4318c81d03af107e5fb9448a7e48067e38562855f152d01b5e5bce172cc8fa011cb468deef5d98175d09d5553ff6fc7ced3cc75e6eefa75fd6bbb187061602d34d5b80c27e3f2ffa151252aadf51e47eac68e09ffd86e6ac6dc4de30626d5f329b5b8ddf27dead1c6f1125824528fb1d0d6e14ff42a915bc39cf9aa964874df552710d884ab20357b957408d7bdf48ec6414da10f7131959035b8e02a2f76e13dbe49025872bf54df47e5aaa8e29bdf2fef425b364091eaeb038498131160103b68855ca0ec239ea40007c41c0"]], 0x3}}, 0x0) sendmmsg$alg(r0, &(0x7f0000003e40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="a50a838956f9ee24facc9e1bc5a18525022b7abb2b291bd6c8b4a44e083088d837c72fd00a8e56c6f0ce62b9", 0x2c}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1150, 0x801}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="4c9da567ebc0b3e6be59526cee549117086b06b1a25a5cd6274629eb4b443d9bd5cbc2b3b5bd854509e2ad29420d512e0de9657fa6e8beffee91e5990b3f721509642c02cf55ef6c647097fb1a90a22821f5f877566dd573fad828bc23cffdd8c5039ecf", 0x64}, {&(0x7f0000000700)="fef9357d460791c04b5e1f151d64a0895c14c360b523192a30be4e2467154a8d47983f35c746c5a8bf8bf76bb81efb0f290cd46ec0c34c0d711172bb381e1f469ed4f05eb46441c58f7629f0ad1f5c146cc8fb87594ed5d4d95ae084b333cc879d03de0448", 0x65}], 0x2, 0x0, 0x0, 0xc}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000058c0)="1dfcfca841db01f63b0dc039e400a5ffb274e03c00f5d3e69cc2e946dc0dbd4189de66d0282104071a97386bf3e875776ced60129a5bf655178d8f06f825cb82c0d2357213ae87064f4c4801a10c4299532fc3caf405514c39c14134bfe8f2de1f838a489dbe026a6f7b036a58a8f0f10153acf02e806a97dfe364545132fccdddebb0a5f13b9b785cc398", 0x8b}], 0x1, &(0x7f0000001cc0)=[@iv={0x50, 0x117, 0x2, 0x3c, "6b46876a52c7529e82e9230e0bb4e28cf04c8df44ed4b13da33cafc3d017425007118b11e9a6edb44343fef56ba9004df7327866cb377adb936f31f3"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x38, 0x117, 0x2, 0x1f, "ebc18e4b8cf96d856e7c2a3babaf72b7660e3195cb9e84416d6fcfd92e257b"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "a35b0885ffdec0039ff2d0f943c8f2aaeee079e48ada0c7469525dd8c6a6a2fa4f170bfc2df92b35a72c24db98de5e97d1f3b99b9287948dec4eb45317d0dbc73ffb1b0e71a1c502ad09cb9ce73087e5018822ff4b5dc3f615150141559b5ebd7df39d15ecfc22657e71877e29a4ec0b93688ea304b5522577f3ef213ecef62982bb27f4deac699268557a678216ea17e071078d6067767e97c72d70f2d3a874acd498bd4d49fac90653d13ca6c9b9ae4662d467d7bf36e22f06097fe050dbbe8d8f0736cd4951d3b8fe25969c85d5e53cfc6047f6f2a0489728f3d6ba03b3ae1a192d52fa60880150a8223fec9e0811cd6534fcff3fba893a88ac892039aca97161e780cca84f7068756b0e4f5ec965125e2f01134272e2f3f5d27afc74c30f90df1471ce6832ba81757f6b35cf86ff40b37cc15c49f8e0cfae325e9a9401aee3013e3f8f6cad7edbaf444ae6fb91caa701edb590165e4f926b793edecd9df49d8b70861dba324cce82add239e0b09ae83bb9c26cb95a70f1d9ebf16b55b549b0547fbb0436a3fb3794805f01ef0809c8e2b44249915779b167503aa69a9e0e40c17d7e328763642e555456ad9727ddd610973fc6a81b6acbc7610e2617b6986ed80136fc241d29d2e5b618de3386d3d43f5fe8afeec1cdaa576c1d2639a8b3fad05a3984f5738972e75e10fc3dd26638c23d7aa9e8ccff307c9e657990f10a5f1d907ee2f949d1c35908cb212eef46d939f3a5f30abb963b597a99fa7799232807726c0238d943ea47711330ef3258b086eeeab0285842ba8915ab6afc82a3282cac95bd45353cf672c81fb1dafa60c20d1aaca22f4c63e3f8d819a393533526b087ec945119fe416365bc06d1778cd5176ffa61292e9c9e2b5a7479dcda00b2f337e6bc97ef029c16b484d0c9ec873c6af0124399c39049ece8982fdcb64805e3f125e40e9405827d03386a2d809f9662c1c8dbf67d78793097aaf20c54a4d17425843ce80e99dc52458ab213234a01fd7b05ec4e49941dc207f5e7d55c098efc343d9519802a2324beee3310508825015dbaa0fa730a509f5851e3a5b17e3bd17f8bc4a4b1d25301b8452e333f376d3385673e19db78d8ccd9e91cfdec7dd6e06fc1ef45de739561f0161fcf5cd51f884e695ea281706cdd1e2c16e49e4d71ddd8e84a382aa8ebdcc80149720d4f095d29abd478cf6fc5a3fce8585e836bc1aa8ee655f19fb5d84f0728786cf9669355b19b2f06330df313dd6131cae0086be9883e6394e4af111d968f44ffdb1bb42eb59430b477beb1cf744e19d178d0897ba9807ef1179e3f8e37ce93c0a75e49f298823c435e2671fbbbe20508221d2a07e9de820e424cfa2703d08aa2a63de08b36913e9659ff73c844b1e0675cd39e80b9803b8f4a81299d2108e4efdf24eb433f7dcfed923291735f6489d11f9049a2809041035fa160a5f506e90b83878ed2104533e00f7d99b410df5de5ccae0f6e6a818c5b42ae5e8fe5b81da2d0c1bd35c91fafb11289ca017e1650c78357a67ac1d25ed12cf358caed1b69e84ad60faf5882d017385a24894242923a7d6d6d99db0ba41d4a92c9ce6e1d1748a45ca4b54f81f11088db0f52e8019f128f216d06c1b3d308491d5464260d516322918e59d43866bbd79f3827c8018cc6a3034860c372da65f16e3179ee262913323adda3274bafcb54fa9717a8da62e6f6cd0ed1de2dd355419f8ad6b7c2b47c94f7349a014a08b1aae177549b7dac65a258311872f2282d99f616274d147bcdef993e8f93fc19ff1f946e113550e49b37e408dd69248c64f214af95abca920a71b6f20a6b5b86bf7cd8d2f74fe8123eaf55fbb3574c2e417aebcfdf3fc2f2802fcdab8b7356cfd5f05f706584cc8d7aab5fbdf1735e382fdb36ad89f0b127a04fa858033461cdd1dc7d92b01cd1c01a6685a88e3a1d2782ea8b5cdccf7175d172eaa1f20119248096225fa2b78b1a03c67b3c13763fc7d0841d3cff6907d1fce8afa9bb6f20565479b5fb73903df1efb1946f67411f709064c27c012812739a16ac60710b97eaa9d5b7122d624785ac7ff3e46c8a7c3d4f802c499f4020475b4d8922c06c0d33066334b36738e88c9584ffe1bdd864dfed61bbfe0ee4df7c87805686e6ada3a7a0ec4bc58a7667e6f39d7814e70f11ed319e5e22a5e0c9118bfa81d6a15fa567ea8b63106a78b1d2b4289bbddce9ee6ac90b7700d5c8d98ab97c90e0324495e38741edb413911f2a4e54ce4e640caee51a571afd916d69bc6d9e97a2fd6f424bca626caa0dee7a834730994bd89376652c733d2288b706dc44a2f558b9d46efd36ff84406cbb2c56417f82580b738d75672ef4b2455ad52debc484b0063325f0da594f1ebb16b9cf54538e296b8ecef28348d180e88efa263cc6c044c7ea1136a8eb884cbf44bb4cf00883463c7cb0b5343c9e85814b7990290923a834ee7b8dc52a8f7f32a0df32d77dba8fe47440167c24b799da75894caf271358b6f53f20b68c99e3c70f71a6208bc8b74a588709990f1ec5b3b19f7a182d7b1b3c33bedd422c3576ca8042b007590852b5ce32fba98a1539c72d2c2d67ac5d36bf26f1a014aa83cc9b52743e2d12ada952246dc37d7d571401280cec1ae8925de16125ae04aec52c33e15204f352a7740b21fba73ddf110156d78084f4fd23a4b7341a36e20546347170ca448c999da8af0502b07722cf637f2faead850f2b0ecb62436266c69f593611e84fd94a827523646b55cb1007d80f6d3e591efdac915ecd5ba0ce00da829cba4f148cc16e4e7fe41294203448651b31ba8cbfdaa9754755a1314b579b403d0c667d57a446371e73b54c11e2678fe83a71dc1b862776ff04ca958f32202b2a186778fd44967b9ad566d08479099b0bd9830cbdccec3ac2e24331de50214c27fa364bfa0c12e7a6b9710e5d6e75d5b6ebc89efd917bc9bfc302395edd3e7c72b0bac2b2678e1a0f2306de01d0a992b17bcffcbf84999356f5cc0eafc842e28a680fff8a92fd7a6cf34f564c63d06b0cfcf3ddff742848d3b089e532a1ef7c7907aa34ad90baff8da59ee34259051bfc4bfb83c01c7acfed45e98af164d6e3f49f5afd01545d901a7a475db980c430c7a0cd55ee70ed7fe566b036b738bb15c689f0858ab8488524d43287140b236339a39793b6811a2723ede24994a474b5214887fb0c4133b5e9d4cb0960400ae19b12395141db554c6a44638fa6600122a6a209c630a9b09204cef64edd61b208b9243ea33fbe885d66ab0b0fbc0dc5c9dfc6267314401228b77397786d7dd5a297a18b60551eb446d522473639ededa875961e9f1bb820603dffda7e5d167718f1fbfd69e9c6bf440f4e44bc6b9bb370a12221ef88883be3ecdefe651dce8df6932ae3282d05ae39ad2bd0918282da9beb4facfb3608c7de1705ac327047dbb7a9a63512e10ac779267e45b38ec526a06e718a28956dc5ccf45b0867074978d70c018c74e594b13ff23f294c0b7fadf71219a5c1a795e5f8a1e00dee16c83a11ed460ee582ae5c00b93f0b158c5a4095d403e7232d542aca2d259d596b6308f4e4cff50d0b384fff172c3731d0ff9941f28361129cc35178b1d6992f9fad391190e4fc27c4dc3b0e5f5f6ec54fb8e44fc30839cb65ad0c074278402c430472e1fa9a53e54ebeb65a7e59a4e3d009be12affe1ee2059b55d3ba8a6e5819a07cd6e2e7733925422e206408956ab17d41a1315874fbae7f425a19761fc8367536bf49252edebc74c3fec52f0fddb53f1ab5f1ca76dd3440ed54f31e392d00f8579186b3edaa8cb2d187a1193e0a10aec44d686369e8796f24d69d2c5d46843858d71b3e6e4aad2e011cc2c069b82f4a2b03401b011606e20e1d32419675b0dceab9f305f7a436d0deb8a92ac63f8f0545b318977bbb763dade9a558234d6f91763de1cf87a840a724170f17af8fbd4247fd933fccf76268c8697a5f8af1b2942f60e1c0d94f83894336df610c50675ac2009b816a87e00d615fe392e782d0721b1ef25a9cf04d7fd52ff424c1d4d0b7ba9429829560278273a02e49620523daea5924e95060bd5ae7c0171e1914b91bc32279ebaea3e2d6d433ee5b5672cb6386fac66ffcb3b936dda8052585dbd5fb3e16867099421fcf9d7a715da87d5a8ae2b2567c2acbfbe986c2763a55721aeea1cd27a4530862ad130e867b989c2087c7b64965cd52ae39b33425e1e9c8e238a8faf93d2ef6d3e811edfac1268786bd41bf2e23432e1cb51cbc4802d319f78a77d609a0002eacfdaef5be555d36876abdee5a4da95cc53eb7d468eb0cb1139532e5ae6bf81d1506741973187eb7d8361a53fe1fb3b18b13a7baa9a3ab96705f8b4279868280e56882e516ed4f2219a26caf47aa67ed353c0d1b9feea773dd1108ef22d97ec944774a0355927e2d38d9ab9f631f90a19977818bcc657b3204bd1bdddd86fcec240ed39896b04db9c2f32d53077513727f1de434935d20a52ab0b24a03ff3a6161c63e20204651c8e048dd38b0da55e800d5291cd316417887199d91b0755e2f6651bc404de5936f1397c583b59add784b91cd78171ce5491a6129f80fbd607cd2f193ccaa44aa203d18f7f21f281beb6a96e6d71d0a9fdbc6a172328aa400786e09090fdb822fd3124f1bfd8af64b8de07d84500efd606ee54bb72552c33523cbea145401c53290ea6b6c4e231db6a54b172236d9dcd0ae02043a5a6eff36ba939a31d9fc40185c725a197f48702ab851c3212c10dd2dde285e568447c265de2be326b373c23b1705534ee9bfa982bf70698f5a1b05213b6f7fd63fde2f16f20a61e0fbea57572dc6341efc9eb6d57f766844b2faa301b51485f3c8d572fcf380e17dc7c77ae0f11846cea5a59fef87e137f63345e21a22809adc07bb463b7d6a74755865351b65527272c27a00d61c8a4d11d35f67fa4d8ad6b93e6f633ec04f1fc5bcd36d8eb1aca15cef670b711ab2b09999f23020801c7b2f7e62b86b3aba08105734c588f966a853c9aeb46ffc61f5cc804931f44ac2b31c43a1ddffad3af38c0bcca69a80f6ac02008a2016e45c7f1f3936eb8e14c89265668b5113898e5d041df8ff63576b43c4687db22e526faf5679dccf5910e6e9312220499ed6b6ffb8df816d14b448e54db0d2f11f2b1ce2b78f9e80744fac3838fd55b8c698c5e482027299bdf97289d2d55e92e1a105b11c8a9f96edc78c527697832136bbe8f94d5ba049c51a5780353a723c5f32308dfc1db66feebd022036f07f236934ff2b3b4bc5c30f52fb2c3940264be7d4f4ecff42bee16820226e504f4876edfa2a5de6a884ac21bc40b82ac1b482d6bede3354581af413b9615feb5fefa26dd3e0f1d1badf43f901c8f9b4e058b8a06c10e424e46e763d1012033a033f0de4d54d1d361a66dda008e18736d1de7f564a3f076ca327b2efb4e21fa511beeb9ce9d5ef4cca7ee00bcc2dc085848ea73d7d207435212897db2af8de764e0c7e2b9d5c79bf32fc0ba36c5f02e7bb196bd67f543b4fc7dde1dbf900000aa0740814eb163036b955d1105eba18865c1a0b5d12afe81b5cdf4348bffeade441d4954c753b368b19cab7f25f22a6d1be08add9887e09255d39cd28ee79ad057cfdd81a8a15564070dff286f4115109f59a01e2da9d8f855651e7ff7ed2d26b18703d3df136d5e8ea9a150e2f54406bef061ef563626f10e04b866235423480ff34b076569f5cfb1bd3fae62bff300490ffde2a4e0ad624169cfa667a9ca5006f2693350be1863c"}, @op={0x18}], 0x2148}], 0x3, 0x44070) io_setup(0x0, &(0x7f0000000100)=0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r8, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000200)="05", 0x1}]) r12 = dup2(r11, 0xffffffffffffffff) io_setup(0xd, &(0x7f00000001c0)=0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r13, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r14, &(0x7f0000000200)="05", 0x1}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r15, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r16 = dup(r15) write$FUSE_BMAP(r16, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r16, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r18 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r17, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r18, &(0x7f0000000200)="05", 0x1}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r20, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r21 = dup(r20) write$FUSE_BMAP(r21, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r21, &(0x7f00000000c0)={0x14c}, 0x137) r22 = syz_open_dev$sndpcmp(&(0x7f0000005180)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2000) io_setup(0xd, &(0x7f00000001c0)=0x0) r24 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r23, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r24, &(0x7f0000000200)="05", 0x1}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r25, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r26 = dup(r25) write$FUSE_BMAP(r26, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r26, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r27, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r28 = dup(r27) write$FUSE_BMAP(r28, &(0x7f0000000080)={0xffffffffffffff6e, 0x0, 0x1}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r28, &(0x7f00000000c0)={0x14c}, 0x137) r29 = syz_open_dev$admmidi(&(0x7f00000054c0)='/dev/admmidi#\x00', 0x5, 0x100) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r30, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r31 = dup(r30) write$FUSE_BMAP(r31, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r31, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r33 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r32, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r33, &(0x7f0000000200)="05", 0x1}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r34, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r35 = dup(r34) write$FUSE_BMAP(r35, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r35, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r36, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r37 = dup(r36) write$FUSE_BMAP(r37, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r37, &(0x7f00000000c0)={0x14c}, 0x137) io_submit(r6, 0xa, &(0x7f0000005800)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0xfff, r9, &(0x7f0000003f00)="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", 0x1000, 0xd93, 0x0, 0x1, r12}, &(0x7f0000005880)={0x0, 0x0, 0x0, 0x5, 0xc, r14, &(0x7f0000004f00)="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", 0xfe, 0x200, 0x0, 0x4, r37}, &(0x7f0000005100)={0x0, 0x0, 0x0, 0x2, 0x1, r18, &(0x7f0000005040)="6d5f0bb065cef166931cf406ccdb5d4e48aa0a180143a4ef6b7872ed35ac8a5ea60d3c5606da8cceba386140e5af7b47fccfd47449da56b74754b3a8505d429990bf91cbec737db620982e1153fee3eb2cbcfc7a6fec22323966bbf63936f73bd5931cee05dcd87eff57ac742ff37d48dbccfd795c68c09c5baab66b77114118980d22491f125d9343c768e60e2ffd046a92d46d84d20ad03599e180de", 0x9d, 0x3, 0x0, 0x2, r21}, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x5, 0x6, r20, &(0x7f0000005140)="6b0c6b0d276916fe77e49c4e71999c", 0xf, 0x100000001, 0x0, 0x1, r22}, &(0x7f00000052c0)={0x0, 0x0, 0x0, 0xa, 0x7, r24, &(0x7f0000005200)="3b18f34b459dd2d53da8d988e9e109f9e339eb5ca268730c065172b574eea9b5154ace46d99e4a506e9c8b5fc88b138d04b7d1fbc29475d51ebd3e0a5558d99c95d4cb02aa1c20e09c7cac103a3c1f1d1d7c375fbb61e5117e943ca7429b9f90b6635ff309d70fa918d7d57029baff981dcba44e109d9d547a519ee3ab2d8f39241c40f3", 0x84, 0x8}, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000005300)="383f8aa4578484109fca73da856404747ee2558d5779c06e953feca771d2fea93449b398baed3b6baf95fa7ec8a5b210b5a15c0bad9ea9e4e25e3970b2f5cee660cf01495d285235e3ed2ea7abdc5456c1963f4b108ade9330861f7ac843601c173381976f17d48cc37427e19cd271a58d89c995c0ba89e6c1ffbd6ba762d27844641467bd8f78ad3b54af76329f4c5585f1c285dc5c9dd743981232c681e994ac2ec2a9220b96b45c6e5593a958fb438e9d34d4601b9f75fa38c1285ac9", 0xbe, 0x8000, 0x0, 0x3}, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x5, 0x800, r7, &(0x7f0000005400)="43229bd8132210adce60ce6375eea7c18604fdb5d890f0ca3ed252542cc7bd5075791321474393ee0fb8c3e1ea6209a6d70560672c49c3c98b0e0200acbae1d40ff4eb154e071d20b10db1560ae36a3128810046c46f409ed057", 0x5a, 0x1, 0x0, 0x2, r28}, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x1, 0x0, r29, &(0x7f0000005500)="a0371f12ae7bd023f97d6f186da11919f466c9a468b817e1253372bca7496960d97849b692ee59c14858aa2d52c5c5a4bb93c3f9d442bb12aaa283a98525ae5587f22c2dbca622d849b90191e2453de02e113871c3a3f8eb6e90c7ed7d9a9a45e70c45eeee076b62f4a4c08d986efa2271291c54acf2d2cb19281d9ab2e1b0de4454f19a44b52cb7df0a8cb64b046b9553491905a0bf9dbdc26f9a465bf02fd9a0f17a51daddadee4e20324cb84ee486dc4623d1d4f63f755eea48e5", 0xbc, 0x5, 0x0, 0x1, r31}, &(0x7f00000056c0)={0x0, 0x0, 0x0, 0x7, 0x6, r19, &(0x7f0000005600)="4e0e42111d85e6711fb061a0f39a35db2bf7d9ed3ef5c402577bbc888c17a67e66fb1ad3c539d789b3b943596d79b5160fb50c7dbdeb512cb6023d39fcbb3c751c2f9a08b315bf33b7ee761a70f5f52df7e5a6d866d28c9072ae5cc06bb45785bf6e4e5af82096e908fc9e8963e9253e6c61a67025f5c3a21fc9e4a694b7e12548e0692d3e43e37ba6655c3731d94bc3ab4ba0b17a2a50336238ad22c6aa15215d", 0xa1, 0x2, 0x0, 0x6}, &(0x7f00000057c0)={0x0, 0x0, 0x0, 0x1, 0x8, r33, &(0x7f0000005700)="2231489fecd8848baaaed65c7036e39529c29afb648a916d2439351437682d8cfd137d01e8a1515ba1651bd4a84976efbe2d0eddc5e5daf0beca92417e5a35dd5284b9a2c9422d2db8d3f5ab1d388cbfd43ea9490172a9119a167eb7459270fcc82c2fec9a2f1a2a9f7a65e59fdeecfc19c8201190895ed3b1563821b7ae15f1d5c7e9b6a7a01413", 0x88, 0x1, 0x0, 0xa6e34e030c23085f, r35}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r38, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r39 = dup(r38) write$FUSE_BMAP(r39, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r39, &(0x7f00000000c0)={0x14c}, 0x137) io_submit(r5, 0x2, &(0x7f0000000400)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x1000, r7, &(0x7f0000000140)="00512a59a2f706ead092b7620d99ad91bd9c2d4b201eb6c3c0410f4ef028f079912e0785beec3344da1d3589366e751f5b8f740d36f7336d3c315c55da778bac4f1e12b77e217c5b43bad05c150e8af4bc33a46d5d5f67a5889a83d51a71f741fe6abceae4c2c6a6f93fecf983f24d0af47885c8fa3e21", 0x77, 0xffd, 0x0, 0x2, r39}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x94d0, r1, &(0x7f0000000300)="0e082cc19c170e8dc85b6da0513009095e007efb9013cce815ea7665579b67eaed3b43f592118710a43f28ef45a314b118fe856a437965479dcfde8626f7858e2579cfd435041c53ca4188d50f84051429c813c6c7609d8df538aca4779ffb9559b07699a002da0be425fbeb6b0b2dde2b83f4186f14ddab0300b867347f72e1047c52a1", 0x84, 0x100000001}]) r40 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RUNLINKAT(r40, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) [ 423.201574][T15552] ? sockfd_lookup_light+0xcb/0x180 [ 423.217204][T15552] __sys_sendmmsg+0x1bf/0x4d0 [ 423.217225][T15552] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 423.228301][T15552] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 423.228315][T15552] ? fput_many+0x12c/0x1a0 [ 423.228328][T15552] ? fput+0x1b/0x20 [ 423.228342][T15552] ? ksys_write+0x1cf/0x290 [ 423.228361][T15552] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.228376][T15552] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.228390][T15552] ? do_syscall_64+0x26/0x790 22:11:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '#yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 423.228406][T15552] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.228417][T15552] ? do_syscall_64+0x26/0x790 [ 423.228438][T15552] __x64_sys_sendmmsg+0x9d/0x100 [ 423.228454][T15552] do_syscall_64+0xfa/0x790 [ 423.228471][T15552] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.228486][T15552] RIP: 0033:0x45a639 [ 423.247910][T15552] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:11:05 executing program 4 (fault-call:6 fault-nth:24): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 423.262416][T15552] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 423.272253][T15552] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 423.272260][T15552] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 423.272268][T15552] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 423.272275][T15552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 423.272282][T15552] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '%yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 423.652796][T15575] FAULT_INJECTION: forcing a failure. [ 423.652796][T15575] name failslab, interval 1, probability 0, space 0, times 0 [ 423.665879][T15575] CPU: 1 PID: 15575 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 423.675790][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.685857][T15575] Call Trace: [ 423.689172][T15575] dump_stack+0x197/0x210 [ 423.693666][T15575] should_fail.cold+0xa/0x15 [ 423.698290][T15575] ? fault_create_debugfs_attr+0x180/0x180 [ 423.704121][T15575] ? ___might_sleep+0x163/0x2c0 [ 423.709002][T15575] __should_failslab+0x121/0x190 [ 423.713971][T15575] should_failslab+0x9/0x14 [ 423.718499][T15575] kmem_cache_alloc_node_trace+0x274/0x750 [ 423.724328][T15575] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 423.730325][T15575] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 423.736153][T15575] __kmalloc_node_track_caller+0x3d/0x70 [ 423.741802][T15575] __kmalloc_reserve.isra.0+0x40/0xf0 [ 423.747197][T15575] __alloc_skb+0x10b/0x5e0 [ 423.751667][T15575] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 423.757232][T15575] ? raw6_getfrag+0x164/0x230 [ 423.761925][T15575] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 423.767697][T15575] __ip6_append_data.isra.0+0x2c64/0x3950 [ 423.773442][T15575] ? rawv6_mh_filter_unregister+0x20/0x20 [ 423.779191][T15575] ? ip6_setup_cork+0x18f0/0x18f0 [ 423.784236][T15575] ? ip6_fraglist_init+0x8a0/0x8a0 [ 423.789369][T15575] ip6_append_data+0x1ec/0x330 [ 423.794151][T15575] ? rawv6_mh_filter_unregister+0x20/0x20 [ 423.799897][T15575] ? rawv6_mh_filter_unregister+0x20/0x20 [ 423.805642][T15575] rawv6_sendmsg+0x133e/0x36d0 [ 423.810428][T15575] ? lock_downgrade+0x920/0x920 [ 423.815298][T15575] ? rawv6_bind+0x9a0/0x9a0 [ 423.819830][T15575] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 423.825610][T15575] ? rw_copy_check_uvector+0x2ce/0x390 [ 423.831098][T15575] ? ___might_sleep+0x163/0x2c0 [ 423.835967][T15575] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 423.842369][T15575] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 423.847944][T15575] inet_sendmsg+0x9e/0xe0 [ 423.852541][T15575] ? inet_sendmsg+0x9e/0xe0 [ 423.857064][T15575] ? inet_send_prepare+0x4e0/0x4e0 [ 423.862184][T15575] sock_sendmsg+0xd7/0x130 [ 423.866611][T15575] ___sys_sendmsg+0x3e2/0x920 [ 423.871302][T15575] ? copy_msghdr_from_user+0x440/0x440 [ 423.876776][T15575] ? lock_downgrade+0x920/0x920 [ 423.881635][T15575] ? rcu_read_lock_held+0x9c/0xb0 [ 423.886670][T15575] ? __kasan_check_read+0x11/0x20 [ 423.891713][T15575] ? __fget+0x37f/0x550 [ 423.895891][T15575] ? ksys_dup3+0x3e0/0x3e0 [ 423.900324][T15575] ? find_held_lock+0x35/0x130 [ 423.905103][T15575] ? get_pid_task+0xc9/0x180 [ 423.909710][T15575] ? __fget_light+0x1a9/0x230 [ 423.914397][T15575] ? __fdget+0x1b/0x20 [ 423.918475][T15575] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 423.924736][T15575] ? sockfd_lookup_light+0xcb/0x180 [ 423.929947][T15575] __sys_sendmmsg+0x1bf/0x4d0 [ 423.934647][T15575] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 423.939706][T15575] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 423.945970][T15575] ? fput_many+0x12c/0x1a0 [ 423.950397][T15575] ? fput+0x1b/0x20 [ 423.954221][T15575] ? ksys_write+0x1cf/0x290 [ 423.958761][T15575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.964238][T15575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.969728][T15575] ? do_syscall_64+0x26/0x790 [ 423.974426][T15575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.980514][T15575] ? do_syscall_64+0x26/0x790 [ 423.985214][T15575] __x64_sys_sendmmsg+0x9d/0x100 [ 423.990177][T15575] do_syscall_64+0xfa/0x790 [ 423.994892][T15575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.000800][T15575] RIP: 0033:0x45a639 [ 424.004701][T15575] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 424.024320][T15575] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 424.024335][T15575] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 424.024342][T15575] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 424.024350][T15575] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 424.024357][T15575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 424.024364][T15575] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000651ff8)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f000079efe0)={0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x2465a, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) io_setup(0xd, &(0x7f00000001c0)=0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001280)='/dev/btrfs-control\x00', 0x0, 0x0) connect$caif(r5, &(0x7f00000012c0), 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) listen(r6, 0x7f) r7 = dup(r3) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000001240)={0xe, 0x6, 0xec, 0x0, 0x6, "14eda40c3382"}, 0x12) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001300)='/dev/dsp\x00', 0x80000, 0x0) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f0000001340)={0x6101, 0x101, 0x7f, 0x4541030e}) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r2) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x1000, "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"}, &(0x7f0000001100)=0x1008) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001140)={r10, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000001200)=0x84) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/68) 22:11:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0505510, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '*yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:06 executing program 4 (fault-call:6 fault-nth:25): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '+yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x7, 0x801) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000000000da446444091f"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000271277ba8548ff478aff5d6155773d71fbe622fc257d7d7123b86dc2cd7f4561e95c0e5d212d41538dbcf80764862646b72dd15e6cb83d19b5e1d5fb50d528032d6d908f144f8a5c9ee23a81d1cbe73836c83a1ce2d7c07e37805dea7039fc24d88fa7f4e1843d3f550f0d38e84265b9535f58566b2661948e44c1a91bb38568f7fb507c16c054a1c94414808b786255ba7325e8c63bd4218f00c034f0b2cabab12e0c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000002c0)={r7, 0x2}, &(0x7f00000005c0)=0x7) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000600)={r8, 0x622}, &(0x7f0000000640)=0x8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r9, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000680)={r10, @in={{0x2, 0x4e22, @loopback}}, 0x9c3, 0x6, 0x80000000, 0x1, 0x5}, &(0x7f0000000740)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000780)=@sack_info={r11, 0x9, 0xff}, &(0x7f0000000340)=0xffffffffffffff0b) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x6, 0x20}, &(0x7f00000003c0)=0xc) socket$vsock_stream(0x28, 0x1, 0x0) r12 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x400, 0x40600) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) readlinkat(r12, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=""/177, 0xb1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0xffffff12, 0x77fffc, 0x0, 0x0, 0x0, 0x10000, [], 0x0, 0xffffffffffffffff, 0x0, 0x200000}, 0xffffffffffffffac) io_submit(r13, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000100)='./file0\x00', r12}, 0x10) [ 424.386780][T15596] FAULT_INJECTION: forcing a failure. [ 424.386780][T15596] name failslab, interval 1, probability 0, space 0, times 0 [ 424.447897][T15596] CPU: 0 PID: 15596 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 424.457849][T15596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.467918][T15596] Call Trace: [ 424.471226][T15596] dump_stack+0x197/0x210 [ 424.475575][T15596] should_fail.cold+0xa/0x15 [ 424.480183][T15596] ? fault_create_debugfs_attr+0x180/0x180 [ 424.486011][T15596] ? ___might_sleep+0x163/0x2c0 [ 424.490880][T15596] __should_failslab+0x121/0x190 22:11:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '-yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 424.495836][T15596] should_failslab+0x9/0x14 [ 424.500354][T15596] kmem_cache_alloc_node+0x268/0x740 [ 424.505656][T15596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.511937][T15596] ? ip_generic_getfrag+0x144/0x260 [ 424.517157][T15596] __alloc_skb+0xd5/0x5e0 [ 424.521503][T15596] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 424.527076][T15596] ? raw6_getfrag+0x164/0x230 [ 424.531764][T15596] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 424.537591][T15596] __ip6_append_data.isra.0+0x2c64/0x3950 22:11:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 424.537614][T15596] ? rawv6_mh_filter_unregister+0x20/0x20 [ 424.549064][T15596] ? ip6_setup_cork+0x18f0/0x18f0 [ 424.554107][T15596] ? ip6_fraglist_init+0x8a0/0x8a0 [ 424.559240][T15596] ip6_append_data+0x1ec/0x330 [ 424.564012][T15596] ? rawv6_mh_filter_unregister+0x20/0x20 [ 424.564035][T15596] ? rawv6_mh_filter_unregister+0x20/0x20 [ 424.564052][T15596] rawv6_sendmsg+0x133e/0x36d0 [ 424.564073][T15596] ? lock_downgrade+0x920/0x920 [ 424.585110][T15596] ? rawv6_bind+0x9a0/0x9a0 [ 424.589648][T15596] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 424.595384][T15596] ? rw_copy_check_uvector+0x2ce/0x390 [ 424.600859][T15596] ? ___might_sleep+0x163/0x2c0 [ 424.605747][T15596] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 424.612184][T15596] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 424.617742][T15596] inet_sendmsg+0x9e/0xe0 [ 424.622083][T15596] ? inet_sendmsg+0x9e/0xe0 [ 424.626602][T15596] ? inet_send_prepare+0x4e0/0x4e0 [ 424.631728][T15596] sock_sendmsg+0xd7/0x130 [ 424.636164][T15596] ___sys_sendmsg+0x3e2/0x920 [ 424.640860][T15596] ? copy_msghdr_from_user+0x440/0x440 22:11:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '.yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 424.646334][T15596] ? lock_downgrade+0x920/0x920 [ 424.651200][T15596] ? rcu_read_lock_held+0x9c/0xb0 [ 424.656246][T15596] ? __kasan_check_read+0x11/0x20 [ 424.661290][T15596] ? __fget+0x37f/0x550 [ 424.665464][T15596] ? ksys_dup3+0x3e0/0x3e0 [ 424.669898][T15596] ? find_held_lock+0x35/0x130 [ 424.674679][T15596] ? get_pid_task+0xc9/0x180 [ 424.679373][T15596] ? __fget_light+0x1a9/0x230 [ 424.684065][T15596] ? __fdget+0x1b/0x20 [ 424.688150][T15596] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 424.694409][T15596] ? sockfd_lookup_light+0xcb/0x180 [ 424.699608][T15596] __sys_sendmmsg+0x1bf/0x4d0 [ 424.699628][T15596] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 424.699660][T15596] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 424.699676][T15596] ? fput_many+0x12c/0x1a0 [ 424.720007][T15596] ? fput+0x1b/0x20 [ 424.723836][T15596] ? ksys_write+0x1cf/0x290 [ 424.728355][T15596] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 424.733831][T15596] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 424.739314][T15596] ? do_syscall_64+0x26/0x790 [ 424.744005][T15596] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.750085][T15596] ? do_syscall_64+0x26/0x790 [ 424.754786][T15596] __x64_sys_sendmmsg+0x9d/0x100 [ 424.760181][T15596] do_syscall_64+0xfa/0x790 [ 424.764725][T15596] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.770629][T15596] RIP: 0033:0x45a639 [ 424.774537][T15596] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:11:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '0yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 424.794162][T15596] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 424.802590][T15596] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 424.810585][T15596] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 424.818614][T15596] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 424.826599][T15596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 424.834726][T15596] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85502, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000280)) semget(0x0, 0x3, 0x45c) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000012c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000340)='f\vV{kkB-4\xc71T\xf6ENR?\x99~\x00') read$eventfd(r2, &(0x7f00000000c0), 0x2c3) readv(r2, &(0x7f0000000040), 0x20000000000001e7) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) flock(r0, 0xa) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000f, 0xa013, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1012, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x3}, 0x3008b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) prlimit64(r1, 0x5, 0x0, 0x0) r10 = socket(0xa, 0x2, 0x0) tee(0xffffffffffffffff, r0, 0x7fffffff, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x0, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=ANY=[]}, 0x78) bind$inet(r10, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000001300)=""/32) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000002c0)) sendto$inet(r7, 0x0, 0x0, 0x4800eb772e6015f2, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r11 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') sync_file_range(0xffffffffffffffff, 0x5, 0x1, 0x4) bind$alg(r11, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r13 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0xa3, 0x4, 0x100000001, 0x0, r12, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) clone(0x800000000b000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r14, &(0x7f00000002c0)}, 0x10) 22:11:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'Xyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:07 executing program 4 (fault-call:6 fault-nth:26): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x259, 0x1c0003) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)="05", 0x1}]) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x10000, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7, 0x2}, 0x0, 0x0, &(0x7f0000000200)={0x2, 0xa, 0x1, 0x8}, &(0x7f0000000240)=0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x3f}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r3, r0, 0x0, 0x4, &(0x7f0000000100)='bfs\x00', r6}, 0x30) 22:11:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85503, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 425.274744][T15633] FAULT_INJECTION: forcing a failure. [ 425.274744][T15633] name failslab, interval 1, probability 0, space 0, times 0 [ 425.297836][T15633] CPU: 0 PID: 15633 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 425.307783][T15633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.317844][T15633] Call Trace: [ 425.321149][T15633] dump_stack+0x197/0x210 [ 425.325497][T15633] should_fail.cold+0xa/0x15 [ 425.330103][T15633] ? fault_create_debugfs_attr+0x180/0x180 [ 425.335917][T15633] ? ___might_sleep+0x163/0x2c0 [ 425.340786][T15633] __should_failslab+0x121/0x190 [ 425.345739][T15633] should_failslab+0x9/0x14 [ 425.350245][T15633] kmem_cache_alloc_node+0x268/0x740 [ 425.355526][T15633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.361804][T15633] ? ip_generic_getfrag+0x144/0x260 [ 425.361825][T15633] __alloc_skb+0xd5/0x5e0 [ 425.361845][T15633] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 425.371342][T15633] ? raw6_getfrag+0x164/0x230 [ 425.371358][T15633] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 425.371381][T15633] __ip6_append_data.isra.0+0x2c64/0x3950 [ 425.371401][T15633] ? rawv6_mh_filter_unregister+0x20/0x20 [ 425.371426][T15633] ? ip6_setup_cork+0x18f0/0x18f0 [ 425.371444][T15633] ? ip6_fraglist_init+0x8a0/0x8a0 [ 425.408858][T15633] ip6_append_data+0x1ec/0x330 [ 425.413625][T15633] ? rawv6_mh_filter_unregister+0x20/0x20 [ 425.419329][T15633] ? rawv6_mh_filter_unregister+0x20/0x20 [ 425.425141][T15633] rawv6_sendmsg+0x133e/0x36d0 [ 425.429893][T15633] ? lock_downgrade+0x920/0x920 [ 425.434744][T15633] ? rawv6_bind+0x9a0/0x9a0 [ 425.439250][T15633] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 425.444952][T15633] ? rw_copy_check_uvector+0x2ce/0x390 [ 425.450397][T15633] ? ___might_sleep+0x163/0x2c0 [ 425.455335][T15633] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 425.461566][T15633] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 425.467112][T15633] inet_sendmsg+0x9e/0xe0 [ 425.471440][T15633] ? inet_sendmsg+0x9e/0xe0 [ 425.475939][T15633] ? inet_send_prepare+0x4e0/0x4e0 [ 425.481043][T15633] sock_sendmsg+0xd7/0x130 [ 425.485443][T15633] ___sys_sendmsg+0x3e2/0x920 [ 425.490114][T15633] ? copy_msghdr_from_user+0x440/0x440 [ 425.495576][T15633] ? lock_downgrade+0x920/0x920 [ 425.500441][T15633] ? rcu_read_lock_held+0x9c/0xb0 [ 425.505533][T15633] ? __kasan_check_read+0x11/0x20 [ 425.510606][T15633] ? __fget+0x37f/0x550 [ 425.514786][T15633] ? ksys_dup3+0x3e0/0x3e0 [ 425.519188][T15633] ? find_held_lock+0x35/0x130 [ 425.523938][T15633] ? get_pid_task+0xc9/0x180 [ 425.528518][T15633] ? __fget_light+0x1a9/0x230 [ 425.533186][T15633] ? __fdget+0x1b/0x20 [ 425.537236][T15633] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 425.543463][T15633] ? sockfd_lookup_light+0xcb/0x180 [ 425.548703][T15633] __sys_sendmmsg+0x1bf/0x4d0 [ 425.553367][T15633] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 425.558583][T15633] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 425.564814][T15633] ? fput_many+0x12c/0x1a0 [ 425.569232][T15633] ? fput+0x1b/0x20 [ 425.573086][T15633] ? ksys_write+0x1cf/0x290 [ 425.577582][T15633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 425.583041][T15633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 425.588513][T15633] ? do_syscall_64+0x26/0x790 [ 425.593183][T15633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.599248][T15633] ? do_syscall_64+0x26/0x790 [ 425.603928][T15633] __x64_sys_sendmmsg+0x9d/0x100 [ 425.608859][T15633] do_syscall_64+0xfa/0x790 [ 425.613353][T15633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.619224][T15633] RIP: 0033:0x45a639 [ 425.623116][T15633] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 425.642723][T15633] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 425.651137][T15633] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 425.659111][T15633] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 425.667095][T15633] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:11:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) msgget(0x1, 0x218) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '\\yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85504, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 425.675082][T15633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 425.683257][T15633] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:08 executing program 4 (fault-call:6 fault-nth:27): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'cyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85505, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:08 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x21, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats_percpu\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) [ 425.928117][T15658] FAULT_INJECTION: forcing a failure. [ 425.928117][T15658] name failslab, interval 1, probability 0, space 0, times 0 [ 425.968394][T15658] CPU: 1 PID: 15658 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 425.978499][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.988700][T15658] Call Trace: [ 425.992018][T15658] dump_stack+0x197/0x210 [ 425.996370][T15658] should_fail.cold+0xa/0x15 [ 426.000981][T15658] ? fault_create_debugfs_attr+0x180/0x180 [ 426.006989][T15658] ? ___might_sleep+0x163/0x2c0 [ 426.011858][T15658] __should_failslab+0x121/0x190 [ 426.016812][T15658] should_failslab+0x9/0x14 [ 426.021336][T15658] kmem_cache_alloc_node_trace+0x274/0x750 [ 426.027162][T15658] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 426.033163][T15658] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 426.038989][T15658] __kmalloc_node_track_caller+0x3d/0x70 [ 426.044633][T15658] __kmalloc_reserve.isra.0+0x40/0xf0 [ 426.050043][T15658] __alloc_skb+0x10b/0x5e0 [ 426.054523][T15658] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 426.060078][T15658] ? raw6_getfrag+0x164/0x230 22:11:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x8, 0x20002) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xce61, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}], 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x1b0, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x40}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:08 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001c0003fd6d0000360000000002dd0700060000001f5f32c908000100000073730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x2, 0x0, 0x2, 0x2, 0x8}, 0x20) r1 = socket(0x10, 0x800000000080002, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x8000, 0x3f, 0x9, 0x2, 0x0]}, 0xe) 22:11:08 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c81543f612736540017b0bd12d1fa624feeb31906fd9b940c9dc378bae", 0x8f, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000004c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={r4, 0xfb14}, &(0x7f0000000580)=0x8) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e27468fa6ea3f5972fe9ca162b123e192e8c89c9dd81c796f27f501cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/142], 0x15) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x80) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x3, 0x7}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)={r6, 0x7fff, 0xc3, "dd032a746a7df5a9e7ae93696ea3880ba9388e8d2f812a6eaaf2f1e7af5ebb7411f78a0744a65090cefdc543d38fad3d06b2ba9541d235a798050976f5145c863b5a73f34989823625ead6466f90df960b90adaa17f385da345a1c7c0543e47b0ace5988aff554d08a4962370a4dc64c2c0a1f816010d4780e7cfc185b10dd5967e4ab2d26a5dbf6540dfc292ed0d88c5068cfa002ef4e4cd50e29263bce59e1be61ab1c135e5bd521b5983051583a68615332b1de79dba0bd2ecad1c57f2ec9501975"}, 0xcb) [ 426.064760][T15658] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 426.068706][T15669] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'. [ 426.070490][T15658] __ip6_append_data.isra.0+0x2c64/0x3950 [ 426.070514][T15658] ? rawv6_mh_filter_unregister+0x20/0x20 [ 426.070540][T15658] ? ip6_setup_cork+0x18f0/0x18f0 [ 426.070554][T15658] ? ip6_fraglist_init+0x8a0/0x8a0 [ 426.101575][T15658] ip6_append_data+0x1ec/0x330 [ 426.106346][T15658] ? rawv6_mh_filter_unregister+0x20/0x20 [ 426.106366][T15658] ? rawv6_mh_filter_unregister+0x20/0x20 [ 426.106385][T15658] rawv6_sendmsg+0x133e/0x36d0 [ 426.122613][T15658] ? lock_downgrade+0x920/0x920 [ 426.127481][T15658] ? rawv6_bind+0x9a0/0x9a0 [ 426.132001][T15658] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 426.132020][T15658] ? rw_copy_check_uvector+0x2ce/0x390 [ 426.132043][T15658] ? ___might_sleep+0x163/0x2c0 [ 426.148042][T15658] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 426.154346][T15658] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 426.159904][T15658] inet_sendmsg+0x9e/0xe0 [ 426.159919][T15658] ? inet_sendmsg+0x9e/0xe0 [ 426.159936][T15658] ? inet_send_prepare+0x4e0/0x4e0 [ 426.173840][T15658] sock_sendmsg+0xd7/0x130 [ 426.178252][T15658] ___sys_sendmsg+0x3e2/0x920 [ 426.182934][T15658] ? copy_msghdr_from_user+0x440/0x440 [ 426.188400][T15658] ? lock_downgrade+0x920/0x920 [ 426.188418][T15658] ? rcu_read_lock_held+0x9c/0xb0 [ 426.188437][T15658] ? __kasan_check_read+0x11/0x20 [ 426.188455][T15658] ? __fget+0x37f/0x550 [ 426.188478][T15658] ? ksys_dup3+0x3e0/0x3e0 [ 426.211885][T15658] ? find_held_lock+0x35/0x130 [ 426.216655][T15658] ? get_pid_task+0xc9/0x180 [ 426.221257][T15658] ? __fget_light+0x1a9/0x230 [ 426.225971][T15658] ? __fdget+0x1b/0x20 [ 426.230047][T15658] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 426.236295][T15658] ? sockfd_lookup_light+0xcb/0x180 [ 426.241508][T15658] __sys_sendmmsg+0x1bf/0x4d0 [ 426.246200][T15658] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 426.251259][T15658] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 426.257512][T15658] ? fput_many+0x12c/0x1a0 [ 426.261941][T15658] ? fput+0x1b/0x20 22:11:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x7ffffffffffffffa, 0x4000400}, 0xffffffffffffff23) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) getsockname(r4, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) sendmmsg(r4, &(0x7f0000000000), 0x24a, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x8000, 0x4) [ 426.265764][T15658] ? ksys_write+0x1cf/0x290 [ 426.270287][T15658] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 426.275760][T15658] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 426.281237][T15658] ? do_syscall_64+0x26/0x790 [ 426.285942][T15658] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.292028][T15658] ? do_syscall_64+0x26/0x790 [ 426.296726][T15658] __x64_sys_sendmmsg+0x9d/0x100 [ 426.301686][T15658] do_syscall_64+0xfa/0x790 [ 426.306214][T15658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.312122][T15658] RIP: 0033:0x45a639 [ 426.316023][T15658] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 426.335640][T15658] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.344058][T15658] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 426.352044][T15658] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 426.352053][T15658] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:11:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85506, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'dyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 426.352061][T15658] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 426.352068][T15658] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'iyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:08 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) mq_timedreceive(r0, &(0x7f0000000380)=""/168, 0xa8, 0xffffffff, &(0x7f00000000c0)={0x77359400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f00000001c0)="7be2098b7a4ccabe41a67af66252145a02d255240ac0a024a3b18702d61d6bfd2813baf228cc02ddabc3ef5c8d2ce6b9021f4571b4ff062abd1c64ec1140ea22e68b0d345c0cc6c897f1dbcd5d0f9ebfff38451a72aef92ec1320fb460e6f6fb66caf88b672f1ef4bb7bca819f0aec11f874fe1364e08f9cb0c91c1e5bf7953c492cd82a2ad478d0016a0dcdf996b6ffca4a5d577809222efdc4f02e41", 0x9d) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) 22:11:09 executing program 4 (fault-call:6 fault-nth:28): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85507, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:09 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x803, 0x4) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x33}, 0x0, @in=@multicast2}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200001c000000000004907800000000fffffbff0000e5da000090782a7d6f91b25e1244e5745f069145b13f9d70bcd9372d53a95ec550945fb204e50300"/76], 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140)={0x400}, 0x4) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000540)="4eb95fbbc71b7865518dd4d11ceb087f91bc630b42d43d35f1c2f5628f7933818669e8709930ad491fe55ce711f10b57a4cf048f9c6d3add6cd8c6ca8a3687f2dc19775548cf45471a33d48d5cbab33e5057c9748920cff673e1738ba5d471621b3411ed52ceb60398f4acdd7e9f4761552d3a240e9dea4f729cce010f70723e27ad3accbd6dc546ada21d745006438b292169", 0x93, 0x20000000, &(0x7f0000000600)={0xa, 0x4e24, 0x5, @rand_addr="cc953532bd6f19f259c816b392bb9fdd", 0x67}, 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2040018}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa2b754aa3c7faa4c}, 0x4000000) write$nbd(r2, &(0x7f0000000380)={0x67446698, 0x1, 0x1, 0x2, 0x4, "151af7180bb794a4063997c3fe99b68f1e8c29c291bd58b3dd247dd51276506da548b877c1607fd219e450b4ef92a120a3481a3eecd90ef911d68b8feada634142af830707c58d7368bb1fecd8ddf127cda4882dd04b4ccbe36626950b6caef8504003d959fdb5944ac7c676b27f902299eee1ed5e3e210e88889db4ae7edbb16a8cf8490ce35d4d4d061bdb49f93cf8325c9e83df47f8fac571a15db967874b635455034f62fba43fedbe850dc04781aad81150b5105901885d"}, 0xca) 22:11:09 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'lyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x7ffffffffffffffa, 0x4000400}, 0xffffffffffffff23) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) getsockname(r4, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) sendmmsg(r4, &(0x7f0000000000), 0x24a, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x8000, 0x4) 22:11:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1, &(0x7f0000000040)) [ 426.919786][ C1] net_ratelimit: 16 callbacks suppressed [ 426.919813][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 426.921415][T15710] FAULT_INJECTION: forcing a failure. [ 426.921415][T15710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 426.926348][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 426.931272][T15710] CPU: 0 PID: 15710 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 426.931282][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.931287][T15710] Call Trace: [ 426.931310][T15710] dump_stack+0x197/0x210 [ 426.931332][T15710] should_fail.cold+0xa/0x15 [ 426.931357][T15710] ? fault_create_debugfs_attr+0x180/0x180 [ 426.946076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 426.950256][T15710] ? __kasan_check_read+0x11/0x20 [ 426.950276][T15710] ? __lock_acquire+0x16f2/0x4a00 [ 426.950292][T15710] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 426.950313][T15710] should_fail_alloc_page+0x50/0x60 [ 426.950328][T15710] __alloc_pages_nodemask+0x1a1/0x910 [ 426.950344][T15710] ? fs_reclaim_release+0xf/0x30 [ 426.950362][T15710] ? __alloc_pages_slowpath+0x2900/0x2900 [ 426.950377][T15710] ? fs_reclaim_release+0xf/0x30 [ 426.950397][T15710] ? fault_create_debugfs_attr+0x180/0x180 [ 426.950418][T15710] cache_grow_begin+0x90/0xc60 [ 426.950445][T15710] ? __kmalloc_node_track_caller+0x3d/0x70 [ 426.961174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 426.970622][T15710] ? trace_hardirqs_off+0x62/0x240 [ 426.970640][T15710] kmem_cache_alloc_node_trace+0x689/0x750 [ 426.970658][T15710] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 426.970675][T15710] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 426.970698][T15710] __kmalloc_node_track_caller+0x3d/0x70 [ 427.087880][T15710] __kmalloc_reserve.isra.0+0x40/0xf0 [ 427.093272][T15710] __alloc_skb+0x10b/0x5e0 [ 427.097711][T15710] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 427.103286][T15710] ? raw6_getfrag+0x164/0x230 [ 427.107984][T15710] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 427.113724][T15710] __ip6_append_data.isra.0+0x2c64/0x3950 [ 427.119475][T15710] ? rawv6_mh_filter_unregister+0x20/0x20 [ 427.125224][T15710] ? ip6_setup_cork+0x18f0/0x18f0 [ 427.130266][T15710] ? ip6_fraglist_init+0x8a0/0x8a0 [ 427.135424][T15710] ip6_append_data+0x1ec/0x330 [ 427.140203][T15710] ? rawv6_mh_filter_unregister+0x20/0x20 [ 427.145931][T15710] ? rawv6_mh_filter_unregister+0x20/0x20 [ 427.151686][T15710] rawv6_sendmsg+0x133e/0x36d0 [ 427.156466][T15710] ? lock_downgrade+0x920/0x920 [ 427.161339][T15710] ? rawv6_bind+0x9a0/0x9a0 [ 427.165881][T15710] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 427.171620][T15710] ? rw_copy_check_uvector+0x2ce/0x390 [ 427.177105][T15710] ? ___might_sleep+0x163/0x2c0 [ 427.181977][T15710] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.188245][T15710] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 427.193804][T15710] inet_sendmsg+0x9e/0xe0 [ 427.198145][T15710] ? inet_sendmsg+0x9e/0xe0 [ 427.202680][T15710] ? inet_send_prepare+0x4e0/0x4e0 [ 427.207873][T15710] sock_sendmsg+0xd7/0x130 [ 427.212305][T15710] ___sys_sendmsg+0x3e2/0x920 [ 427.217011][T15710] ? copy_msghdr_from_user+0x440/0x440 [ 427.222485][T15710] ? lock_downgrade+0x920/0x920 [ 427.232487][T15710] ? rcu_read_lock_held+0x9c/0xb0 [ 427.237547][T15710] ? __kasan_check_read+0x11/0x20 [ 427.242589][T15710] ? __fget+0x37f/0x550 [ 427.246771][T15710] ? ksys_dup3+0x3e0/0x3e0 [ 427.251199][T15710] ? find_held_lock+0x35/0x130 [ 427.255976][T15710] ? get_pid_task+0xc9/0x180 [ 427.260588][T15710] ? __fget_light+0x1a9/0x230 [ 427.265285][T15710] ? __fdget+0x1b/0x20 22:11:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85508, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85509, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c8550a, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c8550b, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c8550c, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 427.269366][T15710] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.275612][T15710] ? sockfd_lookup_light+0xcb/0x180 [ 427.280828][T15710] __sys_sendmmsg+0x1bf/0x4d0 [ 427.285522][T15710] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 427.290588][T15710] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.296851][T15710] ? fput_many+0x12c/0x1a0 [ 427.301279][T15710] ? fput+0x1b/0x20 [ 427.305100][T15710] ? ksys_write+0x1cf/0x290 [ 427.309619][T15710] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 427.315093][T15710] ? trace_hardirqs_on_thunk+0x1a/0x1c 22:11:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c8550d, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 427.320565][T15710] ? do_syscall_64+0x26/0x790 [ 427.325251][T15710] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.331328][T15710] ? do_syscall_64+0x26/0x790 [ 427.336023][T15710] __x64_sys_sendmmsg+0x9d/0x100 [ 427.340972][T15710] do_syscall_64+0xfa/0x790 [ 427.345503][T15710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.351398][T15710] RIP: 0033:0x45a639 [ 427.355332][T15710] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.374943][T15710] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 427.383370][T15710] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 427.391353][T15710] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 427.399328][T15710] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 427.407291][T15710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 427.407303][T15710] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:09 executing program 4 (fault-call:6 fault-nth:29): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:09 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'oyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 427.652711][T15738] FAULT_INJECTION: forcing a failure. [ 427.652711][T15738] name failslab, interval 1, probability 0, space 0, times 0 [ 427.682920][T15738] CPU: 0 PID: 15738 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 427.692863][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.703006][T15738] Call Trace: [ 427.703031][T15738] dump_stack+0x197/0x210 [ 427.703051][T15738] should_fail.cold+0xa/0x15 [ 427.703067][T15738] ? fault_create_debugfs_attr+0x180/0x180 [ 427.703087][T15738] ? ___might_sleep+0x163/0x2c0 [ 427.721070][T15738] __should_failslab+0x121/0x190 [ 427.721088][T15738] should_failslab+0x9/0x14 [ 427.721104][T15738] kmem_cache_alloc_node+0x268/0x740 [ 427.721122][T15738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.721142][T15738] ? ip_generic_getfrag+0x144/0x260 22:11:10 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000940)='./file0/bus\x00', 0x6210, 0x0) r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x5, 0x0) chown(&(0x7f0000000140)='./file0/bus\x00', r1, 0x0) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x40, 0x0) 22:11:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c8550e, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:10 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='\x10Dmv/dsp\x00', 0x401001, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f00000001c0), 0x4) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/45) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r1, 0xfffffffffffffffe) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)=0x10) r3 = socket$inet6(0xa, 0x40000080806, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndseq(&(0x7f0000000700), 0x0, 0x41) r6 = dup2(r5, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000000)={r8, @in, 0xa9}, 0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000380)={0x7fff, 0x8208, 0xffff, 0x9, r8}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, r9, 0x531, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}}, 0x0) r10 = accept(r1, 0x0, 0x0) close(r10) 22:11:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x112) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000180)={0x0, 0x80000001, 0x1, &(0x7f0000000100)=0x3}) r6 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f00000002c0)={"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"}) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:10 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'pyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 427.752094][T15738] __alloc_skb+0xd5/0x5e0 [ 427.756443][T15738] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 427.762003][T15738] ? raw6_getfrag+0x164/0x230 [ 427.766708][T15738] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 427.772442][T15738] __ip6_append_data.isra.0+0x2c64/0x3950 [ 427.778177][T15738] ? rawv6_mh_filter_unregister+0x20/0x20 [ 427.783933][T15738] ? ip6_setup_cork+0x18f0/0x18f0 [ 427.788979][T15738] ? ip6_fraglist_init+0x8a0/0x8a0 [ 427.794105][T15738] ip6_append_data+0x1ec/0x330 [ 427.799141][T15738] ? rawv6_mh_filter_unregister+0x20/0x20 [ 427.804877][T15738] ? rawv6_mh_filter_unregister+0x20/0x20 [ 427.810615][T15738] rawv6_sendmsg+0x133e/0x36d0 [ 427.815399][T15738] ? lock_downgrade+0x920/0x920 [ 427.820265][T15738] ? rawv6_bind+0x9a0/0x9a0 [ 427.824992][T15738] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 427.830742][T15738] ? rw_copy_check_uvector+0x2ce/0x390 [ 427.836225][T15738] ? ___might_sleep+0x163/0x2c0 [ 427.841091][T15738] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.847354][T15738] ? aa_sock_msg_perm.isra.0+0xba/0x170 22:11:10 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'uyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c8550f, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 427.852914][T15738] inet_sendmsg+0x9e/0xe0 [ 427.857257][T15738] ? inet_sendmsg+0x9e/0xe0 [ 427.861768][T15738] ? inet_send_prepare+0x4e0/0x4e0 [ 427.866884][T15738] sock_sendmsg+0xd7/0x130 [ 427.871309][T15738] ___sys_sendmsg+0x3e2/0x920 [ 427.875997][T15738] ? copy_msghdr_from_user+0x440/0x440 [ 427.881472][T15738] ? lock_downgrade+0x920/0x920 [ 427.886340][T15738] ? rcu_read_lock_held+0x9c/0xb0 [ 427.891377][T15738] ? __kasan_check_read+0x11/0x20 [ 427.896420][T15738] ? __fget+0x37f/0x550 [ 427.900578][T15738] ? ksys_dup3+0x3e0/0x3e0 [ 427.900594][T15738] ? find_held_lock+0x35/0x130 [ 427.900608][T15738] ? get_pid_task+0xc9/0x180 [ 427.900626][T15738] ? __fget_light+0x1a9/0x230 [ 427.919028][T15738] ? __fdget+0x1b/0x20 [ 427.923112][T15738] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.929450][T15738] ? sockfd_lookup_light+0xcb/0x180 [ 427.934668][T15738] __sys_sendmmsg+0x1bf/0x4d0 [ 427.939375][T15738] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 427.944548][T15738] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.950798][T15738] ? fput_many+0x12c/0x1a0 [ 427.955398][T15738] ? fput+0x1b/0x20 [ 427.959218][T15738] ? ksys_write+0x1cf/0x290 [ 427.963741][T15738] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 427.969219][T15738] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 427.974792][T15738] ? do_syscall_64+0x26/0x790 [ 427.979481][T15738] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.985560][T15738] ? do_syscall_64+0x26/0x790 [ 427.990265][T15738] __x64_sys_sendmmsg+0x9d/0x100 [ 427.995397][T15738] do_syscall_64+0xfa/0x790 22:11:10 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'xyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85510, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 427.999918][T15738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.005815][T15738] RIP: 0033:0x45a639 [ 428.009713][T15738] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.029681][T15738] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 428.029696][T15738] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 428.029704][T15738] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 428.029712][T15738] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.029719][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 428.029733][T15738] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 428.054664][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.062523][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.070548][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 428.078546][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:10 executing program 4 (fault-call:6 fault-nth:30): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85511, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 428.153142][T15757] IPVS: Unknown mcast interface: yam0 22:11:10 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz%\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:10 executing program 1: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001940)='/dev/audio#\x00', 0x8, 0x8100) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000019c0)={0x80, 0x13, 0x82b, 0x9, 0x36, 0xffff8001, &(0x7f0000001980)="8f2fc214aa08e8eeea3da1f86647515bb88fa1667374acd7cc698a9b5059a08bfc0be477150a7d45b7bac21a776023606249a80269fc"}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)=@sco={0x1f, {0x7f, 0x6, 0x56, 0x3, 0x6, 0x18}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000140)="e71791b78c62e8c458e4a8a27ea140715d4816473ba2b1812ebfcc76c0e00902e5dd53e4332f5cdee556c6163dbb18410238bb41673a81c353c7b3e49dfde77722fd007ee19806eac0ffc10e4166bd4ad0246d19a4ab4173018e73b69de8fd5712f64ba7f3e3a51142be1256b069d73ee3", 0x71}, {&(0x7f0000000240)="fece756851e5a102e13b102787608b40d04d0b1b9e4cb1d3b7cac5b572570db50ff873424cdc81afc854a3429441c934a27953998005dc4a1f5e4071d9289577e3a9c194f3f051a743c15332a4150548c6454bc334ecfc43f70e10fb2d87214fdd336576fc483a7ee0ada3e52c697e46b2af28308a83e674add1d66323f470a4747c6819f896738f433a248620fea4d4b76240998792a5a27d54d94fccb355f3187a83f26801827778ea38d856ef492862d45f7de910e05099d608a81df568d9d6d129fd107a017860ce653df8e52c9a42b231c44863869663afac7bc5db5dbb45fd106b", 0xe4}, {&(0x7f0000000340)="932a2c6f3ddb8d87785c78e97765c384d645161c7ede7cdfbb412391ef30281afa68a2742ee3b3f36a806b0852d429ac6b8c17c20203a0d7e188a0935235d1203e30727e0306ca21813f2fc76ab52d4f0d549cc6065ec852b7877130563275b1bac9bea6a2c60763b986819410078fbe53b6b4349259514fd106330b9171d6097194fe519b244ff1e0076d4cf505b30d164f2e1d3ee7319baaefb9e2f9c4d2ebb20ae20393d23ce7c96c8a30fbd59774d533d1834df832a2f93d7fc78355c35e00b0aa5f996f8daedff8c83340131c6f65e59fa2", 0xd4}, {&(0x7f0000000440)="149bad14ed01e72af23a024f34cde92c13a1293b794ec5f3250e6e1bc355a64ea55ace31ce90b7352e4fd1d52193925793e91e2ec1694fe4f052346b9ecc85f2d4c31a0ef91737313944b64e19025b316113ea9e017646f73e58b581e377679ef45ba4022e5c19880d4a69738ee4ff031fb9798f8b5452f7df61a5eebc4f2873e4c52d81a3c8f929e3edf651", 0x8c}, {&(0x7f0000000500)="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", 0xfc}, {&(0x7f0000000600)="dcafeb403e17f8088c7dff290412d0d255db65b2692c1bb39b303f340598cfe03c850c6ccc904ebe0ea2141eb650c9e05ccbc61ac1b364847afd60da33ba5dba8f14b34430a0e565c62194b67130f9d07ad268ecaf549a86d8af5be6c8b6ee1be41f223b4c073e26b3aa79f56ccb195e79b2cf819d4a1ab3d178c39c54605dc9dc1270e3f95f5243e39664eb7e30c76d00f054c2802ccf094a707faa830f6b8494a9233d134f8e2b09590eb63bccdf9a17f74460dc83921f1a815d88560343937af5c7427497e23547d9374209e0596f80d06ac84b857b730d1b5284234e8ce1630b6634735e6260051656debaea70652b01ed0868dc667eadeeefef461aa981ab5346dd9477f34aac9279c0752de0b189b072064e372f3039c6c2b6781d142b04b6ee50506aa362aad988f5b6e80f367f31e1b16ffbed68461bec7e914534c9e47b8440a94d07b77c5a5f05c8ef0a852d73d9e0c5d368df8faa0e8a086509f679eb18031931c7b0cca4127f87c64080bdd080aa3636ec35cf444907bc49860c430bd3ee93ecf4f8d57b3900f5082550fbe112495fa9f724ca456bcfdeefe2471e662f7806d48fcdab667a90f5d7ed27ec4974966b32727a514812a53d3ff44298926084e91f7e017222d76b49fb9164245781daa0b2c76c83e2284acb8fafae1a5296b49e90fd0040acbb5e5cd5a74f3b339484c7c9d0489988809f705ccec4b04e5ea917323389db849a93996a08ef69f6ffa97fb5a25d1c08fcb62eb8229c81a4e70a81da1b5747bb9adc746f550cf00feed364eb7c94a91a79af1075c56cc9b968ef873673ad08658ce6948099f525a3e13bcaa414a9de0764ee19f487e63519b417f8bedbf55c8fd3139dd8385ed1df9d813035e562e00cd9171856a67d06c93d4d3b85f4fad7e46200588529e2d70a2695a2f8716ef636556cba53c2b465ae2542e9450fbe455ffcdd00d7bf5d1a8753decca05a687d074d4347e4f2d2460e84c09daa582524cb3e7f70569d6df56814fdce03d3507a35be2bcca6c56e76943b7b39f3f6aa03e8cda77b93fdb09f6f1516e16e9a4770c0573f6dc85a3cf95e71a7d355f4daa2a73fbc6c50f7e6bbf5af3b2caa524e0b380cf097ddfd82e53139744062eae936544a06968728a36cec6c338ffc4d28739a3fbd2b0150b81856446232c64b82abfff8339980daf06eb7c1d0cbeeb5209bf754d2013d0144486b8175b3bdefc13c57c8d91cfaa61197a720034f27ee15bb1f454b30b1043c15c02fedebd3978f3c68019000288d25aee77bac4928ed3b16c462f4458d4e0d5e5b4ad0e2a9b0edc9563b1e5cc5d8f0283f8feb1552249f6854ea04430acd3949328b6d109451260d9087d5098764b0a2c7b9bbf78adf286a6dd3fbc8f762e178c857a8e9c2fba9cbb335b434f1f7c04f89de9a253117c0ef6fb8ab975edb1c17cee71bea713b45aeeb504c165aef47856df5dcd946cf4622b44d7cfb60938f781c79985aababc470e3a456ec294122d9660cd92708cf6ecb5f9f1695463643f603a10bc38dfd8ed52ff89c92d3518becacda0b2c030fe50b2b9e698f68458a3fcc60d903ff7890a5368bee3d092c6b3b4815012a551a0cca380ef6923e9728b57fb2a1de6a7e36d055fcbaba86bef44c039493d9686741a9b5171105c69456de16d602e3bdd5f6a0a2abf674de8274b140961574f7528ef52d445512e3ab0e09dc5687a9f047812e3c6787dc7b689f18e7b3bba3f5f63132e7a89f2cb0046a79df15f440eb84b70ccd6e2b80f1d93aec9e5df9a15b31f1df211ff007f6a65c6f75cbc7df34ef5d1feb4db88356bbf5a36aacb4bb45d9b94dfc2f9830092c36560a2e9286326cf3126133bdd399cd88f88d1a479c2dfb25fa2f0e70fcb197b8b714e245cd1db2d25699061aaa93f6d5b20b1a82795dd46d4e2d6e6664ed0f4ae95d53ae6120ddb18c4ae70bba864f0180ee088d83554d83c9b12723cc3b8c119d74bd5664153e5161153fa47dbae2041421b2429d2c93f1d0101328bb0b3ed64a9065c65a24eb1240a2e8b192e0b6020ea0e6a2f099dd71edf575ac337623cbe033b54ad264b88ee6bd06614fb9f443b529e0a6ae970602a073889839e1b77d6048d59f8e3b84329a3477a9c8b9d6b252f58c5e1c2e279a7c6ec1b3b9cffe3896366f40a35148fb471a3f7cb5e0e6ce9bfe60e11903d458b209f090c2519005272ed8bd480d6ce649d4d1391f95b9cffe0fc6251c665ad761e55cfbb4357b46514f35040a98d6c7d930e34262f372e74195af0777e5dea2420e449d7985af0ea49a2604f4b5a383599f7985c0543494b8df392cf53067ff65dac7e36b4d16c71df98662392f1abe666d07134c0d5d6578a94ee45e33830ab0002bd5ebb4fed807b52c75cf9bba6920c8ada5fb0d962a82259c91c96909f63edf0b781ad76bf5cf6e79e9a1682a82a779e4b3b660e15e13f534e09fed7082c7f4b498a0e7e1a9c267cbbe112dced6589c2d431ef7d50381f4dcae07f57c2ee8b2467d6f5d0fb5c929f76f1bf224c83d276536923b44b0782d4ce437f6df3e288c6f525f61eef0abf28609d1608502951991cd0b2bf1a9ecdae97bb23f3e9fcef174fde9240033af13030611a11d66a4cf11dded8e7067e5ae48d65f3c8ab5e8f921eb390850e15d0c5c8e3c6742fe8e8fc6c8f4347b5278514fe24acd6ef07f8837aa8eed8a8a9fe771c05f6224796198979a7d39d60e5537412390345515ed75de04c5e3c6147a5aee1b021006d9a3b71bd668e28ab0e42138a5d3a40909968f2e11930a588088d5d4fdb2a61a964126eac5ff69d9ebe3d8fcfd3feeecf334cf9cb0ee42727ed3d04c99f5de3fd1970799325382ebf5cb75a969eba51f9ee76bc4e94e5dcd1f94e7bb36d3f208bcd0d164d85d25601e55afcbe808f96412bdb3d498acb50625e32d771f48ef85c6fc2eeebf0b54a5a41a8b9834a1d76325751db2caaec3a951f2c27978b63771d9d3459a3db6c0d752283b722035393c99d56683caadecc6069e54eeec28a837d2d02875d7cc20d7ebe0bdee769210c0f4087e1f891a843aa281510e98efb7b4b8c551c2573f48bd899a650d8e26b939855fbd944cd0f87f275e8a3c4cbb67fc2e45d1b841f837ca07a92a626600e0b348e8e854945c17f02e4b0a262d5a762862a81014ef66c79e115fc202c92e1aa68070080955131631f6e46a3b352c59ac52613ce2e8be4ba8ea2721b5aacc79e9efd1c3dc84e6515bf2abf7eb7904a60f3f679511bff6e4885044317984a0dde9479bdc497fb0c81b308dcf996c51327c0c8ba2668af88e141a1b180e160cb8724cbab0c78ea7ecfe670ce54aaa626faebcc1a360d1c283c72a46ce70816d3266598b19c20a9ac675a07b20ab8d1359017ac13a9d1506f19c3e33ea3826e208e65f5e407ad539bb1082dd66c7bfd61712550e994b2bb40b2e277d6bccc1d72e5683aa394eab7b3f7c6d9c9d6c1e304420de55709a81db405f64d6a7619b88451de52867bdf1494818271406b89ecd43df41d7afb148c9d76a697f9aed71fbc967a7ebe0bba2ddf1523df8d182612c5294071908a3868ee925862e268dcb6a826f9ac83f40a7cc84602345163cb7bbd3528da6ed9a446670023f14e49dbe1d0dafa6cf96a7a4c94f651025192f2b2bba732b6d85a249e889b3ff0889cdd85b3d26b0db275254cc6b0de7eb67b104f44b8a0a5353e21a1192e2c9ddb64e3650810e9627868caf2e8fa25c110104437476ef362aeff21f2ffae4ca4f4709b487776cbf2d95d249cb0c167f6caa09801567cee38e4d008529de602b0e769b69973a3d8873c164f9ee5e5c20e9f7e383f849072ac84576056c5292a5a80ebea1586cdef545d93b476da246fdb8c4938943c017ed0d9d3e89112033f8e5027c4bae8d38e7bff738cbcd0379ecba8e32dc28af812cf8ad37faeb9b7aeda3055fa91b66d8f3c4ad55737e0e1083116a72493267b0b56b808039de968c0a4da77d3d986e1b3b75fb81f65c579f4d4a3a11f835456f58b7e3860d6c6860c4d228e35d46d23be43377dbb5601a80976943bff932089087ecbd1010a074553509a0117e7dde3b5cce30d8c96b6c858ec1c82f53dc5fc1752b39458393b6dfe78d8b86a4205ebd8a13746ea2e84a2a719ae9b45ae70383f7619420cbd8e02731987bc0163988b3889355dba77228466c115921fdd946f6fe2bd492267cb688a3ee597951b65ea293448b4f11cbe1f30ec5549cd1fb59e6a02fe2ef413809e07ae7f1eb75922a20762e8772774522a3115fadc25363c0e346810a22edd6fc2af758874f090a7e332b664759b23a6708178a0f2490ee3b442d645f2e31b4de72e62a7306fb8e4f4cd81c2872ca81f7bea01006454a8078aff3ea26434bcdc7c01fe837ab0cc29ced5b39728664febfa65895558a0fafdad954edd7fe6a9e86a1aebdf70e2a7ba1a359c62d65dc9401979b4c4658cc51d06be24968743f396eac99735f864d608b06900cd2de0fd2f9c60501bcb7b25f94892a10b5be572b9b4a32fb67c10f980db35f1fb3e9ec36e5c81298497fb561c49207dc766fec3954f22322608f717ee7dd1e85b783c0b61f129aa4f39dedc7a595cd8336aa7e0bb0ac4255cf08244867181435022cbb4e4f894d24f07200dc600daec32e0c9c56a54eb187fa165a8da0485607e604114b331c13ee3b0a485212a8fb71dd4cc505cd0cb12549b07cfccc308a06a0a69cd3fbdb2babbefd49bba53d59765bb284ebb5f0a4a38d51f4d8b8606fea23f1114e47b37aad1b13d3bc43c9e608706d71ff78ac495ef5fea57587ce9e01434a7d78af09b319304041912c560ed947664473200be542c983f13b6d0be1ddcb5ed196d9bcf6d48458bc93d0e4bd7392e04a7732bd992ee41afd849a79bda1eb6b1f72ab33b475bb61f4182894a01d30c48a618c1bd1b3aac8fc939d206138b43fdb59bfe2b3eb52b36bd13f5c0957ca3a177796079f252a97be4b852fa942f1d992c93621462c0929f027cc5f7aa855ce049b758121c8e506ab8990e8a1049ed57fc49c125f0aa8f7efa1849f742a9a0c80c7d4d60b6d678dc0a7f5a5ed86c0ee17a6f8dbd205c21aabd6e36c606cf6e1dfa6b475c21c96338f73db1c6be0e9d2f7a78ec64f5166e0b5b5bbffe17a0c11c80d793e0b01fd251e52ef6f2f2d6223a8d9088f37588385ede0bab532fd3074ff5bea9634271f2bcf91dd0573374c11e83c31c11beb88140469ea60f50721162b9856f8a52d80911a59812b1d2ffaf6de0a1d8b53eeb8f3cad85eee6794a0560aa5145af1ab84e5dd96bb815bcd820c588bf92767170b771accff7f6ac9adf3794a05585513729f13f7d7d069dc35d90d103d9b085cdcdcf752d5af405e0149052e13681daeee19c1fddb2b7e2d924204ea63881a6b489a68701c98c517748b0fd3b6bf34bf991a76d77ea2242bad5ac2a0d96f7afe0b5555653dc32824313ff9c7533b31a10ee66313eef7a26298b1302f2f0199b38f970fef818adf99ed86289df53f4e4a68c06e55fe1207c77e1e5cfb2a8d2d470c467831fbebe00c79272975e6b9b580090082b91144bcd2a4cc47fa361641f22469e775ce377bceead0fd9d2cd665a83d7cecbdc95a4b18f93265724cd1a6c041544e5d2267338e9c6bf657b766ea49ed5e6952a6fdf0aadf1dceb9aec77421ecc67709edca5ba334c77f7996de6a309afdb287d7e05c35287e8a5206fc2cda6b2e33e3db9443fbbc805040cdd7c9ed76da6191cc92512cc920bcb161c8de", 0x1000}, {&(0x7f0000001600)="32ea927b48aef21ca39105353bc433442e06907dd0795750e4ceb66aaa877204ebb63487faef66c4d259a87994a596c9a1da95e6061afdc4092fe999673acbfe0e2f7269a0f8309d4ca5b051ca7fba3b20a0d8228f7e6f6c4bc5af5449f7425862f2f5723da1d4fee531d136fa94d4cced6ed7e872a1fa91ce2151b8bf789ab5d6662671b1b2b48473fb70f932d826b3ddc291391864a1e2788b647c27cb89f231a8bcabd45829c240deb157d3a4e660a63ecd529595b14445fee7efbf6dcfda3f2407d9fb201fde78b84fe3ee944cbc57550f6002a8b51c03b13bb1c9f3459f679d", 0xe2}], 0x7, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x2e3}, 0x1) 22:11:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000200)=0x5) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504d0debd74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000000065a0d41cbab8f356d67522bbedb642c048c288edf2a0a156d232052d2c7c1c27"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000440)={0x43, 0x1, 0x6}, 0x10) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000100)=0x60, 0x3cd3dbd48e1dd63a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fc) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000400)={{0x8, 0x62, 0x4, 0x4, 0x2, 0xe1}, 0xfc3e}) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 428.283078][T15767] FAULT_INJECTION: forcing a failure. [ 428.283078][T15767] name failslab, interval 1, probability 0, space 0, times 0 [ 428.345965][T15767] CPU: 1 PID: 15767 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 428.355907][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.365973][T15767] Call Trace: [ 428.369278][T15767] dump_stack+0x197/0x210 [ 428.373624][T15767] should_fail.cold+0xa/0x15 [ 428.378226][T15767] ? fault_create_debugfs_attr+0x180/0x180 [ 428.384046][T15767] ? ___might_sleep+0x163/0x2c0 [ 428.388907][T15767] __should_failslab+0x121/0x190 [ 428.393860][T15767] should_failslab+0x9/0x14 [ 428.398376][T15767] kmem_cache_alloc_node_trace+0x274/0x750 [ 428.404193][T15767] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 428.410181][T15767] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 428.416003][T15767] __kmalloc_node_track_caller+0x3d/0x70 [ 428.421734][T15767] __kmalloc_reserve.isra.0+0x40/0xf0 [ 428.427122][T15767] __alloc_skb+0x10b/0x5e0 [ 428.431546][T15767] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 428.437113][T15767] ? raw6_getfrag+0x164/0x230 [ 428.441806][T15767] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 428.447550][T15767] __ip6_append_data.isra.0+0x2c64/0x3950 [ 428.453297][T15767] ? rawv6_mh_filter_unregister+0x20/0x20 [ 428.459047][T15767] ? ip6_setup_cork+0x18f0/0x18f0 [ 428.464086][T15767] ? ip6_fraglist_init+0x8a0/0x8a0 [ 428.469213][T15767] ip6_append_data+0x1ec/0x330 [ 428.473987][T15767] ? rawv6_mh_filter_unregister+0x20/0x20 [ 428.479718][T15767] ? rawv6_mh_filter_unregister+0x20/0x20 [ 428.485455][T15767] rawv6_sendmsg+0x133e/0x36d0 [ 428.490232][T15767] ? lock_downgrade+0x920/0x920 [ 428.495089][T15767] ? rawv6_bind+0x9a0/0x9a0 [ 428.499630][T15767] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 428.505357][T15767] ? rw_copy_check_uvector+0x2ce/0x390 [ 428.510830][T15767] ? ___might_sleep+0x163/0x2c0 [ 428.515802][T15767] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.522070][T15767] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 428.527630][T15767] inet_sendmsg+0x9e/0xe0 [ 428.531978][T15767] ? inet_sendmsg+0x9e/0xe0 [ 428.536493][T15767] ? inet_send_prepare+0x4e0/0x4e0 [ 428.541613][T15767] sock_sendmsg+0xd7/0x130 [ 428.546040][T15767] ___sys_sendmsg+0x3e2/0x920 [ 428.550737][T15767] ? copy_msghdr_from_user+0x440/0x440 [ 428.556210][T15767] ? lock_downgrade+0x920/0x920 [ 428.561075][T15767] ? rcu_read_lock_held+0x9c/0xb0 [ 428.566250][T15767] ? __kasan_check_read+0x11/0x20 [ 428.571288][T15767] ? __fget+0x37f/0x550 [ 428.575455][T15767] ? ksys_dup3+0x3e0/0x3e0 [ 428.580106][T15767] ? find_held_lock+0x35/0x130 [ 428.584888][T15767] ? get_pid_task+0xc9/0x180 [ 428.589493][T15767] ? __fget_light+0x1a9/0x230 [ 428.594186][T15767] ? __fdget+0x1b/0x20 [ 428.598271][T15767] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.604536][T15767] ? sockfd_lookup_light+0xcb/0x180 [ 428.609836][T15767] __sys_sendmmsg+0x1bf/0x4d0 [ 428.614528][T15767] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 428.619693][T15767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 428.625946][T15767] ? fput_many+0x12c/0x1a0 [ 428.630370][T15767] ? fput+0x1b/0x20 [ 428.634192][T15767] ? ksys_write+0x1cf/0x290 [ 428.638708][T15767] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 428.644274][T15767] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 428.649749][T15767] ? do_syscall_64+0x26/0x790 [ 428.654437][T15767] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.660515][T15767] ? do_syscall_64+0x26/0x790 [ 428.665208][T15767] __x64_sys_sendmmsg+0x9d/0x100 [ 428.670161][T15767] do_syscall_64+0xfa/0x790 [ 428.674808][T15767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.680708][T15767] RIP: 0033:0x45a639 [ 428.684615][T15767] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.704226][T15767] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 428.712653][T15767] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 428.720777][T15767] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 428.728769][T15767] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.736751][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 428.744743][T15767] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 428.752902][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.758806][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 428.929782][T15764] IPVS: Unknown mcast interface: yam0 22:11:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x02\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85513, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:11 executing program 4 (fault-call:6 fault-nth:31): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x0, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ff0802800000080039503230305f6a2c1737ad4b2c86efe18b0e302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba09a80b85030000000621d6234555c08dc5404737530089e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537ff00000000000000f4f6b59c41705b96a6711d4679079d00"/150], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x9050c) 22:11:11 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$unix(0x1, 0x1, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r3 = socket(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = getuid() ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000380)={0x3, @default, r6}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast1, @in=@empty}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0x40405515, &(0x7f0000000200)={0x1, 0x3, 0x9, 0x9, '\x00', 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}, {@access_user='access=user'}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@fscache='fscache'}], [{@dont_hash='dont_hash'}, {@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, 'wfdno'}}, {@smackfshat={'smackfshat', 0x3d, 'bdevlouserem1'}}, {@fsuuid={'#\x83\x0e\x02\x81d', 0x3d, {[0x64, 0x32, 0x46, 0x30, 0x34, 0x986bdc16cfab9846, 0x62, 0x57], 0x2d, [0x30, 0x2c, 0x38, 0x91], 0x2d, [0x32, 0x66, 0x66, 0x30], 0x2d, [0x33, 0x93b63853d8ab033c, 0x38, 0x36], 0x2d, [0x66, 0x38, 0x31, 0x62, 0x5d, 0x37, 0x0, 0x32]}}}, {@uid_lt={'uid<', r2}}]}}) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000001c0)=0x8230100) 22:11:11 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0x500) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000480)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e22, 0x7, @rand_addr="b0c3b608693d4f0907fa1473a67540d7"}, 0x1c) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={[], 0xa903, 0x7, 0x0, 0x0, 0x0, 0x5000, 0x10000, [], 0x4}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_dccp_buf(r7, 0x21, 0x0, &(0x7f0000000400)="bbea8594d9bd1a293c10da99799770faa8eb5c16fa432d48e75f5202d27e30abb3f62f4bc319661ed8ef4ad5e9b7db10be3f47e4f54cad3e53e7a0e8dea1407e9a64835caa4facbf433245e2423104bf4dcdd9ca", 0x54) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000507000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001200080001007674690014000200080005007f00000108000100", @ANYRES32=r8], 0x40}}, 0x0) [ 429.057542][T15792] FAULT_INJECTION: forcing a failure. [ 429.057542][T15792] name failslab, interval 1, probability 0, space 0, times 0 [ 429.078503][T15792] CPU: 1 PID: 15792 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 429.088461][T15792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.099102][T15792] Call Trace: 22:11:11 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}]) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000000)=ANY=[]], 0x3}}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) creat(&(0x7f00000001c0)='./file0\x00', 0xc35d11096b259fb3) syz_read_part_table(0x0, 0x0, 0x0) 22:11:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x03\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 429.099128][T15792] dump_stack+0x197/0x210 [ 429.099152][T15792] should_fail.cold+0xa/0x15 [ 429.099171][T15792] ? fault_create_debugfs_attr+0x180/0x180 [ 429.099191][T15792] ? ___might_sleep+0x163/0x2c0 [ 429.099209][T15792] __should_failslab+0x121/0x190 [ 429.099236][T15792] should_failslab+0x9/0x14 [ 429.099252][T15792] kmem_cache_alloc_node_trace+0x274/0x750 [ 429.099272][T15792] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 429.099287][T15792] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 429.099310][T15792] __kmalloc_node_track_caller+0x3d/0x70 [ 429.099328][T15792] __kmalloc_reserve.isra.0+0x40/0xf0 [ 429.099345][T15792] __alloc_skb+0x10b/0x5e0 [ 429.099362][T15792] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 429.099379][T15792] ? raw6_getfrag+0x164/0x230 [ 429.099393][T15792] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 429.099412][T15792] __ip6_append_data.isra.0+0x2c64/0x3950 [ 429.099432][T15792] ? rawv6_mh_filter_unregister+0x20/0x20 [ 429.099459][T15792] ? ip6_setup_cork+0x18f0/0x18f0 [ 429.099476][T15792] ? ip6_fraglist_init+0x8a0/0x8a0 [ 429.099495][T15792] ip6_append_data+0x1ec/0x330 [ 429.099509][T15792] ? rawv6_mh_filter_unregister+0x20/0x20 [ 429.099528][T15792] ? rawv6_mh_filter_unregister+0x20/0x20 [ 429.099546][T15792] rawv6_sendmsg+0x133e/0x36d0 [ 429.099564][T15792] ? lock_downgrade+0x920/0x920 22:11:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x04\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 429.099585][T15792] ? rawv6_bind+0x9a0/0x9a0 [ 429.099610][T15792] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 429.099625][T15792] ? rw_copy_check_uvector+0x2ce/0x390 [ 429.099650][T15792] ? ___might_sleep+0x163/0x2c0 [ 429.099666][T15792] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.099696][T15792] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 429.099716][T15792] inet_sendmsg+0x9e/0xe0 [ 429.099729][T15792] ? inet_sendmsg+0x9e/0xe0 [ 429.099743][T15792] ? inet_send_prepare+0x4e0/0x4e0 [ 429.099758][T15792] sock_sendmsg+0xd7/0x130 [ 429.099774][T15792] ___sys_sendmsg+0x3e2/0x920 [ 429.099791][T15792] ? copy_msghdr_from_user+0x440/0x440 [ 429.099808][T15792] ? lock_downgrade+0x920/0x920 [ 429.099825][T15792] ? rcu_read_lock_held+0x9c/0xb0 [ 429.099843][T15792] ? __kasan_check_read+0x11/0x20 [ 429.099862][T15792] ? __fget+0x37f/0x550 [ 429.099883][T15792] ? ksys_dup3+0x3e0/0x3e0 [ 429.099897][T15792] ? find_held_lock+0x35/0x130 [ 429.099912][T15792] ? get_pid_task+0xc9/0x180 [ 429.099931][T15792] ? __fget_light+0x1a9/0x230 [ 429.099947][T15792] ? __fdget+0x1b/0x20 22:11:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:11 executing program 4 (fault-call:6 fault-nth:32): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 429.099961][T15792] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.099975][T15792] ? sockfd_lookup_light+0xcb/0x180 [ 429.099993][T15792] __sys_sendmmsg+0x1bf/0x4d0 [ 429.100013][T15792] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 429.100046][T15792] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.100058][T15792] ? fput_many+0x12c/0x1a0 [ 429.100071][T15792] ? fput+0x1b/0x20 [ 429.100086][T15792] ? ksys_write+0x1cf/0x290 [ 429.100105][T15792] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.100120][T15792] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.100134][T15792] ? do_syscall_64+0x26/0x790 [ 429.100150][T15792] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.100163][T15792] ? do_syscall_64+0x26/0x790 [ 429.100183][T15792] __x64_sys_sendmmsg+0x9d/0x100 [ 429.100200][T15792] do_syscall_64+0xfa/0x790 [ 429.100227][T15792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.100240][T15792] RIP: 0033:0x45a639 [ 429.100257][T15792] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 429.100265][T15792] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.100281][T15792] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 429.100290][T15792] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 429.100299][T15792] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 429.100307][T15792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 22:11:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x0, &(0x7f0000000040)) 22:11:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x05\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 429.100315][T15792] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 429.535228][T15819] FAULT_INJECTION: forcing a failure. [ 429.535228][T15819] name failslab, interval 1, probability 0, space 0, times 0 [ 429.598051][T15819] CPU: 0 PID: 15819 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 429.608146][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.618337][T15819] Call Trace: [ 429.621658][T15819] dump_stack+0x197/0x210 [ 429.626028][T15819] should_fail.cold+0xa/0x15 [ 429.630656][T15819] ? fault_create_debugfs_attr+0x180/0x180 [ 429.636614][T15819] ? ___might_sleep+0x163/0x2c0 [ 429.641505][T15819] __should_failslab+0x121/0x190 [ 429.646475][T15819] should_failslab+0x9/0x14 [ 429.651004][T15819] kmem_cache_alloc_node_trace+0x274/0x750 [ 429.657012][T15819] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 429.663019][T15819] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 429.668862][T15819] __kmalloc_node_track_caller+0x3d/0x70 [ 429.674530][T15819] __kmalloc_reserve.isra.0+0x40/0xf0 [ 429.679933][T15819] __alloc_skb+0x10b/0x5e0 [ 429.684400][T15819] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 429.689970][T15819] ? raw6_getfrag+0x164/0x230 [ 429.694664][T15819] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 429.694688][T15819] __ip6_append_data.isra.0+0x2c64/0x3950 [ 429.694711][T15819] ? rawv6_mh_filter_unregister+0x20/0x20 [ 429.694735][T15819] ? ip6_setup_cork+0x18f0/0x18f0 [ 429.706285][T15819] ? ip6_fraglist_init+0x8a0/0x8a0 [ 429.706307][T15819] ip6_append_data+0x1ec/0x330 [ 429.706322][T15819] ? rawv6_mh_filter_unregister+0x20/0x20 [ 429.706377][T15819] ? rawv6_mh_filter_unregister+0x20/0x20 [ 429.717308][T15819] rawv6_sendmsg+0x133e/0x36d0 [ 429.727362][T15819] ? lock_downgrade+0x920/0x920 [ 429.727388][T15819] ? rawv6_bind+0x9a0/0x9a0 [ 429.727422][T15819] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 429.738982][T15819] ? rw_copy_check_uvector+0x2ce/0x390 [ 429.739013][T15819] ? ___might_sleep+0x163/0x2c0 [ 429.739031][T15819] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.739059][T15819] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 429.739079][T15819] inet_sendmsg+0x9e/0xe0 [ 429.753277][T15819] ? inet_sendmsg+0x9e/0xe0 [ 429.769477][T15819] ? inet_send_prepare+0x4e0/0x4e0 [ 429.790708][T15819] sock_sendmsg+0xd7/0x130 [ 429.790726][T15819] ___sys_sendmsg+0x3e2/0x920 [ 429.790744][T15819] ? copy_msghdr_from_user+0x440/0x440 [ 429.790763][T15819] ? lock_downgrade+0x920/0x920 [ 429.790782][T15819] ? rcu_read_lock_held+0x9c/0xb0 [ 429.790801][T15819] ? __kasan_check_read+0x11/0x20 [ 429.790817][T15819] ? __fget+0x37f/0x550 [ 429.790836][T15819] ? ksys_dup3+0x3e0/0x3e0 [ 429.800512][T15819] ? find_held_lock+0x35/0x130 [ 429.800528][T15819] ? get_pid_task+0xc9/0x180 22:11:12 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x06\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 429.800549][T15819] ? __fget_light+0x1a9/0x230 [ 429.800566][T15819] ? __fdget+0x1b/0x20 [ 429.800581][T15819] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.800595][T15819] ? sockfd_lookup_light+0xcb/0x180 [ 429.800617][T15819] __sys_sendmmsg+0x1bf/0x4d0 [ 429.810736][T15819] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 429.810774][T15819] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.810786][T15819] ? fput_many+0x12c/0x1a0 [ 429.810799][T15819] ? fput+0x1b/0x20 [ 429.810814][T15819] ? ksys_write+0x1cf/0x290 22:11:12 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\a\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 429.810835][T15819] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.902237][T15819] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.902255][T15819] ? do_syscall_64+0x26/0x790 [ 429.902272][T15819] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.902289][T15819] ? do_syscall_64+0x26/0x790 [ 429.902311][T15819] __x64_sys_sendmmsg+0x9d/0x100 [ 429.928570][T15819] do_syscall_64+0xfa/0x790 [ 429.933105][T15819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.939005][T15819] RIP: 0033:0x45a639 [ 429.939020][T15819] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 429.939027][T15819] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.939039][T15819] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 429.939048][T15819] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 429.939055][T15819] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:11:12 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e5c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7473921d3c0d9740b3be84b0315cc4c6dcacad12b44be5ead366640dfefead9694c91d5e3b62f5fb8a352e261a9762dd13aaa4af3e51e253cb42ab6e60cd2b0b38cd61ee1968eda3e44d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/229, 0xe5) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) getdents64(r3, 0x0, 0x0) [ 429.939069][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 429.962976][T15819] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:12 executing program 4 (fault-call:6 fault-nth:33): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:12 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\b\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) io_submit(r1, 0x0, &(0x7f00000000c0)) 22:11:12 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x5d57, 0x7, 0x80}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r2, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000440)={0x0, @win={{0x20, 0x9, 0x1, 0x9}, 0x3, 0x80000001, &(0x7f0000000380)={{0x9, 0x4, 0xe78f, 0x2ca}, &(0x7f0000000340)={{0x1, 0xffffffff, 0x0, 0x83}, &(0x7f0000000180)={{0x6aa43c07, 0x80, 0x23, 0x3}}}}, 0x0, &(0x7f00000003c0)="5e7bc46c64c4b75c5491e2ce3c2b0b735b42cbc4b88c4c9dc1b16da4fcc1175a137f6d4472ded16de4468a545e62ceea172505ca88a7d3dccb151a383ac8815a4fabe6", 0xa8}}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c}, 0x1c}}, 0x4000) io_setup(0xd, &(0x7f00000001c0)=0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000200)="05", 0x1}]) fsetxattr$security_smack_transmute(r8, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x0) close(r2) 22:11:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:12 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x03\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 430.280270][T15857] FAULT_INJECTION: forcing a failure. [ 430.280270][T15857] name failslab, interval 1, probability 0, space 0, times 0 [ 430.338967][T15857] CPU: 1 PID: 15857 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 430.348937][T15857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.359222][T15857] Call Trace: [ 430.362538][T15857] dump_stack+0x197/0x210 [ 430.367075][T15857] should_fail.cold+0xa/0x15 [ 430.371697][T15857] ? fault_create_debugfs_attr+0x180/0x180 [ 430.377545][T15857] ? ___might_sleep+0x163/0x2c0 [ 430.382603][T15857] __should_failslab+0x121/0x190 [ 430.387572][T15857] should_failslab+0x9/0x14 [ 430.392103][T15857] kmem_cache_alloc_node_trace+0x274/0x750 [ 430.398123][T15857] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 430.404361][T15857] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 430.410296][T15857] __kmalloc_node_track_caller+0x3d/0x70 [ 430.416064][T15857] __kmalloc_reserve.isra.0+0x40/0xf0 [ 430.421572][T15857] __alloc_skb+0x10b/0x5e0 [ 430.426018][T15857] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 430.431680][T15857] ? raw6_getfrag+0x164/0x230 [ 430.436474][T15857] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 430.442222][T15857] __ip6_append_data.isra.0+0x2c64/0x3950 [ 430.448146][T15857] ? rawv6_mh_filter_unregister+0x20/0x20 [ 430.454011][T15857] ? ip6_setup_cork+0x18f0/0x18f0 [ 430.459060][T15857] ? ip6_fraglist_init+0x8a0/0x8a0 [ 430.464203][T15857] ip6_append_data+0x1ec/0x330 [ 430.468987][T15857] ? rawv6_mh_filter_unregister+0x20/0x20 [ 430.474823][T15857] ? rawv6_mh_filter_unregister+0x20/0x20 [ 430.480574][T15857] rawv6_sendmsg+0x133e/0x36d0 [ 430.485369][T15857] ? lock_downgrade+0x920/0x920 [ 430.490249][T15857] ? rawv6_bind+0x9a0/0x9a0 [ 430.494790][T15857] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 430.500562][T15857] ? rw_copy_check_uvector+0x2ce/0x390 [ 430.500967][ T26] audit: type=1800 audit(1574633472.867:87): pid=15863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17249 res=0 [ 430.506472][T15857] ? ___might_sleep+0x163/0x2c0 [ 430.506493][T15857] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.506524][T15857] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 430.543996][T15857] inet_sendmsg+0x9e/0xe0 [ 430.548349][T15857] ? inet_sendmsg+0x9e/0xe0 [ 430.552966][T15857] ? inet_send_prepare+0x4e0/0x4e0 [ 430.558101][T15857] sock_sendmsg+0xd7/0x130 [ 430.562631][T15857] ___sys_sendmsg+0x3e2/0x920 [ 430.567357][T15857] ? copy_msghdr_from_user+0x440/0x440 [ 430.572967][T15857] ? lock_downgrade+0x920/0x920 [ 430.577840][T15857] ? rcu_read_lock_held+0x9c/0xb0 [ 430.582979][T15857] ? __kasan_check_read+0x11/0x20 [ 430.588137][T15857] ? __fget+0x37f/0x550 [ 430.592492][T15857] ? ksys_dup3+0x3e0/0x3e0 [ 430.596936][T15857] ? find_held_lock+0x35/0x130 [ 430.601719][T15857] ? get_pid_task+0xc9/0x180 [ 430.606424][T15857] ? __fget_light+0x1a9/0x230 [ 430.611285][T15857] ? __fdget+0x1b/0x20 [ 430.615377][T15857] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.622380][T15857] ? sockfd_lookup_light+0xcb/0x180 [ 430.627598][T15857] __sys_sendmmsg+0x1bf/0x4d0 [ 430.632475][T15857] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 430.637830][T15857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 430.644091][T15857] ? fput_many+0x12c/0x1a0 [ 430.645843][ T26] audit: type=1804 audit(1574633472.907:88): pid=15863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir114212030/syzkaller.TOImiz/251/file0" dev="sda1" ino=17249 res=1 [ 430.648515][T15857] ? fput+0x1b/0x20 [ 430.648539][T15857] ? ksys_write+0x1cf/0x290 [ 430.648557][T15857] ? trace_hardirqs_on_thunk+0x1a/0x1c 22:11:12 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000002) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x400, 0x9) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000140)={[0x4000, 0x8000, 0x100000, 0x53e37a78a6a5154b], 0xdf8d, 0x2, 0x26e}) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800c00) 22:11:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r9, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r11, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r12, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r13, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r14, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r15, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r16, &(0x7f0000000200)="05", 0x1}]) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x2da, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRESOCT=r2, @ANYRES32, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYPTR64, @ANYRES16=0x0, @ANYPTR, @ANYRES32=r3, @ANYRESDEC, @ANYRESHEX], @ANYRES64=r6, @ANYRES32=r8, @ANYRES16, @ANYRES64=r9, @ANYRESDEC=0x0, @ANYRES16=r16, @ANYRESDEC=r11, @ANYRES64=r7, @ANYRESOCT=r13]]], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r17 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="f30f09b8be6a43e50f23c80f21f835040090000f23f8c4c2052cb20000010066b844008ed066ba4200ecc4c179141fc4c20dbad4b8010000000f01d90f0139b805000000b900209e0d0f01c1", 0x4c}], 0x1, 0x0, 0x0, 0x0) r18 = ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r18, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r18, 0xae80, 0x0) 22:11:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 430.648570][T15857] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 430.648584][T15857] ? do_syscall_64+0x26/0x790 [ 430.648600][T15857] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.648613][T15857] ? do_syscall_64+0x26/0x790 [ 430.648640][T15857] __x64_sys_sendmmsg+0x9d/0x100 [ 430.713768][T15857] do_syscall_64+0xfa/0x790 [ 430.718341][T15857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.724574][T15857] RIP: 0033:0x45a639 22:11:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x143c20, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x76) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 430.728479][T15857] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.728487][T15857] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 430.728503][T15857] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 430.728512][T15857] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 430.728521][T15857] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 430.728534][T15857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 430.728542][T15857] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:13 executing program 4 (fault-call:6 fault-nth:34): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x05\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 431.020304][ T26] audit: type=1804 audit(1574633473.387:89): pid=15866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir114212030/syzkaller.TOImiz/251/file0" dev="sda1" ino=17249 res=1 [ 431.094108][T15885] FAULT_INJECTION: forcing a failure. [ 431.094108][T15885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.107375][T15885] CPU: 1 PID: 15885 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 431.117576][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.120594][ T26] audit: type=1804 audit(1574633473.417:90): pid=15863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir114212030/syzkaller.TOImiz/251/file0" dev="sda1" ino=17249 res=1 [ 431.127829][T15885] Call Trace: [ 431.127857][T15885] dump_stack+0x197/0x210 [ 431.127880][T15885] should_fail.cold+0xa/0x15 [ 431.164884][T15885] ? fault_create_debugfs_attr+0x180/0x180 [ 431.170955][T15885] ? __kasan_check_read+0x11/0x20 [ 431.176243][T15885] ? __lock_acquire+0x16f2/0x4a00 [ 431.181457][T15885] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 431.187473][T15885] should_fail_alloc_page+0x50/0x60 [ 431.192822][T15885] __alloc_pages_nodemask+0x1a1/0x910 [ 431.198408][T15885] ? fs_reclaim_release+0xf/0x30 [ 431.203378][T15885] ? __alloc_pages_slowpath+0x2900/0x2900 [ 431.209217][T15885] ? fs_reclaim_release+0xf/0x30 [ 431.214191][T15885] ? fault_create_debugfs_attr+0x180/0x180 [ 431.220265][T15885] cache_grow_begin+0x90/0xc60 [ 431.225051][T15885] ? __kmalloc_node_track_caller+0x3d/0x70 [ 431.230964][T15885] ? trace_hardirqs_off+0x62/0x240 [ 431.236238][T15885] kmem_cache_alloc_node_trace+0x689/0x750 22:11:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x300, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x06\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 431.242083][T15885] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 431.248235][T15885] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 431.254163][T15885] __kmalloc_node_track_caller+0x3d/0x70 [ 431.260683][T15885] __kmalloc_reserve.isra.0+0x40/0xf0 [ 431.266070][T15885] __alloc_skb+0x10b/0x5e0 [ 431.270491][T15885] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 431.270507][T15885] ? raw6_getfrag+0x164/0x230 [ 431.270521][T15885] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 431.270542][T15885] __ip6_append_data.isra.0+0x2c64/0x3950 [ 431.270560][T15885] ? rawv6_mh_filter_unregister+0x20/0x20 [ 431.270585][T15885] ? ip6_setup_cork+0x18f0/0x18f0 [ 431.270601][T15885] ? ip6_fraglist_init+0x8a0/0x8a0 [ 431.270623][T15885] ip6_append_data+0x1ec/0x330 [ 431.313545][T15885] ? rawv6_mh_filter_unregister+0x20/0x20 [ 431.319295][T15885] ? rawv6_mh_filter_unregister+0x20/0x20 [ 431.325162][T15885] rawv6_sendmsg+0x133e/0x36d0 [ 431.330061][T15885] ? lock_downgrade+0x920/0x920 [ 431.335088][T15885] ? rawv6_bind+0x9a0/0x9a0 22:11:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x500, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\a\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 431.339627][T15885] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 431.345370][T15885] ? rw_copy_check_uvector+0x2ce/0x390 [ 431.350861][T15885] ? ___might_sleep+0x163/0x2c0 [ 431.355749][T15885] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.362030][T15885] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 431.367606][T15885] inet_sendmsg+0x9e/0xe0 [ 431.372041][T15885] ? inet_sendmsg+0x9e/0xe0 [ 431.376669][T15885] ? inet_send_prepare+0x4e0/0x4e0 [ 431.381797][T15885] sock_sendmsg+0xd7/0x130 [ 431.386237][T15885] ___sys_sendmsg+0x3e2/0x920 [ 431.390953][T15885] ? copy_msghdr_from_user+0x440/0x440 [ 431.396432][T15885] ? lock_downgrade+0x920/0x920 [ 431.401294][T15885] ? rcu_read_lock_held+0x9c/0xb0 [ 431.401312][T15885] ? __kasan_check_read+0x11/0x20 [ 431.401330][T15885] ? __fget+0x37f/0x550 [ 431.401350][T15885] ? ksys_dup3+0x3e0/0x3e0 [ 431.415650][T15885] ? find_held_lock+0x35/0x130 [ 431.424829][T15885] ? get_pid_task+0xc9/0x180 [ 431.429461][T15885] ? __fget_light+0x1a9/0x230 [ 431.434350][T15885] ? __fdget+0x1b/0x20 [ 431.438586][T15885] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.444846][T15885] ? sockfd_lookup_light+0xcb/0x180 [ 431.450070][T15885] __sys_sendmmsg+0x1bf/0x4d0 [ 431.454782][T15885] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 431.459844][T15885] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 431.466122][T15885] ? fput_many+0x12c/0x1a0 [ 431.470557][T15885] ? fput+0x1b/0x20 [ 431.474403][T15885] ? ksys_write+0x1cf/0x290 [ 431.478927][T15885] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 431.484404][T15885] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 431.490039][T15885] ? do_syscall_64+0x26/0x790 [ 431.494818][T15885] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.500897][T15885] ? do_syscall_64+0x26/0x790 [ 431.505879][T15885] __x64_sys_sendmmsg+0x9d/0x100 [ 431.511032][T15885] do_syscall_64+0xfa/0x790 [ 431.515571][T15885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.521473][T15885] RIP: 0033:0x45a639 [ 431.521488][T15885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:11:13 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:11:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x600, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 431.521495][T15885] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 431.521508][T15885] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 431.521516][T15885] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 431.521523][T15885] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 431.521530][T15885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 431.521537][T15885] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000005c9ae697d43c6c321010000", @ANYRES32=r2, @ANYBLOB="14000100ff01000000000000000000000000000114000600f2000000ffffffff0000000000000000"], 0x40}}, 0x0) 22:11:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00@\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x700, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:14 executing program 4 (fault-call:6 fault-nth:35): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\xff\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x4000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 431.880313][T15924] FAULT_INJECTION: forcing a failure. [ 431.880313][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 431.917058][T15924] CPU: 1 PID: 15924 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 431.927153][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.937325][T15924] Call Trace: [ 431.940728][T15924] dump_stack+0x197/0x210 [ 431.945092][T15924] should_fail.cold+0xa/0x15 [ 431.949716][T15924] ? fault_create_debugfs_attr+0x180/0x180 [ 431.955683][T15924] ? ___might_sleep+0x163/0x2c0 [ 431.960562][T15924] __should_failslab+0x121/0x190 [ 431.965794][T15924] should_failslab+0x9/0x14 [ 431.970453][T15924] kmem_cache_alloc_node+0x268/0x740 [ 431.975756][T15924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.982019][T15924] ? ip_generic_getfrag+0x144/0x260 [ 431.987263][T15924] __alloc_skb+0xd5/0x5e0 [ 431.991792][T15924] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 431.997475][T15924] ? raw6_getfrag+0x164/0x230 [ 432.002175][T15924] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.008159][T15924] __ip6_append_data.isra.0+0x2c64/0x3950 [ 432.013906][T15924] ? rawv6_mh_filter_unregister+0x20/0x20 [ 432.019668][T15924] ? ip6_setup_cork+0x18f0/0x18f0 [ 432.024799][T15924] ? ip6_fraglist_init+0x8a0/0x8a0 22:11:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0xff00, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 432.029945][T15924] ip6_append_data+0x1ec/0x330 [ 432.034727][T15924] ? rawv6_mh_filter_unregister+0x20/0x20 [ 432.040472][T15924] ? rawv6_mh_filter_unregister+0x20/0x20 [ 432.046216][T15924] rawv6_sendmsg+0x133e/0x36d0 [ 432.052222][T15924] ? lock_downgrade+0x920/0x920 [ 432.057111][T15924] ? rawv6_bind+0x9a0/0x9a0 [ 432.061895][T15924] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 432.067727][T15924] ? rw_copy_check_uvector+0x2ce/0x390 [ 432.073665][T15924] ? ___might_sleep+0x163/0x2c0 22:11:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x1000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 432.078680][T15924] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.085254][T15924] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 432.090821][T15924] inet_sendmsg+0x9e/0xe0 [ 432.095275][T15924] ? inet_sendmsg+0x9e/0xe0 [ 432.099800][T15924] ? inet_send_prepare+0x4e0/0x4e0 [ 432.104946][T15924] sock_sendmsg+0xd7/0x130 [ 432.109481][T15924] ___sys_sendmsg+0x3e2/0x920 [ 432.114358][T15924] ? copy_msghdr_from_user+0x440/0x440 [ 432.119896][T15924] ? lock_downgrade+0x920/0x920 [ 432.124771][T15924] ? rcu_read_lock_held+0x9c/0xb0 22:11:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x2000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 432.129837][T15924] ? __kasan_check_read+0x11/0x20 [ 432.134970][T15924] ? __fget+0x37f/0x550 [ 432.139151][T15924] ? ksys_dup3+0x3e0/0x3e0 [ 432.143588][T15924] ? find_held_lock+0x35/0x130 [ 432.148365][T15924] ? get_pid_task+0xc9/0x180 [ 432.152978][T15924] ? __fget_light+0x1a9/0x230 [ 432.157667][T15924] ? __fdget+0x1b/0x20 [ 432.161744][T15924] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.168000][T15924] ? sockfd_lookup_light+0xcb/0x180 [ 432.173222][T15924] __sys_sendmmsg+0x1bf/0x4d0 [ 432.177925][T15924] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 432.183127][T15924] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 432.189379][T15924] ? fput_many+0x12c/0x1a0 [ 432.193813][T15924] ? fput+0x1b/0x20 [ 432.197725][T15924] ? ksys_write+0x1cf/0x290 [ 432.198333][ C0] net_ratelimit: 4 callbacks suppressed [ 432.198341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 432.202247][T15924] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.202263][T15924] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.202278][T15924] ? do_syscall_64+0x26/0x790 [ 432.202299][T15924] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.207878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 432.213778][T15924] ? do_syscall_64+0x26/0x790 [ 432.213799][T15924] __x64_sys_sendmmsg+0x9d/0x100 [ 432.213815][T15924] do_syscall_64+0xfa/0x790 [ 432.213833][T15924] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.213848][T15924] RIP: 0033:0x45a639 [ 432.266423][T15924] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 432.278374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 432.286806][T15924] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 432.292668][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 432.301075][T15924] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 432.301083][T15924] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 432.301090][T15924] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 432.301097][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 432.301104][T15924] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 432.301744][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 432.323317][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:14 executing program 1: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4000020032, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xff7, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001ac0)) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000000907031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 22:11:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x3000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:14 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0xa1493c1701022a07) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140), 0x4) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x2, 0x78e, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x6, 0x4}, 0x200009014, 0x2, 0x2, 0x0, 0xffffffffffffffa4, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xf24e96747c77a445) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) 22:11:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x01\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) clock_adjtime(0x2, &(0x7f0000000180)={0x4, 0xfa33, 0xc9, 0x80000000, 0x7, 0x5, 0x9, 0xfffffffffffffffd, 0x8, 0x2, 0x4fff, 0x7, 0x47, 0x1, 0x4, 0x3f, 0x6, 0x9, 0x18b, 0x5, 0x1, 0x4, 0x1, 0x5, 0x1000, 0x9}) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:14 executing program 4 (fault-call:6 fault-nth:36): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 432.586748][T15947] FAULT_INJECTION: forcing a failure. [ 432.586748][T15947] name failslab, interval 1, probability 0, space 0, times 0 22:11:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x02\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 432.649325][T15947] CPU: 0 PID: 15947 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 432.659393][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.669682][T15947] Call Trace: [ 432.673066][T15947] dump_stack+0x197/0x210 [ 432.677524][T15947] should_fail.cold+0xa/0x15 [ 432.682411][T15947] ? fault_create_debugfs_attr+0x180/0x180 [ 432.688397][T15947] ? ___might_sleep+0x163/0x2c0 [ 432.693402][T15947] __should_failslab+0x121/0x190 [ 432.698372][T15947] should_failslab+0x9/0x14 [ 432.698389][T15947] kmem_cache_alloc_node_trace+0x274/0x750 [ 432.698406][T15947] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 432.698421][T15947] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 432.698441][T15947] __kmalloc_node_track_caller+0x3d/0x70 [ 432.698461][T15947] __kmalloc_reserve.isra.0+0x40/0xf0 [ 432.732663][T15947] __alloc_skb+0x10b/0x5e0 [ 432.737111][T15947] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 432.742685][T15947] ? raw6_getfrag+0x164/0x230 22:11:15 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f84247308000000cb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) pipe2$9p(&(0x7f00000005c0), 0xc0000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x202000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0xe850f50af522f5d) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x20000401}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x3c, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x0, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000151}, 0x800) fcntl$dupfd(r2, 0x605, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) [ 432.747559][T15947] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.753448][T15947] __ip6_append_data.isra.0+0x2c64/0x3950 [ 432.759235][T15947] ? rawv6_mh_filter_unregister+0x20/0x20 [ 432.765089][T15947] ? ip6_setup_cork+0x18f0/0x18f0 [ 432.770140][T15947] ? ip6_fraglist_init+0x8a0/0x8a0 [ 432.775562][T15947] ip6_append_data+0x1ec/0x330 [ 432.780350][T15947] ? rawv6_mh_filter_unregister+0x20/0x20 [ 432.786100][T15947] ? rawv6_mh_filter_unregister+0x20/0x20 [ 432.791845][T15947] rawv6_sendmsg+0x133e/0x36d0 22:11:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x03\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 432.796733][T15947] ? lock_downgrade+0x920/0x920 [ 432.801800][T15947] ? rawv6_bind+0x9a0/0x9a0 [ 432.806361][T15947] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 432.812339][T15947] ? rw_copy_check_uvector+0x2ce/0x390 [ 432.817840][T15947] ? ___might_sleep+0x163/0x2c0 [ 432.822718][T15947] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.829440][T15947] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 432.835562][T15947] inet_sendmsg+0x9e/0xe0 [ 432.840201][T15947] ? inet_sendmsg+0x9e/0xe0 [ 432.844848][T15947] ? inet_send_prepare+0x4e0/0x4e0 [ 432.850001][T15947] sock_sendmsg+0xd7/0x130 [ 432.854553][T15947] ___sys_sendmsg+0x3e2/0x920 [ 432.859475][T15947] ? copy_msghdr_from_user+0x440/0x440 [ 432.859494][T15947] ? lock_downgrade+0x920/0x920 [ 432.859509][T15947] ? rcu_read_lock_held+0x9c/0xb0 [ 432.859530][T15947] ? __kasan_check_read+0x11/0x20 [ 432.880197][T15947] ? __fget+0x37f/0x550 [ 432.884388][T15947] ? ksys_dup3+0x3e0/0x3e0 [ 432.888829][T15947] ? find_held_lock+0x35/0x130 [ 432.893754][T15947] ? get_pid_task+0xc9/0x180 [ 432.893773][T15947] ? __fget_light+0x1a9/0x230 [ 432.893791][T15947] ? __fdget+0x1b/0x20 [ 432.907298][T15947] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.913708][T15947] ? sockfd_lookup_light+0xcb/0x180 [ 432.919020][T15947] __sys_sendmmsg+0x1bf/0x4d0 [ 432.931193][T15947] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 432.936583][T15947] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 432.943022][T15947] ? fput_many+0x12c/0x1a0 [ 432.947460][T15947] ? fput+0x1b/0x20 [ 432.951710][T15947] ? ksys_write+0x1cf/0x290 [ 432.956367][T15947] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.962080][T15947] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.967564][T15947] ? do_syscall_64+0x26/0x790 [ 432.972385][T15947] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.978782][T15947] ? do_syscall_64+0x26/0x790 [ 432.983935][T15947] __x64_sys_sendmmsg+0x9d/0x100 [ 432.988910][T15947] do_syscall_64+0xfa/0x790 [ 432.993556][T15947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.999479][T15947] RIP: 0033:0x45a639 [ 433.003428][T15947] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.023143][T15947] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 433.032036][T15947] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 433.032045][T15947] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 22:11:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x4000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x04\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x05\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 433.032052][T15947] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 433.032060][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 433.032067][T15947] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 433.040339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 433.040452][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:15 executing program 4 (fault-call:6 fault-nth:37): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 433.119652][T15965] binder: 15959:15965 ioctl c018620c 0 returned -14 [ 433.139731][T15965] tipc: Started in network mode [ 433.144806][T15965] tipc: Own node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 433.155436][T15965] tipc: Enabling of bearer rejected, failed to enable media 22:11:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003b80)={@broadcast, @initdev, 0x0}, &(0x7f0000003bc0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000003c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)=@deltfilter={0x40, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x9, 0x1e}, {0x0, 0xfffa}, {0xffff, 0xb}}, [@filter_kind_options=@f_flower={{0xffffffffffffffb1, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x8, 0x5c, 0x400}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x40010c4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x20d, 0x0, 0x0, 0x0, r6}]) [ 433.243038][T15965] binder: 15959:15965 ioctl c018620c 0 returned -14 [ 433.250297][T15978] FAULT_INJECTION: forcing a failure. [ 433.250297][T15978] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 433.264013][T15978] CPU: 1 PID: 15978 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 433.274187][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.284348][T15978] Call Trace: [ 433.287664][T15978] dump_stack+0x197/0x210 [ 433.292090][T15978] should_fail.cold+0xa/0x15 [ 433.296726][T15978] ? fault_create_debugfs_attr+0x180/0x180 [ 433.302647][T15978] ? __kasan_check_read+0x11/0x20 [ 433.307701][T15978] ? __lock_acquire+0x16f2/0x4a00 [ 433.312948][T15978] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 433.319383][T15978] should_fail_alloc_page+0x50/0x60 [ 433.324625][T15978] __alloc_pages_nodemask+0x1a1/0x910 [ 433.330330][T15978] ? fs_reclaim_release+0xf/0x30 [ 433.335460][T15978] ? __alloc_pages_slowpath+0x2900/0x2900 [ 433.341330][T15978] ? fs_reclaim_release+0xf/0x30 [ 433.346314][T15978] ? fault_create_debugfs_attr+0x180/0x180 [ 433.352297][T15978] cache_grow_begin+0x90/0xc60 [ 433.357060][T15978] ? __kmalloc_node_track_caller+0x3d/0x70 [ 433.363089][T15978] ? trace_hardirqs_off+0x62/0x240 [ 433.368296][T15978] kmem_cache_alloc_node_trace+0x689/0x750 [ 433.374190][T15978] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 433.380516][T15978] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 433.386320][T15978] __kmalloc_node_track_caller+0x3d/0x70 [ 433.392019][T15978] __kmalloc_reserve.isra.0+0x40/0xf0 [ 433.397398][T15978] __alloc_skb+0x10b/0x5e0 [ 433.401989][T15978] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 433.407532][T15978] ? raw6_getfrag+0x164/0x230 [ 433.412333][T15978] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 433.418185][T15978] __ip6_append_data.isra.0+0x2c64/0x3950 [ 433.424027][T15978] ? rawv6_mh_filter_unregister+0x20/0x20 [ 433.429750][T15978] ? ip6_setup_cork+0x18f0/0x18f0 [ 433.434773][T15978] ? ip6_fraglist_init+0x8a0/0x8a0 [ 433.439883][T15978] ip6_append_data+0x1ec/0x330 [ 433.444984][T15978] ? rawv6_mh_filter_unregister+0x20/0x20 [ 433.450784][T15978] ? rawv6_mh_filter_unregister+0x20/0x20 [ 433.456508][T15978] rawv6_sendmsg+0x133e/0x36d0 [ 433.461429][T15978] ? lock_downgrade+0x920/0x920 [ 433.466303][T15978] ? rawv6_bind+0x9a0/0x9a0 [ 433.470974][T15978] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 433.476888][T15978] ? rw_copy_check_uvector+0x2ce/0x390 [ 433.482360][T15978] ? ___might_sleep+0x163/0x2c0 [ 433.487388][T15978] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.493950][T15978] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 433.499664][T15978] inet_sendmsg+0x9e/0xe0 [ 433.504081][T15978] ? inet_sendmsg+0x9e/0xe0 [ 433.508708][T15978] ? inet_send_prepare+0x4e0/0x4e0 [ 433.513822][T15978] sock_sendmsg+0xd7/0x130 [ 433.518441][T15978] ___sys_sendmsg+0x3e2/0x920 [ 433.523120][T15978] ? copy_msghdr_from_user+0x440/0x440 [ 433.528660][T15978] ? lock_downgrade+0x920/0x920 [ 433.533641][T15978] ? rcu_read_lock_held+0x9c/0xb0 [ 433.538669][T15978] ? __kasan_check_read+0x11/0x20 [ 433.543690][T15978] ? __fget+0x37f/0x550 [ 433.547847][T15978] ? ksys_dup3+0x3e0/0x3e0 [ 433.552395][T15978] ? find_held_lock+0x35/0x130 [ 433.557155][T15978] ? get_pid_task+0xc9/0x180 [ 433.561798][T15978] ? __fget_light+0x1a9/0x230 [ 433.566621][T15978] ? __fdget+0x1b/0x20 [ 433.570692][T15978] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.577888][T15978] ? sockfd_lookup_light+0xcb/0x180 [ 433.583082][T15978] __sys_sendmmsg+0x1bf/0x4d0 [ 433.587846][T15978] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 433.592918][T15978] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 433.599151][T15978] ? fput_many+0x12c/0x1a0 [ 433.603690][T15978] ? fput+0x1b/0x20 [ 433.607493][T15978] ? ksys_write+0x1cf/0x290 [ 433.612091][T15978] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 433.617566][T15978] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 433.623106][T15978] ? do_syscall_64+0x26/0x790 [ 433.628391][T15978] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.634580][T15978] ? do_syscall_64+0x26/0x790 [ 433.639339][T15978] __x64_sys_sendmmsg+0x9d/0x100 [ 433.644292][T15978] do_syscall_64+0xfa/0x790 [ 433.648810][T15978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.654725][T15978] RIP: 0033:0x45a639 [ 433.658878][T15978] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.678816][T15978] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 433.687365][T15978] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 433.695340][T15978] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 433.703489][T15978] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 433.712211][T15978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 433.720187][T15978] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:16 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x1f0, &(0x7f0000000080)}, 0x0) r0 = socket(0x10, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000140)="8f8d46b3f2bf494e99c74d9eebdf54d8", 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001900050200000000000000001d01090050001000df030064cdea48733837879b0474724978b9664f8fec07980f1a7cc92cd4040f65a2cce146db1e038c5bcdacbe58bc216a174eb9da658aedafc6aa3e6d8b9a66276888de240da6e9ab40000000000000000000"], 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 22:11:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x5000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x06\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:16 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f84247308000000cb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) pipe2$9p(&(0x7f00000005c0), 0xc0000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x202000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0xe850f50af522f5d) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x20000401}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x3c, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x0, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000151}, 0x800) fcntl$dupfd(r2, 0x605, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) 22:11:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\a\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x6000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:16 executing program 4 (fault-call:6 fault-nth:38): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_FPEMU(0xa, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) accept$alg(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x40) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x200403, 0x0) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r9, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f0000000200)="05", 0x1}]) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001540)='/dev/ashmem\x00', 0x100000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff01800000080b3950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r13, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r14, &(0x7f0000000200)="05", 0x1}]) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r17 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r16, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r17, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r19 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r18, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r19, &(0x7f0000000200)="05", 0x1}]) io_submit(0x0, 0x6, &(0x7f0000002040)=[&(0x7f0000001980)={0x0, 0x0, 0x0, 0x1, 0x8, r14, &(0x7f0000001900)="5a9cb51be264fbde753da2b94cd55e86e5a540f3230811ce64091c5f2b684672ef1cb0a3ed80c94198346c5e9cb40e4013d722d2b4c4461f6fd153d3298f3abbb88fbaa5d8f6c5e220f1324a7751243c3e1369503c67462fd7790608edc32db43633c6c3754d59b106d27bbac5f5b07e5e543f35ccd4f8ec96f1b9", 0x7b, 0x6, 0x0, 0x0, r8}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x7, r2, &(0x7f00000019c0)="f6846c4c9b39a0f7d442e9b44aff9c69bac3fa64ca001c803e69215d033564fa37e3aea7e0bcae0c7003944cec7a8f1426e31deb0c1d06c227717b49e7df2b46187be1e5c0754849e336ee0eb7e1689e0da750fb7ffb503878d1158ada5c28610ea7231562dd0fe7e4f01eef4d0530e0facb67b4fa0e51cc4ecbdbfcd935a6b74b5c40408afcd1f326b69b5238fdd9bfca526bed881247f53009bef6be37354bbe9de29a490b602106a948fee9c6f962da3e8982", 0xb4, 0x24000, 0x0, 0x6}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x800, r15, &(0x7f0000002080)="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", 0x10d, 0x5, 0x0, 0x0, r5}, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x7, r6, &(0x7f0000001bc0)="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", 0xfe, 0x5, 0x0, 0x2}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x8, 0x4, r17, &(0x7f0000001d00)="583105ca953aa5d7650850f9ec0f0536e707d1d8ef31401200415b181d383bec59df51ee7caa7f32794aa758b21438ec151869a324d4bb7c732ee9fea98d7c194e24af7db451169f7ff4cdf4c452e6d4f1454d677bd787b39deb33bf35820e943ad36829384c92726ee8adf28db51b6e707d2080de0c3085b86510a2cc11ec8fb6da1be3468ea1f6fd57cd86634fda351c5d2707a2049907b6cb8323722a0fd6c021dfba4c8c016bdb0ffd0bcffec3baca90d25a4a1bd6fad456d4ad0fb9197f0dd2d1d231a699346f863f56e340b6030d8aa4f8d785eea00be504", 0xdb, 0x3}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x3, 0x285, r19, &(0x7f0000001e40)="9b95550bb33d9eeafe3d87354b578430cb69826348", 0x15, 0x2a30d81c000, 0x0, 0x0, r8}]) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c, 0x5, 0x0, {0x0, 0x8, 0x3}}, 0x505) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r20, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r21 = dup(r20) write$FUSE_BMAP(r21, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r21, &(0x7f00000000c0)={0x14c}, 0x137) r22 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x400, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r22, 0x7, 0x0, 0x0, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\b\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:16 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x14840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in=@remote}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 434.166574][T16008] binder: 15995:16008 ioctl c018620c 0 returned -14 [ 434.231578][T16010] FAULT_INJECTION: forcing a failure. [ 434.231578][T16010] name failslab, interval 1, probability 0, space 0, times 0 [ 434.264675][T16008] tipc: Enabling of bearer rejected, failed to enable media 22:11:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x9, 0x8, 0x1, "e16c1f8d45227a79016f2637fc77ad80d5a4493c401c7ed705a3b0bbaf33f383", 0x32315559}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x3df, 0xec, 0x0, 0x5}]) 22:11:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x7000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 434.278365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.284286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 434.345074][T16010] CPU: 1 PID: 16010 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 434.355145][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.365408][T16010] Call Trace: [ 434.368728][T16010] dump_stack+0x197/0x210 [ 434.373173][T16010] should_fail.cold+0xa/0x15 [ 434.377873][T16010] ? fault_create_debugfs_attr+0x180/0x180 [ 434.383860][T16010] ? ___might_sleep+0x163/0x2c0 [ 434.388738][T16010] __should_failslab+0x121/0x190 [ 434.393989][T16010] should_failslab+0x9/0x14 [ 434.398521][T16010] kmem_cache_alloc_node_trace+0x274/0x750 [ 434.404583][T16010] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 434.410571][T16010] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 434.410590][T16010] __kmalloc_node_track_caller+0x3d/0x70 [ 434.410608][T16010] __kmalloc_reserve.isra.0+0x40/0xf0 [ 434.410625][T16010] __alloc_skb+0x10b/0x5e0 [ 434.410640][T16010] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 434.410657][T16010] ? raw6_getfrag+0x164/0x230 [ 434.410671][T16010] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 434.410692][T16010] __ip6_append_data.isra.0+0x2c64/0x3950 [ 434.410712][T16010] ? rawv6_mh_filter_unregister+0x20/0x20 [ 434.410735][T16010] ? ip6_setup_cork+0x18f0/0x18f0 [ 434.410753][T16010] ? ip6_fraglist_init+0x8a0/0x8a0 [ 434.469939][T16010] ip6_append_data+0x1ec/0x330 [ 434.474726][T16010] ? rawv6_mh_filter_unregister+0x20/0x20 [ 434.480471][T16010] ? rawv6_mh_filter_unregister+0x20/0x20 [ 434.486224][T16010] rawv6_sendmsg+0x133e/0x36d0 [ 434.491018][T16010] ? lock_downgrade+0x920/0x920 [ 434.496033][T16010] ? rawv6_bind+0x9a0/0x9a0 [ 434.500573][T16010] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 434.506310][T16010] ? rw_copy_check_uvector+0x2ce/0x390 [ 434.511794][T16010] ? ___might_sleep+0x163/0x2c0 [ 434.516665][T16010] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.523211][T16010] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 434.528957][T16010] inet_sendmsg+0x9e/0xe0 [ 434.528971][T16010] ? inet_sendmsg+0x9e/0xe0 [ 434.528986][T16010] ? inet_send_prepare+0x4e0/0x4e0 [ 434.529001][T16010] sock_sendmsg+0xd7/0x130 [ 434.529016][T16010] ___sys_sendmsg+0x3e2/0x920 [ 434.529031][T16010] ? copy_msghdr_from_user+0x440/0x440 [ 434.529049][T16010] ? lock_downgrade+0x920/0x920 [ 434.529066][T16010] ? rcu_read_lock_held+0x9c/0xb0 [ 434.529086][T16010] ? __kasan_check_read+0x11/0x20 [ 434.552380][T16010] ? __fget+0x37f/0x550 [ 434.552402][T16010] ? ksys_dup3+0x3e0/0x3e0 [ 434.552423][T16010] ? find_held_lock+0x35/0x130 [ 434.586555][T16010] ? get_pid_task+0xc9/0x180 [ 434.591170][T16010] ? __fget_light+0x1a9/0x230 [ 434.595991][T16010] ? __fdget+0x1b/0x20 [ 434.600083][T16010] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.606509][T16010] ? sockfd_lookup_light+0xcb/0x180 [ 434.611730][T16010] __sys_sendmmsg+0x1bf/0x4d0 [ 434.616431][T16010] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 434.621592][T16010] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 434.627844][T16010] ? fput_many+0x12c/0x1a0 [ 434.632293][T16010] ? fput+0x1b/0x20 [ 434.636121][T16010] ? ksys_write+0x1cf/0x290 [ 434.640645][T16010] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 434.646119][T16010] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 434.651731][T16010] ? do_syscall_64+0x26/0x790 [ 434.656423][T16010] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.662661][T16010] ? do_syscall_64+0x26/0x790 [ 434.667363][T16010] __x64_sys_sendmmsg+0x9d/0x100 [ 434.672320][T16010] do_syscall_64+0xfa/0x790 [ 434.676946][T16010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.682933][T16010] RIP: 0033:0x45a639 22:11:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00@\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\xff\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x02\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 434.686981][T16010] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 434.706894][T16010] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 434.715315][T16010] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 434.723292][T16010] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 434.723300][T16010] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 434.723308][T16010] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 434.723315][T16010] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:17 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f84247308000000cb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) pipe2$9p(&(0x7f00000005c0), 0xc0000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x202000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0xe850f50af522f5d) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x20000401}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x3c, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x0, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000151}, 0x800) fcntl$dupfd(r2, 0x605, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) 22:11:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x8000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000180)=0x1ff) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x4, 0x346, &(0x7f0000000140)=[{0x0, 0x0, 0x2000000007}, {&(0x7f0000001240)="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", 0x1ca}]) 22:11:17 executing program 4 (fault-call:6 fault-nth:39): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) io_setup(0xd, &(0x7f00000001c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7ff) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x10, 0x0}, 0x3c) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x03\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x40000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 435.069131][T16040] loop3: AHDI p1 [ 435.107522][T16050] FAULT_INJECTION: forcing a failure. [ 435.107522][T16050] name failslab, interval 1, probability 0, space 0, times 0 [ 435.128372][T16050] CPU: 1 PID: 16050 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 435.138317][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.148526][T16050] Call Trace: [ 435.151861][T16050] dump_stack+0x197/0x210 [ 435.156194][T16050] should_fail.cold+0xa/0x15 [ 435.160897][T16050] ? fault_create_debugfs_attr+0x180/0x180 [ 435.166702][T16050] ? ___might_sleep+0x163/0x2c0 [ 435.171555][T16050] __should_failslab+0x121/0x190 [ 435.176541][T16050] should_failslab+0x9/0x14 [ 435.181042][T16050] kmem_cache_alloc_node_trace+0x274/0x750 [ 435.186882][T16050] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 435.192859][T16050] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 435.198679][T16050] __kmalloc_node_track_caller+0x3d/0x70 [ 435.204307][T16050] __kmalloc_reserve.isra.0+0x40/0xf0 [ 435.209681][T16050] __alloc_skb+0x10b/0x5e0 [ 435.214113][T16050] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 435.219649][T16050] ? raw6_getfrag+0x164/0x230 [ 435.224344][T16050] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 435.230058][T16050] __ip6_append_data.isra.0+0x2c64/0x3950 [ 435.235767][T16050] ? rawv6_mh_filter_unregister+0x20/0x20 [ 435.241479][T16050] ? ip6_setup_cork+0x18f0/0x18f0 [ 435.246494][T16050] ? ip6_fraglist_init+0x8a0/0x8a0 [ 435.251597][T16050] ip6_append_data+0x1ec/0x330 [ 435.256348][T16050] ? rawv6_mh_filter_unregister+0x20/0x20 [ 435.262083][T16050] ? rawv6_mh_filter_unregister+0x20/0x20 [ 435.267790][T16050] rawv6_sendmsg+0x133e/0x36d0 [ 435.272554][T16050] ? lock_downgrade+0x920/0x920 [ 435.277492][T16050] ? rawv6_bind+0x9a0/0x9a0 [ 435.282007][T16050] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 435.287732][T16050] ? rw_copy_check_uvector+0x2ce/0x390 [ 435.293195][T16050] ? ___might_sleep+0x163/0x2c0 [ 435.298034][T16050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.304273][T16050] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 435.309809][T16050] inet_sendmsg+0x9e/0xe0 [ 435.314125][T16050] ? inet_sendmsg+0x9e/0xe0 [ 435.318618][T16050] ? inet_send_prepare+0x4e0/0x4e0 [ 435.323716][T16050] sock_sendmsg+0xd7/0x130 [ 435.328116][T16050] ___sys_sendmsg+0x3e2/0x920 [ 435.332782][T16050] ? copy_msghdr_from_user+0x440/0x440 [ 435.338245][T16050] ? lock_downgrade+0x920/0x920 [ 435.343086][T16050] ? rcu_read_lock_held+0x9c/0xb0 [ 435.348095][T16050] ? __kasan_check_read+0x11/0x20 [ 435.353114][T16050] ? __fget+0x37f/0x550 [ 435.357255][T16050] ? ksys_dup3+0x3e0/0x3e0 [ 435.361657][T16050] ? find_held_lock+0x35/0x130 [ 435.366405][T16050] ? get_pid_task+0xc9/0x180 [ 435.370981][T16050] ? __fget_light+0x1a9/0x230 [ 435.375640][T16050] ? __fdget+0x1b/0x20 [ 435.379690][T16050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.385920][T16050] ? sockfd_lookup_light+0xcb/0x180 [ 435.391104][T16050] __sys_sendmmsg+0x1bf/0x4d0 [ 435.395766][T16050] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 435.400792][T16050] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 435.407014][T16050] ? fput_many+0x12c/0x1a0 [ 435.411410][T16050] ? fput+0x1b/0x20 [ 435.415201][T16050] ? ksys_write+0x1cf/0x290 [ 435.419691][T16050] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 435.425134][T16050] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 435.430572][T16050] ? do_syscall_64+0x26/0x790 [ 435.435233][T16050] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.441281][T16050] ? do_syscall_64+0x26/0x790 [ 435.445956][T16050] __x64_sys_sendmmsg+0x9d/0x100 [ 435.450880][T16050] do_syscall_64+0xfa/0x790 [ 435.455377][T16050] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.461248][T16050] RIP: 0033:0x45a639 [ 435.465277][T16050] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.484884][T16050] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 435.493292][T16050] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 435.501254][T16050] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 435.509208][T16050] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 435.517181][T16050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 435.525155][T16050] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x8040c, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000500)={0x4, 0xff, 0x1f, 0x5, 0x6}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r4, @ANYBLOB="080028bd7000fbdbdf25020000000800060000010000080006001f000000"], 0x24}, 0x1, 0x0, 0x0, 0x10000810}, 0x40040c8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) clock_nanosleep(0x6, 0x0, &(0x7f0000000240), &(0x7f0000000300)) dup(0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="e1673725d7d9a4e62e503564ee7c6b9adec423f489f102e4a0f01e19f0d5680eedff8fb40f3207ca486aa3019c4bf0f87ed658b548bd099449d015fb36a9880e1e7df7eb9bd0131f3e27927502d4e9372899c207896cf75ffe09fea8a156ce0a65f6fd7eef738e3214c6388ab8f5f05c67036340a091e8", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0xe8, @rand_addr="0d4e2dfd4433600e053f35ec2db0847d", 0x4}, 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c8, 0x0, 0x478, 0x228, 0x228, 0x228, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, &(0x7f0000000540), {[{{@uncond, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@local, @mcast2, [0xffffffff, 0x0, 0x0, 0xff], [0x0, 0xffffff00, 0x0, 0xff000000], 'teql0\x00', 'veth1_to_team\x00', {0x80}, {0xff}, 0x73, 0x5, 0x4, 0x30}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x4, 0x4, 0x1, [0x101, 0x8, 0x7fff, 0x9, 0x6, 0x8, 0xa945, 0x8001, 0x9, 0xd5, 0x7, 0x3f, 0x5, 0x3ff, 0xfff, 0x8], 0x4}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0x7fff}}}, {{@ipv6={@rand_addr="2debe3e89ce92217dea21ef15fd4a0e8", @mcast1, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffffff, 0x101000000, 0x83822a22c646b86a, 0xffffffff], 'rose0\x00', 'ip6tnl0\x00', {0xff}, {0x1fe}, 0x8, 0x1, 0x4, 0x12}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x9}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xff, 0x80}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xffffffff], 'syzkaller0\x00', 'batadv0\x00', {}, {0x1fe}, 0x96, 0x41, 0x2, 0xa8}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x10000, 0x1, 0x3, [0x401, 0x8001, 0xfff, 0x1ff, 0xfffa, 0xfff7, 0x1, 0x8, 0x2, 0x9, 0x8001, 0x4994, 0x7f, 0x800, 0x56, 0xfffb], 0x8}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1c}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x6, 0x6, 0x1, [0x101, 0x8, 0x7fff, 0x400, 0x5, 0x3f, 0x8, 0x3, 0x1000, 0xffff, 0x54, 0x2000, 0x3f, 0x3, 0x101, 0x8], 0xf}}, @common=@eui64={0x28, 'eui64\x00'}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@ipv4={[], [], @multicast2}, 0x39, 0x26, 0x5}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x728) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 22:11:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x04\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 435.556572][T16055] binder: 16041:16055 ioctl c018620c 0 returned -14 22:11:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x6c0300, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f00000000c0)={0xe6, &(0x7f0000000180)="0b717dc06371db8247503bf2c4ddb548dd84777d8f05dbb3c003dfdcfcfdadd4c9f3cf5782c9e48b573d582faebb12bcb9cb005521504f5dd03e28ca1e2d3ce85fdc36fffeaae3d39f023bafa755cdf9afa4f02ba47ab067c8d550b740990344a13efaebfa5668462753cac5a3cb4481db11543e19524ca71701de0f2572ff9a0f9550e2149c8a99c7fe0753c9c32f11879d883257c3465b5375a5756b1aefa65d103d54458f75763f50055bb120a58d01e93ff14479a50f4204aff76a48049da9bb9ef98034eeb4d8b581b2ae55631ab486fefb0242a234c128cff58111ff5f517b5d157010"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) r4 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x9, 0x3211fe249c76086) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f00000004c0)={0x9, &(0x7f0000000440)="4ab896a0ba477866f374e22dc7c3754789cf62bc34260182dceda7a8630d65d0c82a306d17fb69289036b50483ef9b75842fe9dc072a95ed3f88ca002cf9c8bfef7634e2896a1228f472b512df757479e92eea70cab8ba06e9558c297356d9cdce6896baf7375b88"}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) getsockopt$inet6_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000340)=""/82, &(0x7f00000003c0)=0x52) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0xeae1, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r3}]) ioctl$SCSI_IOCTL_DOORLOCK(r6, 0x5380) 22:11:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0xfdfdffff, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 435.665332][T16045] tipc: Enabling of bearer rejected, failed to enable media 22:11:18 executing program 4 (fault-call:6 fault-nth:40): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:18 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f84247308000000cb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) pipe2$9p(&(0x7f00000005c0), 0xc0000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x202000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0xe850f50af522f5d) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x20000401}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x3c, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x0, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000151}, 0x800) fcntl$dupfd(r2, 0x605, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) 22:11:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x05\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0xff000000, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 435.956340][T16075] FAULT_INJECTION: forcing a failure. [ 435.956340][T16075] name failslab, interval 1, probability 0, space 0, times 0 22:11:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f00000005c0)=""/4096) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f00000000c0)=0x9, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0)="bb3378379eec9fa768c5901016b6318a7703d724a929eda0e6b1de5ca7f2ae76377857d6007c67cf31db471855f10daaa40e5086065d9f0f6d980993fa007ce6712bfbc0e81f148d70d5fa4495a03bb4c50b45bdf5e3726db9159c415aed2c5403cddbeb429a65e11d006e6bc757ef13cd2634e51e85f6f1102e2173aa991841d5cbe525f0faec5f330c06a753d73b3d75b7cfdb3fec5f9ce6fbb8e345a81dbe1662bef11a5601f8816615dbad87410a635e5b4dc98e9a525724b492801c823d7bba4d42a0cac978886b6f52aecc9b5990d4d6b265d6a6ddfb6f2a6947e3a9767b4335b3687fe19ae0", 0xe9, r0}, 0x68) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) r9 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x41b, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000015c0)=0xc) [ 436.091699][T16075] CPU: 1 PID: 16075 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 436.099235][T16083] binder: 16076:16083 ioctl c018620c 0 returned -14 [ 436.101676][T16075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.101683][T16075] Call Trace: [ 436.101706][T16075] dump_stack+0x197/0x210 [ 436.101730][T16075] should_fail.cold+0xa/0x15 [ 436.130555][T16075] ? fault_create_debugfs_attr+0x180/0x180 [ 436.136376][T16075] ? ___might_sleep+0x163/0x2c0 [ 436.141242][T16075] __should_failslab+0x121/0x190 [ 436.146182][T16075] should_failslab+0x9/0x14 [ 436.150691][T16075] kmem_cache_alloc_node+0x268/0x740 [ 436.155988][T16075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.162240][T16075] ? ip_generic_getfrag+0x144/0x260 [ 436.167482][T16075] __alloc_skb+0xd5/0x5e0 [ 436.171825][T16075] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 436.177382][T16075] ? raw6_getfrag+0x164/0x230 [ 436.182069][T16075] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 436.187800][T16075] __ip6_append_data.isra.0+0x2c64/0x3950 [ 436.192258][T16087] tipc: Enabling of bearer rejected, failed to enable media [ 436.193523][T16075] ? rawv6_mh_filter_unregister+0x20/0x20 [ 436.193559][T16075] ? ip6_setup_cork+0x18f0/0x18f0 [ 436.212596][T16075] ? ip6_fraglist_init+0x8a0/0x8a0 [ 436.217728][T16075] ip6_append_data+0x1ec/0x330 [ 436.222497][T16075] ? rawv6_mh_filter_unregister+0x20/0x20 [ 436.228230][T16075] ? rawv6_mh_filter_unregister+0x20/0x20 [ 436.233966][T16075] rawv6_sendmsg+0x133e/0x36d0 22:11:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0xfffffdfd, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 436.238741][T16075] ? lock_downgrade+0x920/0x920 [ 436.243606][T16075] ? rawv6_bind+0x9a0/0x9a0 [ 436.248219][T16075] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 436.253949][T16075] ? rw_copy_check_uvector+0x2ce/0x390 [ 436.259430][T16075] ? ___might_sleep+0x163/0x2c0 [ 436.264294][T16075] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.270558][T16075] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 436.276122][T16075] inet_sendmsg+0x9e/0xe0 [ 436.280460][T16075] ? inet_sendmsg+0x9e/0xe0 [ 436.284973][T16075] ? inet_send_prepare+0x4e0/0x4e0 [ 436.290095][T16075] sock_sendmsg+0xd7/0x130 [ 436.294525][T16075] ___sys_sendmsg+0x3e2/0x920 [ 436.299211][T16075] ? copy_msghdr_from_user+0x440/0x440 [ 436.304678][T16075] ? lock_downgrade+0x920/0x920 [ 436.309539][T16075] ? rcu_read_lock_held+0x9c/0xb0 [ 436.314665][T16075] ? __kasan_check_read+0x11/0x20 [ 436.319707][T16075] ? __fget+0x37f/0x550 [ 436.323881][T16075] ? ksys_dup3+0x3e0/0x3e0 [ 436.328310][T16075] ? find_held_lock+0x35/0x130 [ 436.333083][T16075] ? get_pid_task+0xc9/0x180 [ 436.337773][T16075] ? __fget_light+0x1a9/0x230 [ 436.342464][T16075] ? __fdget+0x1b/0x20 [ 436.346540][T16075] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.352887][T16075] ? sockfd_lookup_light+0xcb/0x180 [ 436.352907][T16075] __sys_sendmmsg+0x1bf/0x4d0 [ 436.352931][T16075] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 436.367905][T16075] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 436.374176][T16075] ? fput_many+0x12c/0x1a0 [ 436.378611][T16075] ? fput+0x1b/0x20 [ 436.382433][T16075] ? ksys_write+0x1cf/0x290 [ 436.386945][T16075] ? trace_hardirqs_on_thunk+0x1a/0x1c 22:11:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 436.392412][T16075] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 436.397881][T16075] ? do_syscall_64+0x26/0x790 [ 436.402574][T16075] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.408651][T16075] ? do_syscall_64+0x26/0x790 [ 436.413338][T16075] __x64_sys_sendmmsg+0x9d/0x100 [ 436.418283][T16075] do_syscall_64+0xfa/0x790 [ 436.422794][T16075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.428690][T16075] RIP: 0033:0x45a639 22:11:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x06\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 436.432590][T16075] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.452226][T16075] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 436.460654][T16075] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 436.468630][T16075] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 436.476600][T16075] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.484571][T16075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 436.484579][T16075] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:19 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x46180, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003600)='tunl0\x003;\xb6n\\\x9d\x8f\xdf\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f00000000c0)={{0x6}, {0x7, 0x8}, 0x56, 0x1, 0x20}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 22:11:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, r4, 0x0, 0x0, @ib={0x1b, 0x3, 0x10001, {"b7a4907ac4cc51f9dd93e4b1a2a960a2"}, 0x0, 0xaac5, 0xffff}}}, 0xa0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\a\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:19 executing program 4 (fault-call:6 fault-nth:41): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x7c, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000100000000010000aba20400ff7e28000000060affffba01000000ff000000000000008be3518546c8243929db2406b20cd37ed01cc0", 0xff04}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) ftruncate(r4, 0x3) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x0, 0x6, 0x8}}, 0x30) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000005c0)) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000600)={0x2, "d6a922f1604698f6e8fbf0efccad129085f2dcdb6353d595ec0535534c3b0666", 0x1, 0x68a, 0xfff, 0x7919e4361e82c1d5, 0x2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x6}}, 0x30) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0x3c58}) 22:11:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\b\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 436.823205][T16118] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 436.849777][T16118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:11:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x3, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 436.876014][T16119] FAULT_INJECTION: forcing a failure. [ 436.876014][T16119] name failslab, interval 1, probability 0, space 0, times 0 [ 436.930671][T16119] CPU: 1 PID: 16119 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 436.940625][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.947727][T16122] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 436.950682][T16119] Call Trace: [ 436.950706][T16119] dump_stack+0x197/0x210 [ 436.950731][T16119] should_fail.cold+0xa/0x15 [ 436.950750][T16119] ? fault_create_debugfs_attr+0x180/0x180 22:11:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x03\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 436.950769][T16119] ? ___might_sleep+0x163/0x2c0 [ 436.950801][T16119] __should_failslab+0x121/0x190 [ 436.986604][T16119] should_failslab+0x9/0x14 [ 436.991120][T16119] kmem_cache_alloc_node+0x268/0x740 [ 436.991413][T16122] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.996425][T16119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.996441][T16119] ? ip_generic_getfrag+0x144/0x260 [ 436.996462][T16119] __alloc_skb+0xd5/0x5e0 [ 436.996477][T16119] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 436.996500][T16119] ? raw6_getfrag+0x164/0x230 [ 437.031723][T16119] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 437.037469][T16119] __ip6_append_data.isra.0+0x2c64/0x3950 [ 437.043207][T16119] ? rawv6_mh_filter_unregister+0x20/0x20 [ 437.048952][T16119] ? ip6_setup_cork+0x18f0/0x18f0 [ 437.054001][T16119] ? ip6_fraglist_init+0x8a0/0x8a0 [ 437.059128][T16119] ip6_append_data+0x1ec/0x330 [ 437.063896][T16119] ? rawv6_mh_filter_unregister+0x20/0x20 [ 437.069806][T16119] ? rawv6_mh_filter_unregister+0x20/0x20 [ 437.075537][T16119] rawv6_sendmsg+0x133e/0x36d0 [ 437.080316][T16119] ? lock_downgrade+0x920/0x920 [ 437.085182][T16119] ? rawv6_bind+0x9a0/0x9a0 [ 437.089709][T16119] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 437.095455][T16119] ? rw_copy_check_uvector+0x2ce/0x390 [ 437.100942][T16119] ? ___might_sleep+0x163/0x2c0 [ 437.105807][T16119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 437.112072][T16119] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 437.117629][T16119] inet_sendmsg+0x9e/0xe0 [ 437.121967][T16119] ? inet_sendmsg+0x9e/0xe0 [ 437.126479][T16119] ? inet_send_prepare+0x4e0/0x4e0 22:11:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x05\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 437.131604][T16119] sock_sendmsg+0xd7/0x130 [ 437.136033][T16119] ___sys_sendmsg+0x3e2/0x920 [ 437.140727][T16119] ? copy_msghdr_from_user+0x440/0x440 [ 437.146202][T16119] ? lock_downgrade+0x920/0x920 [ 437.151064][T16119] ? rcu_read_lock_held+0x9c/0xb0 [ 437.156098][T16119] ? __kasan_check_read+0x11/0x20 [ 437.161140][T16119] ? __fget+0x37f/0x550 [ 437.165310][T16119] ? ksys_dup3+0x3e0/0x3e0 [ 437.169737][T16119] ? find_held_lock+0x35/0x130 [ 437.174516][T16119] ? get_pid_task+0xc9/0x180 [ 437.179116][T16119] ? __fget_light+0x1a9/0x230 [ 437.183795][T16119] ? __fdget+0x1b/0x20 [ 437.187871][T16119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 437.194146][T16119] ? sockfd_lookup_light+0xcb/0x180 [ 437.199359][T16119] __sys_sendmmsg+0x1bf/0x4d0 [ 437.204049][T16119] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 437.209096][T16119] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 437.215341][T16119] ? fput_many+0x12c/0x1a0 [ 437.219772][T16119] ? fput+0x1b/0x20 [ 437.223584][T16119] ? ksys_write+0x1cf/0x290 22:11:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x06\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 437.228094][T16119] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 437.233564][T16119] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 437.239033][T16119] ? do_syscall_64+0x26/0x790 [ 437.243714][T16119] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.249789][T16119] ? do_syscall_64+0x26/0x790 [ 437.254505][T16119] __x64_sys_sendmmsg+0x9d/0x100 [ 437.259458][T16119] do_syscall_64+0xfa/0x790 [ 437.263968][T16119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.269868][T16119] RIP: 0033:0x45a639 [ 437.273777][T16119] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 437.293393][T16119] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 437.301821][T16119] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 437.309831][T16119] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 437.317818][T16119] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:11:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 437.325830][T16119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 437.333816][T16119] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 437.342139][ C1] net_ratelimit: 12 callbacks suppressed [ 437.342150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 437.353598][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\a\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x4, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x7c, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000100000000010000aba20400ff7e28000000060affffba01000000ff000000000000008be3518546c8243929db2406b20cd37ed01cc0", 0xff04}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) ftruncate(r4, 0x3) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x0, 0x6, 0x8}}, 0x30) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000005c0)) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000600)={0x2, "d6a922f1604698f6e8fbf0efccad129085f2dcdb6353d595ec0535534c3b0666", 0x1, 0x68a, 0xfff, 0x7919e4361e82c1d5, 0x2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x6}}, 0x30) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0x3c58}) 22:11:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00@\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:20 executing program 4 (fault-call:6 fault-nth:42): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) ioctl(r6, 0xb3, &(0x7f0000000340)="e4af6c4370a71d735e727afba9856d5faf571072acd3875aa351f328cbfd196b1db0dd600f0e46ff327a3bfee67a17a3cce6c3be0d9f41a5e366bdfc2bdbe82a21dd66bff78f2000b6e207f83da41d71c4f61baa48c699250b91b90827a2dbf352e8423ae9db4962cb44577b0b8542edc201d5da02f4813fc5cf97fcebea2c75d33b05c5dcfe39f11b4ac70824ddc380333f87921683a4c88dffeb8977ff6a4f216b7a3eb959bca10585fddc80bdc41e0435d64c1cd300de071cd9481f4c6b98a61d3702fb555c8d36dd66992042da28d6f032097d62") 22:11:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 437.668011][T16146] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:11:20 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r8) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) io_setup(0xd, &(0x7f00000001c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000200)="05", 0x1}]) r12 = socket(0xa, 0x3, 0x8) r13 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r15 = gettid() waitid(0x83b895581628fca4, r15, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r14, @ANYRESDEC=r15]], 0xfffffffffffffe56}}, 0x20004850) r16 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r17 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r18 = dup2(r17, r16) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r18, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r19 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r19) r20 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r20, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) syz_open_dev$sndpcmc(&(0x7f0000002a80)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r21, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r22 = dup(r21) write$FUSE_BMAP(r22, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r22, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r23, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r24 = dup(r23) write$FUSE_BMAP(r24, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r24, &(0x7f00000000c0)={0x14c}, 0x137) r25 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/vsock\x00', 0x101000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r25, 0x227d, &(0x7f0000002c40)) kcmp(r19, r15, 0x0, 0xffffffffffffffff, r20) ptrace$setopts(0x4206, r19, 0x0, 0x0) r26 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x104, 0x7, 0x9, 0x2}, &(0x7f0000000380)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffca9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r19, r26, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r27}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r15, r18, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r27}, 0x30) r28 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r27}, 0xc) r29 = io_uring_setup(0xf48, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x3a6}) syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x8000, 0x40000) r30 = socket$can_raw(0x1d, 0x3, 0x1) io_setup(0xd, &(0x7f00000001c0)=0x0) r32 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r31, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r32, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r34 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r33, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r34, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r36 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r35, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r36, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) io_submit(r37, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="05", 0x1}]) r38 = getpid() sched_setscheduler(r38, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) r40 = getgid() r41 = getgid() getgroups(0x7, &(0x7f0000000700)=[r40, 0x0, 0xffffffffffffffff, r41, 0x0, 0x0, 0x0]) r42 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r43) r44 = getgid() r45 = getgid() getgroups(0x7, &(0x7f0000000700)=[r44, 0x0, 0xffffffffffffffff, r45, 0x0, 0x0, 0x0]) r46 = getpid() sched_setscheduler(r46, 0x5, &(0x7f0000000380)) r47 = getpgid(r46) r48 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r48, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r49) r50 = getgid() r51 = getgid() getgroups(0x7, &(0x7f0000000700)=[r50, 0x0, 0xffffffffffffffff, r51, 0x0, 0x0, 0x0]) r52 = getpid() sched_setscheduler(r52, 0x5, &(0x7f0000000380)) r53 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r53, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r54) r55 = getgid() r56 = getgid() getgroups(0x7, &(0x7f0000000700)=[r55, 0x0, 0xffffffffffffffff, r56, 0x0, 0x0, 0x0]) r57 = getpid() sched_setscheduler(r57, 0x5, &(0x7f0000000380)) r58 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r58, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r59) io_setup(0xd, &(0x7f00000001c0)=0x0) r61 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r60, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r61, &(0x7f0000000200)="05", 0x1}]) getsockopt$sock_cred(r61, 0x1, 0x11, &(0x7f0000002380)={0x0, 0x0, 0x0}, &(0x7f00000023c0)=0xc) io_setup(0xd, &(0x7f00000001c0)=0x0) r64 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r63, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r64, &(0x7f0000000200)="05", 0x1}]) r65 = epoll_create(0x5) io_setup(0xd, &(0x7f00000001c0)=0x0) r67 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r66, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r67, &(0x7f0000000200)="05", 0x1}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002400)={0x0, 0x0}) r69 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r69, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r70) io_setup(0xd, &(0x7f00000001c0)=0x0) r72 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r71, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r72, &(0x7f0000000200)="05", 0x1}]) sendmmsg$unix(r5, &(0x7f0000002500)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000000)=[{0xfffffffffffffffd}, {&(0x7f0000000140)="8bbdcd5c106a4814f8006717ac741576003cdfdf85d0d90ac36c13bd28505a1ba30aee4f32f76b7cbffa261013b0516811eed3dc5e52f6596fea5e30697c976916ef876c4d901f0a61f54d99a1f82d6ce503012b802e9d58b109ae4ccbf3c0fc67f6d52ee9c6c56c9e88647fbc86a88a74a8fdd5cfe1fb8bedec8b9c105d42c0fbe57c26f9a7efa0e80b7600c5332c772214c8d2cd67570a86707eb0eb12cbba8340517e2cff84ba38f7fc703685d0129d4ea698ea", 0xb5}, {&(0x7f0000000200)="3085f4c3b2d93df1a71bf77241479e0b677a096126524107dc9421d356b4130864f8d6525e34e46e4bc2c40fdc747b3bccbb1f4bc3a105e003fcb62cfb1c40c9933be56693aa1e288ac98d5fdb6a4279fd87d411a3aa247e4b03bd50d57607ee7a9e9e1b4928906126dea03ca75d9f55c84c4f0f2093d24ae84e4a0e43b0b51abb255a69ee679eacf8bde0fece19ee004f19d546779fb96900b6a84baf148e0c0a220a2978345669f8d9dbe10baaaf4585adf319bb0e01fe49297167cfcdb4e9f6032a7f9f", 0xc5}], 0x3, &(0x7f0000002600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32=r28, @ANYRES32=r3, @ANYRES32=r29, @ANYRESOCT=r71, @ANYRES32=r30, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r34, @ANYRES32=r0, @ANYRES32=r36, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000000000bfb29bc51ffb5000000000000000", @ANYRES32=r38, @ANYRES32=r39, @ANYRES32=r41, @ANYBLOB='\x00\x00\x00\x00'], 0x133}, {&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)="7b6bfde05d34afb8d28c05016d1672af30012ebdd2dcd8412b17bb241808e20017d404525542f79390333b9c8e2e97ee308a96db4b8241dfa48a6bd8790eeffd2720bedaa7a1a4e00175eb265a18af218e65257997095b3c71676f8b3b1be5a598800613ce266546680ceeaf6b51ef178cf8879a368dc4038d570ea7fabd8de35e98bf3ef6f5d2dc1301be643e108e44727af3f44927a825cba6bef77c3e3da15f8beb973a930fe7170a613b4e36ccf1a7a1cffec94de7d8729a857cef121da923eb2db3b63a36f11702e1e88556d711b86fd5d4128a84eaef80b9dc7731871c39f61aa72dda7cc81240227a9c0ffa9a751658d0275eb0", 0xf7}], 0x1, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r43, r44}}}, @cred={{0x1c, 0x1, 0x2, {r47, r49, r51}}}, @cred={{0x1c, 0x1, 0x2, {r52, r54, r56}}}], 0x60, 0x8010}, {&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="723704073a4fe50792b84f07f409effb5ae3982fa6df0b89882ad631eaf4052ab93d59caa9c210701176e6e7cde661de44fd7f693f24ea4de2642c2a23066ee271e57991e6a0a96b982dbafcaa8d68551a98944d8861b2c6246b86140744664eed893ca5e8b8e23cb284de9ac9a23a3ee94f78085fa60635c1919a645dc10367e4039e5ae7af9ed495093ebfa50e811b644360d6a7aa06e2d6ce4db4753b9971fd1b944f689fba01b809f44e591ede2879ed2975dd27e483d632458a4c2e10387bdb5b2ed667f03989dbb317fec925bdc8af2e2eb9b00acfb55b83b079c970cf5a73b139242f63afd2959855dfcba697c9ad3346e77673", 0xf7}, {&(0x7f0000001b00)="45124a5ddcd2ef75e25d28e64fd112a7acd794e8f87aa51fb607e032a2fe44f9b96a918d4aeb65a2ddc76b4bff086a439307900f7542eef1251a27504f61d805b8696e9903ef81dadf96aa2125c9c9b12891380d41a856e86b3c444884a4bdae12cde65696e492", 0x67}, {&(0x7f0000001b80)="13a1fdbccee1a9f46b72927a222dd54bd2793d93f0c9d9f8330ac3d0f52cc24f70e96fa7e2d03d7ebbcb9c067f5e160fee8fcef2cf725e44ab7d60b2b2a6ab0865c93a7dcb799c5e959e6fc9412347dc98f6c049a9f5d44ff20c90a6b0bef3caff0de4f3306e1815e80a14bac2327a21b71620712c46819072fdfbb8119338ccbb3e29fb159f204456a90c42c9b2e3dff1fa1513390770f2c86ae3c200b86b983ee708f500b4a6e9fc7631dc2ab126cb0c4108df9be0de5d9b6058e8d301cfaa5b0846bdae112d65596b25cd35365a186b291feb570f86bd2d0c26dc957bef7a2a19f9abac389fe96cbe", 0xea}, {&(0x7f0000001c80)="48f10b63f5fde520d4503bf4ac", 0xd}, {&(0x7f0000001cc0)="5aefa68c2a4f175d0cb506d6d652f0c82ace35ca1f2a86e7a41393e8719c4cb87bf87f0de3e94e0ad6b0a6de94e908ce759602735a37510b0ffa60852aad0eebf9f0fcaf98fb671f896e09d114d37b4b46f43369178f5ee9528ea3a3fbed5d537ec830957a3373ce888f9ef22d4b79f528c652700543a584cad376d6ec72f9bd618d62d155ebb57b6a05269ef3185ffc726adf77c22100ca6253967fef1a095d5e014c7eabfccd1c2e56c910a6935cb0292e48c0226bde28453ff3180caeadb786e0fd32fd7a92bb4ff7dc27c11e21980130895b66d7fb1932c2a62eca3b7f", 0xdf}, {&(0x7f0000001dc0)="7e48cfd9f281f0656688d4a4f089c8c2d6f19de20b12f24be9464891c4b8f0a51af1b3c7108cccabe523ed27a9d49662cfd82e2894111677469421c2b893a5f13980ca2895ca7aaba3a35eb38b3ddd9620cf5d44c253c23f1f3fe2846be3ae0b40239924000334a0336dc7d303f657", 0x6f}, {&(0x7f0000001e40)="343db8153256545f67f86519da3108d467d35e409346fa1636760f8b28c99ba9d20e233ca780c2a8b5fd40a6b877373cdfac2576c1498f4173f3f257d4707cf19f48ba27da", 0x45}], 0x8, 0x0, 0x0, 0x20000004}, {&(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001fc0)="431aa4f32d56a4159b4d405b28fe2dc771df31a79714536fa7d93ce06ad9237a2fb5d0cdecc88461ed9b3976184f3b0c053224c561795de212faf1e22dd06b97a4a8f56100befa93e2bfb8db47", 0x4d}, {&(0x7f0000002040)="bc76dfbbb25bfa9263f16a2a47467cd5faaba341bed81febd7a63e7cd1b1b9eff7eeeebd5d", 0x25}, {&(0x7f0000002080)="7fa55137d9afc93a49062d58c039c808f1faf2ababde142591b3d4b96f36217e44d4547094df727bb35ee6fec25f944b9ac4ca382d2bb258c090e80ffb27ffedba0253272f6bb3822e8a83a7d77e932018f9ed4d5f5792beccb63cbaeb927331b8347122cfbaee81dfec47d01f14ec07674495e380c5777af112fadae4e638102a3f080a64e4214c0bdbf5d4d01476b2c22e528f7076211a436be0f76433994a9a6621b63214702685d26d9378edff08eb12de637e", 0xb5}, {&(0x7f0000002140)="76a21faf45aeea842c4fefd0f5076a4569633370430c752bfe4050bbf3d463c748cdd73d212229d9bb28feacf4540e25dc4256dceeb0d68c4db3e8475208649d6efbdb2d9c24b01a050968e4ab9bec3930dd5e6d052d3c92376f0bb7c0ae53bac412c8044a5e1bd31ae345dcf2f46fd9de8258eeaa22fd310a1180399382061c4f49c1", 0x83}, {&(0x7f0000002200)="87295cb13c10cd4fed6aec66822290c54f94b834aef7ca8e1f3ec00b21a37735c35574da390c8c41dbfda17ac17dde84b67435edd5a490968df27737227c155352a51c9a9bea43e8bddc94cb4302af4bb99651bd8603209a5b31d733a5917ea22299ef6aae1538267462c1fbe3183343dfbec05cb0b0f7a508627e5943e9851835ba30c5c190077e04bc8a1d1cee57f7efd7fe9210d805e4c0c6720e9fcdb383011beef0be9a919421a6e2ecc10494c538c526fb8327aa221c80050ee9eef0411f7d658a935320768394533ec9c7f621869db53e7f8134e7a7f26b55a3bfe6630f4f8c295238872b45f863ba73c9c244", 0xf0}], 0x5, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {r57, r59, r62}}}, @rights={{0x1c, 0x1, 0x1, [r64, r65, r67]}}, @cred={{0x1c, 0x1, 0x2, {r68, r70}}}], 0x60, 0x4000014}], 0x4, 0x6024808) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @rand_addr="520941fd90f0be3a2c4fcd7b234a4d5f"}, 0x1c) [ 437.710820][T16146] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 437.789538][T16155] FAULT_INJECTION: forcing a failure. [ 437.789538][T16155] name failslab, interval 1, probability 0, space 0, times 0 22:11:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\xff\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x6, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 437.830779][T16155] CPU: 1 PID: 16155 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 437.840725][T16155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.850797][T16155] Call Trace: [ 437.854110][T16155] dump_stack+0x197/0x210 [ 437.858462][T16155] should_fail.cold+0xa/0x15 [ 437.863069][T16155] ? fault_create_debugfs_attr+0x180/0x180 [ 437.868889][T16155] ? ___might_sleep+0x163/0x2c0 [ 437.873764][T16155] __should_failslab+0x121/0x190 [ 437.878718][T16155] should_failslab+0x9/0x14 [ 437.883227][T16155] kmem_cache_alloc_node_trace+0x274/0x750 [ 437.889046][T16155] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 437.895038][T16155] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 437.900858][T16155] __kmalloc_node_track_caller+0x3d/0x70 [ 437.906500][T16155] __kmalloc_reserve.isra.0+0x40/0xf0 [ 437.911883][T16155] __alloc_skb+0x10b/0x5e0 [ 437.916305][T16155] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 437.921855][T16155] ? raw6_getfrag+0x164/0x230 [ 437.926534][T16155] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 437.932268][T16155] __ip6_append_data.isra.0+0x2c64/0x3950 [ 437.938006][T16155] ? rawv6_mh_filter_unregister+0x20/0x20 [ 437.943777][T16155] ? ip6_setup_cork+0x18f0/0x18f0 [ 437.948813][T16155] ? ip6_fraglist_init+0x8a0/0x8a0 [ 437.953938][T16155] ip6_append_data+0x1ec/0x330 [ 437.958706][T16155] ? rawv6_mh_filter_unregister+0x20/0x20 [ 437.964432][T16155] ? rawv6_mh_filter_unregister+0x20/0x20 [ 437.970164][T16155] rawv6_sendmsg+0x133e/0x36d0 [ 437.974945][T16155] ? lock_downgrade+0x920/0x920 22:11:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x7, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 437.979821][T16155] ? rawv6_bind+0x9a0/0x9a0 [ 437.984351][T16155] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 437.990084][T16155] ? rw_copy_check_uvector+0x2ce/0x390 [ 437.995558][T16155] ? ___might_sleep+0x163/0x2c0 [ 438.000426][T16155] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.006760][T16155] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 438.012325][T16155] inet_sendmsg+0x9e/0xe0 [ 438.016685][T16155] ? inet_sendmsg+0x9e/0xe0 [ 438.021201][T16155] ? inet_send_prepare+0x4e0/0x4e0 [ 438.026321][T16155] sock_sendmsg+0xd7/0x130 [ 438.030747][T16155] ___sys_sendmsg+0x3e2/0x920 [ 438.035435][T16155] ? copy_msghdr_from_user+0x440/0x440 [ 438.040900][T16155] ? lock_downgrade+0x920/0x920 [ 438.045764][T16155] ? rcu_read_lock_held+0x9c/0xb0 [ 438.050793][T16155] ? __kasan_check_read+0x11/0x20 [ 438.055833][T16155] ? __fget+0x37f/0x550 [ 438.060012][T16155] ? ksys_dup3+0x3e0/0x3e0 [ 438.064437][T16155] ? find_held_lock+0x35/0x130 [ 438.069217][T16155] ? get_pid_task+0xc9/0x180 [ 438.073823][T16155] ? __fget_light+0x1a9/0x230 [ 438.078511][T16155] ? __fdget+0x1b/0x20 [ 438.082587][T16155] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.088833][T16155] ? sockfd_lookup_light+0xcb/0x180 [ 438.094043][T16155] __sys_sendmmsg+0x1bf/0x4d0 [ 438.098729][T16155] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 438.103773][T16155] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 438.110044][T16155] ? fput_many+0x12c/0x1a0 [ 438.114468][T16155] ? fput+0x1b/0x20 [ 438.118284][T16155] ? ksys_write+0x1cf/0x290 [ 438.122791][T16155] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 438.128257][T16155] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 438.133730][T16155] ? do_syscall_64+0x26/0x790 [ 438.138424][T16155] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.144497][T16155] ? do_syscall_64+0x26/0x790 [ 438.149191][T16155] __x64_sys_sendmmsg+0x9d/0x100 [ 438.154143][T16155] do_syscall_64+0xfa/0x790 [ 438.158668][T16155] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.164558][T16155] RIP: 0033:0x45a639 [ 438.168454][T16155] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.188063][T16155] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 438.196480][T16155] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 438.204459][T16155] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 438.212453][T16155] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 438.220434][T16155] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 22:11:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x02\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x8, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 438.228508][T16155] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x300, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x03\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:20 executing program 4 (fault-call:6 fault-nth:43): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xa00, 0x0) uselib(&(0x7f0000000200)='./file0\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000340)=0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x900f010}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c817}, 0x44c0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:20 executing program 1: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, 0x0) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000900)) getegid() socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x8000, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540)=""/81, &(0x7f00000005c0)=0x51) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x1e, 0x4000000000000800, 0x1, 0x110}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x4000000) fcntl$notify(r0, 0x402, 0x2) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000002, 0x3, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="310000000300000000000000fffffffffffff2c50000000000000010000000000000002f6465762f696e7075742f6d69634bf8793ca7f8b9ad9f2c970a0005c13536509d9be2a8d43d697183088fb4ffd29330a5246da6f8a94259d42cc1ca258e000070eabda5d8186baac7650bceefed98c183aead"], 0x31) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@initdev, @in=@local}}, {{@in6=@ipv4={[], [], @local}}}}, &(0x7f0000000080)=0xe8) unshare(0x60020000) 22:11:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000080)="02f9ffffff", 0xfffffffffffffc1e) r2 = semget$private(0x0, 0x8, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x1, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000100)=""/242) [ 438.518663][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.524802][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 438.527793][T16188] FAULT_INJECTION: forcing a failure. [ 438.527793][T16188] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.543786][T16188] CPU: 1 PID: 16188 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 438.553688][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.563747][T16188] Call Trace: [ 438.563773][T16188] dump_stack+0x197/0x210 [ 438.563796][T16188] should_fail.cold+0xa/0x15 [ 438.563818][T16188] ? fault_create_debugfs_attr+0x180/0x180 [ 438.563837][T16188] ? __kasan_check_read+0x11/0x20 [ 438.563858][T16188] ? __lock_acquire+0x16f2/0x4a00 [ 438.571461][T16188] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 438.571485][T16188] should_fail_alloc_page+0x50/0x60 [ 438.581878][T16188] __alloc_pages_nodemask+0x1a1/0x910 [ 438.581896][T16188] ? fs_reclaim_release+0xf/0x30 [ 438.581915][T16188] ? __alloc_pages_slowpath+0x2900/0x2900 [ 438.581930][T16188] ? fs_reclaim_release+0xf/0x30 [ 438.581958][T16188] ? fault_create_debugfs_attr+0x180/0x180 [ 438.624464][T16187] IPVS: ftp: loaded support on port[0] = 21 [ 438.629756][T16188] cache_grow_begin+0x90/0xc60 [ 438.629775][T16188] ? __kmalloc_node_track_caller+0x3d/0x70 [ 438.629790][T16188] ? trace_hardirqs_off+0x62/0x240 [ 438.629807][T16188] kmem_cache_alloc_node_trace+0x689/0x750 [ 438.629825][T16188] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 438.629839][T16188] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 22:11:21 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) gettid() unshare(0x2040400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[], 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0xfffffffffffffffd, {0x8}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) accept$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendto$packet(r0, &(0x7f0000000140)="959f4b07c488c699c410f36d125bd32f7eb19ee72d6fd0c48c66e26b9ba3e00d3d0b2ad7fa65349b6e1e9b8e341347bf34e6f0e8a8996042d6b5da92980b07fc51407a0f971fc7e4ed61510499bb1f09774e40424fad6fa8e5ef92a108a5ab62ac3de79105a5f61b371294fd59548718e9acfc5610a83b1f92e4990ed00d546c95fda5e223eb9474dd49bc3f458e9feb1bdc1dbc43b397083b7ab5467681224a9eb393f0a14eb3dcd52c92110870410a4c958bf398c009b8bcbdc21d028ae375e90d79f0643f3dfffb1d8c43e98b609958043e339d92392f61fd5f3a4dfbd009a0f9a4835a9a0d", 0xe7, 0x4000, &(0x7f0000000700)={0x11, 0x1a, r3, 0x1, 0x3f, 0x6, @local}, 0x14) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x20, 0x4, 0x19}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x24001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000340)) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030382e4cc74502f987c2cec6504df6ead74ed8a60ab463e98b4b2a3d27a7082dbb78abd55fba3da80b6a6445ab100621d6234571c08dc540473753cd89e9b08e3f5972fe9ca162b123e19201049c9d37cc5a3fb54aff8eaff4f6b59c41705b96a6711d467907c000000000000000000000005382b326a5a61d0d8d7d3a96300833a82a587a803b73359e0aea8647cc0b3dcbcd1c48c657e3668e13d30308d6f7ea6136041f3c62443459b236857da2f3003fa22c78354ea96995c23ed6641c6a7fbfd190b5b7dfb23eaf13f0725e5304226efa688e4e05c1d40f6fddd3ebe1c8fc43be1d3ae50584226b3d225204a2beb6b503e4be8f71d36bc606734c12dbcf7e351131839e34dc78247d400de8e3327e5d0972b36c9645b5ff8723c04098b18159a14a01fa2e12d897feb769bd565f4b1fecfb6b76e013ff9844528fd91b87b5bb1b5a43e89e6a018bd7b22a7503c7df63feda000000000000"], 0x15) r7 = dup(r5) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r15 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r14, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r15, &(0x7f0000000200)="05", 0x1}]) io_submit(r12, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r15, &(0x7f0000000200)="05", 0x1, 0x0, 0x0, 0x0, r7}]) r16 = dup3(r11, r13, 0x0) write$FUSE_NOTIFY_RETRIEVE(r16, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x5ee, 0xde6}}, 0x30) [ 438.629861][T16188] __kmalloc_node_track_caller+0x3d/0x70 [ 438.629881][T16188] __kmalloc_reserve.isra.0+0x40/0xf0 [ 438.629899][T16188] __alloc_skb+0x10b/0x5e0 [ 438.629915][T16188] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 438.629931][T16188] ? raw6_getfrag+0x164/0x230 [ 438.629944][T16188] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 438.629965][T16188] __ip6_append_data.isra.0+0x2c64/0x3950 [ 438.629983][T16188] ? rawv6_mh_filter_unregister+0x20/0x20 [ 438.630009][T16188] ? ip6_setup_cork+0x18f0/0x18f0 22:11:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x04\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 438.630025][T16188] ? ip6_fraglist_init+0x8a0/0x8a0 [ 438.630047][T16188] ip6_append_data+0x1ec/0x330 [ 438.694913][T16188] ? rawv6_mh_filter_unregister+0x20/0x20 [ 438.726920][T16188] ? rawv6_mh_filter_unregister+0x20/0x20 [ 438.738341][T16188] rawv6_sendmsg+0x133e/0x36d0 [ 438.743109][T16188] ? lock_downgrade+0x920/0x920 [ 438.743134][T16188] ? rawv6_bind+0x9a0/0x9a0 [ 438.743175][T16188] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 438.743189][T16188] ? rw_copy_check_uvector+0x2ce/0x390 [ 438.743208][T16188] ? ___might_sleep+0x163/0x2c0 [ 438.768754][T16188] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.775029][T16188] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 438.780587][T16188] inet_sendmsg+0x9e/0xe0 [ 438.780601][T16188] ? inet_sendmsg+0x9e/0xe0 [ 438.780614][T16188] ? inet_send_prepare+0x4e0/0x4e0 [ 438.780628][T16188] sock_sendmsg+0xd7/0x130 [ 438.780643][T16188] ___sys_sendmsg+0x3e2/0x920 [ 438.780663][T16188] ? copy_msghdr_from_user+0x440/0x440 [ 438.809168][T16188] ? lock_downgrade+0x920/0x920 [ 438.809190][T16188] ? rcu_read_lock_held+0x9c/0xb0 [ 438.809208][T16188] ? __kasan_check_read+0x11/0x20 [ 438.809225][T16188] ? __fget+0x37f/0x550 [ 438.809246][T16188] ? ksys_dup3+0x3e0/0x3e0 [ 438.809260][T16188] ? find_held_lock+0x35/0x130 [ 438.809275][T16188] ? get_pid_task+0xc9/0x180 [ 438.809293][T16188] ? __fget_light+0x1a9/0x230 [ 438.809309][T16188] ? __fdget+0x1b/0x20 [ 438.809323][T16188] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.809339][T16188] ? sockfd_lookup_light+0xcb/0x180 [ 438.809355][T16188] __sys_sendmmsg+0x1bf/0x4d0 [ 438.809376][T16188] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 438.809410][T16188] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 438.809422][T16188] ? fput_many+0x12c/0x1a0 [ 438.809436][T16188] ? fput+0x1b/0x20 [ 438.809451][T16188] ? ksys_write+0x1cf/0x290 [ 438.809471][T16188] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 438.819333][T16188] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 438.867168][T16188] ? do_syscall_64+0x26/0x790 [ 438.867186][T16188] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.867201][T16188] ? do_syscall_64+0x26/0x790 [ 438.867225][T16188] __x64_sys_sendmmsg+0x9d/0x100 [ 438.902222][T16188] do_syscall_64+0xfa/0x790 [ 438.902252][T16188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.902263][T16188] RIP: 0033:0x45a639 [ 438.902277][T16188] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.902283][T16188] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 22:11:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x500, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 438.902297][T16188] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 438.902306][T16188] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 438.902313][T16188] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 438.902320][T16188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 438.902329][T16188] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 438.902657][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 438.917872][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x05\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000e40)=0xe8) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0, 0x0, [], r4}, 0x3c) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) io_submit(r5, 0x1, &(0x7f0000000040)) 22:11:21 executing program 4 (fault-call:6 fault-nth:44): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x06\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x600, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 439.167351][T16197] bond0: (slave bond_slave_1): Releasing backup interface [ 439.235249][T16210] FAULT_INJECTION: forcing a failure. [ 439.235249][T16210] name failslab, interval 1, probability 0, space 0, times 0 [ 439.257067][T16210] CPU: 1 PID: 16210 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 439.267000][T16210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.277079][T16210] Call Trace: [ 439.280394][T16210] dump_stack+0x197/0x210 [ 439.284746][T16210] should_fail.cold+0xa/0x15 [ 439.289357][T16210] ? fault_create_debugfs_attr+0x180/0x180 [ 439.295182][T16210] ? ___might_sleep+0x163/0x2c0 [ 439.300056][T16210] __should_failslab+0x121/0x190 [ 439.305026][T16210] should_failslab+0x9/0x14 [ 439.309550][T16210] kmem_cache_alloc_node_trace+0x274/0x750 [ 439.315375][T16210] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 439.321375][T16210] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 439.327213][T16210] __kmalloc_node_track_caller+0x3d/0x70 [ 439.332870][T16210] __kmalloc_reserve.isra.0+0x40/0xf0 [ 439.338286][T16210] __alloc_skb+0x10b/0x5e0 [ 439.342722][T16210] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 439.348368][T16210] ? raw6_getfrag+0x164/0x230 [ 439.353056][T16210] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 439.358898][T16210] __ip6_append_data.isra.0+0x2c64/0x3950 [ 439.364727][T16210] ? rawv6_mh_filter_unregister+0x20/0x20 [ 439.370477][T16210] ? ip6_setup_cork+0x18f0/0x18f0 [ 439.375519][T16210] ? ip6_fraglist_init+0x8a0/0x8a0 [ 439.380647][T16210] ip6_append_data+0x1ec/0x330 [ 439.385426][T16210] ? rawv6_mh_filter_unregister+0x20/0x20 [ 439.391163][T16210] ? rawv6_mh_filter_unregister+0x20/0x20 [ 439.396896][T16210] rawv6_sendmsg+0x133e/0x36d0 [ 439.401676][T16210] ? lock_downgrade+0x920/0x920 [ 439.406540][T16210] ? rawv6_bind+0x9a0/0x9a0 [ 439.411068][T16210] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 439.416799][T16210] ? rw_copy_check_uvector+0x2ce/0x390 [ 439.422454][T16210] ? ___might_sleep+0x163/0x2c0 [ 439.427315][T16210] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.433577][T16210] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 439.439136][T16210] inet_sendmsg+0x9e/0xe0 [ 439.443477][T16210] ? inet_sendmsg+0x9e/0xe0 [ 439.447986][T16210] ? inet_send_prepare+0x4e0/0x4e0 [ 439.453105][T16210] sock_sendmsg+0xd7/0x130 [ 439.457534][T16210] ___sys_sendmsg+0x3e2/0x920 [ 439.462225][T16210] ? copy_msghdr_from_user+0x440/0x440 [ 439.467700][T16210] ? lock_downgrade+0x920/0x920 [ 439.472561][T16210] ? rcu_read_lock_held+0x9c/0xb0 [ 439.477685][T16210] ? __kasan_check_read+0x11/0x20 [ 439.482717][T16210] ? __fget+0x37f/0x550 [ 439.486873][T16210] ? ksys_dup3+0x3e0/0x3e0 [ 439.491302][T16210] ? find_held_lock+0x35/0x130 [ 439.496075][T16210] ? get_pid_task+0xc9/0x180 [ 439.500669][T16210] ? __fget_light+0x1a9/0x230 [ 439.505351][T16210] ? __fdget+0x1b/0x20 [ 439.509428][T16210] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.515675][T16210] ? sockfd_lookup_light+0xcb/0x180 [ 439.520883][T16210] __sys_sendmmsg+0x1bf/0x4d0 [ 439.525587][T16210] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 439.530642][T16210] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 439.536887][T16210] ? fput_many+0x12c/0x1a0 [ 439.541310][T16210] ? fput+0x1b/0x20 [ 439.545131][T16210] ? ksys_write+0x1cf/0x290 [ 439.549646][T16210] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 439.555112][T16210] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 439.560580][T16210] ? do_syscall_64+0x26/0x790 [ 439.565270][T16210] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.571345][T16210] ? do_syscall_64+0x26/0x790 [ 439.576039][T16210] __x64_sys_sendmmsg+0x9d/0x100 [ 439.580991][T16210] do_syscall_64+0xfa/0x790 [ 439.585504][T16210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.591397][T16210] RIP: 0033:0x45a639 [ 439.595303][T16210] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.614927][T16210] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.623520][T16210] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 22:11:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\a\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:22 executing program 4 (fault-call:6 fault-nth:45): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 439.631509][T16210] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 439.639485][T16210] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 439.647463][T16210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 439.655443][T16210] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 439.663695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.669524][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 439.675460][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.681290][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 439.825031][T16224] IPVS: ftp: loaded support on port[0] = 21 [ 439.852074][T16226] FAULT_INJECTION: forcing a failure. [ 439.852074][T16226] name failslab, interval 1, probability 0, space 0, times 0 [ 439.871755][T16226] CPU: 0 PID: 16226 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 439.881701][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.891768][T16226] Call Trace: [ 439.895077][T16226] dump_stack+0x197/0x210 [ 439.899419][T16226] should_fail.cold+0xa/0x15 [ 439.904019][T16226] ? fault_create_debugfs_attr+0x180/0x180 [ 439.909837][T16226] ? ___might_sleep+0x163/0x2c0 [ 439.914703][T16226] __should_failslab+0x121/0x190 [ 439.919657][T16226] should_failslab+0x9/0x14 [ 439.924169][T16226] kmem_cache_alloc_node_trace+0x274/0x750 [ 439.929991][T16226] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 439.935978][T16226] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 439.941800][T16226] __kmalloc_node_track_caller+0x3d/0x70 [ 439.947439][T16226] __kmalloc_reserve.isra.0+0x40/0xf0 [ 439.952817][T16226] __alloc_skb+0x10b/0x5e0 [ 439.957239][T16226] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 439.962790][T16226] ? raw6_getfrag+0x164/0x230 [ 439.967472][T16226] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 439.973203][T16226] __ip6_append_data.isra.0+0x2c64/0x3950 [ 439.978941][T16226] ? rawv6_mh_filter_unregister+0x20/0x20 [ 439.984674][T16226] ? ip6_setup_cork+0x18f0/0x18f0 [ 439.989716][T16226] ? ip6_fraglist_init+0x8a0/0x8a0 [ 439.994859][T16226] ip6_append_data+0x1ec/0x330 [ 439.999642][T16226] ? rawv6_mh_filter_unregister+0x20/0x20 [ 440.005374][T16226] ? rawv6_mh_filter_unregister+0x20/0x20 [ 440.011102][T16226] rawv6_sendmsg+0x133e/0x36d0 [ 440.015892][T16226] ? lock_downgrade+0x920/0x920 [ 440.020766][T16226] ? rawv6_bind+0x9a0/0x9a0 [ 440.025294][T16226] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 440.031033][T16226] ? rw_copy_check_uvector+0x2ce/0x390 [ 440.036510][T16226] ? ___might_sleep+0x163/0x2c0 [ 440.041366][T16226] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.047618][T16226] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 440.053168][T16226] inet_sendmsg+0x9e/0xe0 [ 440.057498][T16226] ? inet_sendmsg+0x9e/0xe0 [ 440.061997][T16226] ? inet_send_prepare+0x4e0/0x4e0 [ 440.067109][T16226] sock_sendmsg+0xd7/0x130 [ 440.071531][T16226] ___sys_sendmsg+0x3e2/0x920 [ 440.076221][T16226] ? copy_msghdr_from_user+0x440/0x440 [ 440.081695][T16226] ? lock_downgrade+0x920/0x920 [ 440.086553][T16226] ? rcu_read_lock_held+0x9c/0xb0 [ 440.091580][T16226] ? __kasan_check_read+0x11/0x20 [ 440.096622][T16226] ? __fget+0x37f/0x550 [ 440.100787][T16226] ? ksys_dup3+0x3e0/0x3e0 [ 440.105202][T16226] ? find_held_lock+0x35/0x130 [ 440.109967][T16226] ? get_pid_task+0xc9/0x180 [ 440.115240][T16226] ? __fget_light+0x1a9/0x230 [ 440.119921][T16226] ? __fdget+0x1b/0x20 [ 440.123997][T16226] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.130237][T16226] ? sockfd_lookup_light+0xcb/0x180 [ 440.135443][T16226] __sys_sendmmsg+0x1bf/0x4d0 [ 440.140147][T16226] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 440.145361][T16226] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 440.151591][T16226] ? fput_many+0x12c/0x1a0 [ 440.151603][T16226] ? fput+0x1b/0x20 [ 440.151616][T16226] ? ksys_write+0x1cf/0x290 [ 440.151635][T16226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 440.151649][T16226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 440.151660][T16226] ? do_syscall_64+0x26/0x790 [ 440.151680][T16226] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.186048][T16226] ? do_syscall_64+0x26/0x790 [ 440.190754][T16226] __x64_sys_sendmmsg+0x9d/0x100 [ 440.197256][T16226] do_syscall_64+0xfa/0x790 [ 440.197280][T16226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.215643][T16226] RIP: 0033:0x45a639 [ 440.219542][T16226] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.239167][T16226] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 440.247577][T16226] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 440.255542][T16226] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 440.263503][T16226] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 440.263512][T16226] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 440.263520][T16226] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 440.518358][ T9790] tipc: TX() has been purged, node left! 22:11:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x700, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:23 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\b\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x148) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r4}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 22:11:23 executing program 4 (fault-call:6 fault-nth:46): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:23 executing program 1: syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) accept(r0, &(0x7f0000000000)=@nfc, &(0x7f00000000c0)=0x80) unshare(0x40000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000100)={{0xa, 0x5, 0x6, 0x254, 'syz1\x00', 0x7}, 0x0, [0x359, 0x401, 0xfa, 0x6, 0x2, 0x80, 0x1, 0x101, 0xffffffff, 0x17c, 0x40, 0x3f, 0x71f4, 0x7, 0x6, 0x0, 0x9, 0xffff, 0x9, 0x2, 0x5, 0x80000000, 0x2, 0xfffffffffffffffd, 0x5, 0x2, 0x20, 0x8, 0x3, 0x400, 0x7, 0x5, 0x22f, 0x6, 0x401, 0x5, 0x2, 0xb651, 0x2, 0x10000, 0x20, 0x4ea, 0x7, 0x7e2, 0xfffffffffffffffa, 0xbb1f, 0x20, 0x0, 0x3f0000000000000, 0x5, 0x9, 0x8, 0x80, 0x0, 0x7, 0x9, 0x3, 0x1, 0x0, 0x7, 0xe29, 0x3, 0xdc, 0xff, 0x5, 0xffffffffffffffff, 0x6, 0x3, 0x80000001, 0x8001, 0x1, 0x68, 0x41, 0x1ff, 0x2, 0xfffffffffffffffd, 0x800, 0x8, 0x2, 0x1ff, 0x1, 0x8001, 0x9, 0x8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x4e, 0x4, 0x0, 0x100000001, 0x6, 0x963, 0x40, 0x4, 0xfffffffffffffffe, 0xd3f, 0x8, 0x8, 0xffffffffffff8000, 0x6, 0x8, 0x3f, 0x5, 0x0, 0x6f3, 0xfffffffffffff001, 0x3, 0x4, 0x4, 0x10001, 0xa2, 0x8000, 0x7f, 0x3, 0x1, 0x4, 0x2, 0x6d, 0x1ff, 0x1, 0x5, 0x1, 0x3f, 0x8, 0x3ff]}) [ 441.515519][T16241] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 441.534657][T16240] FAULT_INJECTION: forcing a failure. [ 441.534657][T16240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.547914][T16240] CPU: 0 PID: 16240 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 441.557811][T16240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.567877][T16240] Call Trace: [ 441.571221][T16240] dump_stack+0x197/0x210 [ 441.575573][T16240] should_fail.cold+0xa/0x15 [ 441.580185][T16240] ? fault_create_debugfs_attr+0x180/0x180 [ 441.586022][T16240] ? __kasan_check_read+0x11/0x20 [ 441.591074][T16240] ? __lock_acquire+0x16f2/0x4a00 [ 441.596116][T16240] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 441.602025][T16240] should_fail_alloc_page+0x50/0x60 [ 441.607232][T16240] __alloc_pages_nodemask+0x1a1/0x910 [ 441.612614][T16240] ? fs_reclaim_release+0xf/0x30 [ 441.617572][T16240] ? __alloc_pages_slowpath+0x2900/0x2900 [ 441.623306][T16240] ? fs_reclaim_release+0xf/0x30 [ 441.628263][T16240] ? fault_create_debugfs_attr+0x180/0x180 [ 441.634090][T16240] cache_grow_begin+0x90/0xc60 [ 441.638883][T16240] ? __kmalloc_node_track_caller+0x3d/0x70 [ 441.644701][T16240] ? trace_hardirqs_off+0x62/0x240 [ 441.649826][T16240] kmem_cache_alloc_node_trace+0x689/0x750 [ 441.655669][T16240] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 441.661664][T16240] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 441.667494][T16240] __kmalloc_node_track_caller+0x3d/0x70 [ 441.673144][T16240] __kmalloc_reserve.isra.0+0x40/0xf0 [ 441.678549][T16240] __alloc_skb+0x10b/0x5e0 [ 441.682984][T16240] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 441.688559][T16240] ? raw6_getfrag+0x164/0x230 [ 441.693244][T16240] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 441.698977][T16240] __ip6_append_data.isra.0+0x2c64/0x3950 [ 441.704720][T16240] ? rawv6_mh_filter_unregister+0x20/0x20 [ 441.710474][T16240] ? ip6_setup_cork+0x18f0/0x18f0 [ 441.715514][T16240] ? ip6_fraglist_init+0x8a0/0x8a0 [ 441.720631][T16240] ip6_append_data+0x1ec/0x330 [ 441.720647][T16240] ? rawv6_mh_filter_unregister+0x20/0x20 [ 441.720668][T16240] ? rawv6_mh_filter_unregister+0x20/0x20 [ 441.736849][T16240] rawv6_sendmsg+0x133e/0x36d0 [ 441.736872][T16240] ? lock_downgrade+0x920/0x920 [ 441.736893][T16240] ? rawv6_bind+0x9a0/0x9a0 [ 441.736924][T16240] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 441.756715][T16240] ? rw_copy_check_uvector+0x2ce/0x390 [ 441.756742][T16240] ? ___might_sleep+0x163/0x2c0 [ 441.756762][T16240] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.756792][T16240] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 441.773309][T16240] inet_sendmsg+0x9e/0xe0 [ 441.773325][T16240] ? inet_sendmsg+0x9e/0xe0 [ 441.773340][T16240] ? inet_send_prepare+0x4e0/0x4e0 [ 441.773355][T16240] sock_sendmsg+0xd7/0x130 [ 441.773373][T16240] ___sys_sendmsg+0x3e2/0x920 [ 441.792832][T16240] ? copy_msghdr_from_user+0x440/0x440 [ 441.792852][T16240] ? lock_downgrade+0x920/0x920 [ 441.792872][T16240] ? rcu_read_lock_held+0x9c/0xb0 [ 441.792892][T16240] ? __kasan_check_read+0x11/0x20 [ 441.792912][T16240] ? __fget+0x37f/0x550 [ 441.792929][T16240] ? ksys_dup3+0x3e0/0x3e0 [ 441.792946][T16240] ? find_held_lock+0x35/0x130 [ 441.808001][T16240] ? get_pid_task+0xc9/0x180 [ 441.808024][T16240] ? __fget_light+0x1a9/0x230 [ 441.808041][T16240] ? __fdget+0x1b/0x20 [ 441.808060][T16240] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.823021][T16240] ? sockfd_lookup_light+0xcb/0x180 [ 441.823043][T16240] __sys_sendmmsg+0x1bf/0x4d0 22:11:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x4000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0xff00, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:24 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x1000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:24 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x2000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:24 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x3000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x03\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 441.823064][T16240] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 441.823097][T16240] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 441.831638][T16240] ? fput_many+0x12c/0x1a0 [ 441.831654][T16240] ? fput+0x1b/0x20 [ 441.845649][T16240] ? ksys_write+0x1cf/0x290 [ 441.845672][T16240] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 441.845686][T16240] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 441.845704][T16240] ? do_syscall_64+0x26/0x790 [ 441.861220][T16240] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 22:11:24 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x4000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 441.861237][T16240] ? do_syscall_64+0x26/0x790 [ 441.861260][T16240] __x64_sys_sendmmsg+0x9d/0x100 [ 441.861278][T16240] do_syscall_64+0xfa/0x790 [ 441.861296][T16240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.861308][T16240] RIP: 0033:0x45a639 [ 441.861334][T16240] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.871091][T16240] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.871107][T16240] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 441.871116][T16240] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 441.871125][T16240] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 441.871134][T16240] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 441.871142][T16240] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x05\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 442.021050][T16260] IPVS: ftp: loaded support on port[0] = 21 [ 442.188574][T16269] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:11:24 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x5000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:24 executing program 4 (fault-call:6 fault-nth:47): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) dup(r3) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) pipe2(&(0x7f0000000180), 0x0) dup(r6) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 442.477652][T16258] IPVS: ftp: loaded support on port[0] = 21 [ 442.499425][T16279] FAULT_INJECTION: forcing a failure. [ 442.499425][T16279] name failslab, interval 1, probability 0, space 0, times 0 [ 442.525268][T16279] CPU: 1 PID: 16279 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 442.535202][T16279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.545260][T16279] Call Trace: [ 442.545285][T16279] dump_stack+0x197/0x210 [ 442.545305][T16279] should_fail.cold+0xa/0x15 [ 442.545322][T16279] ? fault_create_debugfs_attr+0x180/0x180 [ 442.545340][T16279] ? ___might_sleep+0x163/0x2c0 [ 442.545359][T16279] __should_failslab+0x121/0x190 [ 442.545378][T16279] should_failslab+0x9/0x14 [ 442.545395][T16279] kmem_cache_alloc_node+0x268/0x740 [ 442.545413][T16279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.545427][T16279] ? ip_generic_getfrag+0x144/0x260 [ 442.545446][T16279] __alloc_skb+0xd5/0x5e0 [ 442.545466][T16279] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 442.557646][T16279] ? raw6_getfrag+0x164/0x230 [ 442.557663][T16279] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 442.557686][T16279] __ip6_append_data.isra.0+0x2c64/0x3950 [ 442.568311][T16279] ? rawv6_mh_filter_unregister+0x20/0x20 [ 442.568339][T16279] ? ip6_setup_cork+0x18f0/0x18f0 [ 442.568353][T16279] ? ip6_fraglist_init+0x8a0/0x8a0 [ 442.568372][T16279] ip6_append_data+0x1ec/0x330 [ 442.568384][T16279] ? rawv6_mh_filter_unregister+0x20/0x20 [ 442.568403][T16279] ? rawv6_mh_filter_unregister+0x20/0x20 [ 442.568421][T16279] rawv6_sendmsg+0x133e/0x36d0 [ 442.568439][T16279] ? lock_downgrade+0x920/0x920 [ 442.568459][T16279] ? rawv6_bind+0x9a0/0x9a0 [ 442.583134][T16279] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 442.583156][T16279] ? rw_copy_check_uvector+0x2ce/0x390 [ 442.598868][T16279] ? ___might_sleep+0x163/0x2c0 [ 442.598888][T16279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.598914][T16279] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 442.598935][T16279] inet_sendmsg+0x9e/0xe0 [ 442.598947][T16279] ? inet_sendmsg+0x9e/0xe0 [ 442.598959][T16279] ? inet_send_prepare+0x4e0/0x4e0 [ 442.598976][T16279] sock_sendmsg+0xd7/0x130 [ 442.598991][T16279] ___sys_sendmsg+0x3e2/0x920 [ 442.599006][T16279] ? copy_msghdr_from_user+0x440/0x440 [ 442.599022][T16279] ? lock_downgrade+0x920/0x920 [ 442.599028][ C0] net_ratelimit: 8 callbacks suppressed [ 442.599039][T16279] ? rcu_read_lock_held+0x9c/0xb0 [ 442.599044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 442.599058][T16279] ? __kasan_check_read+0x11/0x20 [ 442.599076][T16279] ? __fget+0x37f/0x550 [ 442.599097][T16279] ? ksys_dup3+0x3e0/0x3e0 [ 442.599102][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 442.599113][T16279] ? find_held_lock+0x35/0x130 [ 442.599129][T16279] ? get_pid_task+0xc9/0x180 [ 442.599147][T16279] ? __fget_light+0x1a9/0x230 [ 442.599163][T16279] ? __fdget+0x1b/0x20 [ 442.599176][T16279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.599192][T16279] ? sockfd_lookup_light+0xcb/0x180 [ 442.609379][T16279] __sys_sendmmsg+0x1bf/0x4d0 [ 442.609399][T16279] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 442.609432][T16279] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 442.609445][T16279] ? fput_many+0x12c/0x1a0 [ 442.609458][T16279] ? fput+0x1b/0x20 [ 442.609475][T16279] ? ksys_write+0x1cf/0x290 [ 442.609494][T16279] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 442.609507][T16279] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 442.609524][T16279] ? do_syscall_64+0x26/0x790 [ 442.620935][T16279] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.620950][T16279] ? do_syscall_64+0x26/0x790 [ 442.620969][T16279] __x64_sys_sendmmsg+0x9d/0x100 [ 442.636782][T16279] do_syscall_64+0xfa/0x790 [ 442.636801][T16279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.636815][T16279] RIP: 0033:0x45a639 [ 442.647257][T16279] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.647266][T16279] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 442.647283][T16279] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 442.662558][T16279] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 442.662567][T16279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.662575][T16279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 442.662582][T16279] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 442.678536][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 442.678596][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:11:25 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/\xf8\x91ll\x00', 0xcc960, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00009, 0x0, 0x0, 0x0, 0x2000000000002) 22:11:25 executing program 4 (fault-call:6 fault-nth:48): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0x6}, &(0x7f00000000c0)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x35c, 0x0, 0xfffffe3c, 0xffffffffffffff8b}}, 0xffffffffffffffff, 0x4e1, 0x91, 0x1}, 0x20) 22:11:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x06\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x6000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x7fffffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f00000003c0), r6}}, 0x5) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="e089940200"/15, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000380)=0x8001, 0x4) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x3, 0x400, 0xce, 0x0, 0xb33ebcb, 0x3, 0x0, r7}, &(0x7f0000000100)=0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x4400, 0x0) ioctl$TIOCSCTTY(r11, 0x540e, 0x9) 22:11:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\a\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 443.094300][T16292] FAULT_INJECTION: forcing a failure. [ 443.094300][T16292] name failslab, interval 1, probability 0, space 0, times 0 [ 443.121175][T16292] CPU: 0 PID: 16292 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 443.131131][T16292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.141247][T16292] Call Trace: [ 443.144559][T16292] dump_stack+0x197/0x210 [ 443.148910][T16292] should_fail.cold+0xa/0x15 [ 443.153686][T16292] ? fault_create_debugfs_attr+0x180/0x180 [ 443.159530][T16292] ? ___might_sleep+0x163/0x2c0 [ 443.164415][T16292] __should_failslab+0x121/0x190 [ 443.169473][T16292] should_failslab+0x9/0x14 [ 443.174103][T16292] kmem_cache_alloc_node_trace+0x274/0x750 [ 443.179944][T16292] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 443.185997][T16292] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 443.191845][T16292] __kmalloc_node_track_caller+0x3d/0x70 [ 443.197596][T16292] __kmalloc_reserve.isra.0+0x40/0xf0 [ 443.203004][T16292] __alloc_skb+0x10b/0x5e0 [ 443.207448][T16292] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 443.213111][T16292] ? raw6_getfrag+0x164/0x230 [ 443.217814][T16292] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 443.223569][T16292] __ip6_append_data.isra.0+0x2c64/0x3950 [ 443.229319][T16292] ? rawv6_mh_filter_unregister+0x20/0x20 [ 443.235130][T16292] ? ip6_setup_cork+0x18f0/0x18f0 [ 443.240187][T16292] ? ip6_fraglist_init+0x8a0/0x8a0 [ 443.245327][T16292] ip6_append_data+0x1ec/0x330 [ 443.250111][T16292] ? rawv6_mh_filter_unregister+0x20/0x20 [ 443.255855][T16292] ? rawv6_mh_filter_unregister+0x20/0x20 [ 443.261605][T16292] rawv6_sendmsg+0x133e/0x36d0 [ 443.266398][T16292] ? lock_downgrade+0x920/0x920 [ 443.271295][T16292] ? rawv6_bind+0x9a0/0x9a0 [ 443.275824][T16292] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 443.281575][T16292] ? rw_copy_check_uvector+0x2ce/0x390 [ 443.287151][T16292] ? ___might_sleep+0x163/0x2c0 [ 443.292033][T16292] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.298315][T16292] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 443.303888][T16292] inet_sendmsg+0x9e/0xe0 [ 443.308235][T16292] ? inet_sendmsg+0x9e/0xe0 [ 443.312768][T16292] ? inet_send_prepare+0x4e0/0x4e0 [ 443.317898][T16292] sock_sendmsg+0xd7/0x130 [ 443.322337][T16292] ___sys_sendmsg+0x3e2/0x920 [ 443.327045][T16292] ? copy_msghdr_from_user+0x440/0x440 [ 443.332568][T16292] ? lock_downgrade+0x920/0x920 [ 443.337443][T16292] ? rcu_read_lock_held+0x9c/0xb0 [ 443.342599][T16292] ? __kasan_check_read+0x11/0x20 [ 443.347648][T16292] ? __fget+0x37f/0x550 [ 443.351829][T16292] ? ksys_dup3+0x3e0/0x3e0 [ 443.356406][T16292] ? find_held_lock+0x35/0x130 [ 443.361324][T16292] ? get_pid_task+0xc9/0x180 [ 443.365933][T16292] ? __fget_light+0x1a9/0x230 [ 443.370625][T16292] ? __fdget+0x1b/0x20 [ 443.374713][T16292] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.380974][T16292] ? sockfd_lookup_light+0xcb/0x180 [ 443.386195][T16292] __sys_sendmmsg+0x1bf/0x4d0 [ 443.390902][T16292] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 443.396087][T16292] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 443.402365][T16292] ? fput_many+0x12c/0x1a0 [ 443.402379][T16292] ? fput+0x1b/0x20 [ 443.402399][T16292] ? ksys_write+0x1cf/0x290 [ 443.410721][T16292] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 443.410742][T16292] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 443.410755][T16292] ? do_syscall_64+0x26/0x790 [ 443.410772][T16292] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.410784][T16292] ? do_syscall_64+0x26/0x790 [ 443.410802][T16292] __x64_sys_sendmmsg+0x9d/0x100 [ 443.410820][T16292] do_syscall_64+0xfa/0x790 [ 443.451819][T16292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.457765][T16292] RIP: 0033:0x45a639 [ 443.461685][T16292] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 443.481624][T16292] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 22:11:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00@\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x7000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\xff\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x8000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x02\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 443.490152][T16292] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 443.498152][T16292] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 443.506225][T16292] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 443.514211][T16292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 443.522521][T16292] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:26 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000002800817ee45de087185082cf0124b0eb04000d00160011000586f9835b3f0a009148790003f85acc7c45", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') 22:11:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x03\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x40000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:26 executing program 4 (fault-call:6 fault-nth:49): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 443.921746][T16330] FAULT_INJECTION: forcing a failure. [ 443.921746][T16330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.935199][T16330] CPU: 0 PID: 16330 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 443.945105][T16330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.955179][T16330] Call Trace: [ 443.958498][T16330] dump_stack+0x197/0x210 [ 443.962859][T16330] should_fail.cold+0xa/0x15 [ 443.967631][T16330] ? fault_create_debugfs_attr+0x180/0x180 [ 443.973831][T16330] ? __kasan_check_read+0x11/0x20 [ 443.979396][T16330] ? __lock_acquire+0x16f2/0x4a00 [ 443.984429][T16330] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 443.990861][T16330] should_fail_alloc_page+0x50/0x60 [ 443.996149][T16330] __alloc_pages_nodemask+0x1a1/0x910 [ 444.001901][T16330] ? fs_reclaim_release+0xf/0x30 [ 444.007023][T16330] ? __alloc_pages_slowpath+0x2900/0x2900 [ 444.013473][T16330] ? fs_reclaim_release+0xf/0x30 [ 444.018632][T16330] ? fault_create_debugfs_attr+0x180/0x180 [ 444.024709][T16330] cache_grow_begin+0x90/0xc60 [ 444.029655][T16330] ? __kmalloc_node_track_caller+0x3d/0x70 [ 444.035645][T16330] ? trace_hardirqs_off+0x62/0x240 [ 444.041242][T16330] kmem_cache_alloc_node_trace+0x689/0x750 [ 444.047269][T16330] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 444.053267][T16330] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 444.059371][T16330] __kmalloc_node_track_caller+0x3d/0x70 [ 444.065003][T16330] __kmalloc_reserve.isra.0+0x40/0xf0 [ 444.070648][T16330] __alloc_skb+0x10b/0x5e0 [ 444.075064][T16330] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 444.080613][T16330] ? raw6_getfrag+0x164/0x230 [ 444.089019][T16330] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.094746][T16330] __ip6_append_data.isra.0+0x2c64/0x3950 [ 444.100622][T16330] ? rawv6_mh_filter_unregister+0x20/0x20 [ 444.106346][T16330] ? ip6_setup_cork+0x18f0/0x18f0 [ 444.111372][T16330] ? ip6_fraglist_init+0x8a0/0x8a0 [ 444.116497][T16330] ip6_append_data+0x1ec/0x330 [ 444.121256][T16330] ? rawv6_mh_filter_unregister+0x20/0x20 [ 444.127041][T16330] ? rawv6_mh_filter_unregister+0x20/0x20 [ 444.132769][T16330] rawv6_sendmsg+0x133e/0x36d0 [ 444.137694][T16330] ? lock_downgrade+0x920/0x920 [ 444.142556][T16330] ? rawv6_bind+0x9a0/0x9a0 [ 444.147541][T16330] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 444.153466][T16330] ? rw_copy_check_uvector+0x2ce/0x390 [ 444.159032][T16330] ? ___might_sleep+0x163/0x2c0 [ 444.164131][T16330] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.170379][T16330] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 444.176082][T16330] inet_sendmsg+0x9e/0xe0 [ 444.180548][T16330] ? inet_sendmsg+0x9e/0xe0 [ 444.185046][T16330] ? inet_send_prepare+0x4e0/0x4e0 [ 444.190154][T16330] sock_sendmsg+0xd7/0x130 [ 444.194950][T16330] ___sys_sendmsg+0x3e2/0x920 [ 444.199631][T16330] ? copy_msghdr_from_user+0x440/0x440 [ 444.205229][T16330] ? lock_downgrade+0x920/0x920 [ 444.210115][T16330] ? rcu_read_lock_held+0x9c/0xb0 [ 444.215167][T16330] ? __kasan_check_read+0x11/0x20 [ 444.220214][T16330] ? __fget+0x37f/0x550 [ 444.224377][T16330] ? ksys_dup3+0x3e0/0x3e0 [ 444.228789][T16330] ? find_held_lock+0x35/0x130 [ 444.233552][T16330] ? get_pid_task+0xc9/0x180 [ 444.238142][T16330] ? __fget_light+0x1a9/0x230 [ 444.242819][T16330] ? __fdget+0x1b/0x20 [ 444.247152][T16330] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.253392][T16330] ? sockfd_lookup_light+0xcb/0x180 [ 444.259085][T16330] __sys_sendmmsg+0x1bf/0x4d0 [ 444.263786][T16330] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 444.269057][T16330] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 444.275554][T16330] ? fput_many+0x12c/0x1a0 [ 444.279977][T16330] ? fput+0x1b/0x20 [ 444.284089][T16330] ? ksys_write+0x1cf/0x290 [ 444.288602][T16330] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.294079][T16330] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.299742][T16330] ? do_syscall_64+0x26/0x790 [ 444.304472][T16330] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.310542][T16330] ? do_syscall_64+0x26/0x790 [ 444.315229][T16330] __x64_sys_sendmmsg+0x9d/0x100 [ 444.320447][T16330] do_syscall_64+0xfa/0x790 [ 444.324962][T16330] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.330984][T16330] RIP: 0033:0x45a639 [ 444.335029][T16330] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.354916][T16330] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 444.363665][T16330] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 444.371790][T16330] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 444.379898][T16330] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 444.387883][T16330] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 444.396492][T16330] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 444.408361][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.414682][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.420674][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.426460][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.432346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.438312][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x1, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x10004000000002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mq_timedsend(r2, &(0x7f0000000040)="e6b6d7ed8c7f59e873871044a226de07398d8d7462ee4d11f7db1b86f2dd0c2580587af20e1c5871734b9cb1ddbf38c285e5728f2b30dcf6c1d405b19157e1fa4e9b4f120788eefe50bc24f0c280c19c57bf81068d5d7b1b9ac625399c481cf619f4b9c06a9537d33cd6c4b1ab7ca2f6c3e2df013174bdfdef3f30af2f6e080fab8056750f8130e8d4f34683206c1d2937367679abd319ccc66356f67c1500531ce2a5cf47ef7f3c82ed4d035bc2bc732c24992b93dbe1087afa4208", 0xbc, 0xad, &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="48337ebf5353951ef4afdbfc1bbe014e2804cc02bb7ff895107dceab6ae555aaf6359de680cb9e9ad1b838d997979b9d4eee14283035558efaa1882f717751fad231a915d07c9d944c178717ba7d35c6ec1ad44c079d093c720df13ee1e7286348a1193400dd0813b90becd624971c2c095701521d3eba7ebf82d0cfb7cc50212ea5ba5035d96ad072cae1c67abfd3", 0x8f}, {&(0x7f00000001c0)="dc5be83d33403348e89d3af3d64dfb3c48260f8e61bca29b4b585e725229b43c5bb90130a35cce8c266662c023ca1c7d6cac18bbe668025a1ba01d5fe6ea634561ef4e01f12dccbba52ce3b4a4ebaf64439b8f5f27e4f4feaa48835dafe25dabcacf159cd8bde1f502db2ad703049ddc94745b92ab", 0x75}, {&(0x7f0000000240)="0f72a18acb3cc9f0a6df4d6d1dbd0ae25b8e7a6d5003407c9433fde4675f7a7102572ba04e0c2e4f98ccaf44740e32e1e493da36ff6128d1260d929ad87be8f49e7d052cc20c0441bc52d353c810eafde4936f98abf21fe2caff2cf56a8c44253b846ce3a0e86d57c63fad1bc0ea4490d390e14119786bb997e07c99089b155154a2ad266d6a7e09ead7aaf1294f822b8a9710dbb6ff9e162e274775298b8e06cccfd029ae32f630ebe9faa605dda7385bcf2d0493d09e37d617258889eeb2bcbe0e6155e06527c542927d809e814bda5406ce7f4c3edb5fd30dfe2db52a7940cacc", 0xe2}, {&(0x7f0000000340)="58245458edf184f8fd2bfdbe66fa614b23039a221987bc3c17212ec37477613a21a6a5ae951787a53d2c93be1697ad6a0b293d1723c6606d73d0dda52a62e22621274508492dda79e645b0b5e45b990867d1b9074a3bfb942dc9d6a5bf6939cc067b9eacf5419721a5cce6a98141eebb0a40820110a66971bdc0c6fa005170", 0x7f}, {&(0x7f00000003c0)="ece5867f248b7a0a12d1a56ac18d961d0b3d470a4bb691a27c6a6b277cdf68667fe2c716d228023d9d80c61aff213f9b281fba54478675670942451445a2a31a736335c550b29c998044adb7f98df6d40f65ecc703babfe8940f806649309d28a08af355e0064971838b75dbb1770f0ae116786be751114c2ca1cfc5a257adb3b7babc4b316ee97261de05c0d5187b946d7a687b53409b9877561cd84d8a00605e5323492b190aa4489426349a2c569f1352c650fdf0a7984734dc767d98cd508b2c6525b78e3a2f750989de0798d4a823e097a955be6de4f0f838420b7b66139c891de613b97623ccb1cf976c3d6ae20f120888edd149", 0xf7}], 0x5}, 0x880) 22:11:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a699934e0bdb128e6717106b8d13d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/150], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) r3 = getgid() setregid(r3, 0xee00) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x2, 0x42474752, 0x3, @stepwise={0x1ff, 0x7, 0x9d, 0x3, 0x100, 0x101}}) 22:11:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0xfdfdffff, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x04\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:26 executing program 4 (fault-call:6 fault-nth:50): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0xff000000, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 444.644031][T16346] FAULT_INJECTION: forcing a failure. [ 444.644031][T16346] name failslab, interval 1, probability 0, space 0, times 0 [ 444.676789][T16346] CPU: 1 PID: 16346 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 444.686741][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.696933][T16346] Call Trace: [ 444.696959][T16346] dump_stack+0x197/0x210 [ 444.696980][T16346] should_fail.cold+0xa/0x15 [ 444.696998][T16346] ? fault_create_debugfs_attr+0x180/0x180 [ 444.697015][T16346] ? ___might_sleep+0x163/0x2c0 [ 444.697032][T16346] __should_failslab+0x121/0x190 [ 444.697049][T16346] should_failslab+0x9/0x14 [ 444.697064][T16346] kmem_cache_alloc_node+0x268/0x740 [ 444.697088][T16346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.741893][T16346] ? ip_generic_getfrag+0x144/0x260 [ 444.747129][T16346] __alloc_skb+0xd5/0x5e0 [ 444.751500][T16346] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 444.757067][T16346] ? raw6_getfrag+0x164/0x230 [ 444.761943][T16346] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.767739][T16346] __ip6_append_data.isra.0+0x2c64/0x3950 [ 444.773512][T16346] ? rawv6_mh_filter_unregister+0x20/0x20 [ 444.773543][T16346] ? ip6_setup_cork+0x18f0/0x18f0 [ 444.784335][T16346] ? ip6_fraglist_init+0x8a0/0x8a0 [ 444.789477][T16346] ip6_append_data+0x1ec/0x330 [ 444.794263][T16346] ? rawv6_mh_filter_unregister+0x20/0x20 [ 444.800008][T16346] ? rawv6_mh_filter_unregister+0x20/0x20 [ 444.805761][T16346] rawv6_sendmsg+0x133e/0x36d0 [ 444.810558][T16346] ? lock_downgrade+0x920/0x920 [ 444.815680][T16346] ? rawv6_bind+0x9a0/0x9a0 [ 444.815716][T16346] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 444.826298][T16346] ? rw_copy_check_uvector+0x2ce/0x390 [ 444.832150][T16346] ? ___might_sleep+0x163/0x2c0 [ 444.837030][T16346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.843616][T16346] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 444.849187][T16346] inet_sendmsg+0x9e/0xe0 [ 444.853538][T16346] ? inet_sendmsg+0x9e/0xe0 [ 444.858066][T16346] ? inet_send_prepare+0x4e0/0x4e0 [ 444.863402][T16346] sock_sendmsg+0xd7/0x130 [ 444.867849][T16346] ___sys_sendmsg+0x3e2/0x920 [ 444.872567][T16346] ? copy_msghdr_from_user+0x440/0x440 [ 444.878304][T16346] ? lock_downgrade+0x920/0x920 [ 444.883173][T16346] ? rcu_read_lock_held+0x9c/0xb0 [ 444.888417][T16346] ? __kasan_check_read+0x11/0x20 [ 444.893460][T16346] ? __fget+0x37f/0x550 [ 444.897645][T16346] ? ksys_dup3+0x3e0/0x3e0 [ 444.902106][T16346] ? find_held_lock+0x35/0x130 [ 444.907016][T16346] ? get_pid_task+0xc9/0x180 [ 444.911614][T16346] ? __fget_light+0x1a9/0x230 [ 444.911629][T16346] ? __fdget+0x1b/0x20 [ 444.911642][T16346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.911656][T16346] ? sockfd_lookup_light+0xcb/0x180 [ 444.911672][T16346] __sys_sendmmsg+0x1bf/0x4d0 [ 444.911690][T16346] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 444.911728][T16346] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 444.911740][T16346] ? fput_many+0x12c/0x1a0 [ 444.911751][T16346] ? fput+0x1b/0x20 [ 444.911766][T16346] ? ksys_write+0x1cf/0x290 [ 444.911787][T16346] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.967322][T16346] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.972805][T16346] ? do_syscall_64+0x26/0x790 [ 444.977516][T16346] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.983684][T16346] ? do_syscall_64+0x26/0x790 [ 444.988775][T16346] __x64_sys_sendmmsg+0x9d/0x100 22:11:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0xfffffdfd, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x05\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f59e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x8, @empty, 0x8}], 0xfffffffffffffff0) syz_open_dev$vcsn(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) rt_sigsuspend(&(0x7f0000000000)={0x5}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) sendfile(r0, r4, 0x0, 0x80001d000010) 22:11:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cg\x9agm\x87r\xee\xff\x00\x00K', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000001c0000000700009ea51300488ebf92e00000067ba9b51b020000000000"], 0x20, 0x5}, 0x0) [ 444.993950][T16346] do_syscall_64+0xfa/0x790 [ 444.998488][T16346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.004494][T16346] RIP: 0033:0x45a639 [ 445.008565][T16346] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.028608][T16346] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 445.037409][T16346] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 445.045612][T16346] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 445.053802][T16346] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.061814][T16346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 445.069857][T16346] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) write$nbd(r4, &(0x7f0000000080)={0x67446698, 0x0, 0x4, 0x4, 0x4, "6dca50dfc4f430bb7f138a574d7c680fa9733ff342ea0bfe60086834cbf2e9a209622c6015cc4608a5b1b2595f614c10c5cd0e39e5b8aa8785e6a2084104aa54df8e22c52667bad9abe5a2bfa7b1d398c8bf7b113bb8"}, 0x66) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x06\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:27 executing program 4 (fault-call:6 fault-nth:51): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:27 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x8000000200036158}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) write$P9_RATTACH(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r1) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x9, 0x6, 0x3}) msgget$private(0x0, 0x10) 22:11:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\a\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x3, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 445.458725][T16384] FAULT_INJECTION: forcing a failure. [ 445.458725][T16384] name failslab, interval 1, probability 0, space 0, times 0 [ 445.505540][T16384] CPU: 0 PID: 16384 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 445.515595][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.525672][T16384] Call Trace: [ 445.528983][T16384] dump_stack+0x197/0x210 [ 445.533336][T16384] should_fail.cold+0xa/0x15 [ 445.538072][T16384] ? fault_create_debugfs_attr+0x180/0x180 [ 445.543901][T16384] ? ___might_sleep+0x163/0x2c0 [ 445.548798][T16384] __should_failslab+0x121/0x190 [ 445.553754][T16384] should_failslab+0x9/0x14 [ 445.558277][T16384] kmem_cache_alloc_node_trace+0x274/0x750 [ 445.564633][T16384] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 445.570633][T16384] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 445.576472][T16384] __kmalloc_node_track_caller+0x3d/0x70 [ 445.582144][T16384] __kmalloc_reserve.isra.0+0x40/0xf0 [ 445.587696][T16384] __alloc_skb+0x10b/0x5e0 [ 445.592144][T16384] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 445.597714][T16384] ? raw6_getfrag+0x164/0x230 [ 445.602419][T16384] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.608169][T16384] __ip6_append_data.isra.0+0x2c64/0x3950 [ 445.614084][T16384] ? rawv6_mh_filter_unregister+0x20/0x20 [ 445.619932][T16384] ? ip6_setup_cork+0x18f0/0x18f0 [ 445.625071][T16384] ? ip6_fraglist_init+0x8a0/0x8a0 [ 445.630219][T16384] ip6_append_data+0x1ec/0x330 [ 445.635186][T16384] ? rawv6_mh_filter_unregister+0x20/0x20 [ 445.640939][T16384] ? rawv6_mh_filter_unregister+0x20/0x20 [ 445.646853][T16384] rawv6_sendmsg+0x133e/0x36d0 [ 445.651827][T16384] ? lock_downgrade+0x920/0x920 [ 445.656703][T16384] ? rawv6_bind+0x9a0/0x9a0 [ 445.661348][T16384] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 445.667220][T16384] ? rw_copy_check_uvector+0x2ce/0x390 [ 445.672802][T16384] ? ___might_sleep+0x163/0x2c0 [ 445.677695][T16384] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.683969][T16384] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 445.689631][T16384] inet_sendmsg+0x9e/0xe0 [ 445.694196][T16384] ? inet_sendmsg+0x9e/0xe0 [ 445.698726][T16384] ? inet_send_prepare+0x4e0/0x4e0 [ 445.703863][T16384] sock_sendmsg+0xd7/0x130 [ 445.708312][T16384] ___sys_sendmsg+0x3e2/0x920 [ 445.713208][T16384] ? copy_msghdr_from_user+0x440/0x440 [ 445.718696][T16384] ? lock_downgrade+0x920/0x920 [ 445.723577][T16384] ? rcu_read_lock_held+0x9c/0xb0 [ 445.728630][T16384] ? __kasan_check_read+0x11/0x20 [ 445.733681][T16384] ? __fget+0x37f/0x550 [ 445.737865][T16384] ? ksys_dup3+0x3e0/0x3e0 [ 445.742307][T16384] ? find_held_lock+0x35/0x130 [ 445.747088][T16384] ? get_pid_task+0xc9/0x180 [ 445.751714][T16384] ? __fget_light+0x1a9/0x230 [ 445.756515][T16384] ? __fdget+0x1b/0x20 [ 445.760618][T16384] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.766969][T16384] ? sockfd_lookup_light+0xcb/0x180 [ 445.772198][T16384] __sys_sendmmsg+0x1bf/0x4d0 [ 445.776997][T16384] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 445.782301][T16384] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.788575][T16384] ? fput_many+0x12c/0x1a0 [ 445.793244][T16384] ? fput+0x1b/0x20 [ 445.797205][T16384] ? ksys_write+0x1cf/0x290 [ 445.801744][T16384] ? trace_hardirqs_on_thunk+0x1a/0x1c 22:11:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\b\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x4, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 445.807239][T16384] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.812731][T16384] ? do_syscall_64+0x26/0x790 [ 445.817423][T16384] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.823501][T16384] ? do_syscall_64+0x26/0x790 [ 445.823522][T16384] __x64_sys_sendmmsg+0x9d/0x100 [ 445.823537][T16384] do_syscall_64+0xfa/0x790 [ 445.823553][T16384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.823564][T16384] RIP: 0033:0x45a639 [ 445.823584][T16384] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.833512][T16384] RSP: 002b:00007fb2affe3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 445.833526][T16384] RAX: ffffffffffffffda RBX: 00007fb2affe3c90 RCX: 000000000045a639 [ 445.833535][T16384] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 445.833544][T16384] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 22:11:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) capset(&(0x7f0000000000)={0x20080522, r4}, &(0x7f0000000080)={0x101, 0x9, 0xfffffff7, 0x2c, 0x9, 0xffbffffb}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffe5d, 0x200047be, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 22:11:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x5, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='status\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000180)={{0x0, 0x0, 0x3f, 0x3, 0x400}, 0x1, 0x3ff, 'id0\x00', 'timer1\x00', 0x0, 0x4761, 0x100000001, 0x0, 0x1f}) [ 445.833552][T16384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2affe46d4 [ 445.833560][T16384] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x02\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x03\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:28 executing program 4 (fault-call:6 fault-nth:52): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x6, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@NDA_LLADDR={0xc, 0x2, @local}, @NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x200, 0x0, 0x0, [], r6}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:28 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000840)='/dev/audio\x00', 0x200, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000880)={0x10000}, 0x4) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x8000) setreuid(0x0, r4) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) write$FUSE_NOTIFY_POLL(r9, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x3d}}, 0x18) write$FUSE_ENTRY(r2, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x2, 0x3, 0x10000, 0x3, 0x5, 0x2, {0x0, 0x0, 0x9, 0x10001, 0xfffffffffffffffa, 0x3ff, 0x5, 0x7f, 0x10001, 0x3, 0x8, r4, r7, 0x0, 0x10000}}}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = getpid() ioctl$RNDZAPENTCNT(r11, 0x5204, &(0x7f0000000000)=0xbcf) sched_setscheduler(r13, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x28, 0x4, 0x1f, 0xff, 0x0, 0x6, 0x40, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xff, 0x4, @perf_config_ext={0x200, 0x5}, 0x8002, 0x5, 0x9, 0x3, 0x1, 0x2, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000}}, r13, 0xffffffffffffffff, r12, 0x0) close(r12) 22:11:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) r1 = getegid() chown(&(0x7f00000000c0)='./file0\x00', r0, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='\x00\x00 \x00', 0x18740, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0x6, 0x6, 0xfffc}) r3 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) [ 446.400307][T16422] FAULT_INJECTION: forcing a failure. [ 446.400307][T16422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.413660][T16422] CPU: 1 PID: 16422 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 446.423659][T16422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.433732][T16422] Call Trace: [ 446.437053][T16422] dump_stack+0x197/0x210 [ 446.441419][T16422] should_fail.cold+0xa/0x15 [ 446.446046][T16422] ? fault_create_debugfs_attr+0x180/0x180 [ 446.452067][T16422] ? __kasan_check_read+0x11/0x20 [ 446.457376][T16422] ? __lock_acquire+0x16f2/0x4a00 [ 446.462418][T16422] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 446.468560][T16422] should_fail_alloc_page+0x50/0x60 [ 446.473931][T16422] __alloc_pages_nodemask+0x1a1/0x910 [ 446.479491][T16422] ? fs_reclaim_release+0xf/0x30 [ 446.487073][T16422] ? __alloc_pages_slowpath+0x2900/0x2900 [ 446.492911][T16422] ? fs_reclaim_release+0xf/0x30 [ 446.497878][T16422] ? fault_create_debugfs_attr+0x180/0x180 [ 446.497905][T16422] cache_grow_begin+0x90/0xc60 [ 446.508579][T16422] ? __kmalloc_node_track_caller+0x3d/0x70 [ 446.514399][T16422] ? trace_hardirqs_off+0x62/0x240 [ 446.519648][T16422] kmem_cache_alloc_node_trace+0x689/0x750 [ 446.519666][T16422] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 446.519680][T16422] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 446.519700][T16422] __kmalloc_node_track_caller+0x3d/0x70 [ 446.519717][T16422] __kmalloc_reserve.isra.0+0x40/0xf0 [ 446.519733][T16422] __alloc_skb+0x10b/0x5e0 [ 446.519750][T16422] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 446.519767][T16422] ? raw6_getfrag+0x164/0x230 [ 446.519781][T16422] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.519807][T16422] __ip6_append_data.isra.0+0x2c64/0x3950 [ 446.563962][T16422] ? rawv6_mh_filter_unregister+0x20/0x20 [ 446.563990][T16422] ? ip6_setup_cork+0x18f0/0x18f0 [ 446.586198][T16422] ? ip6_fraglist_init+0x8a0/0x8a0 [ 446.591350][T16422] ip6_append_data+0x1ec/0x330 [ 446.596124][T16422] ? rawv6_mh_filter_unregister+0x20/0x20 [ 446.596145][T16422] ? rawv6_mh_filter_unregister+0x20/0x20 [ 446.596160][T16422] rawv6_sendmsg+0x133e/0x36d0 [ 446.596177][T16422] ? lock_downgrade+0x920/0x920 [ 446.596197][T16422] ? rawv6_bind+0x9a0/0x9a0 [ 446.596221][T16422] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 446.627729][T16422] ? rw_copy_check_uvector+0x2ce/0x390 [ 446.633219][T16422] ? ___might_sleep+0x163/0x2c0 [ 446.638097][T16422] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.644376][T16422] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 446.650070][T16422] inet_sendmsg+0x9e/0xe0 [ 446.654409][T16422] ? inet_sendmsg+0x9e/0xe0 [ 446.654424][T16422] ? inet_send_prepare+0x4e0/0x4e0 [ 446.654441][T16422] sock_sendmsg+0xd7/0x130 [ 446.654461][T16422] ___sys_sendmsg+0x3e2/0x920 [ 446.673292][T16422] ? copy_msghdr_from_user+0x440/0x440 [ 446.678759][T16422] ? lock_downgrade+0x920/0x920 [ 446.678779][T16422] ? rcu_read_lock_held+0x9c/0xb0 [ 446.678798][T16422] ? __kasan_check_read+0x11/0x20 [ 446.678815][T16422] ? __fget+0x37f/0x550 [ 446.678835][T16422] ? ksys_dup3+0x3e0/0x3e0 [ 446.678849][T16422] ? find_held_lock+0x35/0x130 [ 446.678865][T16422] ? get_pid_task+0xc9/0x180 [ 446.678884][T16422] ? __fget_light+0x1a9/0x230 [ 446.678897][T16422] ? __fdget+0x1b/0x20 [ 446.678911][T16422] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.678925][T16422] ? sockfd_lookup_light+0xcb/0x180 [ 446.678939][T16422] __sys_sendmmsg+0x1bf/0x4d0 [ 446.678958][T16422] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 446.698358][T16422] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 446.698371][T16422] ? fput_many+0x12c/0x1a0 [ 446.698383][T16422] ? fput+0x1b/0x20 [ 446.698399][T16422] ? ksys_write+0x1cf/0x290 [ 446.698417][T16422] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.698430][T16422] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.698444][T16422] ? do_syscall_64+0x26/0x790 [ 446.698460][T16422] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.698477][T16422] ? do_syscall_64+0x26/0x790 [ 446.712515][T16422] __x64_sys_sendmmsg+0x9d/0x100 [ 446.738128][T16422] do_syscall_64+0xfa/0x790 22:11:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24040010, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac", 0xc9, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000005, 0x0, 0x27) 22:11:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x04\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x7, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 446.738151][T16422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.738166][T16422] RIP: 0033:0x45a639 [ 446.767939][T16422] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.767948][T16422] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 446.767964][T16422] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 22:11:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x8, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 446.767972][T16422] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 446.767985][T16422] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 446.792594][T16422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 446.808143][T16422] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x806, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x377, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xa}}, 0xfffffffffffffd0f}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:11:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x300, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x05\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:29 executing program 4 (fault-call:6 fault-nth:53): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 447.170549][T16455] FAULT_INJECTION: forcing a failure. [ 447.170549][T16455] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 447.184080][T16455] CPU: 1 PID: 16455 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 447.194263][T16455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.204494][T16455] Call Trace: [ 447.207823][T16455] dump_stack+0x197/0x210 [ 447.212186][T16455] should_fail.cold+0xa/0x15 [ 447.216808][T16455] ? fault_create_debugfs_attr+0x180/0x180 [ 447.223055][T16455] ? __kasan_check_read+0x11/0x20 [ 447.228103][T16455] ? __lock_acquire+0x16f2/0x4a00 [ 447.233330][T16455] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 447.239548][T16455] should_fail_alloc_page+0x50/0x60 [ 447.244776][T16455] __alloc_pages_nodemask+0x1a1/0x910 [ 447.250196][T16455] ? fs_reclaim_release+0xf/0x30 [ 447.250215][T16455] ? __alloc_pages_slowpath+0x2900/0x2900 [ 447.250227][T16455] ? fs_reclaim_release+0xf/0x30 [ 447.250248][T16455] ? fault_create_debugfs_attr+0x180/0x180 [ 447.250266][T16455] cache_grow_begin+0x90/0xc60 [ 447.250280][T16455] ? __kmalloc_node_track_caller+0x3d/0x70 [ 447.250294][T16455] ? trace_hardirqs_off+0x62/0x240 [ 447.250310][T16455] kmem_cache_alloc_node_trace+0x689/0x750 [ 447.250334][T16455] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 447.270418][T16455] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 447.270439][T16455] __kmalloc_node_track_caller+0x3d/0x70 [ 447.270459][T16455] __kmalloc_reserve.isra.0+0x40/0xf0 [ 447.270474][T16455] __alloc_skb+0x10b/0x5e0 [ 447.270490][T16455] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 447.270507][T16455] ? raw6_getfrag+0x164/0x230 [ 447.270520][T16455] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 447.270539][T16455] __ip6_append_data.isra.0+0x2c64/0x3950 [ 447.270560][T16455] ? rawv6_mh_filter_unregister+0x20/0x20 [ 447.270586][T16455] ? ip6_setup_cork+0x18f0/0x18f0 [ 447.270601][T16455] ? ip6_fraglist_init+0x8a0/0x8a0 22:11:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x06\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 447.270618][T16455] ip6_append_data+0x1ec/0x330 [ 447.270629][T16455] ? rawv6_mh_filter_unregister+0x20/0x20 [ 447.270646][T16455] ? rawv6_mh_filter_unregister+0x20/0x20 [ 447.270662][T16455] rawv6_sendmsg+0x133e/0x36d0 [ 447.270684][T16455] ? lock_downgrade+0x920/0x920 [ 447.396783][T16455] ? rawv6_bind+0x9a0/0x9a0 [ 447.401328][T16455] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 447.407157][T16455] ? rw_copy_check_uvector+0x2ce/0x390 [ 447.412690][T16455] ? ___might_sleep+0x163/0x2c0 [ 447.412707][T16455] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.412742][T16455] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 447.412762][T16455] inet_sendmsg+0x9e/0xe0 [ 447.412775][T16455] ? inet_sendmsg+0x9e/0xe0 [ 447.412788][T16455] ? inet_send_prepare+0x4e0/0x4e0 [ 447.412803][T16455] sock_sendmsg+0xd7/0x130 [ 447.412818][T16455] ___sys_sendmsg+0x3e2/0x920 [ 447.412835][T16455] ? copy_msghdr_from_user+0x440/0x440 [ 447.412851][T16455] ? lock_downgrade+0x920/0x920 [ 447.412866][T16455] ? rcu_read_lock_held+0x9c/0xb0 [ 447.412886][T16455] ? __kasan_check_read+0x11/0x20 [ 447.470462][T16455] ? __fget+0x37f/0x550 [ 447.470482][T16455] ? ksys_dup3+0x3e0/0x3e0 [ 447.484378][T16455] ? find_held_lock+0x35/0x130 [ 447.489190][T16455] ? get_pid_task+0xc9/0x180 [ 447.493915][T16455] ? __fget_light+0x1a9/0x230 [ 447.498623][T16455] ? __fdget+0x1b/0x20 [ 447.502710][T16455] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.508965][T16455] ? sockfd_lookup_light+0xcb/0x180 [ 447.514374][T16455] __sys_sendmmsg+0x1bf/0x4d0 [ 447.519087][T16455] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 447.524415][T16455] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 447.531098][T16455] ? fput_many+0x12c/0x1a0 [ 447.535536][T16455] ? fput+0x1b/0x20 [ 447.539486][T16455] ? ksys_write+0x1cf/0x290 [ 447.544257][T16455] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.549745][T16455] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.555439][T16455] ? do_syscall_64+0x26/0x790 [ 447.560265][T16455] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.566576][T16455] ? do_syscall_64+0x26/0x790 [ 447.571285][T16455] __x64_sys_sendmmsg+0x9d/0x100 [ 447.576249][T16455] do_syscall_64+0xfa/0x790 [ 447.580764][T16455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.580776][T16455] RIP: 0033:0x45a639 [ 447.580789][T16455] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.580795][T16455] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 22:11:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x802, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) io_submit(0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x101000) write$P9_RREMOVE(r2, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000180)={0x1, @sliced={0x5, [0x9, 0x4, 0x6, 0x7fff, 0x3, 0x4, 0x0, 0x8, 0x754c, 0x9, 0x2, 0xa5, 0x8000, 0x7fff, 0x1ff, 0x5, 0x3, 0x0, 0x3, 0x1, 0x101, 0x2, 0x100, 0x3ff, 0x1ab7, 0x2, 0x3f, 0x8001, 0xbb1, 0x1, 0x280, 0x0, 0xd9, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x7, 0xf284, 0x2, 0x5, 0x1ff, 0x4bd, 0x5, 0x2, 0x6]}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x500, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\a\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:30 executing program 1: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x00', 0x14, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setreuid(0x0, r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$can_raw(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@can={{0x3, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "e395095f3ed0cd5c"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x410) 22:11:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x0, @local, 0x80000001}, 0xffffffffffffffd7) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet6(r3, 0xfffffffffffffffe, 0xfffffffffffffe88, 0x20000809, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr="00000000000500000000000000000001"}, 0x1c) [ 447.580808][T16455] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 447.580815][T16455] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 447.580822][T16455] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 447.580829][T16455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 447.580836][T16455] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 22:11:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\b\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a545d32cf1e9da843d5e6e538ecf8829b08f7f4aae"}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00'}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', @ifru_flags}) 22:11:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x600, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @broadcast}}, 0x1, 0x5, 0xe5, 0x6, 0x84}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r5, 0x3f, 0x4a0, 0x9}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xeef, 0x418080) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x2, 0x0, 0x77fffc, 0x10000, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x03\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:30 executing program 4 (fault-call:6 fault-nth:54): preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000200)="05", 0x1}]) finit_module(r7, &(0x7f0000000280)='veth\x00', 0x3) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x384}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:11:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000200)='%`\xf3`\xce\xeaY3\xc2\xf3S\xa7\xe8\xb33,\x97_!=\xce\x9f\xa8\x01\x1d\xc0\xc7\x81w\xe6\xfb\x18\r\x93\x1c\x9c\xbb\x17\xa2\xba\x87\x16\xee\xee\x10\xf7\x0e\xd4\x10\x84\x1b\'{\xc1\xeb^G\xac^<\x14[P\x87\x8b\f\r\xea\'\xebm\xef\xb6\xae\xe38\xf4\xf6\xea\xf2\xa2X\x1baXyr\x13\xa6\xccl\xc7\x9e:\xb8\x10\x1d\xc4\xd6\x9eP\'\xda/Zw\x0e\xb5-\x16\xa5\a!\x8d\x16\x8e\xa3\xf5\n\x18T_\x06>\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0xffffffe1}, 0x8) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 22:11:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$TCSETXF(r1, 0x5434, &(0x7f00000000c0)={0x8001, 0x1f3, [0x0, 0xfe00, 0x92a2, 0x9000], 0x696}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2a100, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000800000000001, 0x7, r4, 0x0}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000000)={0x2}) 22:11:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x700, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x05\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x06\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x4000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 448.662094][T16515] FAULT_INJECTION: forcing a failure. [ 448.662094][T16515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.675476][T16515] CPU: 0 PID: 16515 Comm: syz-executor.4 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 448.685382][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.695764][T16515] Call Trace: [ 448.699259][T16515] dump_stack+0x197/0x210 [ 448.703615][T16515] should_fail.cold+0xa/0x15 [ 448.708250][T16515] ? fault_create_debugfs_attr+0x180/0x180 [ 448.714169][T16515] ? __kasan_check_read+0x11/0x20 [ 448.719218][T16515] ? __lock_acquire+0x16f2/0x4a00 [ 448.724409][T16515] ? __ip6_append_data.isra.0+0x2c64/0x3950 [ 448.730328][T16515] should_fail_alloc_page+0x50/0x60 [ 448.735552][T16515] __alloc_pages_nodemask+0x1a1/0x910 [ 448.741088][T16515] ? fs_reclaim_release+0xf/0x30 [ 448.746174][T16515] ? __alloc_pages_slowpath+0x2900/0x2900 [ 448.752023][T16515] ? fs_reclaim_release+0xf/0x30 [ 448.752045][T16515] ? fault_create_debugfs_attr+0x180/0x180 [ 448.752065][T16515] cache_grow_begin+0x90/0xc60 [ 448.752079][T16515] ? __kmalloc_node_track_caller+0x3d/0x70 [ 448.752092][T16515] ? trace_hardirqs_off+0x62/0x240 [ 448.752108][T16515] kmem_cache_alloc_node_trace+0x689/0x750 [ 448.752129][T16515] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 448.790787][T16515] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 448.796722][T16515] __kmalloc_node_track_caller+0x3d/0x70 [ 448.802469][T16515] __kmalloc_reserve.isra.0+0x40/0xf0 [ 448.807964][T16515] __alloc_skb+0x10b/0x5e0 [ 448.812405][T16515] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 448.818000][T16515] ? raw6_getfrag+0x164/0x230 [ 448.823051][T16515] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 448.828801][T16515] __ip6_append_data.isra.0+0x2c64/0x3950 [ 448.834642][T16515] ? rawv6_mh_filter_unregister+0x20/0x20 [ 448.840574][T16515] ? ip6_setup_cork+0x18f0/0x18f0 [ 448.846105][T16515] ? ip6_fraglist_init+0x8a0/0x8a0 [ 448.851229][T16515] ip6_append_data+0x1ec/0x330 [ 448.855996][T16515] ? rawv6_mh_filter_unregister+0x20/0x20 [ 448.861730][T16515] ? rawv6_mh_filter_unregister+0x20/0x20 [ 448.867467][T16515] rawv6_sendmsg+0x133e/0x36d0 [ 448.872319][T16515] ? lock_downgrade+0x920/0x920 [ 448.877213][T16515] ? rawv6_bind+0x9a0/0x9a0 [ 448.881810][T16515] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 448.887567][T16515] ? rw_copy_check_uvector+0x2ce/0x390 [ 448.893032][T16515] ? ___might_sleep+0x163/0x2c0 [ 448.897877][T16515] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.904127][T16515] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 448.909679][T16515] inet_sendmsg+0x9e/0xe0 [ 448.914008][T16515] ? inet_sendmsg+0x9e/0xe0 [ 448.918505][T16515] ? inet_send_prepare+0x4e0/0x4e0 [ 448.923693][T16515] sock_sendmsg+0xd7/0x130 [ 448.928155][T16515] ___sys_sendmsg+0x3e2/0x920 [ 448.932834][T16515] ? copy_msghdr_from_user+0x440/0x440 [ 448.938295][T16515] ? lock_downgrade+0x920/0x920 [ 448.943144][T16515] ? rcu_read_lock_held+0x9c/0xb0 [ 448.948170][T16515] ? __kasan_check_read+0x11/0x20 [ 448.953193][T16515] ? __fget+0x37f/0x550 [ 448.957353][T16515] ? ksys_dup3+0x3e0/0x3e0 [ 448.961812][T16515] ? find_held_lock+0x35/0x130 [ 448.966573][T16515] ? get_pid_task+0xc9/0x180 [ 448.971164][T16515] ? __fget_light+0x1a9/0x230 [ 448.975838][T16515] ? __fdget+0x1b/0x20 [ 448.979907][T16515] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.986197][T16515] ? sockfd_lookup_light+0xcb/0x180 [ 448.991595][T16515] __sys_sendmmsg+0x1bf/0x4d0 [ 448.996491][T16515] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 449.002618][T16515] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 449.009184][T16515] ? fput_many+0x12c/0x1a0 [ 449.013644][T16515] ? fput+0x1b/0x20 [ 449.017625][T16515] ? ksys_write+0x1cf/0x290 [ 449.022163][T16515] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.027622][T16515] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.033130][T16515] ? do_syscall_64+0x26/0x790 [ 449.037807][T16515] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.043871][T16515] ? do_syscall_64+0x26/0x790 [ 449.048551][T16515] __x64_sys_sendmmsg+0x9d/0x100 [ 449.053528][T16515] do_syscall_64+0xfa/0x790 [ 449.058069][T16515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.063957][T16515] RIP: 0033:0x45a639 [ 449.067851][T16515] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.088130][T16515] RSP: 002b:00007fb2b0004c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 449.096541][T16515] RAX: ffffffffffffffda RBX: 00007fb2b0004c90 RCX: 000000000045a639 [ 449.104599][T16515] RDX: 04000000000000ce RSI: 0000000020001300 RDI: 0000000000000003 [ 449.112732][T16515] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.120791][T16515] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b00056d4 [ 449.128813][T16515] R13: 00000000004c85b3 R14: 00000000004dec50 R15: 0000000000000005 [ 449.137468][ C0] net_ratelimit: 16 callbacks suppressed [ 449.137483][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.138481][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.143215][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:11:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0xff00, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x1e0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x0, 0xf004ef8b1046aef0, 0x0, "608e9c1c188dbcf414f3b0abc60245e55e08b19e2827b398c4649805f5775aec", 0x27a9f151}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000040)="a2d08a04463665e4b8f1", 0xa}, {&(0x7f00000000c0)="7ef2a12dc9a4e77b5a6a1c7ce8a2fc9e", 0x10}, {&(0x7f0000000100)="e25908add964af13c76d0650831a", 0xe}, {&(0x7f0000000240)="bcbcfc35080d0b415123e7115fe8cc4441759571a981efedf31941c0574b15e4d18593683eae6aaad8b28512c7a918de2093f14628e4ceb5771f5c66b6cebfeeb0f59570663eace4c4e8175a404a24fb8ef5f0c886449d924857f76b1e44fef050771073bac6c78a16a1cc3c3cdc4404828580eb5a810435a527e3001ad2e346a716518bcb78ed8031acd5e28d2515b61bc315ed2c75ca6e873e1410c9460c7aa506678ccdb3ab78d9c30d9624f6e027b1d145b5e7e7596204ee325e1f003dadb165bc99ba92eac47a9d1e6d82f0bf2d4413cd1fa016433e0239efdf82f34a744bfde9a5e03be3", 0xe7}, {&(0x7f00000003c0)="52066181df66b9b40ad333cd48f650324b948e914c8f317dd892578cff96a4a869b717fa616cf244d3ae4fcb14c4ac65565878173bec545c4fd7553924e1a36d4c956ef149f9bdfb82e2a14e79e1bd7c40a9d27f4e9c2db99d205a7a6c8f32e6e9d1f246d80e3bf9be152084cd608eee3f9a6728a8f20f82ec6fd81a2211a69819e9374cdf7f155c65f3d6051db38c8a65830bfb20a1ae2026f8c0d14d7c14ad41a78941009c532808236da4faaf061ff63b9bf1fe58ba5754d00fab4023a3c1a5955abdfc6603ad24f6acfa86ba859377114e52018e0958ffaac60e2fdb0874c8c7686bdaddb8a754797d9d59fe", 0xee}, {&(0x7f0000000180)="d0d5f941a07bc617176bf475c977af8c2bb1170083dc0c53762b1b0a45aa", 0x1e}, {&(0x7f00000004c0)="513d84735fb10b1e062fcf3f75fccb50073473b379adfbdcbd69284de2638ffc797bb1328daeecaf9cfaa63ba4d38ad14482ba0b7658a2853c3af215b80e7ecb87101e139da477dd4cbdcb6284b91b7bffe061a7a5db9201cf6e42d995836a03ba2d2e94cb382ec6222bc61f8376009e8334", 0x72}, {&(0x7f0000000540)="a4f396f0c708152ae85870344d31b104a9c5a3a140aff565129c2d2c24d941349f674edc8f87c49b7114f7764830b091e8986e611989bf971e7a3685c0ed8c4daa20da15ac3d897b9b2dc3da58ad4ddd1321debd74849d5c51cfb3ed935783148a44592bcb43d5", 0x67}, {&(0x7f00000005c0)="e3994cb281f4093320f16b1d8aab416aabf5eab05c6390b4438d3662fd078cbf5571bd92a68a4498202ad694e309b86eda6832653645a567f2055f92d32da85bea5144e124193546b56fa82ea3eb01d012ec39a8f5465bce8cc5df38a87593b30dc58ef705095ffe82c11f48b9040b15df4d6777", 0x74}, {&(0x7f0000000640)="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", 0x1000}], 0xa, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getgid() syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5caad999, 0x0, 0x0, 0x362) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 449.149074][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 449.154974][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.160673][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.166326][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.172119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 449.189757][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.195646][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:31 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300"}, 0x60) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) close(r0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) bind$isdn(r2, &(0x7f0000000040)={0x22, 0x7, 0x1, 0x84, 0xcd}, 0x6) 22:11:32 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x18, 0x0, 0x77fffc, 0x0, 0x1, 0x0, 0xfffffffb}, 0x3c) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\a\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x1000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:32 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000900), 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00'}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x420000, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) accept$unix(r9, &(0x7f0000001480), 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"/346], 0x15) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x14c}, 0x137) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x3e, 0x800, 0x9, 0x6, 0x4, r11, 0x4}, 0x3c) 22:11:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x2000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00@\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:32 executing program 1: ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000004c0)=0x2, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400140, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000080)={0x2, 0xed0e, 0x5, 0x400}) r3 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x5, 0x0, 0x1, @stepwise={0x8, 0x66, 0x0, 0x0, 0xcfc8}}) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766646e6f3da1f8e2a1c3ce5e40f9d452ec4a4257fcbcc89ea7aa0fa853d0fc9dd4a3ffbb0da52df0ecdfb906487943caf41e8d1b007719b73c069d136b20c07ed79c0d214f5ad77f3d102588952de5b1357f30c1451b1a1a18838270ff598dff3e5469655734b92b108ed89d6aee8e9e0985ea8419571d8269b2e237722a2c9580ae50420ea45948290429f6030e76a3effb1b970300ab99b00967634f4895bb8e83166961dab521e24ebb3970e489f30897ba8f1f00"/193, @ANYRESHEX=r5]) r7 = open(0x0, 0x0, 0x0) accept4$netrom(r7, &(0x7f00000001c0)={{}, [@null, @remote, @bcast, @bcast, @netrom, @null, @default, @default]}, &(0x7f0000000340)=0x48, 0x80800) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 22:11:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0xd, &(0x7f00000001c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}]) fsetxattr$security_evm(r3, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "de4224d5e564966817cd8d468b041c4e"}, 0x11, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0xffffffffffffff6d, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r12, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r13, &(0x7f0000000200)="05", 0x1}]) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uinput\x00', 0x2, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r15, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r16, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r18 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r17, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r18, &(0x7f0000000200)="05", 0x1}]) r19 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980)='/dev/dsp\x00', 0x20102, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r20, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r21 = dup(r20) write$FUSE_BMAP(r21, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r21, &(0x7f00000000c0)={0x14c}, 0x137) io_submit(r4, 0x7, &(0x7f0000000a00)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f00000002c0)="bc67273f9ff3599debbdeb6f322622cf2376f3da8a1ea86d2ed9d3096337ed1ce68dbcbf6d02db15659106e28b70266f9313166e7e04b8d31b370a34a4867933361428a364344f81748e1b9d5771355bf185fa05ec8b3ff0f0b6e222b8efa6f975a5d36b8eb76650ab81a7779727a6fbe7cb7980c7a97ef4c8b61e50f8f9380f7cb98b600b55a5552902917f33efdba6282265ffe684960e5e35afb4ee27e14cce0f03aa01257b3343174bb9021850640621e1fab7c8bbf12e304af222a2a133194a254eeab36dd9ab2f5adc3fa858c8", 0xd0, 0x100, 0x0, 0x0, r7}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9b89, r1, &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x2, r9}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x40, r11, &(0x7f0000000440)="89f36119b29994c3ec3a2bbdd7924333b14f36c265c6fd64a705430274f0b3d035be652939512884fea8ed430aa21666398f80636b4093bbda1db7f54ea69c9e0bede998c1ded760f88080f544b1b62d838979f36485a058dcc7e8ff7941212b0dd1346295d7c135822228eb4340b10482869a9bdab7f0395428f2a0fbc5e69f778d935f1e349d56f383e14fb6bc8f033ab96464843c26495de7fc96002c6d8fd1cb976176", 0xa5, 0xda, 0x0, 0x3, r21}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x7, r13, &(0x7f0000000540)="4415997ddd7bcf1f6ebaf9ca28f76a4402d22b361e2f2524582e405380ad188bf303487bc6a56c595a838d26b84650a292197f012ce950d610c69aad02b2dd9c5001b7d8ba5070ce8077961aaeeee00d7e2b662a3dbae356ccdf3b767deecc9f8ce77d9d21065f06c8c481fbb60cdbbed7f6cf9da789420c042a49dc8f8587eee0b1ddc7e7c2b0a15656cd74a1278b2698c9402574c403070bec1e9eedba25ad6c5089bb7a9b1287", 0xa8, 0x3a5, 0x0, 0x0, r7}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0xffff, r14, &(0x7f0000000680)="6643b9cd7c6a123768f3209363a363f5fd6f23ae916e483a139c7eeb1c6af14d8bd0a939804c2a7329ca24ceb1730dc7f48453c88aea0508a07224f24acbbbb0dc", 0x41, 0x5, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x4ac62e2287c91c50, 0x3ff, r16, &(0x7f0000000740)="5008335c2c6a87d5a95e4ce6f2ad58643e6b266890f081408a5a10245323051af228af30f56c855402bcc3a80ab937033659bac2b2c97f92b90eda55840e328fe5f9d2ed05341bc5048896198d57572d1450a11f81bdfbf862278300643efd620f17e6648843c7910a4fe1f9b66845d35768e656283a599b2925ecaaa01623dca0f1bc759df3c5cfbdf8eae80888a4d71298e189b0cb89ab493501546a94c9a723ed306a0ce8a62f86d91afe92e23fef967edcb4fdfdff0e7d4cf866691eafddab8387f0efe2d954bf4f12d550745d7d8cc2df4de7", 0xd5, 0x0, 0x0, 0x0, r9}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x1, r18, &(0x7f0000000880)="33722627c1a7672f07e5cfe4debacb9eadffe303a0440cf9f3321df0ddd0752e959f7529ee71caa352b05b7d8428c64b1eba435c830b3bdf3fb6e5c2a59334d6e08acb71fd1b7a2ebc39dc8ae6499190a01d7d94863b798527d95970b9a4fc5db1db82addda9c562282b356dcb8344e25a84232a8f347f932bd00400e870db06d6dec1a2a527171afad747a7b9e7e6a65c6c948d6304c357ffbee4fe745318f003e511bff9c823fdd4f26eaa1fde4b54fa9bb04eda676d66a228a5cfa04fe2f4ac6106ce90191f483dab36e3ddea4ee357d5f743e0d4f2c5e7d6316c8c66395d5639d34cb076804d7daa0e1597df6aee54", 0xf1, 0x2, 0x0, 0x2, r19}]) r22 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc9bc9afc46133a1e) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r22, 0x84, 0x20, &(0x7f00000001c0)=0x1, 0x4) 22:11:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\xff\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x3000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:32 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 450.255636][T16568] 9pnet: Insufficient options for proto=fd 22:11:32 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[], 0xf) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f00000000c0)={0x5, 0x5, 0x5848}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000180)={0x9, "392cce63c17af5482fb3827c08505c904178e98171da927f988629d999d4f7007d9abbafc211ef4c545804b39e493a022ab444482a8e1223541044621c18ddb6aa733c6c236013a3cf3f7bfb19d0284e907997077eca8084adc3d754d7fc0d3ee56a389c1866eef919dc8830b2967450a1a7f379c2fdb049d8d170ebf6ff6d0a"}) close(r4) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0x12f}]) 22:11:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x01\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x4000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 450.367365][T16568] 9pnet: Insufficient options for proto=fd 22:11:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="2400000032001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) [ 450.788552][ T9790] tipc: TX() has been purged, node left! [ 450.968568][ T9790] tipc: TX() has been purged, node left! 22:11:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x5000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x02\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) sendmsg$can_raw(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x1d, r4}, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=@can={{0x0, 0x1, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "60f0fd2cd7c9aafa"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) r5 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4ed3, 0x303000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f00000000c0)={0x9, 0x8, 0x1000, 0x84000, r7}) 22:11:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x1, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000340), 0x4) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000100000018"], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000300)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) 22:11:33 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x2, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000008, 0x12, &(0x7f00000001c0)={0x77359400}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 22:11:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x03\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fff9, 0x0, 0x200, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x3c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RSTAT(r6, &(0x7f0000000180)={0x54, 0x7d, 0x1, {0x0, 0x4d, 0x3, 0x5, {0x2623d6fe981a45e8, 0x4, 0x5}, 0x980000, 0x1, 0x8, 0x8, 0x0, '', 0x13, '+mime_type-\xe7%proc:=', 0x0, '', 0x7, 'trusted'}}, 0x54) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x6000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:34 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x4, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x04\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x7000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000008, 0x12, &(0x7f00000001c0)={0x77359400}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 22:11:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x1, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000340), 0x4) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000100000018"], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000300)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) 22:11:34 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x7, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2dec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81d796f27f537058f8e3550af98925313a3124181a13bcc5a3fb54aff8eaff4f6b59c41705b96a671"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {}, {}]}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x8000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x05\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:34 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x9, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x1, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000340), 0x4) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000100000018"], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000300)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) 22:11:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x40000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="79000000000000005b01000000e5b75d0fc64b2a113a3b47ea1520b0d50800000000dd56f449df1c42d234d5048b7ca93356d93a8a15fd09344ee20249106ac4b19f8e4debbedb2c4f2fb684c604cecffc19fef6457dd1468b90c0e9521a9301c49fe731d88f3992ebeb50d2f8a27a2ba301f8fffffd38b4298270cfab3d165a4829859eb6588405bbbec8c355a10ac3"]) 22:11:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x06\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ff88ec2aab81df985bdf1a15c2faff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) io_setup(0xd, &(0x7f00000001c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000200)="05", 0x1}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) syz_open_pts(r7, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r8, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000200)="05", 0x1}]) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2b65048cff61448e, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000200)="05", 0x1}]) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'team_slave_1\x00', 0x3}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_setup(0xd, &(0x7f00000001c0)=0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r13, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r14, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r15, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r16, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r18 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r17, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r18, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r20 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r19, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r20, &(0x7f0000000200)="05", 0x1}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r21, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r22 = dup(r21) write$FUSE_BMAP(r22, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r22, &(0x7f00000000c0)={0xfffffffffffffd2f, 0x5, 0x0, {0x0, 0x0, 0x0, 0x9}}, 0x30) io_submit(r19, 0x20fe, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, r18, 0x0, 0x14e, 0x1, 0x0, 0x0, r22}]) 22:11:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x1, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000340), 0x4) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000100000018"], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000300)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) 22:11:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0xfdfdffff, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\a\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:35 executing program 3: syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getresgid(0x0, &(0x7f0000000300), &(0x7f0000000340)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 22:11:35 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xa, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0xff000000, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x51ee, 0xffffffffffffffff, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) ioctl$TCSETX(r7, 0x5433, &(0x7f0000000000)={0x400, 0x9e0, [0x3, 0x400, 0x6, 0x2, 0x101], 0x7}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r8, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000200)="05", 0x1}]) r10 = fcntl$dupfd(r7, 0x0, r9) io_setup(0xd, &(0x7f00000001c0)=0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r11, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r12, &(0x7f0000000200)="05", 0x1}]) io_submit(r1, 0x2000000000000071, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x101, 0xffffffffffffffff, &(0x7f0000000180)="ac035d4f3ae1661bbcd55cf396be3a3eb3534a0159789aab4c9f91a71617b1e06aa143560a3aff14d48a8efde1328c4f178a4f892d65967d478cf130410c808dd996b75c6c60c5c66cff87760b4bac31839440abe97a955998bb0d715021b79a14bd722d75ff141d44df566e307658f62ca54fd2f6c2e3702665", 0x0, 0xfffffffffffffff8, 0x0, 0x0, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xea, r10, &(0x7f0000000340)="3e5bc3eab8511ff8ccdd97b5a3c8c8a74ec40ff5bdc152c8921aa78a490a8e1e8a44428ada802a8ab59526bbf358c9adaca6351d3bf220b2ba03365b94fc6782aa6a7c1520b15e98e4d2f60f59845a7dca5be644d5ec", 0x0, 0x2, 0x0, 0x3, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x81, r12, &(0x7f00000003c0)="838b0ff52c3385a87188a3293308b4dfeede7a581bcc5845998eca97e03953077891bda23d8d2af4c7eb28d35f2217ff3f34001e7acc393c025a47c5cf3a67816bd2904fbc09c08adb8982e24a38401f1598498b1fbaefda61e172402d658b1e8d3834ff343452deb7c569907d7fe82c768ab0ece91c1e5323e9ca46628a8c1e9ddd0cc04eb2ef4115e5d803351c6b51fe3c", 0x0, 0x400, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f00000004c0)="9860c56eea7d4a8b261879582b9b7e9de7597d6faf1e1c9f20678e3ad12d5c97d8d67cc580a3381b3b06b6b636aa0597c692293e3983aed8dd83026adc12f3a1ea861e83cafeb5fc736cc8b6860c5d6ca9f1d2164749a0fb8d2bb1bf3c1ca925f13d5ff82f06a568e6051e4bb09fe8ae49d3", 0x0, 0x8cda, 0x0, 0x2}]) 22:11:35 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0xcb8ffa6936603fb, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000000c0)=0x40, &(0x7f0000000140)=0x2) ioctl$TIOCNXCL(r2, 0x540d) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 22:11:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\b\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0xfffffdfd, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000080)={0x2}) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:35 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xe, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00@\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\xff\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = timerfd_create(0xd5e1e47baab24561, 0x800) fcntl$dupfd(r1, 0x406, r4) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x28, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x2, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x01\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10000000000046, &(0x7f0000534000), &(0x7f0000000080)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, 0x0) setfsuid(r2) getpid() r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000540)={0x2}, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0x0, &(0x7f00000004c0)=[r0, r3, 0xffffffffffffffff, r0, 0xffffffffffffffff]}, 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000001680)=""/214, 0xd6}, {&(0x7f0000000400)=""/21, 0x15}], 0x5, 0xfffffffffffffff8) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r3, r6, 0x0, 0x102000002) 22:11:36 executing program 3: syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030343030030082ccf4ea5898f005af83a3e7436d3030303030312c000000000000000000"]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) exit(0x2) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000000c0)=0xfffff8b9) 22:11:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x02\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x3, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x47, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x0, 0x1}]) 22:11:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x03\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 454.126636][T16752] [EXFAT] Unrecognized mount option allow_utime=0000400 or missing value 22:11:36 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="a3", 0x1}], 0x1) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) io_setup(0xd, &(0x7f00000001c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}]) writev(r3, &(0x7f0000001400), 0xfffffffffffffff8) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80)}], 0x1, 0xf0ff7f) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc547473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_ASSIGN_PCI_DEVICE(r5, 0x8040ae69, &(0x7f0000000000)={0x2, 0xffff, 0x7fff, 0x0, 0x2}) 22:11:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x04\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x4, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x60, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shmget$private(0x0, 0x4000, 0x78001680, &(0x7f0000ffa000/0x4000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) prctl$PR_GET_KEEPCAPS(0x7) userfaultfd(0x800) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) r4 = accept4(r1, &(0x7f0000000080)=@sco, &(0x7f0000000100)=0x80, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r8, 0xe11, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}}}}, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'veth0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10002}, 0x4044000) bind$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 22:11:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x05\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 454.658197][T16789] tipc: Enabling of bearer rejected, failed to enable media [ 454.684182][T16789] tipc: Enabling of bearer rejected, failed to enable media [ 454.849599][T16752] [EXFAT] Unrecognized mount option allow_utime=0000400 or missing value 22:11:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x06\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x5, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:37 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x8e, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000180)={0x90, 0x0, 0x7, {0x5, 0x0, 0x7, 0x0, 0x8, 0x1, {0x0, 0x7, 0x800, 0x7, 0x7, 0xa76e, 0x0, 0x895d, 0x36b8, 0x101, 0x1800000, 0xee00, r2, 0x5, 0x4cb43219}}}, 0x90) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x0, r0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x605000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r9, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f0000000200)="05", 0x1}]) r11 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm-monitor\x00', 0x101202, 0x0) io_submit(r3, 0x4, &(0x7f00000007c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x1200, r5, &(0x7f00000002c0)="4422824a12369e04149a1533352fb5f3f3ec96e50a19f4d9d459b5bb78241730b1f096a1804e157c8d3a2a4b09c35fc3ceebe5eae3b642024e59d64e8323d4a76c5b4d2e68b55adb53e8ae884042a4f663dc57e2406f808dfa7f4b4e628d6618ab9ec7f52f2e9f5c201f68e090d1922e45d4b67536eb0a16323d645ebda25d7064caddd2b1e3fd4cf8b9eedbe175b26ba291f6d27e0421e7d8a25afd2e411adb", 0xa0, 0xb9, 0x0, 0x1, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xa, 0x2, r1, &(0x7f00000003c0)="48d8728b107a959e1cd8122fab8219861512e3c8fb80c5c4b92e1281fbb432b771e7292d9c59996e2acf37ecf63275e74c6ebcf62020cb2184cfeeb3d43fcddfa0d38d5353840233ba2a7c9d8b364ea29d3594edd27f74b958b1259385dc29d16df2cd0a51c35d9bee0df7d8092c4e2d3a33a6e15fad0f9059d9097145d50c8f84b38698b5cc0e29493116c2c3c8d1cffe018588f37818d54350ab84b5942a3c57e4444cc63784086a0c5be7cbeca5bc5070c57300e857cf9fa9230a67371919cbf2cc908835005b699e96e1c0df6f2af4d284445dceffa6e9b22e0ffb116001b2ded870c1376a8fbf524b1371ee13da535de8e57f692c", 0xf7, 0x10c, 0x0, 0x1, r8}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000500)="69a0e655837b132b4cc4108ed6cca0aeecce9b219ec644e32b6db6fbfd2f5534eb31315f44ffce3cf38a6abafa0572b2761654b765c07d63b28a2764668a934dcec36c08a7c66c48eef9f387cbaf8a1be0dabd85400c310c51d10609e70ab03eb3b4f7e24571356870d22d564a02cb8c1256a50f85e01880a8b0fad7de0e2143a54431532f313ecd04bfd0e761e8c3e7001b5003f4b4666ebccea6c4e4069b8ba17a518a1fa79d0dbe0062d493c3ed802473145d7dbeab630ddd23181a1de174824399e35dbfad57c50e6eb3d543d6a87ab84c907366f4c3fa70e26ddfc9807fa00f32887ceb69", 0xe7, 0x400000400, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0xfffb, r10, &(0x7f0000000640)="6d63bacfe98b2fe71a99a44f10996d5c99c6680a457b56cd45372d5fbe2b6c43e64e71698478b8ada6345414aef26a796dd3213569a694599f0f281cdae2961e018eb3a877897976221708fce5c0fac978789e68026dd9a3dd366a00c13433041be0de67c2d44d22c679d3ce92f3836609e5b6e80fed1b81a83b89a8df4c189e03e7406cd1e7aebb30292148eecbfbae2a67c848544c69cbfae12c46a698af310584edd54939b81931e868151cbff91ea4e255490c10ef342c4a5c7a38c0cad5dfa45b31cc83ce711a269b4c2d72ae43ebe40773940e3a128670410e3f599934b4", 0xe1, 0x6, 0x0, 0x2, r11}]) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000880)={'filter\x00', 0x0, 0x4, 0x22, [], 0x3, &(0x7f0000000800)=[{}, {}, {}], &(0x7f0000000840)=""/34}, &(0x7f0000000900)=0x78) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:37 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) select(0x40, &(0x7f0000000000)={0x5, 0xfff, 0x0, 0x3ff, 0x0, 0x7, 0xfffffffffffffffe, 0x80000000}, &(0x7f0000000040)={0x401, 0x5, 0x9, 0x7, 0xffffffffffffffff, 0x0, 0x1}, &(0x7f0000000080)={0x8, 0x40, 0x98a4, 0x0, 0x9, 0x0, 0x0, 0x4}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x202000, 0x0) unshare(0x60000000) 22:11:37 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000540)) r7 = dup(r6) io_setup(0xd, &(0x7f00000001c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r8, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000200)="05", 0x1}]) ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000000500)={'ip6gre0\x00', {0x2, 0x4e21, @broadcast}}) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x80400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r11, 0x311}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r11, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0xfffffffffffffcfa, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xbc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="ca73330ceb19252097d38e03fe0b7321"}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xdb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000580)={'bcsh0\x00', 0x7}) 22:11:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\a\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:37 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xcd, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x6, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x0, 0x2}]) 22:11:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000000c0)=""/157, 0x9d}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1508000065ffff018000004008003950f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082d2f51a3baeebb78abd55fba3da80b5de18c4a257efaef234555c08dc540af3753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaf74f6b59c41705b96a6711d14f7413693884679079d00000000000000000000000000000026fe"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r7, 0xc08c5336, &(0x7f0000000340)={0x6, 0xffffffe1, 0x404000, 'queue1\x00', 0x1}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1000, 0x1435f32}}, 0x30) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000180)) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0xf9, 0x0, 0x0, 0xf5ffffff}}, {{0x0, 0x0, &(0x7f0000000180), 0x361, &(0x7f00000001c0)}}], 0x480, 0x0) [ 455.304040][T16820] IPVS: ftp: loaded support on port[0] = 21 22:11:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x7, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\b\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:37 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xd5, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:38 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xfc, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:38 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x20, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00\xf3<\xd5\xd6\xd8\xe2\xb1\xc2\xd8*\xcfD\xa9\a\xbb\"\xe2\x8c \xf4\xb4\r\x11\x8d\xa16X\xf4^!\xf7\xdb\x18R') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x3, 0x8001, 0xfff7, 0x6, 0x11, 0xc1, 0x8, 0x8, 0xd1, 0x4}) preadv(r0, &(0x7f00000017c0), 0x1a6, 0x0) 22:11:41 executing program 3: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x10202, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000500)={0xffff, 0x0, [0x800, 0x80, 0x4, 0x48d, 0x9], 0x7}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x5b321f70e97f06b4, 0x0) recvmsg$can_raw(r2, &(0x7f0000000480)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, &(0x7f00000003c0)=""/134, 0x86}, 0x200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) unshare(0x40000000) 22:11:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00@\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:41 executing program 5: io_setup(0xd, &(0x7f00000001c0)=0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="05", 0x1}]) r2 = dup(r1) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x100, @null, @rose={'rose', 0x0}, 0x1, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) io_submit(r5, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) r11 = socket$isdn_base(0x22, 0x3, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r12, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r13, &(0x7f0000000200)="05", 0x1}]) r14 = gettid() io_setup(0xd, &(0x7f00000001c0)=0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r15, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r16, &(0x7f0000000200)="05", 0x1}]) r17 = fcntl$getown(r16, 0x9) r18 = gettid() io_setup(0xd, &(0x7f00000001c0)=0x0) r20 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r19, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r20, &(0x7f0000000200)="05", 0x1}]) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000005700)=0x0) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005800)='./file0\x00', &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r10, &(0x7f0000005900)={0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000002c0)={0x129c, 0x3f, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@generic="2a13aa42c2ff73419156e6201813f7adebc4d0ac7e99a82e919ac64973d14ae06c0d0d", @typed={0x14, 0xc, @ipv6=@ipv4={[], [], @multicast1}}, @generic="61e0a7c098c4c7606e4944e9c33d22e68482b4e7c33f761ac84d1330fea87576ab917574152ed98fc2d714a2d634097546defc7cb0beeaf0399feae07b361f5a90", @nested={0xc, 0x6e, [@typed={0x8, 0x6, @fd=r11}]}, @typed={0x8, 0x4c, @u32=0x4}, @typed={0x8, 0x22, @ipv4=@loopback}, @nested={0x10b0, 0x92, [@generic="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", @typed={0x8, 0x8a, @u32=0xffffffff}, @typed={0x8, 0x82, @fd}, @typed={0x8, 0x46, @u32=0xfff}, @typed={0x8, 0x65, @u32=0x8}, @typed={0x8, 0x30, @u32=0x6}, @generic="2b8d0193d67481e345f4501e178badd24ad53273f4b3ef553a5fef9373680d1ae425a37e379a35623c81037534104ac7075c45edb141435cc611e6ffe352940a1eaec4198dd348f6d06ccfe81de056aa99b71f260f7eb34faadaa16cec68bc8b6cecdf7b1dac0308df936e29aa2073dc6811efda2dc015d3278a17dcef7268c210"]}, @nested={0x8, 0x7c, [@typed={0x4, 0x59}]}, @generic="8a2d3566d7dc933e5d8bec9701aa574b96ea09c58eafecb01d79653f0190eab48709924b1798ac702cbf3f7642a22c034c4a54d21bea7ac4e7660b78fc5fd4753674ecce7af167fcb272facce91ec8e0b9b6d0d29f224a0df1b1152e173d6ff9b737b525f794726f065b0e3147253fe4cc9df41440b48849e0384159818a8646d4700d04dc94101c4b880a24ee2bce02f96c6f9f8274334f449091e8f276f83f565ee9f0270d9ee40cd403758be51e84433c316f4404aa3a", @nested={0x88, 0x18, [@generic="6a58d5713410b222c0c686e2e5282958b6e1f683aa166f5579023e238278444537b9afb4ddc443ccb7da4fa7e9591e75bf4da067e3298b8fbcd8749df8f24de634a3bc639a2f2fbea6e52f415aaca14566520dc1c58a571a4d8c07fd0aa3371a7f49c94bdb3e1468cf6d409eab010a5d8ac29c947acecc0b2338826fb6599b1cd5"]}]}, 0x129c}, {&(0x7f0000001580)={0x160, 0x14, 0x8, 0x70bd2b, 0x25dfdbff, "", [@generic="d092ac46bf84e6726f915f11fc2552eade9a7849e2f6c0b329c17bf13d6b07ab3655aea561b3bbf4221b53e3ee98cf3dd4098cbaeefeb81d4ca8a7c3e715fb515104f08b7736323e4ea0617033ce7fa72c7077ade066b39bd2053d10db47517ed7dc980e72568de9579dccc9252365ed82af59fa4bf3430d7d5a5f2e1ddf79abd77d78", @generic="404ba17da661f6202009de9eda33f97e633c2483662d3b2c205cfc8cc1917e4e9ce69e54cacbe24d7fda9947521baa17380e3246ce2b6dc99237adbcb5b11e7e80a02c6e23f70cf0123cf3e74a2f1014c31b460114b497c2f26bc95f4aa4016a8c184dadd312836bc0943a5be2b774a80de1baef615ca6e642388f0754d2ad786bd1984dc29741f5f2b66e851ab5d90a9c7f1edfbd1f507267f516e1e6c29db412ab2deea8e1fcb5676680ab8b2292302eac5c1fcdc6ddba81ee06b4c3428ac09edb68599958d9162d39c14abc"]}, 0x160}, {&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000300000002bbd7000ffdbdf25773221fa1fe855d44a1291bc84a9c669eb75b740cc9ef0bf06d1efa32ea18dc31845360d025ab255d6"], 0x1}, {&(0x7f0000001700)={0x100, 0x31, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x44, @uid=0xee01}, @nested={0x10, 0xb, [@typed={0xc, 0x8e, @u64=0x100}]}, @generic="75d3c9cfa9616aeef15dfdb6833032fc8c587a70483c5217a74d0315f7253b874166fedf04e37ac19d95b165d13bebf79830458e83c55137c5d645d9d9c73ce89b40abc8cf093830ccd7210935e5ee87e9150f18ced33da83eca35d5a750794898bea237fabb7e43dad78ddbaf2a64dd48a02b2483ce5b99565f9d482e2d379a5d6285641cd1f49e52e879da058e3041c63276517b35b4382b5c48091bcae6df70204273da131340dc691d58fce155701264cd1b32e4587bee7d406b9b8510007cde1c9d6948adad5d05999e3ae3b76f5f5bbbcf6ae39f34"]}, 0x100}, {&(0x7f0000002800)={0x114, 0x1f, 0x800, 0x70bd26, 0x25dfdbff, "", [@nested={0x104, 0x24, [@typed={0x8, 0x1, @u32=0x5}, @typed={0x8, 0x40, @fd=r13}, @generic="215a4ff910c16295898690678efd14fd25a1618d5f", @generic="2def00d7b5b257ced8651382e3b0013632c79629c71af2d3baf04940f48c74407e884a26f3969bf7b39c5d5a3a69b67bb34b8683590b16dd0a4ec551de3e4af3824a97c32df26940cc7a3bd9caefee2d3ba1b284e77c639fc684175e691f51c6f27ec90d4e98393c20f910b0a0f2274bc4509777cc2b87a02ed6499aa9a267579920130b4a22d8050bac888b13cceb12da724a33de989ed4f162be87dc0623534532c915e9f51ad662a846e45c1fef0e", @typed={0x4, 0x48}, @typed={0x14, 0x73, @ipv6=@local}, @typed={0x8, 0x53, @u32=0x4}, @typed={0x8, 0x73, @pid=r14}]}]}, 0x114}, {&(0x7f0000002a00)={0x1f0, 0x34, 0x100, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x24, @pid=r17}, @nested={0xd8, 0x93, [@generic="ea9f941ff4e539f3b167277319d9390cdd7f2c16624423f6a68ebbeb618f64c4f9d5443130eafd9c18c0d11bf34e47d2ae653c67f482ab1713b3b71adb03f91f3e67d4ebdbe29e8e39bb84af125ac240496bc4c5230f42c378ca572f83998b0a5fc16c5e893c468dcf508805a8acf4e0ec9c8358aaf31f64a91f", @generic="dbf43d571f089bc208216881a5a71c8a8e31a99e963eacc464ddb9e739bc935902b948be5694cdb69854ccf522667fd2842970a00c43d72771465da2bf320716c78e6c77c0a0925c90baeb577c8483e64385", @typed={0x8, 0x68, @str='\x00'}]}, @typed={0x8, 0x2, @ipv4=@broadcast}, @typed={0x8, 0x42, @pid=r18}, @typed={0x8, 0x62, @str='rose'}, @typed={0x14, 0x4f, @ipv6=@ipv4={[], [], @empty}}, @generic="747f7a9aaf851f504a6f1b2b9b649d5829c2efb28672b5c5451ff2140345fd90e16690a9a4800b8679db4dde6e430248242a80c87d33cbfdb820898cf307222f64517da78ff4e3abcdbb0c594e5dcef58e22f4de5c1594784ab52a92122c40e4e8c175adea957e25c3e5b8d0b205d24564bd0715b4fe5cab22aed89a3586570603e3550f464b16016f39257e624ae41dd267964e623f7a2f8b8931018ded63f5a0bccc5b65860ef14b4e68d02a", @nested={0x24, 0x39, [@typed={0x4, 0x78}, @generic="7457bd4260c9eb3cc92b2e6a0f8314c71fed44", @typed={0x8, 0x1d, @u32=0xdeab}]}]}, 0x1f0}, {&(0x7f0000003d00)={0x10, 0x15, 0x8, 0x70bd27, 0x25dfdbfb}, 0x10}, {&(0x7f0000004200)=ANY=[@ANYBLOB="10042cbd700000"], 0x1}, {&(0x7f0000003f80)={0x1c4, 0x29, 0x20, 0x70bd28, 0x25dfdbff, "", [@nested={0x14, 0x63, [@typed={0x10, 0x27, @binary="f122eec1a6de5bc389"}]}, @typed={0xa8, 0x4b, @binary="8094703bf3e97971efd76280a786929b91313197ff10d6edb4380ad122d46d5161b1099bac8e9b10fc032dc5d55b76b685ae77156905deb5baadd80c1749ad1f9dd00e9c18a0a1b6d2359a55aa254c048a33d40b82e1197f107f0691df4c35f91592e2777a3a1d18c0f5bcfc58a33f76756c8af38024c349af1cb2bcbc10ec23a177a1c1850d0f07e50ef90eb21b810b3bd6d72295c67cd9c0b88ee26e31a842cb97dc"}, @nested={0xd4, 0x65, [@generic="06a39b060462cc318f1a05ba7993e477d90c4ec2ffeb5d2782b38fdaa90af21b9ac370c2a4c79cfeded44471ccdc3700f167b4f41e94dd7cbae14c313edbf66320cd693a2854d83d67196778e756e7caa8bfa49f92addb1cbd9dffc6e88088079ff0e470c2ac319f63ab22202150eb1dbc85a25a6cc9d203edf372", @generic="2f1c39feece61c453a845ad2f414ff32a53ef726f217769a3672c3ede632a758a3ecbc446a69973995a8465cf1d2af3ebeef3a1ac1c6881acc175d25eb1dc433101015e4a76e48ae2ec51f6564489dc3c9b3"]}, @typed={0x1c, 0x78, @str='em1eth0system*}!md5sum\x00'}, @typed={0x8, 0x8e, @str='%\x00'}]}, 0x1c4}, {&(0x7f0000008100)=ANY=[@ANYBLOB="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", @ANYRES32=r20, @ANYBLOB="0f3b2c1fa6d66b073d0d9e2a80de04981f13c149efc117456db4a387b1a294cdb137d7d8355bd530fcac6601d75a61dbe0308e071dceccfedde2a5ce0575899e0a76eb5b838c8dfb97bd63a097c679c33dbadec17279a63ebee85e71592314012d0008003a0089f5209a82a5fa8ee74ea46b14ac770644e9e12cf36d665b465c0fd046bdde16", @ANYRES32=r21, @ANYBLOB="08009600", @ANYRES32=r22, @ANYBLOB="53af913c3898c7882bce46c8e28ece89c8a700c8cf7203929ed945b5df42f3a7a58ee4648b3b0a9a59983d0a9452d1907da4850f2d6187fb941812f10e4f9bdebe8fc55e35aeab85f54a39318ecd8586bf0f856531f17c6c0fda94774bf9d7888ba7a5fc739e7d48e07b9929300b2ca7c99dbabe97cd0aba1b9cb6ea7294ff7b002987a8a7de7e9e3b17869e9668d0e6cad09148560937bee2bd9f5056d56acff30913083232c6e47158f8821322d0447e19705327205c69e12749bb686cf40993bd101beee71a19d91e64d469250cef01bfed1d50f0214c2d1574f09ad272e6c61574c0d22056cdb767b87dc83737a5f0c5da4793439abd5849eb0d2deccbd0b400210002a6cc8fcf447254e37d1f259b5c40f642bbc90e1a3b9a6bcb2504197c580ee40c4cf5f65af893ac0408d921633575718c6f54dc659edceaa667c0a40a0b2cfa183d465a0c41b0aa81724b4814d5892d50277e125cb4a199c5282004d1785f8555f1e9d20cc308527a7e742d60720367b3d2e555d25480ed873e744e0897ea78111fd928f9d9d2b262b3b8b285e2bba214656b34c0dd5ebdd93fa7012c1352d3e4650ca5586fa449623fc6a0617cee0004007600"], 0x7}], 0xa, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}], 0x38, 0x2000e040}, 0x4000004) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0, 0x12f}]) 22:11:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x1f4, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:41 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20202000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r6) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc71040bcadbce02d, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000280)={@local}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000080)={0x7fff}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10) sendmmsg(r7, &(0x7f0000001380), 0x40003ad, 0x2000000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/74) 22:11:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x300, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xff\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x90, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x3e8, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x500, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 459.517485][T16876] IPVS: ftp: loaded support on port[0] = 21 [ 459.558308][ C0] net_ratelimit: 10 callbacks suppressed [ 459.558316][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.568308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 459.569889][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 459.575570][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 459.587076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 459.592957][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 459.598843][ C1] protocol 88fb is buggy, dev hsr_slave_0 22:11:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 459.604644][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:11:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x120800a, &(0x7f0000000080)) 22:11:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x02\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) chmod(&(0x7f0000000040)='./file0\x00', 0x8) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x0, 0x80, 0x77fffc, 0x3, 0x0, 0x0, 0x5}, 0xffffff9d) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x2, r0, 0x0, 0x0, 0x400009, 0x0, 0x2}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000200)="05", 0x1}]) r8 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x6, 0x140) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="00020000000000007f000000000000000700000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r7, @ANYBLOB="00000000c3bc00"/28, @ANYRES32=r8, @ANYBLOB="00000000c900"/28, @ANYRES32, @ANYBLOB="00000000040000000200"/28, @ANYRES32=r4, @ANYBLOB="00000000e100"/28, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00y\a\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000300"/28]) 22:11:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x60b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x600, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 460.151681][ T8801] tipc: TX() has been purged, node left! 22:11:42 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f0000000100)}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000003c0)={'ipvs\x00'}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/234, 0xea) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(r1, &(0x7f0000001a40)=ANY=[@ANYBLOB="73797a31a85aaeabf351439cc60ea1b927a3e803f205919f5734858f645ea85fb14df90152900fa72ad116e1f74bce188f91c052a9021a8a291a10326d9b55bb4f0c241d07debb0b3cfcfdc7098035c6c7c2c0f83d1ebad7e93755077b988ae61ad074316603cf2c1cc9c05217f92694f506ab788fd20985b987fa367333e37973bd53bdc0360339b72223b8eedba2e5b14a868fb1e38497590a941bce6048cdc4c9339200145516014db3fc9eedf292f67299f052e3b5a8c6d941e520939cb85f7831f9caa0f83b6800f4730fac6082b1185edfbef2b84c790671ce088cbf817ff8d53f99c568232fd83eba254cf20271c2c10635ba6014039b9ce5b43d435f3b6e87c24b099f4fb88b06287c8e9d3d55cbc017f8a36472567c5d562d0653fb8654463a1fcf41ccee2a232e1079e5f18635214bbf9b8a94e04f43016533333b9140bb6a41c5a0d2dd0e7ee4d25b5fe7c79eac4e83332f014b0f7ab8aeb8317f112ba91380c6049b326352fa48a20fd7a72461be67ad20aa1109120519e1acb611af3d2b5a2075a494c152a352ccde3729cf6b67546a71c38508c0ce0b9612c23195475559bdd5c61e363f79a4c86a98972710e1c28dc54ebb72c34d68a421e52bcb09320f8999a116dd993d03f27842fe11ffaf3eeefa6457f0e2339ff14d02b7f4a13742cab1971b60fcd44e0a52f3451416893f56c0e71c45b67fe44540d62fe9fe99a7c4aeefebf89ee32e5aa2d72e156149650a0f188bc835fb7ae4db56028bdbc2398a542c93628f0895b1442f34cb896f659ef25462a284cda75817df6ed705012f3a695dfdfc2500d8ee32f70cfd29845c76f1f3fcab2c4e2a2532e22113fb54a932de23528fac40c750715823fa2e9b1912665bd0b7f2b758f101c024a126b34e76544a7c27ea0a51e7f93b47d101e72e75ab9ebfa5f3c03fa7872d444ded72451076aec083d0c94f405cda84f18e84731395bffe733ebb112fae85690c5976e592b9e1177bc4da468e3817ebd6439805190e532811130c71e76ceb0052cfbfe54127b2867aa9d10e42d6fe4d3e83521bc7610ba1b07bca3597d816bc78a6169d946cc135cf41556dd7d83649c8da517c5c6d75c82cddbf76cb1301505f0f2ce95d4677197f3c45a8da668d6f616a99b5f2d6ce32043098955532c327090a2235cec1222da15da91a9a5b89a130de3bbb904f6df899e2da3e1b4d6d6594c0748efcc6a97f02d3a9dcc76388aee12bf4f70ea4359fb0e6d9461a4cf8ac6a354e6b5bde5586f3e502313de388f646ede54ed90b359ac029503e84238a7c033c43acce4789ac3d89c51b9f8e4fccf09c70a57412c2be3a3b7e8180c06d062d050f4b78afc722506e875d210756aacbcac024053dcaeb2a81debcf24449c629029eb97abda3147bb465d8501f96bb6bb923295705acba4649b467210407949493dc0ff08d8042e12920929f306f3dcc5969a462e22734f81da9f98ebc030152fbe9da16fd8352626ae1b1ef0d12134f0e4d1be4c29d67fbb3dc36f5dd1e811098ac636689f22e2ed97fa3e74877d83e924978f6b6dd67e32142ef5a718a729fc98500697f3a66977c1034e0f37c82c7de257f9d155271b4fe4d8eb81e651389a3647f4c3a38972fb97c8a8b4a80c336da9aec5eaf41f80ac18d5b491c525ffc471c20b8360832bfc0013e707c3088a58799b99dc14434d98bb4eb4e81af63c84546a3849865526a7b03cff3d8e36835c91f22b2d37f7e1408a8ced6585426c6785ee22cf7d07e19377950b9f2d634d3c6b62e8c1bc710301465197c48083bf40d607d63e3a8ddfe349f06c52f8b1098f5c3fc89f9231907f0a5af8cf4809c3b504025997c96433efb5d44faa3f9d3633832a5a8da45eb0003e86a2695656edcc81edb0d64e20ef48e4296481811cdc21e0cf42b5d0462b474c5722ba2aaf80e167cfe05f07f552fdee5b7ebada9398e19c790bb534cf146e16dde48664356f3db48e143db92f3c883c5152ed1aefaa728f5458dc67d225956561a6c3cc8c84ed1bd4e728ace590f68ae80dde255b4db28b6d2be823e3703ad6f262fa2149aff1d8cdde2c4481a1695804740460883687b4ed630918ebd3d5447b938163843c11e1beb854d9d83347a00075a72641739045ce6d872e5b6cdf242aeea7a1c267258ea41aa90580bbcfe5beec5b9d2ce57939caf4a54801983734662c4006b0a9219b53102b6ff32657f9f6cd2dd6308f95c5796cf654657674438282f2524d790567d7c6cd1dce4a57bc08c7fa149cb472ce7b496781d05384c93ef518f62c534e4231488c0f1e072a40246b40ccccb8aae47eb3cd249e8f992c10dece4cb53321dd6ca920e4e36cb5ddff130aad12508e3e95af593eadf0eac45637d2a858a309d0614c69d5f2a86bfe048499b15486c361a3527b11c18d2051e8be8c10397a3359a41455e4cc3386d2ca98cc61e24cedf100860a9a26e99b3aad2b9f54556122099b4e9b935f33c8a8f7f5167cfb4ce4c689cafbb27376f922a42ff6533f2738221ae46d4ba01d686294ae0aa3a1d64e3d41ac94f17f1c45ac09f239f4586b9a5154c12139ac6bc070bacb42f7b6fd985f2999937801e5417531eebe6e52980583e848e9fe3608ee094f21a055af79e4684099733e10df80b943dd487dd3ed8a7aa4b983f561b3ad852591fdc9ffbbaf8e0ad0dabd9f8d117548e3b35a8081bcbd3e168d31588e457d6bcb0e5b72e8b64c37ea5d7f94f39b4c79619adee27bef6bed7a2df6e51428e7b8ef748a93d913171ca00139e4c320bebf493245ee8341f25a6064cf7b7bd093992fa92b16bc65594924f92a5a54c7510d01c120017c154e4f39d6af15fc9d9a467efec7e0765277b67dc8e4992a5fbbc19301e868c9bdb267e14379f1d13072455190f1b2955e030850cbeaf45ac58ecf5443a3af0c0b6de12692e8645a201e62c23ad02087c45dda1d0d71b04c143c2ec723d8df57177e736bab599551eae914ffe1e2edd3f17f77355b152d08f7e6c362bcc4f88872e9af03e9e0b53fa5af7a75534d17456f49f1958da8f813a175a8be63114702ae2630dde3e787084266b9e3ea2647362a346af2a7dcc1c7f05e1d5bd488508e02f4f81bb9fcafa4046a6d06160d9d6db546fdcddda2c0240931dde542c2ccc5119f162ab72b8a193e717b8bf1ed2a6d470f16f8f00deb8c4aaed04e52cb087365863e2c91bf084977d20e1f525f5e972b6e7cfd2ab1637c2460329f1208a851c2bc5da92634e29dbee96d2619c54a0c2c28c4396e63dbea9fcc828ecbd45b56b9a3f7c48442bdc1a131a4bf9215f808003e231175cf62c8235cd9cbc66ff13940c61aa8412ab91a1418af59120320f6e2947c3971e13c54271a1508b86ebb1752c377b1b7029a75490af24a2517eb1e103f9ccf31df93c2e0fdae7c0690839e015e19b2dee46d5fabfb7060ac319e42c3356cc8f6f0d50c8bffaa3f7f0422a0fb85e600f9a0b3bcd5b8e09127863318fb3aa5e3815cd830e390783217494c5f817b37e5c6070bcd90e240c795fc5cb5b7c8a0c2fcf1dc0c0dbe9a6873c4407f77357b574758fa53371917305db2f5d3203d0b7891e133a8fe44cb4e0308e89ae41fd59c53ed4fb729a5d1bb68df5c5ee30af8035c7e32af6c08489bfe769928f8e9dfbc7e28ec2ba9d280b0aff2c8f0fedea775100083c1e1a2bdb9fdd14fceb7162ab0abbc3e619013c33c337cddba1de9f06a6402cdcb027ce25d1b89f47460d475bcabc732dd45d9bf631bb0bf8702472e3d408656ee28f8170da8063e8df67489bcdda4a1cea3017562c9e0ad811fb19a3dff0dbb91387b5287ef1fad499c589757b20bf0c6ff79c39baef6498db6189eddf7cd137081de31638ad69a2d09a07a4b92fbd23b8e0ae5d78c18eec9f8798ee96b6eb56eeed7f4eefdd6da30ad4ec0e339b6e5b62254e4b49cdeb6e85c390d7bb564b4cedb87a72a3555debfcfcfd10fe30ef749a68ba28084f0d6b64da443eece21c28279f67af35a8f0a138a6d243684c7fa348c96658fab157f8936e4662a5b5e774ef6a245e636de2f5aaff7282f472e2fe6113049d9287ace7a801a824f10ee5b506a386595e88125f3ef0087bf53d138d7904c890e85dfb362d84ccf05792e460ea191206917038533d9b00611cf3137f81fcda7a923a01e3ebc29960f7c306cc51b7cdd4bc2bb19ee573a69eb58a827dfa9d7d4649b00068fee18821938ee5017e114827bfa6a1dac512dda55e082426c7b8428667b65e4aa6c966fbc2b26beb3292c76fc680fb6e028122c6dcdc8ce616a6f4891209c199d760a17c7e41ec361a5cc8463c8cf7fa27e3249f71c69119a77cc28deb0686ec9fa75b3526ccb3feaea1ecdc9d9d1405821759a09e5d9ff5374bace10ffb734c1dc3b30112850d3f7e326fee953eb94e6ceb24bbd8345b1be680de2a3993ca14f87ab6fba108ac71e2adc7e4ce20105b29a55a6e63c609585064bf3de6544e0090ee713d42d968094efd8d887852f08bc4cb8094d3e6559efd12251d06bdff474127135262252f329aacd77a57a637ec544e6da31bbbaa20ce8eeb900b8a07537d847a4ddfe26732a5c9c24effe8f84776453c53dd06bcba5f1a0879e3cb9f11fe37f6b1adc47706b548291c06cb9f3eb2ef6534d60dcf561c49e9f40ed1590d6a1c2501b6b8959f6ecbce727b0cde5b5e60d51c9c3d4d5b2eb6968335a024d35cb1d1031b43fd9a378b93fa3a54a95687a74c1465e3ef6cde5cff649d2b8ab48c1b05f0578ab38ee2b79a9bbf7c9f7e200ad2e79c80e06f65cd7eb8bb80ad3e12fcc2df11248148d360f3817f967fc711f68bb52b907c46d99dd5d034db8c74366de347507fee30f7b813f5e6d7f686a76232d98ac27cb0d3b556883acf4b83f90b2e2549ba5a44092270898ae8b3a946b3a908c5442391459f4a6a01048ee0eefd725eb10170b0c354e74a191eea464385ff708af26fe0366d59abacfa1e25cb423593e6c267a6d4722199e91b1fdcadff9912a4c143f80290c3bb5708ae8a004b4f5cf8ddd9210ee91ea620bf703e8011badb8c3835903ceb1218237b75dc3ce78169ab823fcc6d76dd5629d67aeae539562f0c4069c5527911fab1999e4f20eea30fc7d1ce22fea6ccc6e5999a8c36afe1e2cce370ca34d740aca5811676dec286502889b7fbcc2d14ba44b37bd421379b34a6a33d29c596eede8805831f6f6c2bb281df8e2be8c679726e49e00f8c8f0e82a4f075267ca39923f0592313495b64455f9702fae342a3ecc6f31eb76e1ec6065aa4d540c4e74caa1c55fdab24fdaf4a1171b5063e0d84188b125fb785486bd624ba59c1148292ce9f671f7a34b5c34249f3fcbedec4f5d1fd9c85e3f14cd709793b6164b9f98f2756e8626003c152fb38d4f3dea5da0a1b628ef403d86eef6b18a2fda8b0f97a2a302713edc3fb5e99bdf46ada59ff3a11001bc2eb21783a5e6f673c9fe675efc021c9e87921dceb03f383461f0e7c9618c550d8503e8522791c9727eb6be89bda973ea605a85bb1989b6282df960249bbb983dc74d6b4de238d76e4e6b162b04a5b6986d785f33bb777a43e75b458912933315c0ac6bb819195714b6d87e82b179ef8fd6d2a9280660c587e58dd163e59a08fd8431d1b4201c63f0667c761fb5f6c733131b331fdd82bdceda9a1b869cc419c1c0ea1b0b2dadb8db88fa414deb8f3178795256990bc5513eb5079287878a595eec6dd668e4d04c5a3cf73354c2fa148207fee1f7221c4d47f6a8729821a100992a914adc900000000"], 0x1004) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0065cd7ce76320e70fc9b503119da299e3fced"]) gettid() mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RSTAT(r3, &(0x7f0000000040)={0x51, 0x7d, 0x1, {0x0, 0x4a, 0xfffc, 0x0, {0x90, 0x1}, 0x1a800000, 0x9, 0x7f, 0x5, 0x9, '/dev/kvm\x00', 0x8, 'cgroup2\x00', 0x0, '', 0x6, 'cgroup'}}, 0x51) 22:11:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0x400) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x128, 0x28, 0x20, 0x70bd28, 0x25dfdbfd, {0x6}, [@generic="a87a7f1ce1ffe3790955f2107b4e60303fb1a948724c02be49ac6296ff9db50d96ffad0e5259e02b76487551", @generic="84464849df3ae1ca8dbcd71f715ba243cdf6f4dfb534b57478c5da04a34b4e3702b8896d2d512e0eaef43542b180f97238affdbefa2646bcf0078c58d7da10c1ac6aa9162a7d6bc77591be7dc415e55d52bba82088cf8c5e98e54aa358a5ab65603a880a366422bb70a720444def14009a8db944422eb6fc4fbb4bfb4cf5d3b88f5a760d54dd1411d429225786f39061add52c183fe78d3fd5eaef655af73b40635761a3f79d33c0d2834d715f912c7921d6155d8aae654fc346d103dec65a4b79ad63cfb16bcb074c4f9f436c8bf7c019de9fac4f5205647cdf0268c1e15ada698721092559"]}, 0x128}, 0x1, 0x0, 0x0, 0x4101}, 0x40080) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000080)={0x5, 0x0, [], {0x0, @reserved}}) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x03\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x700, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x700, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x04\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:42 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) prlimit64(r0, 0xe, &(0x7f0000000280)={0x6, 0xfff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0x0, 0x9500}) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x9, 0xffffffffffffffff, &(0x7f0000000100), 0x101, 0x7) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) dup2(r1, r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x0, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc), 0x4) fcntl$dupfd(r5, 0x0, r5) r6 = syz_open_dev$admmidi(0x0, 0x6bb64acc, 0x12100) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, 0x0) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xfffffffffffffff9, 0x840000) 22:11:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x4000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0, 0x800000}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500400065ffff01800000080039f2433030302e4cc74502f987c2cec6504df6ead74e64364eb392e74fe72a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162c723e192e83fb54aff8eaff4f6b59c41505b96a6711d4679079d0000000000000000000000b8640ca459eba32119b934a4d9dede9473c45ba9d5fc6e1c2c2f1065eff9174cd1bcf92d0ab063be66baeb7d1b1fe9e8d4cf2f2c9c6a17d0c578e15570ca2aa84df5cfbf24f0099c2b51e5109cc89554d1ad54c1cdb43ac720cf532f4bc0c738b6e0d3b2a3f223855154743ecf11f19081d8a897b156130487ba9bd74ccfe0e4f99401af0aab5e0bd6ee05b7fc9272f617a84bbdabb103d6f27e998096db1cd0bc65055d8999dd29fea3855a9b"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='-\x00', 0x0, r6) [ 460.526845][T16941] overlayfs: workdir and upperdir must reside under the same mount 22:11:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x8e0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x05\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 460.764765][T16936] overlayfs: conflicting lowerdir path 22:11:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0xff00, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:43 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=""/147) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000001640)) 22:11:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x06\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x7fffffff, @dev={0xfe, 0x80, [], 0x1a}, 0x7}, {0xa, 0x4e24, 0xfffff4db, @mcast2, 0x2e5e}, 0x0, [0x200, 0x1, 0xafb1, 0x3, 0x3, 0x4, 0x3, 0x6]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x8ee, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x1000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:43 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @rand_addr="e7bd8e11cced2afb73086915ad08d755"}, 0x1c) listen(r0, 0x5eb857) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="4e6766e56b77e3eafd0876156e5aca9c", 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x12000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10043, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) acct(&(0x7f00000000c0)='./file0\x00') getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x0, 0xc080) 22:11:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x4, 0x43, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U-', 0x1000}, 0x28, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r2, 0x0, 0x0) 22:11:43 executing program 5: ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000340)=""/235) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x140002, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) linkat(r3, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0xe00) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\a\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x2000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x900, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:44 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\b\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x3000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x916, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x800) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) r4 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x8002) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x9}) 22:11:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000001000/0x4000)=nil, &(0x7f000000d000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x2, 0xfffffff7, 0x3, 0x3ff, 0x0, 0x3, 0x7fffffff, 0x80000000, 0x2, 0x1, 0x9, 0x1000, 0x1000, 0xfffffffa, 0xffffff97, 0xff, 0x8001, 0x3, 0x4, 0x3, 0xfffffe00, 0x0, 0x5, 0x8, 0x20, 0xd2, 0x80000000, 0x3, 0x6, 0x3, 0xff, 0x3ff]}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3b2, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="c5af1e244036f3c0056ab8fc2b47acb57171633ba08d2d56b97486e4313ced", 0x1f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:11:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x4000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:44 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) dup(0xffffffffffffffff) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="63726561746f723d3505cd762c6469725f756d6173477d32897e4f4c8d177cec05cf66926b3d30303030303030303030"]) 22:11:44 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x03\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000180)="9f6f343c14b3062ac011bcb13635754c17f7001f0c0c29e9f49963cc44b32efff158b3f0b21d30f414fa50374f0d46a11479d2b949b51a853a968cb135d8463de61ad37d04c1f7097b66a33e936cf0dc14bb362b63bec6021bfa738bdbd9e09282cadfcae1d2978b0dadff68fc6af028123389ea85123ad92c450e6386980b743e1df1670747e8d1390af5e60e0365705bf7d0b042c4b5ff78d3ad3c770f41599245060df2ecde18", 0xa8}, {&(0x7f00000002c0)="cf50379022c79f1417ab15f07704590e84e29432773d085b698b323b7557676ccca36825bf9ada201ffee2fdebed180a32e1d6a15c048376bfcdecf23ce90d9ac5d057ca40498c94a38a7aac4fd5f3ad162c4a46dafd3423092307ccb1232d73ffa45d01334b4244acde12af1af725b8a13b371a8c946b064436eae524ee18e1de9609191c7f277d48a9c8533a9875f624ddea00a3c94f49cb09f176faa05ef730", 0xa1}, {&(0x7f0000000380)="4283216c77025ea50bc668ae96572082ac8d925672176d4b651b16420a38f88d81d8ba0ce174e43f8ed3956167e61cf0f4fa532d8e6f91646d886a36fd0f0a24f18f55b403421bc0485b0fdff16b52b69c4729b8328195d6a94d869843d81c24367799f769606df1d417d7023e4c62851f022fb9e5451b9bec3d199d91cfd3cdc054139ffcb1b4412d9f6da2b40bd295eb414b52bf9c010d08cdc644233c16834bd12775e673ea61fb3952d21f562677ed76da7d73b87f6e98ada492fb440b56998aa019f94ff3db5a", 0xc9}, {&(0x7f0000000480)="b8a633866ca9af2798514162473ec878a572613822378fc32b9b93f1637c4741cd5146ce474ebaa68b1743ed0c9628813ec816d8c3a87ccf89fc7e104086925baaeaf4d868b1b75e802b0989661d8319e4cbcd6d99a38db1637f405640fe7fe387be66f77fda", 0x66}], 0x4, 0x0, 0x0, 0x40000}, 0x40000) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x5000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xa00, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:44 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x05\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x6000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x74e4, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev, 0x0}, &(0x7f0000000100)=0xc) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@ipv4={[], [], @multicast2}, 0x4e24, 0xfac, 0x4e22, 0x0, 0x1, 0x20, 0x7567a043bc2aefaf, 0x2b, r2, r5}, {0xa6, 0x503, 0x3ff, 0xfff, 0x1, 0x2d94, 0x4, 0x7fffffff}, {0x8, 0xffffffff, 0x3, 0x2}, 0xc5c4, 0x6e6bc0, 0x0, 0x0, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4d3, 0x2b}, 0xa, @in6=@empty, 0x3504, 0x1, 0x3, 0x7, 0x7, 0x3, 0x9a}}, 0xe8) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) lseek(r7, 0x9, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xb06, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xa32, 0x0, 0x0, 0x5, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d623455e1ffb5ea3544438cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid'}}]}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fe3000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x0}, 0x68) 22:11:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x101000) ioctl(r0, 0x2000004143, 0x0) 22:11:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xb4d, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:45 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x06\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x7000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x400180, 0x0) getsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f00000000c0)=""/78, &(0x7f0000000180)=0x4e) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:45 executing program 1: process_vm_readv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000340)=""/53, 0x35}, {&(0x7f0000000700)=""/171, 0xab}, {&(0x7f00000007c0)=""/21, 0x15}], 0x7, &(0x7f0000000940)=[{&(0x7f0000000880)=""/43, 0x2b}, {&(0x7f00000008c0)=""/28, 0x1c}, {&(0x7f0000000900)=""/34, 0x22}], 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req={0x9, 0x0, 0x1000, 0xb8}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000380)=0xe8) bind$packet(r3, &(0x7f00000003c0)={0x11, 0x3, r6, 0x1, 0x4, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 22:11:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x8000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:45 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\a\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15f5000065ffff0180100008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563f61d00e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473715000000b08e3f5952fe9ca162b123e192e8c89c9dd81c876f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/140], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) sendto$rose(r4, &(0x7f0000000080)="e0a60fac3fdb15c84ac6ee387547d42e1309d7af99d4bb59c8f343aa0b648ab12e21a951e0722efbda8461b6aa40f0853bbbfa79975f0c02fdf3108937965dd481c34d61cf380b8aa1050949e3310b49e0d76c070b643d4d4113", 0x5a, 0x20000040, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null]}, 0x40) 22:11:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0x27, 0xd7}, @IFLA_MASTER={0x8, 0x25, r3}]}, 0x30}}, 0x0) 22:11:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xb94, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:45 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00@\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x40000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 463.614385][T17108] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 463.638343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 463.644254][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:11:46 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\xff\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 463.717009][T17108] netlink: 'syz-executor.3': attribute type 39 has an invalid length. 22:11:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xbdb, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0xfdfdffff, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:46 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0xff000000, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote, 0xfffffffd}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x44000040) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) sendmmsg$inet6(r2, &(0x7f0000001a80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x3ff, @loopback, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="657db81e7a6fd2651eb88b87bc333c49e50e473c4c456e48958409911903be7a700f9ac5232534f59aa7aa2049b1cf8fd7abce40b770922bbe97baa03ace5fcd58e560098661dbf9d47cdd6f2037aa36e43a046a1f6f4d066817f3c861c4303632adf2161ff22d93b1ea57db2b3c4910c889b494d0fb80a24dbba47fa2792d50d63c76da6b78768b8c08dc20ed83e8b2625836ffa6ceef06b1f30833772e28e89b2625508b9a415c", 0xa8}, {&(0x7f0000000180)="5d16ef911f8d42799a1d4d861bb7702d8ed89703d2416049d7afdeb81d3f0d74b5bb1ec9eea2e739b12d4f0b8118fdde34bfed618927a3504d1fc8cbb1283bfee8897ffade8969df41aa2ec0ae44b620cd75d0a2c0e9d3ee155109f221a8596570abc5cea1e041329cfaa9e99dd2211991d590e8dbdc2ce213ea27e9222969ee1525a8d3f4017dad3eb3147929cae1ce18339e1b39009eb8be148ac3f7fee4647f38b7bfa9", 0xa5}, {&(0x7f0000000240)="b4c54ff5fd603b71e24087bbb172e6a2112827d03277ae1cb76626e899a8934fad4c2cc19df6c114626ca9c8213aa5073ef2d0ff7c925b75e0b504ac69e724107f4565e2a2fd9bbf4e24ef2947790d7e5b75ef8be3877dbebc96d3ffb06e22c896564b108bedc5768956ebe41129f547e264af8bb8598edca3e0661f", 0x7c}, {&(0x7f00000002c0)="ba3810c2eff8d9b54f82515e1083156ccb2241a2b75a2616dda498f847b617cc", 0x20}, {&(0x7f0000000300)="4efa7fc18fd930c77c86ae1bc12cedcd6ad8a1d8f84ab32cc082789abc0889dc4aa9c1aa610cf4e9974b1f909ae97bd75b6d78e21910595cefc9d506fda3eaf3b40945d2928703e9323b830b0ab7a2a0f6064e6eef225786ba4dc490e5ccc73554c066d08dc9a2117360252629d1f62498b413b5ebc32e157cd0a0bfb922ee57967065b6804036bb25a159a8425872d381215b44a0e15e133c38a0cd09e6bfae84fcbd144dfcb0af14", 0xa9}], 0x5, &(0x7f0000000440)=[@dstopts={{0x18, 0x29, 0x37, {0x4}}}], 0x18}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000480)="6139e88984dfc17645a1a2c5a0fcac9bde8a17dee452d873fe0e7e1c0eb6f5206cfb25b1864d7b00b6d63d06391073db4c6b72f131a8694d2e4954d2c0e0e2dc3c1d3c8feaaa70b167edf01f599c13f0955c493a548590110686224b3092", 0x5e}, {&(0x7f0000000500)="94b8679568e8cf1f17c713b386ee06c94c17cae3dd8675c14dd047be79f079574ac3b2be653281d17a1182e310c5ecea4c62d061a54b058ebd9728297b36987efa1dd1277569c035fe7568e014406759c5cca00e358735cf7d98befd58accda1cd0d1540b99acfa59665df8e19a2d755810c874dabec3d13b915fc2f76383e85c7fa49727cfaa179cc34676ebd41b7cbfdf3e6d61ec0f291bd4a66418099f4248f9fc59bf56da31732ac466a60b3c5ae0f86154a22d6828ba70d4b8ec23652a31c7ce8dd61e434e9dec382c8779e1a30eb408b93294b16bf04fa2c3081898159a7e0627c", 0xe4}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000600)="0235a388f772702765", 0x9}, {&(0x7f0000001680)="70c21b5e7ed53ffca5e4f48f9f5801f00e7990cea72d452c8683a91f551463f8eb7c99317d89eee7099496b14a897f390854a6e5003235afa17b26a6e4f261ec9bcaeeccf49ad7c8187d515aa8f640f17ae86d20530a3cffb3aa803734e7734eccc9eafdce7db0299c311cb2c1aaaee3deae380ec7afa83c68cb5b10b00dd1377240a6e67c5641286c95d56d2476364a924ef2193d6587f3da02d4d2b831a553218d8429cc2d9e607237d4f5a2ceeb50843e0a2b608b84df8b071d49e5", 0xbd}, {&(0x7f0000001740)="19f0caaacd622937db10b178b2c73beabbc959d92c6bda9f71dfa7e42df82e95829108ffcb86abc3168d2b2aeed4c62b07bb1ae3f5cecbadcef692796e2db0d5c961fbfd37bb0030bee69cae30721c4e6a4e3290feb5617146ee6b8394b77200af564b89db", 0x65}], 0x6, &(0x7f0000001840)=[@hopopts_2292={{0xb8, 0x29, 0x36, {0xd7, 0x13, [], [@jumbo={0xc2, 0x4, 0xfffffbff}, @hao={0xc9, 0x10, @mcast1}, @generic={0x7f, 0x80, "1b15fbe79b7eeb96bcbeb3a90442e1d59647fa0c2ae3a880ce5def323a83501ac38012098ab420a7cfe3ce940b3c0edb70ce56a9aafefab0e52b9127f64925d9db42e5d742883e59d283ff44d79729acd412dd57f6f699c5cbd945425a0f5bade52a8c24f2f34eea4418d22811e482e9a91239ceded24dc160397ab64cd5b63d"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3f}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit={{0x14}}, @hopopts_2292={{0xc8, 0x29, 0x36, {0x1d, 0x15, [], [@generic={0x9, 0x5d, "1850353e01a0c099efea12baffb5eb052916e32eb425fe86f0e793fd0419c28e04f160487f65d20595aeec1f288943ceeed1e93f2f812eb29faca9015c2f7202685b5fe35ca77e418e88f7cf50024596461558a30c97f422a117924d68"}, @calipso={0x7, 0x10, {0x3, 0x2, 0xc1, 0x7, [0x5]}}, @pad1, @calipso={0x7, 0x28, {0x7fff, 0x8, 0xff, 0x8000, [0x7, 0xfff, 0x5, 0x8000]}}, @jumbo={0xc2, 0x4, 0xff}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x104, 0x29, 0x34, 0x3}}, @dstopts={{0x30, 0x29, 0x37, {0xff, 0x2, [], [@generic={0x4, 0xf, "7dd9319b9c7d95313f20edc68dc6c5"}, @enc_lim={0x4, 0x1, 0x5}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffff3e}}], 0x228}}], 0x2, 0x0) 22:11:46 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x02\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xe00, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0xfffffdfd, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}]) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0x3b0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000180), 0x4) connect$can_bcm(r1, &(0x7f0000000100), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r5 = getgid() r6 = getgid() r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getgroups(0x7, &(0x7f0000000700)=[r5, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0]) setfsgid(r5) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000002c0)=0x800) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r8, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000200)="05", 0x1}]) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYRESHEX=r5], 0x12) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x286, 0x0, 0x4, {0xffffffffffff8000}}, 0xff7c) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000040)=0x2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r9, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f0000000200)="05", 0x1}]) fstat(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0xd, &(0x7f00000001c0)=0x0) io_submit(r12, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="05", 0x1}]) getxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="737973740001000000000000"], &(0x7f0000000480)=""/71, 0x47) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000340)={0xa0, 0x0, 0x4, {{0x4, 0x1, 0x0, 0x6, 0xffffffff, 0x4, {0x1, 0x401, 0xfffffffffffffffd, 0x2, 0x401, 0x9, 0xffffffff, 0x101, 0x101, 0x839, 0x40, r11, r13, 0x400}}, {0x0, 0x6}}}, 0xa0) 22:11:46 executing program 1: io_setup(0xd, &(0x7f00000001c0)=0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="05", 0x1}]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) r3 = perf_event_open(&(0x7f000025c000)={0x1, 0x2e9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8}, 0x8100, 0x0, 0x7fffffff}, r2, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') dup2(r5, r3) 22:11:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0xeeb, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:46 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x03\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '#yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x400, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0xc6, 0x0, 0x2000}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:47 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x04\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '%yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x11c0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xcdd, 0x240500) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f00000000c0)=0x5f, 0x4) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000100)={0xfffffffd, 0x0, 0x1, 0x7}) keyctl$revoke(0x3, r2) 22:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xa7, 0xa00000) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:47 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:47 executing program 3: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff03c}, {0xfa}]}, 0xd) 22:11:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '*yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8938, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00t'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0x209, 0x7fff, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 22:11:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x1609, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x174052ed, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:47 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x06\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 465.488186][T17198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 22:11:47 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\a\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '+yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 465.540189][T17198] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 22:11:48 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x17cb, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000340)) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0xc00, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000180)="8b906d4217581bc2d87fca36ff6de2a13c1550007e73b1c5512f6af4b4252090b7f7c627fcda835b94d04ca7fffcb9cd69a96347f3ab20c506f64eb8c313fb3b442020486fe028386d4d4333e7880c3c6d496a6e583a1cd4904ba5bebbf9394b5763a0f31a5126a79b1d2dbeeb262eadf8afb09a1e845ff31cc5e6ec0a1a41b1446568dd54af38985470691c2cd2e5ee9ede81bf4e6cda04e9b8bf90429e89fd4e6dd196c9a48fb180b999eba574d861d75743ec6c45dd3bcfbf70a6a1") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0xfffffffa, 0x4, 0x666adc0f}, 0xc) dup(0xffffffffffffffff) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) ioctl$NBD_DO_IT(r3, 0xab03) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) 22:11:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x92000) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0x40}, &(0x7f0000000100)=0x8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0) 22:11:48 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\b\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '-yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:48 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x1aa0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '.yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 466.063588][T17234] hfs: can't find a HFS filesystem on dev loop3 22:11:48 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00@\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x144000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) timer_create(0x5103904bda47d8c6, &(0x7f0000000180)={0x0, 0x27, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000240)={'rose0\x00', {0x2, 0x4e22, @remote}}) 22:11:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '0yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:48 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x203e, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'Xyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:48 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\xff\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe5ca3ec08a32ed3c) memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(0x0, &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x285544e7c8c4de8a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x1000, 0x80000000, 0xfffffffd, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x3}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x14) ioctl$TCSETSF(r3, 0x5412, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x14) unlink(&(0x7f0000000040)='./file0\x00') fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x79, 0x2}, 0x7) [ 466.799956][T17275] hfs: can't find a HFS filesystem on dev loop3 22:11:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec650d74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a671164679079d00"/134], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x6, 0x3}, 0x4) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 22:11:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000200)="05", 0x1}]) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x10}, {r2, 0x800}, {r4, 0x4a}, {r5, 0x47c}, {r2}, {r0, 0x4300}, {r7, 0x70e8}, {0xffffffffffffffff, 0x4460}, {r1, 0x84}], 0x9, &(0x7f0000000100), &(0x7f0000000180)={0x4}, 0x8) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r8, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:49 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x2085, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:49 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, '\\yz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 467.048056][T17296] debugfs: Directory 'ptm2' with parent 'caif_serial' already present! 22:11:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'cyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:49 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:49 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x20ab, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd5ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaf5b96a6711d4679079d00"/123], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000200)="05", 0x1}]) io_setup(0xd, &(0x7f00000001c0)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000200)="05", 0x1}]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trrfdno=', @ANYRESHEX=r7, @ANYRES16, @ANYRESHEX=r5]) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="00555fc5007d"], 0x2ff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 22:11:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'dyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0xffff, 0xecd, 0x6, 0x3, 0x5, 0x7f, 0x40, 0x9, 0x8, 0x1f}) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:50 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x20cc, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:50 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) semget$private(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000540)={0x2}, 0x4) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000280)=""/109) r2 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x2, 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = semget(0x0, 0x4, 0x20) semctl$GETPID(r4, 0x3, 0xb, &(0x7f0000000000)=""/96) getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) vmsplice(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}], 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000500)={0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff]}, 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pipe(0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe47, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@loopback}}, 0x0) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) sendfile(r1, r8, 0x0, 0x102000002) 22:11:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'iyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:50 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x15) r3 = dup(r2) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000040)=0x401) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0x4, 0x100, 0x2, {0x101, 0x3, 0xffffffff, 0xfff}}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e21, 0x36c3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x7fff, @local, 0x1ff}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x351b, @mcast2, 0xff}, @in6={0xa, 0x4e20, 0xc0, @local, 0x2}, @in6={0xa, 0x1f, 0x2, @dev={0xfe, 0x80, [], 0x23}, 0x1}], 0xbc) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 22:11:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'lyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:51 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x2380, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:51 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f00000001c0)=@md0='\x00\x8b\"\xe5:`\xfe\xba\xd0', &(0x7f0000000200)='./bus\x00', &(0x7f0000000040)='qnx6\x00', 0x2008008, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./bus\x00', 0x6, 0x6) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) 22:11:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'teh\xd7\x00\xf3\t\x00\x00\x00\x00\x00\x06\x00', 0x100}) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x4b, &(0x7f0000000080)) syncfs(r4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'team_slave_0\x00\x05\x00', 0x200008000005}) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="d62ea934f336c3ac1666b16113a20d1c777991a51f963646efe8d833e83aa018342f22447fcbaefd6ac0052ab2"], 0x5, 0x2) 22:11:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'oyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:51 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x505101, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$CAPI_CLR_FLAGS(r8, 0x80044325, &(0x7f0000000100)) fcntl$setflags(r6, 0x2, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r9 = getpgrp(r4) syz_open_procfs(r9, &(0x7f0000000080)='children\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74e78abd55fba3da80b856445ab100621d6234555c08dc540473753ffffe9b08e3f5172fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a671554679079d00000000000000000000000000000000001f000000000000000081f6d26c54353eafe84f190441fd78d009218994b4a4d834df9289a2c810f20e190f92446801fe9d541151785e366b95d8e6a302b049180d76e560a13c6bc954655eaf89ddab1e6f50b1"], 0x15) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KDGETKEYCODE(r11, 0x4b4c, &(0x7f00000000c0)={0x9}) 22:11:51 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x2800, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:51 executing program 1: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000100)}, 0x20) clock_settime(0x4, &(0x7f0000000000)={0x0, 0x1c9c380}) 22:11:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'pyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:51 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, 0xfffffffffffffffe, 0x0) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) close(r3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000300)='./file0\x00', 0x0, 0x7c748b30da3649ba}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1a6d656d6f72790e"], 0x200600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaa, 0xaa, 0x4, [@union={0x0, 0x3, 0x0, 0x5, 0x1, 0x0, [{0xb, 0x0, 0xec44}, {0xd, 0x4}, {0x10, 0x3, 0xda4}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @datasec={0xe, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x100, 0x8}, {0x4, 0x2, 0x80000001}], ']O'}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0x1, [{0x1, 0x0, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x5}}, @var={0x7, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000000c0)=""/28, 0xc8, 0x1c}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r4}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47, 0x0, r5, 0x4001, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) gettid() pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead704000000b563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000000067bd100804e195d2b70bdbcd01f6b90bab5d4c9afc5a1cca4915a1cf05b5caba2938d686d9f0eb7a5f6300101b1d"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x110, 0x5, &(0x7f00000003c0)=[0x3, 0x2], 0x2) perf_event_open$cgroup(&(0x7f0000000200)={0x6, 0x70, 0x7f, 0x1, 0x1, 0x7, 0x0, 0xfffffffffffffffd, 0x8000, 0x1c2b615ae69cf32c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x10025, 0x80000000, 0x0, 0x0, 0x5, 0x754, 0x20}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r9, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xca6}], 0x1}, 0x0) 22:11:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:52 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x298b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'uyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:52 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='squashfs\x00', 0x0, 0x0) 22:11:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3dfa280445c40df303460a0e9aec53bbc5fad5ffc4f03f14f98cc39e8e67da0db09c57e80102353a379df2c2ea8a6ce10363385d91e045b20b6fdd7a6b35e0f8d1982b2387b1acc2102c316fbbd9be02b121a47410061122b1ec0ea26b25fc50bdc06babf53f10f08bedd76fba", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x80200, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000600)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000017c0)={@loopback, 0x6, r4}) 22:11:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'xyz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:52 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x2b44, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 470.469858][ T2515] print_req_error: 1 callbacks suppressed [ 470.469875][ T2515] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 470.498470][T17459] SQUASHFS error: squashfs_read_data failed to read block 0x0 22:11:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x8, 0x0, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0xa0400, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) write$P9_RREAD(r8, &(0x7f0000000340)={0xd5, 0x75, 0x2, {0xca, "607a39a7038dba87a643b7722c238c7975850d2a3070b9b00f5ba4a8916aa4f2e406ad2aaa6b08d52d11f0a946e60b96f81b3be39082576c8de0d01e0b838915f1787a82069236599779a850a771f256007e0fe2d9967c5fee2c8b0448bc85ff432fdbba0ec26b58e306bd7871f143170c1d0dfa85cbe87f5503f36c1b2cb265b365e2f05f0298713c6a296f3784b39c4d688d9400941d4301e8fbc2921254b710d56ec8c5fff5a98642626b8d1d0b1df3557fe8d63cd9fe07b3a08ce07e523edf26a135a69f1f4a7b40"}}, 0xd5) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x4, @mcast1, 0x8}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r9, 0x46, "42fcccf17968d3cd97a3354b9f7e2ac881037ddfb76b9b7822a2a806f7400fb6934609b6c4687b9eb5c03a6e95ad77f31b7f504d0d5bb9ce2ca4c67f98d9fb694721b01554c7"}, &(0x7f00000002c0)=0x4e) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "fa0099328f5f50a2b5b0e13223c41bb9ec6c1ce9"}, 0x15, 0x3) [ 470.670623][T17459] unable to read squashfs_super_block [ 470.790219][T17460] 9pnet: Insufficient options for proto=fd 22:11:53 executing program 1: r0 = socket$kcm(0x10, 0x4000000002, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x0, @empty, 0x6, 0x0, 'rr\x00'}, 0x2c) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="2e0000001900d927e65de0875f188dfa19e154dfeaa06ec4a86e8f32e00586f900000000000000006f0400000000", 0x2e}], 0x1}, 0x0) [ 470.872150][T17462] 9pnet: Insufficient options for proto=fd 22:11:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz%\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:53 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:53 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x2b8b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:53 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "018000da7d469c04", "02a839a6c7986edc3f8a6200c88e37de79b97525cedefaa0bded32e7d887ec99", "0000ef00", "00943f4aece800"}, 0x38) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)="0a99b3e3930870dcd4c6d68e6abe088af4ccdbe6dc85ed63bcee4834cd53f8a19cfad53574230c17377bd7b3eb23d9008f0c69b08db538753bcf550f05d219f8c6ca03228dd8d293261ba079190f47d70c95a97fe5d4cb7511e180f73e8ef5e2f7ee4f47c1a036e37e87414e615396eeb918828e", 0x74}, {&(0x7f0000000840)="b5252522629f34a16eef84ce1b0063a44d2793e337dc2c6bb2d88107b89a1516610f2003d59c73b5c7e008a287d2a1d473414b1adeb4ca87742298b064ae974e919c80525175804799682d67fca4f9defe5754c03f", 0x55}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00+\xccY\xb1\x97\xafo\x83\xe6\xe1\xfb>n\xe5\xaf\x98\xc8+\xd8\xa6W\ar\xcfv\xca\r\xf6l\xff\rMI\xce$\xa3\xa7\xf2\x9e\xff\xc0\bp\xf0Gc\xbf\a\xb6q\x99\x14\xf0\x06|B\x85\xcb\x05X<\t\x01\xcckeP\xb3\xad\x8a\x8f\x99\xa8x\xda\xc6p\xb7\x1cw~\xf1\x1c\x85\x10m\xe9`>a\xbe\xfe\xb8\xd4%\x96\xc9\x03]G}\\\xf1c\x13U\xc5O\xa3L\x93\x843\xce\xecI\xb3\xe3;\x93SG\xc9^\xa7\xb6\xe8\xb1\x1d+:\xc4\xcd\xc4i\x92z\xcb4S\xae[\x17\x19\"\xcbn\x1f\xa8q\x13\xa0\x8c\x92\x84\xb1\x02\xf6\xd0\xbde\xfc\xa3mxV\rm\xa2]\xe0\x02\xdb\xddr8*l\xac_d\x00@\xa5\xd7\a%\x8c\x19~}\xf8\xcc\xf9&\x9f\x17\xfa\xf0\fT\xcc\x913\rK \x7fSz\xf5\x9el', 0xd9) write$binfmt_script(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x139) sendmmsg$inet(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="8c93b369b4485a9c10410940b32f0e27d945c8c14b33d632252983591bb93b689d6e39110602c2742c532b470d9fa7322ac1690e5df60e8062db873b9560fc588ed49aba2b2527da322e73b77d95bb0444859638ca691f4b3a357aed45ea752b4392faf13508b4a7baeb1c5893fc7e139dac69c2854fcc1eb35f4afeca8436506df8eedad9db05c67f0bfe3f1619f83e53a87f7eec8b9ba6e3dd2cb923602749eee99fa28d3e4202aef93ec74bf4806962a3c7eff9066fe5f8", 0xb9}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x1, 0x8000, 0x0, 0x7, 0x17, 0x20, 0x9, 0x5, 0x1f, 0x5a, 0x1f, 0x80000001}) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 471.240436][T17486] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:6 [ 471.329009][T17491] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. [ 471.471439][T17491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:6 22:11:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x02\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:54 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x2bd2, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xe881bea68aad8a97) flistxattr(r1, &(0x7f0000000040)=""/54, 0x36) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00\f\x7f\xd9\xfa;\x8b\x88gb\xefi\x16\x91\xbb\xc4\xd5Jk\tU~ \xa4\vR\\\x8a\xdb\xcel\xe0\xa3[\xae\x9d\xac\x84\x9f\v\x9e\x9f\r\x10\x1f\xd3\x80\xc1\xccq\xab\x01y\xed\xfc\x96)\xf6_>+\xa03\xf4\xcc0\xbbE\xb0\xc3\x94\xd53\x87\xd6\xc4\\\xc7\x82\xe9\xaf\xb5\xb6\x15\xf4K2\x17\f\x98\x1c\xebq/\xf5\x81#\x85\xc5\xa0\xfd\xfac\xd9\xf2c`\xe9[c\a\x12\x1bb\x82\x83\x86d\xf0k\xa8\x90\x06\xa8\x1cK\xea\x19\x91\a1z)\xde_r`\xee\xb6\x9e\xcb\x05\x00\x00\x82\xa1\t\xc9\x05\xcc^', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000200)='memory.high\x00\x90\x80\xa4\x96\xbb\xe4\xb2\xa2\x01\xc0\xb8*Z\xef\xf8\x0e\x1f]\xf7\x10\xdb\xfe\xe4\x1d\xc6\x92\x7f\xeeK_p\t\x8c\x9f5\xd0\xef)\xd8\x04\xbf\xc2N\x1c\xf0R\xdc\r\xb1Gf\xba\xd11#<\xaf^,s\x85\x10R\x99\xc2D\xee\n\"\xf9c\x15{\xc1[\xef\x06\x8a\xcd\x9d\xc8\x90#\xd0\xe7\xe3\xe0\xa9\xf3\xc0n\x1f\xd1\x11P\xe20\xcd\x1c\xfa\xfd\xa3\xcf\x9c\xc6\xb7]\x16\xc7\xd7\xb4/\x82\xd1\xae\xd9TM\x05a\xe5\xc5U\x91\xbe\x81\xac4\x9d\x02`\xe7\xa6q\x1f@\x1f\x1f?tm\x9c\xd1\x8c\xa1\xb5\xe0`H)\x97r\xc0?y\x9cc=c`A^\x9f\xcd\xbc\xf4m>I\xae\xdf\x946\xe7M`\xeb\x9fm\xbe+n\x00\x18k\x98\xab\xd5\xeet\"d\x81\x94\x04\xf5\xeb', 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) 22:11:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x03\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x02\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:54 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x2c60, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r2, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="14000000000000b1aafd992fff3543deb62c747c977df1c218000000000000000000000007000000440805e000000200"], 0x30}}], 0x24, 0x0) 22:11:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x03\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x04\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x05\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:55 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x326b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="0900000000003639408fa3a3", 0xc}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x4) 22:11:55 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x04\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x06\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:57 executing program 1: 22:11:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x3540, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\a\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x05\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x1, 0xc12981) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000380)=0x7e294c8d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = syz_open_dev$media(&(0x7f0000000680)='/dev/media#\x00', 0xfffffffffffffff7, 0x80000) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x6000000, 0x0, 0x0, 0x5fc, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept4$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c, 0x800) r9 = syz_open_dev$adsp(0x0, 0x100, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r9, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r9, 0xc010641d, &(0x7f0000000500)={r10, &(0x7f0000000480)=""/69}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000000300)={r10, 0x17}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r6, 0x4010641c, &(0x7f0000000780)={r10, &(0x7f00000006c0)=""/185}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000240)={r10, 0x2}) r11 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x80000) pread64(r11, &(0x7f0000000180)=""/181, 0x31, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:11:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\b\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x06\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x3b4b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:11:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\a\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:58 executing program 3: 22:11:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x03\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:11:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x910bea8aebb7cfb9) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x3, 0xffffffffffffffff, 0x1}) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:12:01 executing program 1: 22:12:01 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\b\x00\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:01 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x3e20, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x05\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:01 executing program 3: 22:12:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) getpeername(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={r5, 0x4c, &(0x7f0000000340)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x6, @loopback, 0x5}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000240)=0x10) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:12:01 executing program 3: 22:12:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x06\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:01 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x03\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:01 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x4000, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:01 executing program 3: 22:12:01 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x05\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x98085, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x800, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0x7, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) r4 = dup(r1) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\a\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:05 executing program 3: socket(0x10, 0x2, 0xc) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0xa5, "77413739d5f5a0b8e3c954292d61566001f4bcd16f9118fcc58967998160d8993d5a8348e26c1c46fcba04be62383ce676f76667a1b1893c86ae7d73fb2531c63b010c34b5e74114c6cd2b48e29f6c4e2f6d7edfe0c94045ed34a6912bfd6e958586350020ad189d8a893e053df9a671a048857597646074445eae18a39f3b72e330a704b76a8383f818b2910cd7b0b2ecc1723d490237fdb202ad5db28185fb0cf1e8a05d"}, &(0x7f0000000040)=0xc9) io_setup(0xd, &(0x7f00000001c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) exit(0x2) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)="05", 0x1}]) write(r2, &(0x7f0000000100)="1f00000002080104fd4354c007f37fff020501000800010004000300ffdf00", 0xfffffffffffffece) 22:12:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x06\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:05 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x4035, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffef0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:12:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\a\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00@\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:05 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x407c, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000000000002500dc650a462dbd7f3d50788686499ac9607567d118e77475734fd375bfcaaad6411d557d366aa9eef5e2360ff49b1c9f2bae64bc20224a3c7523cf37c8d8f2305f735b4ce550d80505e882a9201300000000000000"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x7fffffff}, r7}}, 0x30) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='eql\x00', 0x10) 22:12:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00@\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\xff\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$read(0xb, r0, &(0x7f0000000080)=""/50, 0x32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x80000, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0x10) r2 = open(&(0x7f0000000140)='./file0\x00', 0x210000, 0x90) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000180)={0x6b4, 0x2, {0xfffffffffffffffc, 0x2, 0x5, 0x0, 0x9}}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000002c0)={r4, 0x8}) r5 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x7f, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x6, 0x200, 0x401, 0x7f, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={r6, 0x3, 0x0, 0x800, 0x80c, 0x7f8d, 0x4, 0x0, {r7, @in={{0x2, 0x4e22, @multicast1}}, 0x8000, 0x0, 0x485b86b3, 0x800}}, &(0x7f0000000500)=0xb0) r8 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) fcntl$lock(r8, 0x7e, &(0x7f00000005c0)={0x2, 0x0, 0x10, 0xfffffffffffffffe, r9}) prctl$PR_GET_TIMERSLACK(0x1e) tkill(0xffffffffffffffff, 0x36) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000600)="13087ce152336f52eb8f9ba1f92605d3e26309c2fd0c658a91ec728a8c2480d6b34b07877821b74d0e11c0d72bd45f7a3719ad40861d3cdb9b7c956d2ca3274a733d9eeef5f3c59baead46b1cfc4fd2f25e53d032315cb4e3fc7aa1ce05ce6cc8215c491d287a99583367606d7b65c55c783f1daf37d42aa47e9c1120ab9e109a73907e77ae9cdb4d71f365d7874a35c09299c1277ed1fba961cb9685167c2") socketpair(0xb, 0x800, 0x3f, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0x1c, &(0x7f0000000700), &(0x7f0000000740)=0x4) r11 = syz_open_dev$dmmidi(&(0x7f0000000780)='/dev/dmmidi#\x00', 0x321, 0x500fbefc9ef49722) ioctl$KDSIGACCEPT(r11, 0x4b4e, 0x25) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000007c0)=@usbdevfs_connect={0xffff}) r12 = syz_open_dev$midi(&(0x7f0000000c40)='/dev/midi#\x00', 0x2, 0xadb3537942cb8b4f) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r13 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/mixer\x00', 0x40041, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_DMA(r13, 0xc0406429, &(0x7f0000000e80)={r14, 0x7, &(0x7f0000000d80)=[0xffffff39, 0x3, 0x80000001, 0xfffffe00, 0xffff, 0x6, 0x200], &(0x7f0000000dc0)=[0x100, 0x2, 0x9, 0x10000], 0x16, 0x8, 0x80000000, &(0x7f0000000e00)=[0xcf, 0xffffffff, 0x3ff, 0x9, 0x400, 0x3ff, 0x976, 0x5], &(0x7f0000000e40)=[0xffff]}) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000ec0)) 22:12:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x40c3, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x01\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\xff\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:12:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getpid() io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10010, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}], 0xfd, 0x0) 22:12:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x01\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x02\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x442b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) bind$vsock_stream(r3, &(0x7f00000000c0), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:12:13 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000018007f5300fe01b2a4a280930a600000ffa84308910000003900080003000a0001f3da1a51726ca2c407b5950000000000156f757284366a660006000000000000dc1338d54400009b84136ef75afb83de", 0x55}], 0x1}, 0x0) socket$inet6(0xa, 0x0, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000003000050ad22780648c6394fb0300fc001007b8400c000200053582c137153e370900018025a2a36500cb", 0x2e}], 0x1}, 0x0) [ 491.005806][T17706] IPv6: NLM_F_REPLACE set, but no existing node found! [ 491.083211][T17711] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 491.161553][T17714] IPv6: NLM_F_REPLACE set, but no existing node found! 22:12:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x03\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x03\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) accept4$tipc(r2, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x80400) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:12:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x4700, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:20 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) socket(0x15, 0x80005, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x80000001) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000dc0)) rt_sigsuspend(&(0x7f0000000180)={0x1f}, 0x8) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x7, 0x0, 0x2, 0x1ff}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 22:12:20 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x20000, 0x1000}, 0x18) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000200)="05", 0x1}]) write$P9_RVERSION(r3, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="124540b3e4a2bd056782123e0e3f69da2b334e504bb5bdc40413723fa74e24b87ce1a637f1096f6b384b66dbef36e85d92e6620ab239be4230b77daf0ec349650789976e365fbcf88bdbb072a277efd3418ebdb5a3daafb36d5e25ac1483e6035eb86faa1c92e85965b8c17ffdd16d06e574314b47484c1c59a8ad6050d97addbd37060a4044a9412ca3e3eeb41ec9b3a891bb2df8625599cba3d7313278dd5624ac72f1fc5fbfa692b7a84d51cb78ec1c68f973bcb1967761f4c8abdb1165d095dedf24b466d67c8fc8c5ba4e2b250759333c3dbcb180983f945d9c91e0e5449cc93e61e0671b738bfcb82cd7d76a6aefd4cee0a6", @ANYRESOCT, @ANYPTR, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES64=r5]], 0x87) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) sendto$x25(r7, &(0x7f00000002c0)="867c5d1be443adb6b220", 0xa, 0x0, &(0x7f0000000300)={0x9, @remote={[], 0x2}}, 0x12) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x100, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x7655061b6130db35, &(0x7f0000000380)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x108) r9 = dup(r3) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_int(r9, 0x0, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80080, 0x0) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0xc11658a5d9954495, r2, 0x7, r10}, 0x10) 22:12:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x04\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x04\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000002c0)={{0x8, 0x1, 0x800, 0x1, 'syz1\x00', 0x5}, 0x1, 0x30, 0x1, r1, 0x3, 0x2, 'syz1\x00', &(0x7f00000000c0)=['/\x00', '\x00', '\x00'], 0x4, [], [0x2, 0x8001, 0x9, 0x2]}) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x5, 0x0, 0x77fffc, 0x0, 0x0, 0x0, 0x0, [], r5}, 0x3c) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:12:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x4b3b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x05\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x05\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x06\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x06\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dda0e000000000000b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x6, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r6, 0x0}]) 22:12:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x4b82, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:21 executing program 3: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB='nls=maciceland,show_sys_files']) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x1900) [ 498.840713][T17773] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 498.894773][T17773] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 22:12:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x101, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0x3, 0x0, "a52e4c4e1e9d525bffff043a91035a08c5b95191e39ba8fbb0aa71b65285c884"}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) getpeername$netlink(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 22:12:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\a\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\a\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r1, 0x40000) io_setup(0xd, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="05", 0x1}]) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={r6}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_setup(0xd, &(0x7f00000001c0)) r7 = socket$vsock_stream(0x28, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000000000ae092c5e0d9a1d0e3176beb44d7d45d5c82fc78976a52e6772290180072b81d15e3e41dbe65f97fb16eed3f257aca61ba42a511b08407d7eb48899e0165f58532d7198a81c717b1810046267e5a24acc51658bf79a838e49f9382f38a544f001a171c2825eea947a7ea977e9a925d6"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KDSKBMETA(r9, 0x4b63, &(0x7f0000000100)=0x8) io_submit(r2, 0x49c503e74c7eee8, &(0x7f0000000080)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000200)="05", 0x0, 0x3}]) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0), 0x4) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:12:27 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x4bc9, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)={'mime_typecgroup#bdev'}, 0x15, 0x1) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x60000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 505.293122][T17791] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 505.310117][T17791] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 505.318328][ C1] net_ratelimit: 10 callbacks suppressed [ 505.318336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 505.318915][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 505.324083][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:12:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\b\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 505.330033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 505.335585][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 505.352796][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 505.358698][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 505.364480][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:12:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\b\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 505.397126][T17791] F2FS-fs (loop3): invalid crc_offset: 0 [ 505.398327][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 505.408715][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 505.436625][T17791] F2FS-fs (loop3): invalid crc_offset: 0 22:12:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00@\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 505.459656][T17791] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 22:12:27 executing program 5: prctl$PR_SVE_SET_VL(0x32, 0xe90f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:12:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00@\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\xff\xff\xfd\xfd\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 505.580734][T17808] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 505.628612][T17808] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 505.694055][T17808] F2FS-fs (loop3): invalid crc_offset: 0 [ 505.742657][T17808] F2FS-fs (loop3): invalid crc_offset: 0 [ 505.796499][T17808] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 22:12:34 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) flistxattr(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x1, 0x1) 22:12:34 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x4d0b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\xff\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x8, 0x0, 0x77fffc, 0x0, 0x0, 0x0}, 0xfffffffffffffe22) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) prctl$PR_SET_TSC(0x1a, 0x2) 22:12:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\xff\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)={'mime_typecgroup#bdev'}, 0x15, 0x1) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x60000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 22:12:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\xfd\xfd\xff\xff\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x02\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 512.518341][T17839] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 22:12:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x02\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 512.558674][T17839] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 22:12:35 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0xdbb3, 0x81, [], &(0x7f0000000040)=0x81}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x19c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x174, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x164, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @tunl6_policy, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="26235e58cad1850f722a1b12de5fb0c3"}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={[], [], @loopback}}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @tunl6_policy=[@IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}], @tunl6_policy=[@tunl_policy, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_LINK={0x8}], @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}], @tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_TOS={0x8, 0x5, 0x20}, @IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x1}], @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0x43}]]}}}]}, 0x19c}}, 0x0) 22:12:35 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x4fe0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 512.633824][T17839] F2FS-fs (loop3): invalid crc_offset: 0 22:12:35 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x55eb, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 512.675304][T17853] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 512.695236][T17853] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 512.711235][T17853] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 512.729063][T17839] F2FS-fs (loop3): invalid crc_offset: 0 [ 512.734781][T17839] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 512.742478][T17853] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 512.769671][T17853] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 512.798802][T17853] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 512.820895][T17853] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 22:12:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x840) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) getpid() 22:12:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x03\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x03\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x58c0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) sendto$ax25(r3, &(0x7f0000000000)="ce6a98a3bc1039a80b92b18a9567753e68d71700c912fbadcedc2ff819e44ff4cc8540395dce6feeed5bdafa359cffd297a767894ea0", 0x36, 0x20004005, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x2000000007}, {&(0x7f0000001240)="0be5a941", 0x4}]) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) 22:12:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000040)={0x4, "0e7e93ba016da53588a3036dc613fb14ed8f56671597180c35da7ba13891dfad", 0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x100000000) r7 = dup(r4) write$FUSE_BMAP(r7, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x44, r9, 0x1, 0x0, 0x0, {0x5}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x3}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x9c, r9, 0x529, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x1}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffd2f}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000180)={'ip_vti0\x00', @ifru_flags}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmmsg(r10, &(0x7f0000000180), 0x400000000000002, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 22:12:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x04\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x04\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 520.916719][T17879] Dev loop5 SGI disklabel: csum bad, label corrupted 22:12:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x5ecb, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x05\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x05\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:43 executing program 5: semget(0x2, 0x1, 0x638) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001cc0)=ANY=[@ANYBLOB="f54cc35b5524c4eb00bb0a000000ed488a81ecf718613294bbf1f2e95ece0224cf2f70d3857a68244f39e43a2cabe0920c5c115f2d4529ac9a1b08187042b4bfce12e4dbe89f9d8bca430682c89e5ad98ed01bec1ed01e8aab08e2b6c24d60b1b5b23627bdae14b3cea30d85644cb02641a9db0861ad3fb9b0a15d1a86e93621c25d19dcf2ed0b7e105f5f03c9857a4e43578828db9e46a4c942d571184b6040d797b3d73e30f04a289e2a81ea4b0a1921803daa"], 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) r2 = open(&(0x7f0000001b80)='./file0\x00', 0x327980, 0x8) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000001cc0)) sendto$x25(r2, &(0x7f0000001d80)="59198f8b2a5ad2da59d6a4f391599eae58d22d3e37b9ccc7f47dc166a7db754103017747a4efa37d6b298c74c7ef51f06567f16a9227ab4fc432b4f3ffae15399ba027da91c4c8b1a86203cf30b7a06e330587de4b0035cdfb147592b79d5fc6084e2caff06bb6df70b103ea5454c7cfd948a378c76fa0e2e8bd0da037cfad4567adb1c04f094ae6268fb196ae4c02b58e88abd96eb7440f37abd8d54aa3972bdd142aa84f7afd2f58c981af3a0460d8318f9d1388ec66547f0ebe6fd97bb7099d4ac053e174c0ef3afc8d9d2af23f7ad3a1ee", 0xd3, 0x1004, &(0x7f0000001c40)={0x9, @remote={[], 0x2}}, 0x12) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) io_setup(0xd, &(0x7f00000001c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) recvfrom(r4, &(0x7f00000003c0)=""/253, 0xfd, 0x20, &(0x7f00000004c0)=@sco={0x1f, {0x81, 0xc3, 0xe5, 0x8c, 0x3, 0x9}}, 0x80) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x7ff, &(0x7f0000000080)=0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000180)="eb3c905f3259ef556d6b66732e6661", 0xf, 0x7fffffc}], 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000100)=0x1) fremovexattr(r0, &(0x7f0000001c80)=@known='system.advise\x00') sendmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000140)="254b3b7fc70030f22dd3a7e3c8ce8041c38aa35f03d3aef551a745fb47d07d656bdb5e3c7642904f633d4373710eb167e228a7152bf007", 0x37}, {&(0x7f0000000600)="7a3815a8ca2057531d8ecf7aa8088c3993b22c89c75fc37372c30b2d55b3a598b9d10cac9a06fb27e1f8317b07e7feaeeea9f7b88e0986f9e978972deb791c2b75b3487b1760130bba2cd4276d697c26cc5d96e9a33c42bf05cb1ce9998eaed267ab5e63858294137aef20b654da61835a814813be29bf781287c10bca1a79a882c6cc8fc91d7050a162a65918fcb1c9f8ca1e50e6c052590ad777d8d459a34b5ec355cecdea63fe40b8", 0xaa}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="621d59ecae44119e4bba240e50da54b864d75f4995443d473bb9bc65ea68d288a52ada7f5d1a38d05bf41ce932f6a7e0d3e5bdfa27a34833840f1b5c34497c3ad05da5b0111da28e2110e7bcca1f8b045a600e2c7c3b009b1f36b9dabf346151ff96aba71cf98b4df82d5e22f884288781aeae5e9ca7d0c89e3235f00cfd471b63f743f3cda853c69545968f7597fb790e4fa1e9db1de9ddb227d1526b2d038a60936ca5a01d202cfdfa20ae792077ec89cd4c18280a2656eb5ee738d5420f29bfb75190055ad89bc59c2b4ab365f8e9", 0xd0}, {&(0x7f00000017c0)="1f17a9bcacb942e7fa4409baeaddc50e076bee0c5e063188fd3f34ad7e1985b47af6001f4cf47c70bb7579fdb0d9f8e59456b06a490c0dfc278c54067bd9fbc12314e74378ca15fc39e87fd199074bfb3421feb405b66ac6825ef5b409d2912d28e99b212ed4a6891e649c9b118edfbddc650d87fa902847e384830994887e7a15a72bffa250346915957679fdadb7a59b3a018325dc00d37b41db5031cb06de5a76de5305e80232ed99365a561b73a0f23c9cab48ae95fc58ac9ef8bfba01dc71464b0558dd0794", 0xc8}, {&(0x7f00000018c0)="469804f2546e18bf9ac292d7e23cd38ad4ff3ae5052ab76ef44431affaadf424fa024fca2e9e511af47cc02788beed294942846086792fed26ed0faf0e243bb2b7fd5e316acf32db762abfd41e728ef257c52fab3e194a92bec111cd53e77019ffcbe46f05a5d6af849951745ed4faedd6e477107f154e38cebdeb5bd0c2124b36dfdf81fdefb69580d14b55af7e378ebc8b40252b5483fee77c34ee09eea02d3e5140987b9b00bf983da7f513a12ce9e3bbd906d49756893c41aee5d00ceca5536bb2e16b2859b9ca4b5d7542b9efe92fded50c013be07748bedf9965be", 0xde}, {&(0x7f00000019c0)="f55ba6853c74afafaef904ec64e441162d3cd96dc89684cf2f58caf130a229d8c91d5fb1ee8fe9d92668c5c45f2af5e3a1f9121ed0aa185ab9f84cb2a17034dbd496e68c222442bced718fd1f3321dab7cb0fd28cb4521e392aef61794bb3445ac39c854", 0x64}, {&(0x7f0000001a40)="b4bc33a63e83bc362bc54cff1a46ed1bb8285290278aa0927cb7599b51df376bbfbcbc317ccd08e805899830882daffc066ff739ad34160917969cc8a0847026d4935916a683280b347c57a8a01499734239133250f387f17899514f2c9642905dedadbdec49234dac57d7f413719c200b8cba18b0891b2a99bcb3be9a2a48c1d248", 0x82}], 0x8, 0x0, 0x0, 0x4}, 0x565d34746048c63c) [ 521.299845][T17911] FAT-fs (loop5): bogus number of reserved sectors [ 521.308492][T17911] FAT-fs (loop5): Can't find a valid FAT filesystem 22:12:50 executing program 1: r0 = fanotify_init(0x200, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) fanotify_mark(r0, 0x1, 0x10, r2, 0x0) 22:12:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x06\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x06\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:50 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x84) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbbc4e354d8800663dd78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000"], 0x15) r3 = dup(r2) io_setup(0xd, &(0x7f00000001c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000200)="05", 0x1}]) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r7) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) r9 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r10) r11 = getuid() stat(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r14) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) r16 = getgid() r17 = getgid() getgroups(0x7, &(0x7f0000000700)=[r16, 0x0, 0xffffffffffffffff, r17, 0x0, 0x0, 0x0]) r18 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) fsetxattr$system_posix_acl(r5, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {0x1, 0x4}, [{0x2, 0x9c5a47eae3decfd2, r7}, {0x2, 0x6, r8}, {0x2, 0x0, r10}, {0x2, 0x3, r11}, {0x2, 0x7, r12}, {0x2, 0x2973e6d587f47d, 0xee00}, {0x2, 0x1, r14}], {0x4, 0x4}, [{0x8, 0x4, r15}, {0x8, 0x1}, {0x8, 0xe, r17}, {0x8, 0x6, r18}, {0x8, 0x3, r19}], {0x10, 0x1}}, 0x84, 0x1) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$RTC_PIE_ON(r3, 0x7005) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r21 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$RTC_AIE_OFF(r21, 0x7002) write$P9_RVERSION(r20, &(0x7f0000000340)=ANY=[@ANYBLOB="f600000065ffff7f00000000000089f1a2a0cc6636c6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da8efd8be9148100621d630d93b9f6049a02b3753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/146], 0x15) r22 = dup(r20) write$FUSE_BMAP(r22, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r22, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCVHANGUP(r22, 0x5437, 0x0) 22:12:50 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x6000, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:50 executing program 5: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f660000"]) 22:12:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\a\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 528.262546][T17931] ntfs: (device loop5): parse_options(): Unrecognized mount option f. 22:12:50 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x602c, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\a\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 528.374304][T17931] ntfs: (device loop5): parse_options(): Unrecognized mount option f. 22:12:50 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/237) fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x2ce, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00000032000502d25a80648c6356c10424fc00400000000a000a00053582c1b0acea8b09000180feff0000d1bd", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) creat(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x2) creat(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0xf7bce6bd6c3d8f02) 22:12:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\b\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:50 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) [ 528.652815][T17960] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 528.667755][T17960] openvswitch: netlink: Message has 5 unknown bytes. [ 528.715456][T17960] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 528.748780][T17960] openvswitch: netlink: Message has 5 unknown bytes. 22:12:56 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x6073, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x0, 0x1, 0x2}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffed6}, 0x48) 22:12:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x03\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:56 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\b\x00\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x7, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffed6}, 0x48) 22:12:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) getsockname(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) creat(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open(0x0, 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) 22:12:56 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x03\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x05\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:57 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cgroup.controllers\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xa90b, 0x751}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f0000000080), 0x12e, 0x0) r3 = getuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in6=@remote, 0x0, 0x2, 0x4e23, 0x0, 0xfe9f605bfab53419, 0x20, 0x0, 0x0, 0x0, r3}, {0x0, 0x3, 0x0, 0x7}, {0x401}, 0xbaa, 0x6e6bbb, 0x2, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}}, 0xe8) getuid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001440)) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:12:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x60ba, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:12:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x06\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:12:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x06\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:06 executing program 1: 22:13:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\a\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:06 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x61a0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\a\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:06 executing program 5: 22:13:06 executing program 3: 22:13:06 executing program 5: 22:13:06 executing program 3: 22:13:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00@\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:06 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x67ab, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00@\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:06 executing program 5: 22:13:10 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 22:13:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000240)) 22:13:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008551c, 0x0) 22:13:10 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\xff\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:10 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x6a80, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\xff\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:10 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000a00), 0x0) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x91@]y\x00\x00\x00\x00g\xb8\xda\xc1\x84=[\x1f\r\x06\x00\x00\x00\x00\x00\x00\x00|\x88O\xbaI\xa3*@\x9e\xca\x8b\xde\xefC\xfd \xde\x9ao\xd4\xc4\xac\xb7', 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000300), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000140)=""/137, 0x89) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') sysfs$1(0x1, &(0x7f0000000340)=':trusted#user-\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000280)={{0x3, 0x0, @descriptor="3bcf9a40e2147713"}}) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0xffffff52, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000000, 0x400000000081}, 0x0, 0x7, 0x80000000, 0x0, 0xfa4}, 0x0, 0xfffdfffffffffffb, 0xffffffffffffffff, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r0, 0x4a, 0x6, 0x1) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socket$packet(0x11, 0x3, 0x300) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 22:13:10 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) 22:13:10 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x01\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:10 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x6b32, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:10 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x84) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbbc4e354d8800663dd78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000"], 0x15) r3 = dup(r2) io_setup(0xd, &(0x7f00000001c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000200)="05", 0x1}]) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r7) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) r9 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r10) r11 = getuid() stat(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r14) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) r16 = getgid() r17 = getgid() getgroups(0x7, &(0x7f0000000700)=[r16, 0x0, 0xffffffffffffffff, r17, 0x0, 0x0, 0x0]) r18 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) fsetxattr$system_posix_acl(r5, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {0x1, 0x4}, [{0x2, 0x9c5a47eae3decfd2, r7}, {0x2, 0x6, r8}, {0x2, 0x0, r10}, {0x2, 0x3, r11}, {0x2, 0x7, r12}, {0x2, 0x2973e6d587f47d, 0xee00}, {0x2, 0x1, r14}], {0x4, 0x4}, [{0x8, 0x4, r15}, {0x8, 0x1}, {0x8, 0xe, r17}, {0x8, 0x6, r18}, {0x8, 0x3, r19}], {0x10, 0x1}}, 0x84, 0x1) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$RTC_PIE_ON(r3, 0x7005) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r21 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$RTC_AIE_OFF(r21, 0x7002) write$P9_RVERSION(r20, &(0x7f0000000340)=ANY=[@ANYBLOB="f600000065ffff7f00000000000089f1a2a0cc6636c6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da8efd8be9148100621d630d93b9f6049a02b3753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/146], 0x15) r22 = dup(r20) write$FUSE_BMAP(r22, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r22, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCVHANGUP(r22, 0x5437, 0x0) 22:13:17 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="480000001400e700b05f9f95274b0a000a840000400403fe0500030001546fab07004e7d063630f10a8a6a36d47a56aa68c6f8c36da6bd7c497626ff19343dcdbfae0000000000d9", 0x48}], 0x1}, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x2, 0x5}, 0x1}, 0x20, 0x0, 0x0) 22:13:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x02\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x02\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x6b79, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) fchdir(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') 22:13:17 executing program 3: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x101000, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x6) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="230000005e0081aee4050c00c1287f1d1ad1cfb0d6deccd1f1bfa6000f0000709110ec", 0x23}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000003ec0)={0x0, 0xfe2c, 0x0, 0xffffffffffffff0c, 0x0, 0xfffffffffffffe86}, 0x20) 22:13:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x03\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x6bc0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 555.174586][T18097] device nr0 entered promiscuous mode 22:13:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x03\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x708b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x04\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 555.844747][T18097] device nr0 entered promiscuous mode 22:13:26 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x7360, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x05\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x05\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) socket(0x2, 0x17, 0x9e) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000080000", 0x58}], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x3, 0x18}, 0xc) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987d1c2cec6202127e8a9504df6ead74ed8a60ab563e98b4b2a3d27a70815bb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd00000000000000009ca162b123e192e8c89c9dd81c796f27f537cc5a3fb557ff8eaff4f6b59c41705b96a6711d4679079d0700000000000000bfd1be"], 0x15) r8 = dup(r7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000400)=0x0) io_setup(0xd, &(0x7f00000001c0)=0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r12, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r13, &(0x7f0000000200)="05", 0x1}]) r14 = fcntl$dupfd(r5, 0x406, r13) perf_event_open(&(0x7f0000000380)={0x7, 0x70, 0x1, 0x2, 0x1, 0x2, 0x0, 0x10000, 0x2000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x10001, 0x40}, 0x1000, 0x6, 0x0, 0xb, 0xc3f9, 0x4, 0x5}, r11, 0xe, r14, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000040)=r8) 22:13:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x76}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd, 0x80, 0x84, 0x3, 0x0, 0xff, 0x4000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa56c, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x805, 0x6, 0x1, 0x5, 0x0, 0x1, 0x1}, 0xffffffffffffffff, 0x2, r0, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f0000000180)=""/165, 0xa5) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x200000, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) unshare(0x40000000) 22:13:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x0, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) r6 = dup3(r1, r2, 0x0) dup2(r6, r3) 22:13:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x06\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x06\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:27 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x796b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 564.633944][T18140] IPVS: ftp: loaded support on port[0] = 21 22:13:27 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x10}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x7fffffff, 0x11140) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x70, 0xe6, 0x4, 0xc0, 0x3, 0x0, 0x200, 0x12001, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x20, 0x9, 0x72a3, 0x7, 0xffffffffffffffe1, 0x7fffffff, 0x4}, 0xffffffffffffffff, 0x2, r1, 0x2) sendfile(0xffffffffffffffff, r4, 0x0, 0x100000206200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000200)=0xa7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000180)=@raw=[@map, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2712b011d2548b93}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mISDNtimer\x00', 0x80000, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="017786dd07"], 0x70ad) fsopen(&(0x7f0000000440)='gfs2meta\x00', 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000600)={0x0, 0xb, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "18010004"}, 0x0, 0x0, @userptr=0x100000001, 0x4}) 22:13:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\a\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\a\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:27 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x7c40, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\b\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\b\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:27 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x8023, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 565.107452][T18157] device nr0 entered promiscuous mode [ 565.312661][T18140] IPVS: ftp: loaded support on port[0] = 21 [ 565.846226][T18157] device nr0 entered promiscuous mode 22:13:29 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643db162eb879bc254450e55f00e5071e01294c6a309d5", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$P9_RRENAME(r1, &(0x7f00000001c0)={0x7, 0x15, 0x2}, 0x7) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) [ 566.846218][T18184] fuse: Bad value for 'user_id' [ 566.864114][T18185] fuse: Bad value for 'user_id' [ 567.028356][ T76] tipc: TX() has been purged, node left! 22:13:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000080)={'irlan0\x00', {0x2, 0x4e23, @loopback}}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) write$char_usb(r3, &(0x7f00000000c0)="6dfaff0ad40e7c4fb2079b2f71863ab42e9b8193c6772932d5cc079480f2f482e1549c26acb03e5f4f2a1ca928fd50a8c3175e51fd", 0x35) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x75) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6b185fb9395d584b}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r4}]]}}}]}, 0x3bc}}, 0x0) 22:13:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x87, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xd, &(0x7f00000001c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}]) r4 = fcntl$dupfd(r1, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 22:13:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x03\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00@\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x806a, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000400)="00000000000400da4a5e32d7b03076d0a975d82353569a14d0dd3d", 0x1b, 0x0) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000000)=0x6) 22:13:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\xff\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x05\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 573.972587][T18198] Option 'SV' to dns_resolver key: bad/missing value [ 574.005995][T18203] Option 'EU@G7S͉鰎?Yrb' to dns_resolver key: bad/missing value 22:13:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x1010c0, 0x0) 22:13:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x02\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x80b1, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000200)='./file1\x00'}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x911, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x27, 0x0, 0x0, 0x1f, 0xb, 0x6d}}) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)="11728fbaee9161e71052b4dd387013e5ab201c48c78f81f779cb4b09b3045f0913c52bc8b965a4a8157bb3932db80cb5a31b87e3c5262239e957923075ce6237bfcc34e673372e35b6544ab5708403e0a51ec7ff2f79433b01", 0x59, 0xfffffffffffffff8) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$instantiate(0xc, r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420757365723a73656375726974792e6361706162696c203030303030303030303030303030303030303332203966343338043700"], 0x44, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x56}, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000980), &(0x7f00000004c0)=""/86) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file1\x00'}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cgroup.controllers\x00', 0x0, 0x0) msgget(0x3, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) [ 574.487653][T18233] IPVS: ftp: loaded support on port[0] = 21 [ 574.532664][T18228] bond0: (slave bond_slave_1): Releasing backup interface [ 574.641485][ T8801] tipc: TX() has been purged, node left! [ 575.158082][T18233] IPVS: ftp: loaded support on port[0] = 21 [ 578.488321][ T8801] tipc: TX() has been purged, node left! 22:13:43 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80140, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) llistxattr(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x1000000) 22:13:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x06\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x03\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:43 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_open_dev$radio(0x0, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x1209b3bf, 0x8000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000540)) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x100, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x40880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x9, 0x88000) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r3, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x22000, 0x0) statx(r4, &(0x7f0000000380)='./bus\x00', 0x0, 0xfff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f00000001c0)) select(0x40, &(0x7f0000000000)={0x5, 0x7, 0xffbffffffffffc00, 0x7, 0x9, 0x2, 0x400, 0xffc}, &(0x7f00000000c0)={0x35, 0x80000000, 0x40, 0xd9e0, 0x526, 0x20000000003f, 0x8}, &(0x7f0000000100)={0x4, 0x0, 0x1, 0x100000001, 0x5, 0x0, 0x4000000000000}, &(0x7f0000000240)) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffff4) r6 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r7 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r7, 0x1000000) sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef) connect(r6, &(0x7f00000004c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x0, 0x3, "4be54435ea28b23e5a0a14cf24dd917bcc8b51702da33cef04b2f2525b1c9f17630837020f401ece88959d0daafca8bb39d99fde09d962e5b1ae4a53b17741", 0x1a}, 0x80) clock_gettime(0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) 22:13:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x80f8, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:43 executing program 5: socket$kcm(0x2c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffdf0) close(r1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x2000000000003, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000200)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') close(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @initdev}, &(0x7f0000000080)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400000) 22:13:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x04\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\a\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x80fe, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00@\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\xff\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:50 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x20882100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:13:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x06\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:50 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x824b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x02\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:50 executing program 5: socket$kcm(0x2c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffdf0) close(r1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x2000000000003, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000200)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') close(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @initdev}, &(0x7f0000000080)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400000) 22:13:50 executing program 3: r0 = epoll_create1(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x2, 0x80000000, 0x81, 0x2, 0x1ff, 0x0, 0x4, 0x0, 0x101, 0x8], 0xa, 0x1, 0xac7d, 0x8, 0x9, 0x4, {0x4, 0xfd, 0xc0, 0x1000, 0x2, 0x1, 0x8, 0xfafe, 0x3, 0x7, 0x1f, 0x1, 0x5, 0xff, "6e7906ce1a0c9e425f71ea381c98b6ace097b72490272ce4d92e32118534757a"}}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x78, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x16) 22:13:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x03\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\a\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:50 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x8520, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:51 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\b\x00\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x04\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:51 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x8b29, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x05\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:58 executing program 1: r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @remote}, 0x0) fallocate(r0, 0x14, 0xe91, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {r3, 0xe7, "e447cd", "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"}}, 0x110) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0x3}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x48}}, 0x0) 22:13:58 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") unshare(0x400) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) 22:13:58 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x03\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:58 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x8b2b, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:58 executing program 5: socket$kcm(0x2c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffdf0) close(r1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x2000000000003, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000200)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') close(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @initdev}, &(0x7f0000000080)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400000) 22:13:58 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x05\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x06\xde\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:58 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") unshare(0x400) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) 22:13:58 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x8b70, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:58 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\xde\xff\xff\xff\x00\x00\x00\x00\x00\x06\x00\x00\x02\x00'}, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 22:13:58 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb9c}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x8bb7, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 22:13:58 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") unshare(0x400) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) [ 601.961923][ T26] audit: type=1804 audit(1574633644.327:91): pid=18366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir114212030/syzkaller.TOImiz/320/file0" dev="sda1" ino=16659 res=1 [ 601.986882][ T26] audit: type=1800 audit(1574633644.327:92): pid=18366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16659 res=0 [ 602.009626][T18366] ------------[ cut here ]------------ [ 602.015404][T18366] WARNING: CPU: 1 PID: 18366 at lib/iov_iter.c:1162 iov_iter_pipe+0x25b/0x2f0 [ 602.024258][T18366] Kernel panic - not syncing: panic_on_warn set ... [ 602.030850][T18366] CPU: 1 PID: 18366 Comm: syz-executor.1 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 602.040713][T18366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.050748][T18366] Call Trace: [ 602.054025][T18366] dump_stack+0x197/0x210 [ 602.058875][T18366] ? iov_iter_pipe+0x210/0x2f0 [ 602.063620][T18366] panic+0x2e3/0x75c [ 602.067498][T18366] ? add_taint.cold+0x16/0x16 [ 602.072169][T18366] ? printk+0xba/0xed [ 602.076140][T18366] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 602.081592][T18366] ? __warn.cold+0x14/0x35 [ 602.086012][T18366] ? iov_iter_pipe+0x25b/0x2f0 [ 602.090764][T18366] __warn.cold+0x2f/0x35 [ 602.094988][T18366] ? report_bug.cold+0x63/0xb2 [ 602.099733][T18366] ? iov_iter_pipe+0x25b/0x2f0 [ 602.104499][T18366] report_bug+0x289/0x300 [ 602.108824][T18366] do_error_trap+0x11b/0x200 [ 602.113405][T18366] do_invalid_op+0x37/0x50 [ 602.117800][T18366] ? iov_iter_pipe+0x25b/0x2f0 [ 602.122643][T18366] invalid_op+0x23/0x30 [ 602.126780][T18366] RIP: 0010:iov_iter_pipe+0x25b/0x2f0 [ 602.132143][T18366] Code: 83 c0 03 38 d0 7c 04 84 d2 75 33 44 89 63 24 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8c f6 2d fe 0f 0b e8 85 f6 2d fe <0f> 0b e9 53 fe ff ff 4c 89 f7 e8 96 82 6a fe e9 f5 fd ff ff e8 2c [ 602.151730][T18366] RSP: 0018:ffff888063e7f988 EFLAGS: 00010216 [ 602.157788][T18366] RAX: 0000000000040000 RBX: ffff888063e7fa18 RCX: ffffc90008166000 [ 602.165848][T18366] RDX: 000000000002b02f RSI: ffffffff8345fd4b RDI: 0000000000000004 [ 602.173813][T18366] RBP: ffff888063e7f9c0 R08: ffff88809412c100 R09: 0000000000000000 [ 602.181769][T18366] R10: fffffbfff139e730 R11: ffffffff89cf3987 R12: ffff8880a3e99c00 [ 602.189734][T18366] R13: 0000000000000010 R14: ffff8880a3e99cc8 R15: ffff8880a3e99cd0 [ 602.197792][T18366] ? iov_iter_pipe+0x25b/0x2f0 [ 602.202539][T18366] ? iov_iter_pipe+0x25b/0x2f0 [ 602.207299][T18366] generic_file_splice_read+0xa7/0x800 [ 602.212737][T18366] ? fsnotify_first_mark+0x210/0x210 [ 602.218001][T18366] ? add_to_pipe+0x350/0x350 [ 602.222582][T18366] ? security_file_permission+0x8f/0x380 [ 602.228226][T18366] ? rw_verify_area+0x126/0x360 [ 602.233069][T18366] ? add_to_pipe+0x350/0x350 [ 602.237663][T18366] do_splice_to+0x127/0x180 [ 602.242162][T18366] splice_direct_to_actor+0x2d3/0x970 [ 602.247514][T18366] ? generic_pipe_buf_nosteal+0x10/0x10 [ 602.253042][T18366] ? do_splice_to+0x180/0x180 [ 602.257716][T18366] ? rw_verify_area+0x126/0x360 [ 602.262547][T18366] do_splice_direct+0x1da/0x2a0 [ 602.267391][T18366] ? splice_direct_to_actor+0x970/0x970 [ 602.272918][T18366] ? rcu_read_lock_any_held+0xcd/0xf0 [ 602.278280][T18366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.284502][T18366] ? __this_cpu_preempt_check+0x35/0x190 [ 602.295326][T18366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.301548][T18366] ? __sb_start_write+0x1e5/0x460 [ 602.306553][T18366] do_sendfile+0x597/0xd00 [ 602.310959][T18366] ? do_compat_pwritev64+0x1c0/0x1c0 [ 602.316229][T18366] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 602.322460][T18366] ? put_timespec64+0xda/0x140 [ 602.327206][T18366] __x64_sys_sendfile64+0x1dd/0x220 [ 602.332385][T18366] ? __ia32_sys_sendfile+0x230/0x230 [ 602.337663][T18366] ? do_syscall_64+0x26/0x790 [ 602.342323][T18366] ? lockdep_hardirqs_on+0x421/0x5e0 [ 602.347585][T18366] ? trace_hardirqs_on+0x67/0x240 [ 602.352592][T18366] do_syscall_64+0xfa/0x790 [ 602.357075][T18366] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.362957][T18366] RIP: 0033:0x45a639 [ 602.366831][T18366] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 602.386429][T18366] RSP: 002b:00007f21ae365c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 602.394821][T18366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a639 [ 602.402785][T18366] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 602.410735][T18366] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 602.418686][T18366] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f21ae3666d4 [ 602.426637][T18366] R13: 00000000004c85aa R14: 00000000004dec38 R15: 00000000ffffffff [ 602.436499][T18366] Kernel Offset: disabled [ 602.440988][T18366] Rebooting in 86400 seconds..