xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:47 executing program 2: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x3, &(0x7f0000001300)=[{&(0x7f0000000080)="8705be932ec3ea6155f9469a5dfb9425d410f374742a889ac0f2a6151000ccdfeff70d45c95ce7dc705d31de1f9b3ee5967fcf135e8ce8e9079cb680c6e77b4438a10331a5df74b77fac57a91c5bd6f50addd34d075627ed737fadccbff82436220f3b9ccac0a00d56a786d2e479dbbdf2b6234a842162e00ab6bb410b58f9a78a40bcbb6c633628fa908a0e5e17c8632b6437d8d4e17e6cef2944c883148268e571316aefc6ff0b909ff23f91e4158227339a0ddf01beb3a35d7a5b090bfd9b51607199fc19f8f236d0dc93829801987e7d8f06a781b585a2d00b183e87960de16baddfeb1ef9765f002831a4375377d92528909e35969f", 0xf8, 0x401}, {&(0x7f0000000200)="d4645dc554698ea66d0ebe86fb0a1d716d3350090f8696f993ea861031b315d46816f4ea05f990f17dcb74a9afdf87f3e295fc92edf62ccda52937266ce3314cade32c0e86066ca3a1c20e1913ee9b263c15bbcb7d44ad38f019762736cd5ec13d8b45f1e25c79eb3759ef9c88532a5719100312025cd183f8cdcbe457ab9f023f1296db1b8202052f4cda54fb724f4c8e883c377911d79a6c13e2a91b489b6af62c9b095c240ee3a7c5bc62a7d0a91a799c7d464aef51aa3e6a9bee61e19bdfb6631bfa0e0eeca4ea193e774e3e309a98594717d4b2572a7abc76f4bc64b2e889b380f79688412c96d82c37", 0xec, 0x800}, {&(0x7f0000000300)="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", 0x1000, 0x101}], 0x8008, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001380)='/dev/zero\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e22, 0x2fb6, @mcast1, 0x7}}, 0xc7, 0x1, 0x3ff, 0x0, 0x38}, &(0x7f0000001480)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000014c0)=@assoc_value={r1, 0x1}, &(0x7f0000001500)=0x8) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 14:05:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x7, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x9099800]}) 14:05:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1323.750897][T20912] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 [ 1323.863220][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1323.878033][T21153] FAULT_INJECTION: forcing a failure. [ 1323.878033][T21153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1323.897986][T21153] CPU: 0 PID: 21153 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1323.907208][T21153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.917270][T21153] Call Trace: [ 1323.920590][T21153] dump_stack+0x172/0x1f0 [ 1323.925029][T21153] should_fail.cold+0xa/0x15 [ 1323.930423][T21153] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1323.936344][T21153] ? ___might_sleep+0x163/0x280 [ 1323.941225][T21153] should_fail_alloc_page+0x50/0x60 [ 1323.946434][T21153] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1323.951822][T21153] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1323.957561][T21153] ? find_held_lock+0x35/0x130 [ 1323.962364][T21153] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1323.968112][T21153] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1323.974375][T21153] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1323.980641][T21153] alloc_pages_vma+0xdd/0x540 [ 1323.985335][T21153] shmem_alloc_page+0xc0/0x180 [ 1323.990122][T21153] ? shmem_swapin+0x1a0/0x1a0 [ 1323.994914][T21153] ? lock_downgrade+0x880/0x880 [ 1323.999782][T21153] ? __unlock_page_memcg+0x70/0x100 [ 1324.004989][T21153] ? kasan_check_read+0x11/0x20 [ 1324.009955][T21153] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1324.016240][T21153] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1324.021982][T21153] ? shmem_get_link+0x420/0x420 [ 1324.026846][T21153] ? kasan_check_write+0x14/0x20 [ 1324.031798][T21153] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1324.037192][T21153] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1324.042578][T21153] ? do_raw_spin_unlock+0x57/0x270 [ 1324.047698][T21153] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1324.053965][T21153] mfill_zeropage+0x92f/0x1000 [ 1324.058766][T21153] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1324.063905][T21153] ? _parse_integer+0x190/0x190 [ 1324.068781][T21153] ? __lock_acquire+0x548/0x3fb0 [ 1324.073789][T21153] ? userfaultfd_read+0x1940/0x1940 [ 1324.079019][T21153] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1324.085298][T21153] ? tomoyo_init_request_info+0x105/0x1d0 [ 1324.091071][T21153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1324.097364][T21153] ? tomoyo_path_number_perm+0x263/0x520 [ 1324.103030][T21153] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1324.108878][T21153] ? __fget+0x35a/0x550 [ 1324.113075][T21153] ? userfaultfd_read+0x1940/0x1940 [ 1324.118332][T21153] do_vfs_ioctl+0xd6e/0x1390 [ 1324.122951][T21153] ? userfaultfd_read+0x1940/0x1940 [ 1324.128171][T21153] ? do_vfs_ioctl+0xd6e/0x1390 [ 1324.132966][T21153] ? ioctl_preallocate+0x210/0x210 [ 1324.138143][T21153] ? __fget+0x381/0x550 [ 1324.142342][T21153] ? ksys_dup3+0x3e0/0x3e0 [ 1324.146795][T21153] ? tomoyo_file_ioctl+0x23/0x30 [ 1324.151757][T21153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1324.158023][T21153] ? security_file_ioctl+0x93/0xc0 [ 1324.163191][T21153] ksys_ioctl+0xab/0xd0 [ 1324.167374][T21153] __x64_sys_ioctl+0x73/0xb0 [ 1324.171992][T21153] do_syscall_64+0x103/0x610 [ 1324.176614][T21153] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1324.182525][T21153] RIP: 0033:0x458c29 [ 1324.186454][T21153] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1324.206123][T21153] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:05:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200900) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x5, 0x6, [], &(0x7f0000000080)=0x3}) [ 1324.214759][T21153] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1324.222747][T21153] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1324.230791][T21153] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1324.238912][T21153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1324.246916][T21153] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x9f99800]}) 14:05:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1324.267925][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:05:47 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000004c0)=ANY=[@ANYRES16=r0]) 14:05:47 executing program 4 (fault-call:6 fault-nth:57): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x9, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x12099800]}) [ 1324.425915][T21316] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x800, 0x700) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r2, 0x100000000, 0x30, 0x20, 0xffff}, &(0x7f0000000180)=0x18) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000547000/0x3000)=nil, 0x3000, 0x6, 0x3d, r0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 14:05:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x13099800]}) [ 1324.509163][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:05:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xa, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000100)=0x80) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 14:05:47 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x80) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1324.628947][T21356] FAULT_INJECTION: forcing a failure. [ 1324.628947][T21356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:05:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x14099800]}) [ 1324.669323][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1324.699817][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1324.716953][T21356] CPU: 0 PID: 21356 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1324.726192][T21356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1324.736284][T21356] Call Trace: [ 1324.739594][T21356] dump_stack+0x172/0x1f0 [ 1324.743965][T21356] should_fail.cold+0xa/0x15 [ 1324.748574][T21356] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1324.754395][T21356] ? ___might_sleep+0x163/0x280 [ 1324.759273][T21356] should_fail_alloc_page+0x50/0x60 [ 1324.764484][T21356] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1324.769872][T21356] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1324.775627][T21356] ? find_held_lock+0x35/0x130 [ 1324.780407][T21356] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1324.786152][T21356] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1324.792405][T21356] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1324.798663][T21356] alloc_pages_vma+0xdd/0x540 [ 1324.803368][T21356] shmem_alloc_page+0xc0/0x180 [ 1324.808154][T21356] ? shmem_swapin+0x1a0/0x1a0 [ 1324.812862][T21356] ? lock_downgrade+0x880/0x880 [ 1324.817726][T21356] ? __unlock_page_memcg+0x70/0x100 [ 1324.823026][T21356] ? kasan_check_read+0x11/0x20 [ 1324.827913][T21356] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1324.834283][T21356] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1324.839854][T21356] ? shmem_get_link+0x420/0x420 [ 1324.844712][T21356] ? kasan_check_write+0x14/0x20 [ 1324.849689][T21356] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1324.855082][T21356] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1324.860481][T21356] ? do_raw_spin_unlock+0x57/0x270 [ 1324.865608][T21356] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1324.871854][T21356] mfill_zeropage+0x92f/0x1000 [ 1324.876652][T21356] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1324.881773][T21356] ? _parse_integer+0x190/0x190 [ 1324.886663][T21356] ? __lock_acquire+0x548/0x3fb0 [ 1324.891618][T21356] ? userfaultfd_read+0x1940/0x1940 [ 1324.896830][T21356] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1324.903173][T21356] ? tomoyo_init_request_info+0x105/0x1d0 [ 1324.908908][T21356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1324.915169][T21356] ? tomoyo_path_number_perm+0x263/0x520 [ 1324.920818][T21356] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1324.926643][T21356] ? __fget+0x35a/0x550 [ 1324.930839][T21356] ? userfaultfd_read+0x1940/0x1940 [ 1324.936054][T21356] do_vfs_ioctl+0xd6e/0x1390 [ 1324.940693][T21356] ? userfaultfd_read+0x1940/0x1940 [ 1324.945916][T21356] ? do_vfs_ioctl+0xd6e/0x1390 [ 1324.950704][T21356] ? ioctl_preallocate+0x210/0x210 [ 1324.955835][T21356] ? __fget+0x381/0x550 [ 1324.960142][T21356] ? ksys_dup3+0x3e0/0x3e0 [ 1324.964579][T21356] ? tomoyo_file_ioctl+0x23/0x30 [ 1324.969536][T21356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1324.975790][T21356] ? security_file_ioctl+0x93/0xc0 [ 1324.981615][T21356] ksys_ioctl+0xab/0xd0 [ 1324.985817][T21356] __x64_sys_ioctl+0x73/0xb0 [ 1324.990420][T21356] do_syscall_64+0x103/0x610 [ 1324.995024][T21356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1325.000926][T21356] RIP: 0033:0x458c29 [ 1325.004834][T21356] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1325.024454][T21356] RSP: 002b:00007f0323381c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1325.033587][T21356] RAX: ffffffffffffffda RBX: 00007f0323381c90 RCX: 0000000000458c29 [ 1325.041561][T21356] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000003 [ 1325.049537][T21356] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.057511][T21356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233826d4 [ 1325.065573][T21356] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000004 [ 1325.081891][T21379] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1325.154587][T21379] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:48 executing program 4 (fault-call:6 fault-nth:58): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xe, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x15099800]}) 14:05:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xc2081, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x80202, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000415000/0x2000)=nil, 0x2000}, 0x1}) 14:05:48 executing program 2: io_setup(0x4, &(0x7f0000000000)) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 1325.264139][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:05:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1325.328016][T21494] FAULT_INJECTION: forcing a failure. [ 1325.328016][T21494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:05:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x17f0f000]}) [ 1325.369938][T21494] CPU: 1 PID: 21494 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1325.379496][T21494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.389688][T21494] Call Trace: [ 1325.393627][T21494] dump_stack+0x172/0x1f0 [ 1325.397991][T21494] should_fail.cold+0xa/0x15 [ 1325.402616][T21494] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1325.408449][T21494] ? ___might_sleep+0x163/0x280 [ 1325.413338][T21494] should_fail_alloc_page+0x50/0x60 [ 1325.418582][T21494] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1325.424005][T21494] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1325.429833][T21494] ? find_held_lock+0x35/0x130 [ 1325.434621][T21494] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1325.441142][T21494] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1325.447407][T21494] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1325.453668][T21494] alloc_pages_vma+0xdd/0x540 [ 1325.458367][T21494] shmem_alloc_page+0xc0/0x180 [ 1325.463244][T21494] ? shmem_swapin+0x1a0/0x1a0 14:05:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000006, 0x31, 0xffffffffffffffff, 0x2000000000000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1325.468283][T21494] ? lock_downgrade+0x880/0x880 [ 1325.473242][T21494] ? __unlock_page_memcg+0x70/0x100 [ 1325.478450][T21494] ? kasan_check_read+0x11/0x20 [ 1325.483311][T21494] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1325.489575][T21494] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1325.495160][T21494] ? shmem_get_link+0x420/0x420 [ 1325.500035][T21494] ? kasan_check_write+0x14/0x20 [ 1325.505019][T21494] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1325.510620][T21494] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1325.516017][T21494] ? do_raw_spin_unlock+0x57/0x270 [ 1325.521156][T21494] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1325.527480][T21494] mfill_zeropage+0x92f/0x1000 [ 1325.532677][T21494] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1325.538367][T21494] ? _parse_integer+0x190/0x190 [ 1325.538388][T21494] ? __lock_acquire+0x548/0x3fb0 [ 1325.538412][T21494] ? userfaultfd_read+0x1940/0x1940 [ 1325.538429][T21494] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1325.538454][T21494] ? tomoyo_init_request_info+0x105/0x1d0 14:05:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1325.565642][T21494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1325.565659][T21494] ? tomoyo_path_number_perm+0x263/0x520 [ 1325.565677][T21494] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1325.565704][T21494] ? __fget+0x35a/0x550 [ 1325.565725][T21494] ? userfaultfd_read+0x1940/0x1940 [ 1325.565744][T21494] do_vfs_ioctl+0xd6e/0x1390 [ 1325.565757][T21494] ? userfaultfd_read+0x1940/0x1940 [ 1325.565769][T21494] ? do_vfs_ioctl+0xd6e/0x1390 [ 1325.565787][T21494] ? ioctl_preallocate+0x210/0x210 [ 1325.565800][T21494] ? __fget+0x381/0x550 [ 1325.565818][T21494] ? ksys_dup3+0x3e0/0x3e0 [ 1325.565839][T21494] ? tomoyo_file_ioctl+0x23/0x30 [ 1325.565853][T21494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1325.565866][T21494] ? security_file_ioctl+0x93/0xc0 [ 1325.565890][T21494] ksys_ioctl+0xab/0xd0 [ 1325.587990][T21494] __x64_sys_ioctl+0x73/0xb0 [ 1325.588011][T21494] do_syscall_64+0x103/0x610 [ 1325.588034][T21494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1325.588046][T21494] RIP: 0033:0x458c29 [ 1325.588062][T21494] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1325.588078][T21494] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1325.613056][T21494] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1325.613065][T21494] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1325.613074][T21494] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:05:49 executing program 4 (fault-call:6 fault-nth:59): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x11, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1ef0f000]}) [ 1325.613083][T21494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1325.613102][T21494] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 [ 1325.735916][T21530] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:49 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x402000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000100)={{0x7, 0x4, 0x1, 0x1f, 0xffffffff, 0x10001}, 0x1000, 0x4, 0x6, 0x1, 0x3, "bfa6c6fefb829677eee322d348b95cc64eedcfa3974eeadbfb37bdea73aa33830d31e8f3aba5bfa1b90202c45ebcfe71b0113e84d6b51457a3174613cbe0a7a02734e96fb233715759375f0e58b069d88aead360439d4f2f333ab6f3d1d6fe1580e6c1e4d43877cb2f88d08a2250124f487863748ce9424531d28c08f9b3aa69"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 14:05:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:49 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2020c0, 0x0) accept$nfc_llcp(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000140)=0x60) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000200)={0xb, {0xe0b6, 0x1, 0x3, 0x3}}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000000)={0x1000, "12dc6694da6a464a1875d9131118808ff923501e57899fab75260634876b1d6f", 0x20, 0xfff, 0xee, 0x6, 0x4}) [ 1325.837338][T21714] FAULT_INJECTION: forcing a failure. [ 1325.837338][T21714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:05:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x1f4, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1325.912517][T21714] CPU: 0 PID: 21714 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1325.921690][T21714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.931851][T21714] Call Trace: [ 1325.935173][T21714] dump_stack+0x172/0x1f0 [ 1325.939531][T21714] should_fail.cold+0xa/0x15 [ 1325.944154][T21714] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1325.949975][T21714] ? ___might_sleep+0x163/0x280 [ 1325.954855][T21714] should_fail_alloc_page+0x50/0x60 [ 1325.960248][T21714] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1325.965638][T21714] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1325.971373][T21714] ? find_held_lock+0x35/0x130 [ 1325.976151][T21714] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1325.981880][T21714] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1325.988153][T21714] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1325.995123][T21714] alloc_pages_vma+0xdd/0x540 [ 1325.999828][T21714] shmem_alloc_page+0xc0/0x180 [ 1326.004617][T21714] ? shmem_swapin+0x1a0/0x1a0 [ 1326.009329][T21714] ? lock_downgrade+0x880/0x880 [ 1326.014221][T21714] ? __unlock_page_memcg+0x70/0x100 [ 1326.014245][T21714] ? kasan_check_read+0x11/0x20 [ 1326.014269][T21714] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1326.024330][T21714] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1326.024357][T21714] ? shmem_get_link+0x420/0x420 [ 1326.024371][T21714] ? kasan_check_write+0x14/0x20 [ 1326.024392][T21714] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1326.024408][T21714] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1326.024423][T21714] ? do_raw_spin_unlock+0x57/0x270 [ 1326.024441][T21714] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1326.024460][T21714] mfill_zeropage+0x92f/0x1000 [ 1326.036257][T21714] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1326.036275][T21714] ? _parse_integer+0x190/0x190 [ 1326.036296][T21714] ? __lock_acquire+0x548/0x3fb0 [ 1326.046173][T21714] ? userfaultfd_read+0x1940/0x1940 [ 1326.046192][T21714] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1326.046209][T21714] ? tomoyo_init_request_info+0x105/0x1d0 [ 1326.046225][T21714] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1326.046239][T21714] ? tomoyo_path_number_perm+0x263/0x520 [ 1326.046257][T21714] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1326.046282][T21714] ? __fget+0x35a/0x550 [ 1326.127022][T21714] ? userfaultfd_read+0x1940/0x1940 [ 1326.132679][T21714] do_vfs_ioctl+0xd6e/0x1390 [ 1326.137294][T21714] ? userfaultfd_read+0x1940/0x1940 [ 1326.142563][T21714] ? do_vfs_ioctl+0xd6e/0x1390 [ 1326.147392][T21714] ? ioctl_preallocate+0x210/0x210 [ 1326.152529][T21714] ? __fget+0x381/0x550 [ 1326.156720][T21714] ? ksys_dup3+0x3e0/0x3e0 [ 1326.161348][T21714] ? tomoyo_file_ioctl+0x23/0x30 [ 1326.166307][T21714] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1326.172569][T21714] ? security_file_ioctl+0x93/0xc0 [ 1326.177786][T21714] ksys_ioctl+0xab/0xd0 [ 1326.181968][T21714] __x64_sys_ioctl+0x73/0xb0 [ 1326.186578][T21714] do_syscall_64+0x103/0x610 [ 1326.191193][T21714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1326.197102][T21714] RIP: 0033:0x458c29 [ 1326.201012][T21714] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1326.220626][T21714] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1326.229233][T21714] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1326.237223][T21714] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1326.245232][T21714] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1326.253216][T21714] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:05:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 14:05:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x25f0f000]}) [ 1326.261225][T21714] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x240, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1326.310709][T21831] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:49 executing program 4 (fault-call:6 fault-nth:60): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x29099800]}) 14:05:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8000, 0x412000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x4000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1326.394303][T21831] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x300, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:49 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x80000, 0x0) [ 1326.530224][T21942] FAULT_INJECTION: forcing a failure. [ 1326.530224][T21942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:05:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x41f0f000]}) [ 1326.602502][T21942] CPU: 1 PID: 21942 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1326.611672][T21942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1326.622305][T21942] Call Trace: [ 1326.625626][T21942] dump_stack+0x172/0x1f0 [ 1326.629974][T21942] should_fail.cold+0xa/0x15 [ 1326.634585][T21942] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1326.640418][T21942] ? ___might_sleep+0x163/0x280 [ 1326.645728][T21942] should_fail_alloc_page+0x50/0x60 14:05:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1326.650942][T21942] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1326.656330][T21942] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1326.662067][T21942] ? find_held_lock+0x35/0x130 [ 1326.667032][T21942] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1326.672761][T21942] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1326.679122][T21942] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1326.685390][T21942] alloc_pages_vma+0xdd/0x540 [ 1326.690107][T21942] shmem_alloc_page+0xc0/0x180 [ 1326.694881][T21942] ? shmem_swapin+0x1a0/0x1a0 14:05:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x48f0f000]}) [ 1326.699602][T21942] ? lock_downgrade+0x880/0x880 [ 1326.699633][T21942] ? __unlock_page_memcg+0x70/0x100 [ 1326.699653][T21942] ? kasan_check_read+0x11/0x20 [ 1326.714664][T21942] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1326.720933][T21942] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1326.726524][T21942] ? shmem_get_link+0x420/0x420 [ 1326.731392][T21942] ? kasan_check_write+0x14/0x20 [ 1326.731418][T21942] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1326.731435][T21942] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1326.731451][T21942] ? do_raw_spin_unlock+0x57/0x270 14:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1326.731474][T21942] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1326.759017][T21942] mfill_zeropage+0x92f/0x1000 [ 1326.763810][T21942] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1326.768934][T21942] ? _parse_integer+0x190/0x190 [ 1326.773797][T21942] ? __lock_acquire+0x548/0x3fb0 [ 1326.778940][T21942] ? userfaultfd_read+0x1940/0x1940 [ 1326.784260][T21942] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1326.791221][T21942] ? tomoyo_init_request_info+0x105/0x1d0 [ 1326.796965][T21942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1326.803227][T21942] ? tomoyo_path_number_perm+0x263/0x520 [ 1326.808912][T21942] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1326.814844][T21942] ? __fget+0x35a/0x550 [ 1326.819021][T21942] ? userfaultfd_read+0x1940/0x1940 [ 1326.819041][T21942] do_vfs_ioctl+0xd6e/0x1390 [ 1326.819056][T21942] ? userfaultfd_read+0x1940/0x1940 [ 1326.819070][T21942] ? do_vfs_ioctl+0xd6e/0x1390 [ 1326.819091][T21942] ? ioctl_preallocate+0x210/0x210 [ 1326.819116][T21942] ? __fget+0x381/0x550 [ 1326.819137][T21942] ? ksys_dup3+0x3e0/0x3e0 [ 1326.852741][T21942] ? tomoyo_file_ioctl+0x23/0x30 [ 1326.857716][T21942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1326.863980][T21942] ? security_file_ioctl+0x93/0xc0 [ 1326.864001][T21942] ksys_ioctl+0xab/0xd0 [ 1326.864021][T21942] __x64_sys_ioctl+0x73/0xb0 [ 1326.864039][T21942] do_syscall_64+0x103/0x610 [ 1326.864060][T21942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1326.864073][T21942] RIP: 0033:0x458c29 14:05:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x3e8, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:50 executing program 4 (fault-call:6 fault-nth:61): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xe7ffffff]}) 14:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1326.864087][T21942] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1326.864106][T21942] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1326.864120][T21942] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1326.864128][T21942] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1326.864136][T21942] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1326.864144][T21942] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1326.864152][T21942] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00003cb000/0x1000)=nil, 0x1000}, 0x1}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 1327.018112][T22154] FAULT_INJECTION: forcing a failure. [ 1327.018112][T22154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:05:50 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x402, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000040)=""/47) 14:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x700, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1327.102177][T22154] CPU: 0 PID: 22154 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1327.111440][T22154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.121535][T22154] Call Trace: [ 1327.124872][T22154] dump_stack+0x172/0x1f0 [ 1327.129225][T22154] should_fail.cold+0xa/0x15 [ 1327.133839][T22154] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1327.140147][T22154] ? ___might_sleep+0x163/0x280 [ 1327.145041][T22154] should_fail_alloc_page+0x50/0x60 14:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) [ 1327.150276][T22154] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1327.155721][T22154] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1327.161484][T22154] ? find_held_lock+0x35/0x130 [ 1327.166292][T22154] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1327.172255][T22154] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1327.178557][T22154] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1327.184838][T22154] alloc_pages_vma+0xdd/0x540 [ 1327.189555][T22154] shmem_alloc_page+0xc0/0x180 [ 1327.194336][T22154] ? shmem_swapin+0x1a0/0x1a0 14:05:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x900, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) [ 1327.199039][T22154] ? lock_downgrade+0x880/0x880 [ 1327.203908][T22154] ? __unlock_page_memcg+0x70/0x100 [ 1327.209319][T22154] ? kasan_check_read+0x11/0x20 [ 1327.214833][T22154] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1327.221156][T22154] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1327.226758][T22154] ? shmem_get_link+0x420/0x420 [ 1327.231660][T22154] ? kasan_check_write+0x14/0x20 [ 1327.236635][T22154] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1327.242035][T22154] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1327.247545][T22154] ? do_raw_spin_unlock+0x57/0x270 [ 1327.252683][T22154] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1327.258944][T22154] mfill_zeropage+0x92f/0x1000 [ 1327.258978][T22154] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1327.258995][T22154] ? _parse_integer+0x190/0x190 [ 1327.259013][T22154] ? __lock_acquire+0x548/0x3fb0 [ 1327.259033][T22154] ? userfaultfd_read+0x1940/0x1940 [ 1327.278690][T22154] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1327.278711][T22154] ? tomoyo_init_request_info+0x105/0x1d0 [ 1327.278728][T22154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) [ 1327.278744][T22154] ? tomoyo_path_number_perm+0x263/0x520 [ 1327.278763][T22154] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1327.278788][T22154] ? __fget+0x35a/0x550 [ 1327.296060][T22154] ? userfaultfd_read+0x1940/0x1940 [ 1327.296084][T22154] do_vfs_ioctl+0xd6e/0x1390 [ 1327.296117][T22154] ? userfaultfd_read+0x1940/0x1940 [ 1327.296140][T22154] ? do_vfs_ioctl+0xd6e/0x1390 [ 1327.318000][T22154] ? ioctl_preallocate+0x210/0x210 [ 1327.318018][T22154] ? __fget+0x381/0x550 [ 1327.318040][T22154] ? ksys_dup3+0x3e0/0x3e0 [ 1327.318066][T22154] ? tomoyo_file_ioctl+0x23/0x30 [ 1327.357145][T22154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1327.363422][T22154] ? security_file_ioctl+0x93/0xc0 [ 1327.368580][T22154] ksys_ioctl+0xab/0xd0 [ 1327.372785][T22154] __x64_sys_ioctl+0x73/0xb0 [ 1327.377406][T22154] do_syscall_64+0x103/0x610 [ 1327.382074][T22154] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1327.388015][T22154] RIP: 0033:0x458c29 14:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) [ 1327.392016][T22154] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1327.411752][T22154] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1327.420190][T22154] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1327.428452][T22154] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1327.436451][T22154] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1327.445341][T22154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1327.453334][T22154] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 [ 1327.475881][T22177] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:50 executing program 4 (fault-call:6 fault-nth:62): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff]}) 14:05:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x86, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = accept(r0, &(0x7f00000003c0)=@nl=@unspec, &(0x7f0000000440)=0x80) bind$rds(r3, &(0x7f0000000480)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000100)) r5 = fcntl$dupfd(r0, 0x406, r0) accept4$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800) 14:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) [ 1327.559457][T22177] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xa00, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:50 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x40000, &(0x7f0000000380)={[{@metacopy_off='metacopy=off'}, {@xino_on='xino=on'}, {@default_permissions='default_permissions'}], [{@fowner_gt={'fowner>', r0}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, 'ntfs\x00'}}, {@obj_type={'obj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fowner_gt={'fowner>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x72, 0x7f, 0x37, 0x77, 0x0, 0x35, 0x35], 0x2d, [0x0, 0x77, 0x77, 0x61], 0x2d, [0x33, 0x32, 0x31, 0x7f], 0x2d, [0x61, 0x65, 0x71, 0x37], 0x2d, [0x62, 0x35, 0x65, 0x77, 0x7d, 0x30, 0x77, 0x61]}}}, {@audit='audit'}]}) 14:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffdfd]}) [ 1327.666987][T22299] FAULT_INJECTION: forcing a failure. [ 1327.666987][T22299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:05:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xe00, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1327.719771][T22337] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) [ 1327.791565][T22299] CPU: 1 PID: 22299 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1327.800929][T22299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.811041][T22299] Call Trace: [ 1327.814451][T22299] dump_stack+0x172/0x1f0 [ 1327.818820][T22299] should_fail.cold+0xa/0x15 [ 1327.823458][T22299] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1327.829413][T22299] ? ___might_sleep+0x163/0x280 [ 1327.834307][T22299] should_fail_alloc_page+0x50/0x60 14:05:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x118, 0x118, 0x0, 0x118, 0x118, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f00000012c0), {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, '\x00', 'teql0\x00', {0xff}, {}, 0xff, 0x3, 0x40}, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x10000, 0x1, 0x2, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x8000, @multicast2, 0x4e20}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x2, 0x20}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x80, 0x280}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x101, 0x3}}}, {{@ip={@broadcast, @empty, 0xffffff00, 0xffffffff, 'rose0\x00', 'ip6gre0\x00', {}, {0xff}, 0xff, 0x2, 0x4c}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={0xf8, 'recent\x00', 0x0, {0x100000000, 0xff, 0x1, 0x0, 'syz1\x00', 0x2}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xffffff00, 'syzkaller0\x00', 'vxcan1\x00', {0xff}, {}, 0x0, 0x2, 0x20}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x660) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 1327.839548][T22299] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1327.839568][T22299] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1327.839587][T22299] ? find_held_lock+0x35/0x130 [ 1327.839611][T22299] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1327.839625][T22299] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1327.839638][T22299] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1327.839659][T22299] alloc_pages_vma+0xdd/0x540 [ 1327.873816][T22299] shmem_alloc_page+0xc0/0x180 [ 1327.873831][T22299] ? shmem_swapin+0x1a0/0x1a0 [ 1327.873861][T22299] ? lock_downgrade+0x880/0x880 [ 1327.873877][T22299] ? __unlock_page_memcg+0x70/0x100 [ 1327.873890][T22299] ? kasan_check_read+0x11/0x20 [ 1327.873903][T22299] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1327.873920][T22299] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1327.873953][T22299] ? shmem_get_link+0x420/0x420 [ 1327.888128][T22299] ? kasan_check_write+0x14/0x20 [ 1327.888153][T22299] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1327.888171][T22299] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1327.888186][T22299] ? do_raw_spin_unlock+0x57/0x270 [ 1327.888210][T22299] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1327.898497][T22299] mfill_zeropage+0x92f/0x1000 [ 1327.898530][T22299] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1327.898546][T22299] ? _parse_integer+0x190/0x190 [ 1327.898563][T22299] ? __lock_acquire+0x548/0x3fb0 [ 1327.898590][T22299] ? userfaultfd_read+0x1940/0x1940 [ 1327.971928][T22299] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1327.978190][T22299] ? tomoyo_init_request_info+0x105/0x1d0 [ 1327.983925][T22299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1327.990173][T22299] ? tomoyo_path_number_perm+0x263/0x520 [ 1327.995826][T22299] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1328.001669][T22299] ? __fget+0x35a/0x550 [ 1328.005843][T22299] ? userfaultfd_read+0x1940/0x1940 [ 1328.011200][T22299] do_vfs_ioctl+0xd6e/0x1390 [ 1328.015803][T22299] ? userfaultfd_read+0x1940/0x1940 [ 1328.021011][T22299] ? do_vfs_ioctl+0xd6e/0x1390 [ 1328.025788][T22299] ? ioctl_preallocate+0x210/0x210 [ 1328.030916][T22299] ? __fget+0x381/0x550 [ 1328.035090][T22299] ? ksys_dup3+0x3e0/0x3e0 [ 1328.039533][T22299] ? tomoyo_file_ioctl+0x23/0x30 [ 1328.044484][T22299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1328.050732][T22299] ? security_file_ioctl+0x93/0xc0 [ 1328.055854][T22299] ksys_ioctl+0xab/0xd0 [ 1328.060026][T22299] __x64_sys_ioctl+0x73/0xb0 [ 1328.064633][T22299] do_syscall_64+0x103/0x610 [ 1328.069255][T22299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1328.075161][T22299] RIP: 0033:0x458c29 14:05:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x1100, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1328.079066][T22299] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1328.098695][T22299] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.107138][T22299] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1328.115134][T22299] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1328.123237][T22299] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1328.131244][T22299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffe7]}) [ 1328.139263][T22299] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 [ 1328.163988][T22513] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:51 executing program 4 (fault-call:6 fault-nth:63): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xe, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x402200, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 14:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x9980000000000]}) 14:05:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x3f00, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1328.245956][T22513] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xf9980000000000]}) [ 1328.336796][ C1] net_ratelimit: 2 callbacks suppressed [ 1328.336808][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:05:51 executing program 2: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x2, 0x16a, 0xffffffffffffffff, 0x10, 0x0) 14:05:51 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x4002, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1328.429725][T22553] FAULT_INJECTION: forcing a failure. [ 1328.429725][T22553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1328.492977][T22553] CPU: 0 PID: 22553 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1328.502141][T22553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.512214][T22553] Call Trace: [ 1328.515535][T22553] dump_stack+0x172/0x1f0 [ 1328.519901][T22553] should_fail.cold+0xa/0x15 [ 1328.524503][T22553] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1328.530318][T22553] ? ___might_sleep+0x163/0x280 [ 1328.535188][T22553] should_fail_alloc_page+0x50/0x60 [ 1328.540399][T22553] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1328.545805][T22553] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1328.551535][T22553] ? find_held_lock+0x35/0x130 [ 1328.556321][T22553] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1328.562088][T22553] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1328.568422][T22553] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1328.574717][T22553] alloc_pages_vma+0xdd/0x540 [ 1328.579443][T22553] shmem_alloc_page+0xc0/0x180 [ 1328.584576][T22553] ? shmem_swapin+0x1a0/0x1a0 [ 1328.589292][T22553] ? lock_downgrade+0x880/0x880 [ 1328.594200][T22553] ? __unlock_page_memcg+0x70/0x100 [ 1328.599426][T22553] ? kasan_check_read+0x11/0x20 [ 1328.604348][T22553] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1328.610666][T22553] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1328.616255][T22553] ? shmem_get_link+0x420/0x420 [ 1328.621260][T22553] ? kasan_check_write+0x14/0x20 [ 1328.626246][T22553] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1328.631667][T22553] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1328.637114][T22553] ? do_raw_spin_unlock+0x57/0x270 [ 1328.642439][T22553] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1328.648743][T22553] mfill_zeropage+0x92f/0x1000 [ 1328.653545][T22553] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1328.658730][T22553] ? _parse_integer+0x190/0x190 [ 1328.663669][T22553] ? __lock_acquire+0x548/0x3fb0 [ 1328.669024][T22553] ? userfaultfd_read+0x1940/0x1940 [ 1328.674255][T22553] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1328.680534][T22553] ? tomoyo_init_request_info+0x105/0x1d0 [ 1328.686288][T22553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000000000000]}) 14:05:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x7fdc, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100980000000000]}) [ 1328.692639][T22553] ? tomoyo_path_number_perm+0x263/0x520 [ 1328.692658][T22553] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1328.692686][T22553] ? __fget+0x35a/0x550 [ 1328.692708][T22553] ? userfaultfd_read+0x1940/0x1940 [ 1328.692727][T22553] do_vfs_ioctl+0xd6e/0x1390 [ 1328.692748][T22553] ? userfaultfd_read+0x1940/0x1940 [ 1328.704236][T22553] ? do_vfs_ioctl+0xd6e/0x1390 [ 1328.704262][T22553] ? ioctl_preallocate+0x210/0x210 [ 1328.704281][T22553] ? __fget+0x381/0x550 [ 1328.704305][T22553] ? ksys_dup3+0x3e0/0x3e0 [ 1328.704334][T22553] ? tomoyo_file_ioctl+0x23/0x30 [ 1328.704350][T22553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1328.704372][T22553] ? security_file_ioctl+0x93/0xc0 [ 1328.713939][T22553] ksys_ioctl+0xab/0xd0 [ 1328.713959][T22553] __x64_sys_ioctl+0x73/0xb0 [ 1328.713976][T22553] do_syscall_64+0x103/0x610 [ 1328.713998][T22553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1328.714017][T22553] RIP: 0033:0x458c29 14:05:52 executing program 4 (fault-call:6 fault-nth:64): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xdc7f, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x6, 0x4) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1328.723925][T22553] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1328.723935][T22553] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.723950][T22553] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1328.723959][T22553] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1328.723967][T22553] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1328.723975][T22553] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:05:52 executing program 2: 14:05:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x109980000000000]}) [ 1328.723984][T22553] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:05:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1f9980000000000]}) [ 1328.919529][T22755] FAULT_INJECTION: forcing a failure. [ 1328.919529][T22755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:05:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xe803, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1329.004487][T22755] CPU: 1 PID: 22755 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1329.013734][T22755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.023798][T22755] Call Trace: [ 1329.027115][T22755] dump_stack+0x172/0x1f0 [ 1329.031475][T22755] should_fail.cold+0xa/0x15 [ 1329.036091][T22755] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1329.041919][T22755] ? ___might_sleep+0x163/0x280 [ 1329.046789][T22755] should_fail_alloc_page+0x50/0x60 [ 1329.052000][T22755] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1329.057383][T22755] ? free_unref_page_list+0x86f/0xc40 [ 1329.062762][T22755] ? release_pages+0x60f/0x1d20 [ 1329.068492][T22755] ? free_unref_page_list+0x86f/0xc40 [ 1329.073876][T22755] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1329.079645][T22755] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1329.085904][T22755] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1329.092157][T22755] alloc_pages_vma+0xdd/0x540 [ 1329.096845][T22755] shmem_alloc_page+0xc0/0x180 [ 1329.101634][T22755] ? shmem_swapin+0x1a0/0x1a0 [ 1329.106513][T22755] ? lock_downgrade+0x880/0x880 [ 1329.111376][T22755] ? __unlock_page_memcg+0x70/0x100 [ 1329.116577][T22755] ? kasan_check_read+0x11/0x20 [ 1329.121441][T22755] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1329.127694][T22755] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1329.133345][T22755] ? shmem_get_link+0x420/0x420 [ 1329.138200][T22755] ? kasan_check_write+0x14/0x20 [ 1329.143150][T22755] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1329.148530][T22755] ? shmem_mcopy_atomic_pte+0x60/0x60 14:05:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x2, &(0x7f0000000040)) [ 1329.154020][T22755] ? do_raw_spin_unlock+0x57/0x270 [ 1329.159144][T22755] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1329.165399][T22755] mfill_zeropage+0x92f/0x1000 [ 1329.170195][T22755] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1329.175328][T22755] ? _parse_integer+0x190/0x190 [ 1329.180200][T22755] ? __lock_acquire+0x548/0x3fb0 [ 1329.185160][T22755] ? userfaultfd_read+0x1940/0x1940 [ 1329.190375][T22755] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1329.196640][T22755] ? tomoyo_init_request_info+0x105/0x1d0 14:05:52 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200100) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) [ 1329.202382][T22755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.208642][T22755] ? tomoyo_path_number_perm+0x263/0x520 [ 1329.214289][T22755] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1329.220154][T22755] ? __fget+0x35a/0x550 [ 1329.224326][T22755] ? userfaultfd_read+0x1940/0x1940 [ 1329.224348][T22755] do_vfs_ioctl+0xd6e/0x1390 [ 1329.224368][T22755] ? userfaultfd_read+0x1940/0x1940 [ 1329.239353][T22755] ? do_vfs_ioctl+0xd6e/0x1390 [ 1329.244156][T22755] ? ioctl_preallocate+0x210/0x210 [ 1329.249323][T22755] ? __fget+0x381/0x550 14:05:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x200000000000000]}) [ 1329.253596][T22755] ? ksys_dup3+0x3e0/0x3e0 [ 1329.258051][T22755] ? tomoyo_file_ioctl+0x23/0x30 [ 1329.263023][T22755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.269280][T22755] ? security_file_ioctl+0x93/0xc0 [ 1329.274416][T22755] ksys_ioctl+0xab/0xd0 [ 1329.278610][T22755] __x64_sys_ioctl+0x73/0xb0 [ 1329.283241][T22755] do_syscall_64+0x103/0x610 [ 1329.283266][T22755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1329.283278][T22755] RIP: 0033:0x458c29 [ 1329.283294][T22755] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1329.283303][T22755] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1329.283316][T22755] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1329.283324][T22755] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1329.283332][T22755] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:05:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1329.283340][T22755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1329.283348][T22755] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 [ 1329.392839][T22853] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:52 executing program 4 (fault-call:6 fault-nth:65): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xf401, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x209980000000000]}) [ 1329.491319][T22853] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x308, 0x44000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x4, @rand_addr="1c00355b78d3cc2ca78f1fbc6627cbbe", 0x7}}, 0x0, 0x6, 0x0, "6fe22277ef87958ad1739f4951c384dc5d409813ddabaabcd0d881c43dcbe6085c705179fcfe08081d2d8b8f3c799902b0bc3b910cbc7fa994d091424e15fb1d3f62d54ce44e1ef180296f185dd70efa"}, 0xd8) 14:05:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x3, &(0x7f0000000040)) 14:05:52 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mlockall(0x4) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ff0000/0xd000)=nil, 0xd000}, &(0x7f0000000200)=0x10) truncate(&(0x7f0000000140)='./file0\x00', 0xffffffffffff0d54) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x101000) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) 14:05:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xff00, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1329.634163][T23084] FAULT_INJECTION: forcing a failure. [ 1329.634163][T23084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1329.683430][T23084] CPU: 1 PID: 23084 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1329.692620][T23084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.703578][T23084] Call Trace: [ 1329.706920][T23084] dump_stack+0x172/0x1f0 [ 1329.711289][T23084] should_fail.cold+0xa/0x15 [ 1329.715905][T23084] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1329.721927][T23084] ? ___might_sleep+0x163/0x280 [ 1329.726797][T23084] should_fail_alloc_page+0x50/0x60 14:05:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x142800, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1329.732010][T23084] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1329.737405][T23084] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1329.743150][T23084] ? find_held_lock+0x35/0x130 [ 1329.747927][T23084] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1329.753652][T23084] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1329.759905][T23084] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1329.766166][T23084] alloc_pages_vma+0xdd/0x540 [ 1329.770862][T23084] shmem_alloc_page+0xc0/0x180 [ 1329.775652][T23084] ? shmem_swapin+0x1a0/0x1a0 [ 1329.780362][T23084] ? lock_downgrade+0x880/0x880 [ 1329.785263][T23084] ? __unlock_page_memcg+0x70/0x100 [ 1329.790470][T23084] ? kasan_check_read+0x11/0x20 [ 1329.795346][T23084] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1329.795370][T23084] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1329.795407][T23084] ? shmem_get_link+0x420/0x420 [ 1329.795420][T23084] ? kasan_check_write+0x14/0x20 [ 1329.795446][T23084] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1329.795461][T23084] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1329.795480][T23084] ? do_raw_spin_unlock+0x57/0x270 14:05:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x4, &(0x7f0000000040)) 14:05:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2f0f00000000000]}) [ 1329.795497][T23084] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1329.795525][T23084] mfill_zeropage+0x92f/0x1000 [ 1329.812178][T23084] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1329.812197][T23084] ? _parse_integer+0x190/0x190 [ 1329.812222][T23084] ? __lock_acquire+0x548/0x3fb0 [ 1329.858923][T23084] ? userfaultfd_read+0x1940/0x1940 [ 1329.864149][T23084] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1329.870404][T23084] ? tomoyo_init_request_info+0x105/0x1d0 [ 1329.876159][T23084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.882411][T23084] ? tomoyo_path_number_perm+0x263/0x520 [ 1329.888059][T23084] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1329.893900][T23084] ? __fget+0x35a/0x550 [ 1329.898071][T23084] ? userfaultfd_read+0x1940/0x1940 [ 1329.903307][T23084] do_vfs_ioctl+0xd6e/0x1390 [ 1329.907936][T23084] ? userfaultfd_read+0x1940/0x1940 [ 1329.913156][T23084] ? do_vfs_ioctl+0xd6e/0x1390 [ 1329.917942][T23084] ? ioctl_preallocate+0x210/0x210 [ 1329.923064][T23084] ? __fget+0x381/0x550 [ 1329.927249][T23084] ? ksys_dup3+0x3e0/0x3e0 [ 1329.931688][T23084] ? tomoyo_file_ioctl+0x23/0x30 [ 1329.936642][T23084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.942892][T23084] ? security_file_ioctl+0x93/0xc0 [ 1329.948014][T23084] ksys_ioctl+0xab/0xd0 [ 1329.952187][T23084] __x64_sys_ioctl+0x73/0xb0 [ 1329.956797][T23084] do_syscall_64+0x103/0x610 [ 1329.961414][T23084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1329.967312][T23084] RIP: 0033:0x458c29 14:05:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x121000, 0x0) write$P9_RWALK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1600fcffff000000000400000000000000"], 0x16) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0x4aac, 0x201, 0x80000001, 0x9, 0x0}, &(0x7f0000000180)=0x10) read(r0, &(0x7f00000000c0)=""/64, 0x40) mmap(&(0x7f00000cd000/0x1000)=nil, 0x1000, 0x2000000, 0x16050, r2, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0xc37, 0x6, 0x100, 0xffffffff, 0xa9}, 0x14) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x2}) [ 1329.971212][T23084] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1329.990925][T23084] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1329.999620][T23084] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1330.007620][T23084] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1330.015867][T23084] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1330.023847][T23084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1330.032118][T23084] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 [ 1330.054561][T23199] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2f9980000000000]}) 14:05:53 executing program 4 (fault-call:6 fault-nth:66): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x281400, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1330.144895][T23199] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x5, &(0x7f0000000040)) 14:05:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x1000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:53 executing program 2: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x85010, r0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x8, 0x7, 0x6) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 14:05:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x309980000000000]}) [ 1330.301659][T23442] FAULT_INJECTION: forcing a failure. [ 1330.301659][T23442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:05:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x48, "c85d27946e1a67fcaa28a1d6b50017711e5abaac5360ea9d3e8afb75f5baf5e99c5bd3efcc954e625665605c9b8fa964c6ffd677a25e658dbeb80e051ff1ecc610d74558b6a1039b"}, &(0x7f0000000100)=0x6c) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1330.372574][T23442] CPU: 1 PID: 23442 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1330.382179][T23442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.392241][T23442] Call Trace: [ 1330.395555][T23442] dump_stack+0x172/0x1f0 [ 1330.399913][T23442] should_fail.cold+0xa/0x15 [ 1330.404532][T23442] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1330.410364][T23442] ? ___might_sleep+0x163/0x280 [ 1330.415322][T23442] should_fail_alloc_page+0x50/0x60 [ 1330.415341][T23442] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1330.415363][T23442] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1330.415383][T23442] ? find_held_lock+0x35/0x130 [ 1330.415400][T23442] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1330.415414][T23442] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1330.415427][T23442] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1330.415445][T23442] alloc_pages_vma+0xdd/0x540 [ 1330.415466][T23442] shmem_alloc_page+0xc0/0x180 [ 1330.426033][T23442] ? shmem_swapin+0x1a0/0x1a0 [ 1330.426070][T23442] ? lock_downgrade+0x880/0x880 [ 1330.426087][T23442] ? __unlock_page_memcg+0x70/0x100 [ 1330.426123][T23442] ? kasan_check_read+0x11/0x20 [ 1330.443638][T23569] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1330.448524][T23442] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1330.448548][T23442] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1330.448573][T23442] ? shmem_get_link+0x420/0x420 [ 1330.479042][T23442] ? kasan_check_write+0x14/0x20 [ 1330.479069][T23442] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1330.479086][T23442] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1330.479113][T23442] ? do_raw_spin_unlock+0x57/0x270 [ 1330.479134][T23442] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1330.479154][T23442] mfill_zeropage+0x92f/0x1000 [ 1330.479182][T23442] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1330.492889][T23442] ? _parse_integer+0x190/0x190 [ 1330.492909][T23442] ? __lock_acquire+0x548/0x3fb0 [ 1330.492933][T23442] ? userfaultfd_read+0x1940/0x1940 [ 1330.492951][T23442] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1330.492968][T23442] ? tomoyo_init_request_info+0x105/0x1d0 [ 1330.492986][T23442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1330.493001][T23442] ? tomoyo_path_number_perm+0x263/0x520 [ 1330.493018][T23442] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1330.493044][T23442] ? __fget+0x35a/0x550 [ 1330.493063][T23442] ? userfaultfd_read+0x1940/0x1940 [ 1330.493080][T23442] do_vfs_ioctl+0xd6e/0x1390 [ 1330.493104][T23442] ? userfaultfd_read+0x1940/0x1940 [ 1330.493118][T23442] ? do_vfs_ioctl+0xd6e/0x1390 [ 1330.493138][T23442] ? ioctl_preallocate+0x210/0x210 14:05:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x20, 0x7f, 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001340)='net/udplite\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000001280)='cpuacct.usage_pe\x03\x00\x00\x00_user\x00\xec\xfa\x05\x88\xb1\xf2kx\x9b\x95U\xc9q\xf2W1\x11\xc6\x1e\xca\xac\x89\xfc{]P*\x92\\\x9c\xdba\xaa\xe7\xe6\xb9\x13\x14\xcf\xceN\x06\x8a\xe5r\xb9\x8e\xbf\x87T*OX\xb0r\xfe\xdc0\\F\xe0\xecc\x93\x9b#\xea(\x9a\xe7\x06\xf9=\xcd\xb6S\x02U&\xa9L\xd2N}\bRr\xfa@A\x12\xba\xc5\x98V\xad(\xd9\xae\xa5\xcat\xed\xb7\xdcb+', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000100)=""/142, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=""/172, 0xf000}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) userfaultfd(0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7f, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001380)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000b05000/0x2000)=nil, 0x2000}, 0x200000000000001}) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000014c0)={{&(0x7f00000013c0)=""/136, 0x88}, &(0x7f0000001480), 0x9}, 0x20) [ 1330.621189][T23442] ? __fget+0x381/0x550 [ 1330.625430][T23442] ? ksys_dup3+0x3e0/0x3e0 [ 1330.629937][T23442] ? tomoyo_file_ioctl+0x23/0x30 [ 1330.634937][T23442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1330.641253][T23442] ? security_file_ioctl+0x93/0xc0 [ 1330.646414][T23442] ksys_ioctl+0xab/0xd0 [ 1330.650639][T23442] __x64_sys_ioctl+0x73/0xb0 [ 1330.655262][T23442] do_syscall_64+0x103/0x610 [ 1330.659881][T23442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1330.665782][T23442] RIP: 0033:0x458c29 [ 1330.669684][T23442] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1330.689483][T23442] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1330.697930][T23442] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1330.705918][T23442] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1330.713930][T23442] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1330.721920][T23442] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1330.729913][T23442] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x2000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3f9980000000000]}) 14:05:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x6, &(0x7f0000000040)) 14:05:54 executing program 4 (fault-call:6 fault-nth:67): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:54 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xffffffffffffffff, 0xc0000) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000240)={0x40000001, 0x3, 0x2a}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x204000, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x848101, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) mkdirat(r2, &(0x7f0000000080)='./file0/file0\x00', 0x21) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)={0x3e, 0x3, 0x0, {0x5, 0x1d, 0x0, 'md5sumvmnet0eth1loppp0proc-#]'}}, 0x3e) 14:05:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4f9980000000000]}) 14:05:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x3000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_generic(r0, &(0x7f0000001740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f0000000240)={0x14bc, 0x1c, 0xa04, 0x70bd27, 0x25dfdbfb, {0x10}, [@typed={0x3c, 0x17, @binary="58e8e91dbff30fb9986ec083acea23015b71b9cc67af75ef78ce8fbc4c49b87f9ea34b1a875248845c8788e89ec2b7c2a3fb40218272"}, @typed={0x8, 0x2a, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}, @generic="c4ecc1ae3955c2bbba5a332b5604fd990f70330bfc58b3a486c9fe0ebfb3efeaffa8499fde6a61e083b2fbb2c6dbbf16411db7f5de3be6b7bc4883a7848fbc7ab0a83427e2c9e66b5062f7186845fc683ea32637063844346bd5a40a039e5da2f14b4917fc52485fea3b8205461966afbad51fa69d92b1568f6ff30e5204906465bdf05449e5e0cf47dd7a6c890617623f308d231a084ac93ce3c3e371c6f2af0069aa98e9853befacf6a7e63794dd2b9df4ca0532d4ce225530e4afa5d604e97a48", @typed={0x8, 0x26, @fd=r0}, @nested={0xb4, 0x89, [@typed={0x8, 0x86, @pid=r1}, @generic="277db35feef4bad3e401232e5b2010e475cf403e81cd5426f9ec3bbab302d303796a6da92fa914947f8c6d1a9674dec2068658e3efd873d215c4ed12fb838f9e40aedbba48445a53dc2ddca423a83307ae44c475adb26e936600", @generic="74d10e17f87ef682a6f0c821edf35b9fc8c5b8e5a3e3fab1eff53f954d6c3412bd84da6210514332", @typed={0x8, 0xa, @fd=r0}, @typed={0x8, 0x1e, @fd=r0}, @typed={0x14, 0x6c, @ipv6=@loopback}]}, @generic="d01f1b5dff7d4d96b77a04b53a30bb8fa51b40c34448a48b56036f8893236e899a42a729056959369ae17896d07a74c492f0db996f66a23014d0725ee39743f532c1cd08ee539375dbc21f6d2112028d73ae4e73d9f0085960def78476d01b397292155c8cbc641f3697c5f972997d64cbc7ec40f3855e33d7ce2351d045a92d5771139cebf1c36c7926429e6a974169af6e76072daa2ab6fc485bbe672f1f5f", @nested={0x103c, 0x13, [@generic="cfcc42f29ee59f481fe95589216f6a98ec15b24a745532a9ac5ea581c39140bb6e689e0176afae16f9fbf10fe9a17c092122003bed0110badbbb929915ff3b42db456372cf7966f44df8b4379021ad9dcba5033331e54c543356bf8626c1368d9d74fde07f863b707e5417e592921fb9a8db7136f4d4d98715674e4c43e8f8f5bad1ab1fc0d1fa2ce2ac0bb0739d499c4db677170775e87f4a8c7eb8a6c179362f4f37e128d50108aa825bdc9a8d3e024ffb442c0ad73cea3137bc61ce4b10de602f0eb9a075623f0b0473f3f9fd6135b9c478cb5132ed1d1d24a32a3537c1496cb36f59168a5e90727e13db39b38b3500b577ed3cd1dac2457227b8a52137d02b3a1fc61a4e00613bf9f628daf2e554d1a3b14415cd40bf58045f24ca5ff037ec130f9e862f09347dafd70fee6dc1eacf02e72a6f914523f4bc027768cd90557df438c52900fd944a7afc4174d0487f9d2e21914e749c0f2854a7f8fc06ce600b5f0c04f2790ec025416eb8041d43dc7d6596ead3da2603353739bbc88d440faee870bfa328e7970bf0ca5f9e861af4b94e36c2a6316cf82e53616d47cf4b38aaa2ac76ac9e61bc974d23827483b5b90c2d05d7b148f15f0728cff1931491f33c7fb7d4d22618002e7adb47b7d2bb9872849d9754e21c8b45745daa8dda75f80533383d5e410d868d84c7d33e05aa202c04f7658cd758667fc51188b7fcd2f95613b80461ea1f4e9b357a81198318bb46fb555838ad635ceef85e165e71b7dfc66a20150fddb981b3de6292fc9983420831bc3df6f842a6206e73438915b05f55674451d9dd074c509ee6b874b1294ebcac13974396b09c63f5a19038d4e7184cdf20c076eebcbcf87ddec867669eba76bea980592423ba1fcbc3324945d8b1441b670d9a82f120ff2747235c45966531af245ec1b3e3c3539e89df5fdac8f6391dc1063c0d25b9f0e28bf28ef46c17deadd6de5bf9f3941356d34a43aa10522e0a0d845eedb870b31e0e6284b3cd3aceaeb6aba8acad2e677dc71f30b0c8766a1ea35e694e0fff375124d148d777c3ae7c4b3fb246c158120b3d6e94b83cda6f64e51f3b8ee003e8daa2ab15f5fe22f59b40c2dc9ed55185589749cc296279ea55b5f6ce9aed6f6061ec5813c0a671a43f367248fcfad7a6570898cabee2f0f5778bd2c85588b424334aacf6154bb015cc548023b49f4cbf78578bd9ab815489dc732ee544f7ec965a1d7b821e28b8bbfe24368db7ad15c057a1a828589e8bce865d30af6358a06af6dab29f0a30a8b42c46d69ee0a5e6dc019faff0ec9a135a6a754d5ebe482e3d4fdffeafa75966245aae107ad81c4d0e98db87f95c557876eab1c8586aba18d6810ed76786878eb7c4f5e15f85f0eea7edd9d7efc8c27c223f6d59d48f43b91e32dc65a54ba482c4a0e04a90d5463d5399be6ca1940f21665af2f8de130358a5368db1f14a714807743b97682dede72bb8cb36c0a7e83aa2ac6f12e9f49e04cc61a04f1c87c2d4fd87ed0ad9ea2632e4be0b7a3289b8aca4dc7c94b35583875b6d2a479e74de0ff4ecdc17aa20bb077a36bc01a8c90fa2c4cdd0b56b42033b823af9700ff266c850de34acdc49a1e6e4f4717cec3afdef23db143313473961f323e99e42ab9aa6bc8bc35328f109780fdd3964c84f69850ff87e1fb4a62cf685c2ba13601a3b57c06e02b9e40f5aac23dedf18d397bfa645451b25fe379515cbed6042ee9717cc37206a0bec7b24d9e499b3581d4038cca91ed1906451a5ef15ee10361c862ef42c479d2f0db8529657a7113b3f6e41de9f85a71c58b68e3720de8c4c610eabedce3c394ef1d1a816af7880d15c029c9f5315f99a84219da0063a1a50e98de2b7e9585818be972206819380d0ffe5fd2cf3a1e65659e9ea5e8309905351aa4d6729f01c2fdb75ae969298dbbfffda4e4d73da0c18a58a23a4e21de2d2f7a6ec043d048fad53409488931983c599716c501d05d50347c9b80247d04c843d93aca12f5a4d5c300e1ee0b8fcbbb45c249b901e485e8ca8b1a62eac5989307913007e516479a2d453f2ec6fdc4e94bee26ec433349ce8fddbfbf106415a6236fc507aa4697ba8ddac4d556d6d95889b8c22e65294501a6e441c8fd0bf4c53624de9edf9eff570700a3782f1b49e0123b79a885ea294fced55e690e637a6c1e399d465394e9521f575039dcffb6585a9b68722d8800491b8acea7e97be50e757e490546448f7581f750f448de0110919ac0a05f657b22da7025041385ef8261ca467c2cdd3ec762ba0263df8427531e761ccb3c21be8fb43dece53cc204acd09712356c2af71744593724f5cad53a379dfe18eb1ac1779a1f24460ea3368a04d5c466ad80b10afee6dfc9cc1534a7f0ef540517eacef01b2b4957a4ee34459283a348f7dfb6008ac64b92164685b32fa89b5c54b221ae4e5d78f7526684c5d8725aabfa368e079319ec2e0e577bd479d34ec7356b89d8ef0160d4078570bd8333633df7116e7790c78bd2b6c0a2314a3ccd2f8e5780fa9169d01bc45acc8fe1c5e0e5bf7605b780b4801096fc6507958a23f1aab547394598b8acf8a303e541cc082be42428bf10cdd85ce184b166e2790b13a7336d95caac56525339e172e9047a1364c9486bfe5fa99a8e84a9a37945d82064874f0442cbad7471b848fd640934e9aeffb6adacdecf57dcc4cf1a7cfa510766cbc4af696e233798976fe3d305c97cae70ac4d610c4f8c6f36b0468854b89390cbf616998d8cb80a651a79c2a5b5d69419bdcca77604a28132aa243337788a76a8a130693cf089b3e473b52d8e68df2cadbcf6e247960228eaa2ee6cff476c8c5796b2742eaa10ab132fcfadb49d61bcda414ce9d0ff7c63d340b68fccfc65228cfa2902bb2a66a85f63a9d27a44a245d5f1ae4fd09897098934186e18a23428f944959540639084ac9298775a91de48426fd5040a6e0f73c20b9d9e13fa6d552935dfa36296c558d649e79bb117daa2968a64966e14756dad1a03ae62ad000d8e0907415cb8b7fe08f0b7ed169c3bb54de96e6b93058a7438109388dc7b6261bf48c2386b76a8d3c1d33498c60fa75bf6415696ba527c1599b8017ea3b618d2199376cd861053025ec91200ced0d560df9358d09bf15c3c21b838ffdf60e1f85299620a945b416495ef7abb556ce4b57dcff5899051e654991eab532ba753f9fe155716069da4b56f74a7c42155f4fd4d52859953f87625efbb20bf01b9a55c7bda6c782338945a9818d33a3315f444d89d84ef5e4d30bd3e0283526dd6996467843ffbb8c7eafd8e4f1c8ac8c4ac6ab6f0d7af816e71f800810c7bb611c749d22b5ed674ee7594e48f8ed0f141f18eb3a0d6972f354d960b17841458e0a63223911bce6679d8c03a3d0bc99f585c76134599bbc17d4fa463109642010836e0fc872ef7144ffe2d881d526f91085f869a7e599000b8682d8528b5bd93d9a6dab98c1bf2fd0cb5a5f70ca105e8b72ad21a7591c67710aee7ac024267e8ef356cbfe3d6148e106314851f1c3234c91fe1aef03640c9ec380633a05c751c6cc3b07a1d2953acd7ea8db47cf1b11c9845c4963b866365930cdb65b5fd0c7cc4f6b0e353ec03260bf2db40698dd664d85dcf0a4871d27cc5b9d6f4cc5c1ab2cd9c9ce618f6b1efe7f12530e32011bb4d0337116e668791caf0c5907cac0bc22550f3f16975064992098527d03eb11917dea19b2f052fc5e14248d59b0f5bcd66747e78eca381b195ed9cf9a4ea0e590b267c23d1e0ec56fd73620442ab147bc37155baa8daea2f61f1fc470b87e0d3ef507940c18b396523c3c03915bb6669fe5d78cc6a11cc26d6113e677cc466d56e8c4d551e127a07627a62c00abb03b2f8b4a8eb11c6ee8f2f1eb7d863ef58f4149483461e5f792a08949b351897f8ad973acf3a712891b762cff9d978492284b3b8c9f1c0b3d3b628ed8435c5fb9567257a6f581d090c73c8955ba477c6bbdd5235c6443c3477f47248148379595d3756d0a0587c43163dbe3a5fb67f77a17797730a5cdb929703c63c9a43dc365bb90f36f15c68847d153670504a3830dd61c7129e467702c8fecfb7f930588f407ace645a7bf79728586a3bea61a8d53261b1ab5d1bfdcc01cef2531baf7cf747d4f26f9df053dda9a441eb01a110cd63e9182e385682485c58915a027d53773e02ab392294afa80017eab8a84fb7e6acb85b7d111992f14101746c1c45fb911d577ba0afee70ec88f3d032a49fdbc44a5c1f6ec7ee84dd885bced381c87ea5f0612af5910a751573c928361cb8978828f10d2dc53d9401395a1f9045229f35dcfc2b8e62460db3a0e06bdee490d6dbd44c920794e4f9e3702d22a0415de6dfafab12bee5ba2a50c2986796dd33afbb9e1657488fa09ebd0cf265c46df012e4940e4b47fd27862f4f7efe43e107359d52f40ed3dd3cd2cbea001211d6163744ad925877f5e2328a28d4e19af852be2ef428c88d7e92fdda03fe124130a6bdc387fffe5e816612bfabe9c027840edf8eb284d829810c66db6f6495178b8e5d2c9f893a0c2fa1cb9891ee621681d2ac148055e15cc451a9cf7df16a339e435f13a4133cd9f5fdcd24b2d6ef1155c13ff9fa188de7c481cf6d4376774236e73af0300ddd652960c96efcfa5dbb1a8d505f89dfb1a4466295ae8a978ce86f32640de2275e75fa3f5f50380f7b5e07c1e7060b4b7868e3806887cb135adeaeef4bda8edd013ae2b6abd862af4bea88a53d4fc3b43f95f50409a38acb2d02cbe5db986935412672f0d930747fb26f9dd639356947b70549bddb69d5686c8289b6f2db04786e6e2bfa35ef4fa2a57db65ddcf311ffd82ecc3226aa8eab2d061e71bc1b664af968e5fad60407c22861f7a02e5f3b2f7308ab6d08a9c372165a6b50352b47c1cbd985f980d3f095d4f551c3bf3a8e56abc842a6a4948751a65b56ea51fc8f5eca3bc8bbe8d227e83d44954728817565be89e5f3c9cee3b539fab0d2c877ceec881be8285f6901956188f347b4aed9483c05bbabb915b78e5450387e048e622508e448e61aa5b675503528271910b63da47f9f8d309051ac6b97a3f353045d76ec2857647ce18bab460f6e7ab396369e3bc929678434342172ddb2f75b2da0feb9d0a07a297d6ca30139bb537df499665316541702028a840007823d0c162194d6295b57718c4a414741236082d727967ff35315dda61c7252e6cbad3d8c9e34bebde8f692e942e631fa39ce2d4a21cd83790974a7d3067d8696620a94b25d86776020219c4818c1c6076190fd981f4695a90658b57ae412b7bb1b89086cdce6dea1ba8520dd6968fc9eae0509461547dc48dec695fcc03a296dfb430ab08173b44feff8a365a8b3dcbdf980618b0ca71609184ef3bedda6aced075064542803445ba787344af41994d622e48294e45371dd35e2a5889710a8ee88773acd23f317aa6d5ca1f37730bdc168d3ed5d1cdb5eb0aa16c1c06802ed7ce6a97ae39404036539e2c6712e81ec9d6b0356e50d62a2f0333618a414f98b707c2f51502bf7dc4d55b3673a0205e207c969330761aa0dc9b9c3df3c9fa52fe6307f4b01b428c162b9fefe3045585ceb9c08ed0130ddcab3c1e29a1db46ff8fde00566867f72e40679d2a52c52c8dd147c9b4ffdfa149bb12e0b8b71b085444fbe647bf2008db4c1934c38052d89807e18f87c2a6ca515aad3d13faf88966f0b105a207f910eb0b233a4ca9dbef8ac111e199235d0048c6fbcf8a276d7cf1e381e3ebbb94cd8709bf", @generic="454b2abfeb0c68af2bad3db96f25c1bcbac9a74ebb084d101e3be9f4a992ec4dd60d4653e35a108b032e27d0d9e271", @typed={0x8, 0x5f, @fd=r0}]}, @nested={0x108, 0x7f, [@generic, @typed={0x4, 0x6a}, @typed={0xf0, 0x39, @binary="3978530179dd0676bda8643c8e67dad85fb2c6d808e4dc2552e26b56ad7d5a49e50e40571affff1faca3e232261c8361fd2e7369dffeaae6b2deb6006b0b5a9b4515e0a0ffcd289481d7be53fb052c05f5178b16182d03df7089f87d5c307c667a0314b9388807107e760e2448770604c1b46751a5f1b62fea166ca7295ba90a8d94d94523d2487ca26eb87c10b359f0e2ba2cbffcc5764bc814930cb38adc68fd90bc6caffe27186e4b81417071c6db787b93367d99975861c13298534993912f0c9dae659bff76e012f1b85179a32508130619a23e7226d06419cc459855f34ff05bc58535fae0f95dcb"}, @typed={0x8, 0x7b, @u32=0xfff}, @typed={0x8, 0x22, @u32}]}, @nested={0x100, 0x7b, [@generic="252540aa57ad4b88c89caf9a44f0669e8798a6bed0e7c6befe72d6db5429b37cbd79975a3552bed90bf41b45e55911339cc33f092eae1a1369f74f03c3615d3a2be25f7c92feefb84b5f735926a99c88480131b8099e7bae7dc177ae2ee06e6eb42ffcc59e33b06d5a137ace45bfc550847a5e829cf34d14b847ed29eb870ae3fd413c5213af19cdc07da89d85a0ba96b90c604580882b81cbaf1407ced74e444fdd748b4a404c32cbd3190878", @generic, @generic, @typed={0x8, 0x36, @uid=r2}, @typed={0x8, 0xe, @fd=r0}, @generic="6419eb046ef55a8b8748367bd7d73bacef920d3eb90a8c8c11d0025f17769bc2bba5423171e0d5210da971c9009a9ea9fe824bbd67cbb9", @typed={0x8, 0x13, @ipv4=@local}]}]}, 0x14bc}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) r3 = userfaultfd(0x80007) r4 = open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x104) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000140)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 14:05:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x7, &(0x7f0000000040)) [ 1331.019985][T23944] FAULT_INJECTION: forcing a failure. [ 1331.019985][T23944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1331.108123][T23944] CPU: 1 PID: 23944 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1331.117552][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.127631][T23944] Call Trace: [ 1331.130945][T23944] dump_stack+0x172/0x1f0 [ 1331.135301][T23944] should_fail.cold+0xa/0x15 [ 1331.139919][T23944] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1331.145739][T23944] ? ___might_sleep+0x163/0x280 [ 1331.150620][T23944] should_fail_alloc_page+0x50/0x60 [ 1331.155830][T23944] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1331.161255][T23944] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1331.166993][T23944] ? find_held_lock+0x35/0x130 [ 1331.171768][T23944] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1331.177499][T23944] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1331.183766][T23944] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1331.190818][T23944] alloc_pages_vma+0xdd/0x540 [ 1331.195517][T23944] shmem_alloc_page+0xc0/0x180 [ 1331.200295][T23944] ? shmem_swapin+0x1a0/0x1a0 [ 1331.205005][T23944] ? lock_downgrade+0x880/0x880 [ 1331.209872][T23944] ? __unlock_page_memcg+0x70/0x100 [ 1331.215089][T23944] ? kasan_check_read+0x11/0x20 [ 1331.219971][T23944] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1331.226237][T23944] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1331.231822][T23944] ? shmem_get_link+0x420/0x420 [ 1331.236696][T23944] ? kasan_check_write+0x14/0x20 [ 1331.241666][T23944] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1331.247060][T23944] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1331.252455][T23944] ? do_raw_spin_unlock+0x57/0x270 [ 1331.257583][T23944] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1331.263882][T23944] mfill_zeropage+0x92f/0x1000 [ 1331.268680][T23944] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1331.273806][T23944] ? _parse_integer+0x190/0x190 [ 1331.278684][T23944] ? __lock_acquire+0x548/0x3fb0 [ 1331.283652][T23944] ? userfaultfd_read+0x1940/0x1940 [ 1331.288867][T23944] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1331.295131][T23944] ? tomoyo_init_request_info+0x105/0x1d0 [ 1331.300867][T23944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:05:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x8, &(0x7f0000000040)) [ 1331.307132][T23944] ? tomoyo_path_number_perm+0x263/0x520 [ 1331.312811][T23944] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1331.318649][T23944] ? __fget+0x35a/0x550 [ 1331.322824][T23944] ? userfaultfd_read+0x1940/0x1940 [ 1331.328047][T23944] do_vfs_ioctl+0xd6e/0x1390 [ 1331.332657][T23944] ? userfaultfd_read+0x1940/0x1940 [ 1331.338144][T23944] ? do_vfs_ioctl+0xd6e/0x1390 [ 1331.342931][T23944] ? ioctl_preallocate+0x210/0x210 [ 1331.348053][T23944] ? __fget+0x381/0x550 [ 1331.352328][T23944] ? ksys_dup3+0x3e0/0x3e0 14:05:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x4000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1331.356762][T23944] ? tomoyo_file_ioctl+0x23/0x30 [ 1331.361711][T23944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1331.367969][T23944] ? security_file_ioctl+0x93/0xc0 [ 1331.373090][T23944] ksys_ioctl+0xab/0xd0 [ 1331.377275][T23944] __x64_sys_ioctl+0x73/0xb0 [ 1331.381880][T23944] do_syscall_64+0x103/0x610 [ 1331.386492][T23944] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1331.392388][T23944] RIP: 0033:0x458c29 [ 1331.396287][T23944] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1331.416076][T23944] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1331.424525][T23944] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1331.432510][T23944] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1331.441808][T23944] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1331.449810][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:05:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x509980000000000]}) 14:05:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x400000000804) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1331.457796][T23944] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:54 executing program 4 (fault-call:6 fault-nth:68): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:54 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0xf28f, 0x9, 0x2000000000000c4b, 0x8, 0x8}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/21) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) 14:05:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x9, &(0x7f0000000040)) 14:05:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5f9980000000000]}) 14:05:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x7000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1331.665936][T24258] FAULT_INJECTION: forcing a failure. [ 1331.665936][T24258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1331.702755][T24258] CPU: 0 PID: 24258 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1331.711909][T24258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.721972][T24258] Call Trace: [ 1331.725282][T24258] dump_stack+0x172/0x1f0 [ 1331.729631][T24258] should_fail.cold+0xa/0x15 [ 1331.734241][T24258] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1331.740421][T24258] ? ___might_sleep+0x163/0x280 [ 1331.745293][T24258] should_fail_alloc_page+0x50/0x60 [ 1331.750853][T24258] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1331.756241][T24258] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1331.761973][T24258] ? find_held_lock+0x35/0x130 [ 1331.766751][T24258] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1331.772484][T24258] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1331.778738][T24258] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1331.784995][T24258] alloc_pages_vma+0xdd/0x540 [ 1331.789685][T24258] shmem_alloc_page+0xc0/0x180 [ 1331.794449][T24258] ? shmem_swapin+0x1a0/0x1a0 [ 1331.799162][T24258] ? lock_downgrade+0x880/0x880 [ 1331.804024][T24258] ? __unlock_page_memcg+0x70/0x100 [ 1331.809248][T24258] ? kasan_check_read+0x11/0x20 [ 1331.814132][T24258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1331.820385][T24258] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1331.825951][T24258] ? shmem_get_link+0x420/0x420 [ 1331.830809][T24258] ? kasan_check_write+0x14/0x20 [ 1331.835761][T24258] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1331.841145][T24258] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1331.846520][T24258] ? do_raw_spin_unlock+0x57/0x270 [ 1331.851647][T24258] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1331.857901][T24258] mfill_zeropage+0x92f/0x1000 [ 1331.862691][T24258] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1331.867816][T24258] ? _parse_integer+0x190/0x190 [ 1331.872687][T24258] ? __lock_acquire+0x548/0x3fb0 [ 1331.877640][T24258] ? userfaultfd_read+0x1940/0x1940 [ 1331.882846][T24258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1331.889110][T24258] ? tomoyo_init_request_info+0x105/0x1d0 [ 1331.894865][T24258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1331.901130][T24258] ? tomoyo_path_number_perm+0x263/0x520 [ 1331.906959][T24258] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1331.912796][T24258] ? __fget+0x35a/0x550 [ 1331.916969][T24258] ? userfaultfd_read+0x1940/0x1940 [ 1331.922316][T24258] do_vfs_ioctl+0xd6e/0x1390 [ 1331.926949][T24258] ? userfaultfd_read+0x1940/0x1940 [ 1331.932162][T24258] ? do_vfs_ioctl+0xd6e/0x1390 [ 1331.937027][T24258] ? ioctl_preallocate+0x210/0x210 [ 1331.942148][T24258] ? __fget+0x381/0x550 [ 1331.946321][T24258] ? ksys_dup3+0x3e0/0x3e0 [ 1331.950772][T24258] ? tomoyo_file_ioctl+0x23/0x30 [ 1331.955815][T24258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1331.962084][T24258] ? security_file_ioctl+0x93/0xc0 [ 1331.967237][T24258] ksys_ioctl+0xab/0xd0 [ 1331.971458][T24258] __x64_sys_ioctl+0x73/0xb0 [ 1331.976060][T24258] do_syscall_64+0x103/0x610 [ 1331.980678][T24258] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1331.986584][T24258] RIP: 0033:0x458c29 [ 1331.990481][T24258] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:05:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f00003a0000/0x2000)=nil, 0x2000, 0x7, 0x31, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 14:05:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0xa, &(0x7f0000000040)) [ 1332.010113][T24258] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1332.018533][T24258] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1332.026533][T24258] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1332.034546][T24258] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1332.042532][T24258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1332.050528][T24258] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6f9980000000000]}) 14:05:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x9000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:55 executing program 4 (fault-call:6 fault-nth:69): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:55 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7ff}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000300)={0x2000}) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x6, 0x4000) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000280)=""/24) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x113, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x10000, 0x0) 14:05:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0xb, &(0x7f0000000040)) 14:05:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7f9980000000000]}) 14:05:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xa000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000e1e000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) [ 1332.307869][T24605] FAULT_INJECTION: forcing a failure. [ 1332.307869][T24605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1332.371387][T24605] CPU: 0 PID: 24605 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1332.380549][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.390717][T24605] Call Trace: [ 1332.394034][T24605] dump_stack+0x172/0x1f0 [ 1332.398393][T24605] should_fail.cold+0xa/0x15 [ 1332.403004][T24605] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1332.408837][T24605] ? ___might_sleep+0x163/0x280 [ 1332.413707][T24605] should_fail_alloc_page+0x50/0x60 [ 1332.418958][T24605] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1332.424385][T24605] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1332.430248][T24605] ? find_held_lock+0x35/0x130 [ 1332.435031][T24605] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1332.440771][T24605] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1332.440786][T24605] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1332.440807][T24605] alloc_pages_vma+0xdd/0x540 [ 1332.440835][T24605] shmem_alloc_page+0xc0/0x180 [ 1332.453344][T24605] ? shmem_swapin+0x1a0/0x1a0 [ 1332.453381][T24605] ? lock_downgrade+0x880/0x880 [ 1332.453397][T24605] ? __unlock_page_memcg+0x70/0x100 [ 1332.453412][T24605] ? kasan_check_read+0x11/0x20 [ 1332.453433][T24605] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1332.488621][T24605] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1332.494280][T24605] ? shmem_get_link+0x420/0x420 [ 1332.499151][T24605] ? kasan_check_write+0x14/0x20 [ 1332.504132][T24605] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1332.509614][T24605] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1332.514996][T24605] ? do_raw_spin_unlock+0x57/0x270 [ 1332.520140][T24605] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1332.526400][T24605] mfill_zeropage+0x92f/0x1000 [ 1332.531193][T24605] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1332.536323][T24605] ? _parse_integer+0x190/0x190 [ 1332.541182][T24605] ? __lock_acquire+0x548/0x3fb0 [ 1332.546143][T24605] ? userfaultfd_read+0x1940/0x1940 [ 1332.551349][T24605] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1332.557612][T24605] ? tomoyo_init_request_info+0x105/0x1d0 [ 1332.563342][T24605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1332.569600][T24605] ? tomoyo_path_number_perm+0x263/0x520 [ 1332.575249][T24605] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1332.581078][T24605] ? __fget+0x35a/0x550 [ 1332.585266][T24605] ? userfaultfd_read+0x1940/0x1940 [ 1332.590480][T24605] do_vfs_ioctl+0xd6e/0x1390 [ 1332.595075][T24605] ? userfaultfd_read+0x1940/0x1940 [ 1332.600320][T24605] ? do_vfs_ioctl+0xd6e/0x1390 [ 1332.605123][T24605] ? ioctl_preallocate+0x210/0x210 [ 1332.610255][T24605] ? __fget+0x381/0x550 [ 1332.614427][T24605] ? ksys_dup3+0x3e0/0x3e0 [ 1332.618890][T24605] ? tomoyo_file_ioctl+0x23/0x30 [ 1332.623952][T24605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1332.630295][T24605] ? security_file_ioctl+0x93/0xc0 [ 1332.635428][T24605] ksys_ioctl+0xab/0xd0 [ 1332.639599][T24605] __x64_sys_ioctl+0x73/0xb0 [ 1332.644200][T24605] do_syscall_64+0x103/0x610 [ 1332.648805][T24605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1332.654697][T24605] RIP: 0033:0x458c29 [ 1332.658599][T24605] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1332.678226][T24605] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1332.686752][T24605] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1332.694748][T24605] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1332.702738][T24605] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1332.710717][T24605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:05:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8f9980000000000]}) 14:05:56 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xcaf, 0x10000) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x6000000000000000, 0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) timerfd_gettime(r1, &(0x7f0000000040)) [ 1332.718695][T24605] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0xf, &(0x7f0000000040)) 14:05:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xe000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1332.805299][T24777] __ntfs_error: 1 callbacks suppressed [ 1332.805314][T24777] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x909980000000000]}) 14:05:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x9f9980000000000]}) [ 1332.931602][T24777] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:56 executing program 4 (fault-call:6 fault-nth:70): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x2010, 0xffffffffffffffff, 0x28) r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xee65, 0x208002) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000002c0)=0x484, 0x4) fchdir(r0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffff76) 14:05:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x11000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1209980000000000]}) 14:05:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x11, &(0x7f0000000040)) 14:05:56 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) getpgrp(r0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f898503d699cdd124e1cfaac54101eca5c96d64de1b1f9151a11b17e3767324ae447588012e356e00f23f623570a4d65bdea752eb9be0b2d54876aa7a0e6e5e43b8048a7b64f3858a053d1e589007267453577617f975ed1e39654ab73db3637ea49cd0ef0aa28319c25d5d10ce4793c64f1b9b6b9bac6849888a811a719cd182178cfe07a79cb8376e3ca43e4e85e2bc8ea6dd9db48cd5494435dec1262ddda0fa6735794089c9f7750a820cb0ecc81b4ac60f7945fafd467ae9c18fc9b3f820b520464878aed797ec43333524328d3378d4362325e36464dffc8adb81e9eb5c4f3955ac784a307b4fb007c700"/252], &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ext3\x00', 0x200000, &(0x7f0000000140)='ext3\x00') syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 14:05:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1309980000000000]}) 14:05:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x3f000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1333.133530][T24947] FAULT_INJECTION: forcing a failure. [ 1333.133530][T24947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:05:56 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x2002) bind(r0, &(0x7f0000000040)=@isdn={0x22, 0x1, 0x7, 0x1c, 0x3ff}, 0x80) [ 1333.211159][T24947] CPU: 1 PID: 24947 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1333.220327][T24947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.230751][T24947] Call Trace: [ 1333.234062][T24947] dump_stack+0x172/0x1f0 [ 1333.238435][T24947] should_fail.cold+0xa/0x15 [ 1333.243061][T24947] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1333.248934][T24947] ? ___might_sleep+0x163/0x280 [ 1333.253817][T24947] should_fail_alloc_page+0x50/0x60 [ 1333.259031][T24947] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1333.264422][T24947] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1333.270155][T24947] ? find_held_lock+0x35/0x130 [ 1333.274939][T24947] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1333.280670][T24947] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1333.287022][T24947] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1333.293294][T24947] alloc_pages_vma+0xdd/0x540 [ 1333.293316][T24947] shmem_alloc_page+0xc0/0x180 [ 1333.293330][T24947] ? shmem_swapin+0x1a0/0x1a0 [ 1333.293361][T24947] ? lock_downgrade+0x880/0x880 [ 1333.293376][T24947] ? __unlock_page_memcg+0x70/0x100 [ 1333.293390][T24947] ? kasan_check_read+0x11/0x20 [ 1333.293403][T24947] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1333.293421][T24947] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1333.293445][T24947] ? shmem_get_link+0x420/0x420 [ 1333.293458][T24947] ? kasan_check_write+0x14/0x20 [ 1333.293487][T24947] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1333.302936][T24947] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1333.302953][T24947] ? do_raw_spin_unlock+0x57/0x270 [ 1333.302970][T24947] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1333.302989][T24947] mfill_zeropage+0x92f/0x1000 [ 1333.303017][T24947] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1333.303033][T24947] ? _parse_integer+0x190/0x190 [ 1333.303050][T24947] ? __lock_acquire+0x548/0x3fb0 [ 1333.303069][T24947] ? userfaultfd_read+0x1940/0x1940 [ 1333.303102][T24947] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1333.317885][T25156] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1333.318334][T24947] ? tomoyo_init_request_info+0x105/0x1d0 [ 1333.412392][T24947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.418650][T24947] ? tomoyo_path_number_perm+0x263/0x520 [ 1333.424690][T24947] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1333.430622][T24947] ? __fget+0x35a/0x550 [ 1333.434799][T24947] ? userfaultfd_read+0x1940/0x1940 [ 1333.440531][T24947] do_vfs_ioctl+0xd6e/0x1390 [ 1333.445146][T24947] ? userfaultfd_read+0x1940/0x1940 [ 1333.450371][T24947] ? do_vfs_ioctl+0xd6e/0x1390 [ 1333.455212][T24947] ? ioctl_preallocate+0x210/0x210 [ 1333.460348][T24947] ? __fget+0x381/0x550 [ 1333.464527][T24947] ? ksys_dup3+0x3e0/0x3e0 [ 1333.468964][T24947] ? tomoyo_file_ioctl+0x23/0x30 [ 1333.474178][T24947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.480430][T24947] ? security_file_ioctl+0x93/0xc0 [ 1333.485557][T24947] ksys_ioctl+0xab/0xd0 [ 1333.489850][T24947] __x64_sys_ioctl+0x73/0xb0 [ 1333.494480][T24947] do_syscall_64+0x103/0x610 [ 1333.499083][T24947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1333.504993][T24947] RIP: 0033:0x458c29 [ 1333.508892][T24947] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1333.528504][T24947] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1333.536929][T24947] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1333.544924][T24947] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1333.552902][T24947] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:05:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1409980000000000]}) 14:05:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x24, &(0x7f0000000040)) 14:05:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x210101, 0x0) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x33b, 0x3f, 0x7ff, 0x400, 0x8c31, @remote}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10011, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) [ 1333.560881][T24947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1333.568881][T24947] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:56 executing program 4 (fault-call:6 fault-nth:71): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x40020000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1333.645261][T25156] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) io_setup(0x4, &(0x7f0000000040)=0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x48800, 0x0) r4 = syz_open_dev$amidi(&(0x7f00000011c0)='/dev/amidi#\x00', 0x0, 0x20000) r5 = syz_open_dev$amidi(&(0x7f00000012c0)='/dev/amidi#\x00', 0xbb, 0x2a40) io_submit(r2, 0x3, &(0x7f0000001340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xa6e, r0, &(0x7f0000000100)="46e0fcedbeb6721ce638fb71e0d060e605fb3e49d7d044d20e49813107f03e902e908299cb21ce0d5f41a472cb358a1a6248cca1fa5400b6c66c3484a62130d2be36538edccb7ed4ebbfe6e0b82655b39632124f6635bf0549a8a934e0acc1779e2f31765778eed5fdb48baa000964d374a8be72e5e3282ae4ca48a3", 0x7c, 0x4, 0x0, 0x2, r3}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0xb426345eca46a883, 0x1, r1, &(0x7f00000001c0)="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", 0x1000, 0x40cb000, 0x0, 0x2, r4}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000001240)="4d3fc7be58d033807b56f1c5200f9a7d2fd9de1b9f31b23d843fd253baa09ff3cc753caec332aafe15264fb5cb54323fe9e07c6592d95271e877cd6a3d540f9842ebcc3a2106ca55383cdf3daff8572de723b0c439ec", 0x56, 0x7f, 0x0, 0x1, r5}]) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 14:05:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1509980000000000]}) 14:05:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x8dffffff, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:57 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x601222}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x302, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe90}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x20004010) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x81}, 0x8) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 14:05:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x25, &(0x7f0000000040)) [ 1333.791790][T25359] FAULT_INJECTION: forcing a failure. [ 1333.791790][T25359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1333.865246][T25359] CPU: 1 PID: 25359 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1333.874412][T25359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.884524][T25359] Call Trace: [ 1333.887837][T25359] dump_stack+0x172/0x1f0 [ 1333.892185][T25359] should_fail.cold+0xa/0x15 [ 1333.896796][T25359] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1333.902631][T25359] ? ___might_sleep+0x163/0x280 [ 1333.907520][T25359] should_fail_alloc_page+0x50/0x60 [ 1333.912753][T25359] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1333.912780][T25359] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1333.912799][T25359] ? find_held_lock+0x35/0x130 [ 1333.912815][T25359] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1333.912830][T25359] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1333.912842][T25359] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1333.912868][T25359] alloc_pages_vma+0xdd/0x540 [ 1333.912892][T25359] shmem_alloc_page+0xc0/0x180 [ 1333.912912][T25359] ? shmem_swapin+0x1a0/0x1a0 14:05:57 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x77, 0xffffffffffffffff, 0x10000004003, 0x0) 14:05:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x17f0f00000000000]}) [ 1333.928780][T25359] ? lock_downgrade+0x880/0x880 [ 1333.928800][T25359] ? __unlock_page_memcg+0x70/0x100 [ 1333.928819][T25359] ? kasan_check_read+0x11/0x20 [ 1333.951777][T25359] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1333.951802][T25359] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1333.951828][T25359] ? shmem_get_link+0x420/0x420 [ 1333.951857][T25359] ? retint_kernel+0x2d/0x2d [ 1333.961304][T25359] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1333.961323][T25359] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1333.961343][T25359] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1333.961364][T25359] mfill_zeropage+0x92f/0x1000 [ 1334.020174][T25359] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1334.025494][T25359] ? _parse_integer+0x190/0x190 [ 1334.030409][T25359] ? __lock_acquire+0x548/0x3fb0 [ 1334.035391][T25359] ? userfaultfd_read+0x1940/0x1940 [ 1334.040623][T25359] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1334.046971][T25359] ? tomoyo_init_request_info+0x105/0x1d0 [ 1334.052712][T25359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1334.059105][T25359] ? tomoyo_path_number_perm+0x263/0x520 [ 1334.064766][T25359] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1334.070610][T25359] ? __fget+0x35a/0x550 [ 1334.074959][T25359] ? userfaultfd_read+0x1940/0x1940 [ 1334.080296][T25359] do_vfs_ioctl+0xd6e/0x1390 [ 1334.084900][T25359] ? userfaultfd_read+0x1940/0x1940 [ 1334.090114][T25359] ? do_vfs_ioctl+0xd6e/0x1390 [ 1334.094984][T25359] ? ioctl_preallocate+0x210/0x210 [ 1334.100116][T25359] ? __fget+0x381/0x550 [ 1334.104289][T25359] ? ksys_dup3+0x3e0/0x3e0 [ 1334.108818][T25359] ? tomoyo_file_ioctl+0x23/0x30 14:05:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xdc7f0000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1334.113765][T25359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1334.120062][T25359] ? security_file_ioctl+0x93/0xc0 [ 1334.125202][T25359] ksys_ioctl+0xab/0xd0 [ 1334.129370][T25359] __x64_sys_ioctl+0x73/0xb0 [ 1334.133977][T25359] do_syscall_64+0x103/0x610 [ 1334.138590][T25359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1334.144538][T25359] RIP: 0033:0x458c29 [ 1334.144555][T25359] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1334.144563][T25359] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1334.144579][T25359] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1334.144586][T25359] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1334.144595][T25359] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1334.144615][T25359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:05:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1ef0f00000000000]}) 14:05:57 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x100) alarm(0x6) r1 = getpgrp(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) rt_tgsigqueueinfo(r1, r2, 0x29, &(0x7f0000000080)={0x35, 0x5}) [ 1334.168365][T25359] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:57 executing program 4 (fault-call:6 fault-nth:72): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f00080000319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 14:05:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xe8030000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x26, &(0x7f0000000040)) 14:05:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x25f0f00000000000]}) [ 1334.301188][T25495] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1334.361667][T25500] FAULT_INJECTION: forcing a failure. [ 1334.361667][T25500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1334.388986][T25500] CPU: 0 PID: 25500 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1334.398152][T25500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.408323][T25500] Call Trace: [ 1334.408355][T25500] dump_stack+0x172/0x1f0 [ 1334.408380][T25500] should_fail.cold+0xa/0x15 [ 1334.408402][T25500] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1334.408421][T25500] ? ___might_sleep+0x163/0x280 [ 1334.408448][T25500] should_fail_alloc_page+0x50/0x60 [ 1334.431488][T25500] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1334.431512][T25500] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1334.431543][T25500] ? find_held_lock+0x35/0x130 [ 1334.452817][T25500] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1334.458549][T25500] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1334.458569][T25500] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1334.458597][T25500] alloc_pages_vma+0xdd/0x540 [ 1334.458627][T25500] shmem_alloc_page+0xc0/0x180 [ 1334.471152][T25500] ? shmem_swapin+0x1a0/0x1a0 [ 1334.471189][T25500] ? lock_downgrade+0x880/0x880 [ 1334.471206][T25500] ? __unlock_page_memcg+0x70/0x100 [ 1334.471225][T25500] ? kasan_check_read+0x11/0x20 [ 1334.480656][T25500] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1334.480678][T25500] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1334.480704][T25500] ? shmem_get_link+0x420/0x420 [ 1334.480718][T25500] ? kasan_check_write+0x14/0x20 [ 1334.480740][T25500] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1334.490266][T25500] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1334.490283][T25500] ? do_raw_spin_unlock+0x57/0x270 [ 1334.490302][T25500] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1334.490322][T25500] mfill_zeropage+0x92f/0x1000 [ 1334.490351][T25500] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1334.500386][T25500] ? _parse_integer+0x190/0x190 [ 1334.500407][T25500] ? __lock_acquire+0x548/0x3fb0 [ 1334.500431][T25500] ? userfaultfd_read+0x1940/0x1940 [ 1334.500453][T25500] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1334.512245][T25500] ? tomoyo_init_request_info+0x105/0x1d0 [ 1334.512265][T25500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1334.512280][T25500] ? tomoyo_path_number_perm+0x263/0x520 [ 1334.512298][T25500] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1334.512327][T25500] ? __fget+0x35a/0x550 [ 1334.522122][T25500] ? userfaultfd_read+0x1940/0x1940 14:05:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xf4010000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:57 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1334.522145][T25500] do_vfs_ioctl+0xd6e/0x1390 [ 1334.522161][T25500] ? userfaultfd_read+0x1940/0x1940 [ 1334.522174][T25500] ? do_vfs_ioctl+0xd6e/0x1390 [ 1334.522193][T25500] ? ioctl_preallocate+0x210/0x210 [ 1334.522213][T25500] ? __fget+0x381/0x550 [ 1334.532950][T25500] ? ksys_dup3+0x3e0/0x3e0 [ 1334.532976][T25500] ? tomoyo_file_ioctl+0x23/0x30 [ 1334.532993][T25500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1334.533007][T25500] ? security_file_ioctl+0x93/0xc0 [ 1334.533024][T25500] ksys_ioctl+0xab/0xd0 [ 1334.533050][T25500] __x64_sys_ioctl+0x73/0xb0 [ 1334.544604][T25500] do_syscall_64+0x103/0x610 [ 1334.544627][T25500] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1334.544639][T25500] RIP: 0033:0x458c29 [ 1334.544655][T25500] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1334.544663][T25500] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1334.544678][T25500] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 14:05:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xff000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2909980000000000]}) 14:05:58 executing program 5: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200100) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) 14:05:58 executing program 4 (fault-call:6 fault-nth:73): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x402, &(0x7f0000000040)) [ 1334.544685][T25500] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1334.544693][T25500] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1334.544700][T25500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1334.544708][T25500] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x41f0f00000000000]}) [ 1334.824274][T25719] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 14:05:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xffffff8d, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:58 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x10001, 0x1ff, 0xfc3}) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ff000000007f08003950323030302e75"], 0x15) 14:05:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x406, &(0x7f0000000040)) 14:05:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x48f0f00000000000]}) [ 1334.982284][T25935] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1335.019571][T25918] FAULT_INJECTION: forcing a failure. [ 1335.019571][T25918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1335.035723][T25935] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1335.042536][T25918] CPU: 1 PID: 25918 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1335.053528][T25918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.053536][T25918] Call Trace: [ 1335.053561][T25918] dump_stack+0x172/0x1f0 [ 1335.053586][T25918] should_fail.cold+0xa/0x15 [ 1335.053617][T25918] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1335.053635][T25918] ? ___might_sleep+0x163/0x280 [ 1335.053659][T25918] should_fail_alloc_page+0x50/0x60 [ 1335.053675][T25918] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1335.053696][T25918] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1335.053715][T25918] ? find_held_lock+0x35/0x130 [ 1335.067062][T25918] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1335.067080][T25918] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1335.067104][T25918] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1335.067128][T25918] alloc_pages_vma+0xdd/0x540 [ 1335.130493][T25918] shmem_alloc_page+0xc0/0x180 [ 1335.135266][T25918] ? shmem_swapin+0x1a0/0x1a0 [ 1335.139970][T25918] ? lock_downgrade+0x880/0x880 [ 1335.144843][T25918] ? __unlock_page_memcg+0x70/0x100 [ 1335.150056][T25918] ? kasan_check_read+0x11/0x20 [ 1335.154922][T25918] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1335.161267][T25918] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1335.166835][T25918] ? shmem_get_link+0x420/0x420 [ 1335.171694][T25918] ? kasan_check_write+0x14/0x20 [ 1335.176654][T25918] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1335.182047][T25918] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1335.187440][T25918] ? do_raw_spin_unlock+0x57/0x270 [ 1335.192557][T25918] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1335.198814][T25918] mfill_zeropage+0x92f/0x1000 [ 1335.203617][T25918] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1335.208753][T25918] ? _parse_integer+0x190/0x190 [ 1335.213624][T25918] ? __lock_acquire+0x548/0x3fb0 [ 1335.218580][T25918] ? userfaultfd_read+0x1940/0x1940 [ 1335.223792][T25918] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1335.230041][T25918] ? tomoyo_init_request_info+0x105/0x1d0 [ 1335.235948][T25918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.242206][T25918] ? tomoyo_path_number_perm+0x263/0x520 [ 1335.247861][T25918] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1335.253700][T25918] ? __fget+0x35a/0x550 [ 1335.257880][T25918] ? userfaultfd_read+0x1940/0x1940 [ 1335.263102][T25918] do_vfs_ioctl+0xd6e/0x1390 [ 1335.267710][T25918] ? userfaultfd_read+0x1940/0x1940 [ 1335.272922][T25918] ? do_vfs_ioctl+0xd6e/0x1390 [ 1335.277701][T25918] ? ioctl_preallocate+0x210/0x210 [ 1335.282842][T25918] ? __fget+0x381/0x550 [ 1335.287020][T25918] ? ksys_dup3+0x3e0/0x3e0 [ 1335.291458][T25918] ? tomoyo_file_ioctl+0x23/0x30 [ 1335.296408][T25918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.302657][T25918] ? security_file_ioctl+0x93/0xc0 [ 1335.307783][T25918] ksys_ioctl+0xab/0xd0 [ 1335.311960][T25918] __x64_sys_ioctl+0x73/0xb0 [ 1335.316573][T25918] do_syscall_64+0x103/0x610 [ 1335.321292][T25918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1335.327195][T25918] RIP: 0033:0x458c29 [ 1335.331126][T25918] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1335.350942][T25918] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.359369][T25918] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1335.367354][T25918] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1335.375339][T25918] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:05:58 executing program 5: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200100) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) 14:05:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x14280000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xe7ffffffffffffff]}) [ 1335.383319][T25918] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1335.391310][T25918] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff00000000]}) 14:05:58 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$getflags(r0, 0x408) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) [ 1335.431142][T26013] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 14:05:58 executing program 4 (fault-call:6 fault-nth:74): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x100000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x407, &(0x7f0000000040)) 14:05:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffffffffffff]}) [ 1335.553783][T26096] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:05:58 executing program 5: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200100) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) [ 1335.618751][T26125] FAULT_INJECTION: forcing a failure. [ 1335.618751][T26125] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1335.659642][T26125] CPU: 1 PID: 26125 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1335.669495][T26125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.669503][T26125] Call Trace: [ 1335.669531][T26125] dump_stack+0x172/0x1f0 [ 1335.669558][T26125] should_fail.cold+0xa/0x15 [ 1335.692009][T26125] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1335.697843][T26125] ? ___might_sleep+0x163/0x280 [ 1335.702725][T26125] should_fail_alloc_page+0x50/0x60 [ 1335.707950][T26125] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1335.713349][T26125] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1335.719183][T26125] ? find_held_lock+0x35/0x130 [ 1335.723969][T26125] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1335.723987][T26125] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1335.724000][T26125] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1335.724017][T26125] alloc_pages_vma+0xdd/0x540 [ 1335.724035][T26125] shmem_alloc_page+0xc0/0x180 [ 1335.724049][T26125] ? shmem_swapin+0x1a0/0x1a0 [ 1335.724081][T26125] ? lock_downgrade+0x880/0x880 [ 1335.724112][T26125] ? __unlock_page_memcg+0x70/0x100 [ 1335.761936][T26125] ? kasan_check_read+0x11/0x20 [ 1335.761954][T26125] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1335.761976][T26125] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1335.762006][T26125] ? shmem_get_link+0x420/0x420 [ 1335.788655][T26125] ? kasan_check_write+0x14/0x20 [ 1335.788683][T26125] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1335.788699][T26125] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1335.788721][T26125] ? do_raw_spin_unlock+0x57/0x270 [ 1335.809482][T26125] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1335.815739][T26125] mfill_zeropage+0x92f/0x1000 [ 1335.820522][T26125] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1335.820540][T26125] ? _parse_integer+0x190/0x190 [ 1335.820560][T26125] ? __lock_acquire+0x548/0x3fb0 [ 1335.835563][T26125] ? userfaultfd_read+0x1940/0x1940 [ 1335.840812][T26125] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1335.840839][T26125] ? tomoyo_init_request_info+0x105/0x1d0 [ 1335.840856][T26125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.840877][T26125] ? tomoyo_path_number_perm+0x263/0x520 [ 1335.864708][T26125] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1335.870538][T26125] ? __fget+0x35a/0x550 [ 1335.874712][T26125] ? userfaultfd_read+0x1940/0x1940 [ 1335.879931][T26125] do_vfs_ioctl+0xd6e/0x1390 [ 1335.884544][T26125] ? userfaultfd_read+0x1940/0x1940 [ 1335.889763][T26125] ? do_vfs_ioctl+0xd6e/0x1390 [ 1335.894555][T26125] ? ioctl_preallocate+0x210/0x210 [ 1335.899852][T26125] ? __fget+0x381/0x550 [ 1335.904029][T26125] ? ksys_dup3+0x3e0/0x3e0 [ 1335.908466][T26125] ? tomoyo_file_ioctl+0x23/0x30 [ 1335.913415][T26125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.919674][T26125] ? security_file_ioctl+0x93/0xc0 [ 1335.924812][T26125] ksys_ioctl+0xab/0xd0 [ 1335.928987][T26125] __x64_sys_ioctl+0x73/0xb0 [ 1335.933610][T26125] do_syscall_64+0x103/0x610 [ 1335.938226][T26125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1335.944144][T26125] RIP: 0033:0x458c29 14:05:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x408, &(0x7f0000000040)) 14:05:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x200000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1335.948050][T26125] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1335.967719][T26125] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.976174][T26125] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1335.984163][T26125] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1335.992155][T26125] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1336.000132][T26125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1336.008123][T26125] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:05:59 executing program 4 (fault-call:6 fault-nth:75): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:05:59 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:05:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffffffffdfd]}) 14:05:59 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0x804, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 14:05:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x300000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1336.127112][T26414] FAULT_INJECTION: forcing a failure. [ 1336.127112][T26414] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.195922][T26414] CPU: 0 PID: 26414 Comm: syz-executor.5 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1336.205076][T26414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.215160][T26414] Call Trace: [ 1336.218473][T26414] dump_stack+0x172/0x1f0 [ 1336.222841][T26414] should_fail.cold+0xa/0x15 [ 1336.227456][T26414] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1336.233278][T26414] ? ___might_sleep+0x163/0x280 [ 1336.238151][T26414] __should_failslab+0x121/0x190 [ 1336.243119][T26414] should_failslab+0x9/0x14 [ 1336.247640][T26414] kmem_cache_alloc_node+0x264/0x710 [ 1336.252936][T26414] ? lock_downgrade+0x880/0x880 [ 1336.257810][T26414] __alloc_skb+0xd5/0x5e0 [ 1336.262159][T26414] ? skb_trim+0x190/0x190 [ 1336.266501][T26414] ? kfree+0x173/0x230 [ 1336.270589][T26414] ? __devinet_sysctl_unregister.isra.0+0x6b/0xb0 [ 1336.277007][T26414] ? kfree+0x173/0x230 [ 1336.281780][T26414] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1336.287128][T26414] inet_netconf_notify_devconf+0xea/0x260 [ 1336.292898][T26414] __devinet_sysctl_unregister.isra.0+0x85/0xb0 [ 1336.299329][T26414] devinet_sysctl_unregister+0x92/0xf0 [ 1336.304808][T26414] inetdev_event+0x2e7/0x1240 [ 1336.310084][T26414] ? update_gid_event_work_handler+0xc0/0xc0 [ 1336.316114][T26414] ? inetdev_init+0x470/0x470 [ 1336.320802][T26414] ? up_read+0x131/0x180 [ 1336.325089][T26414] notifier_call_chain+0xc7/0x240 [ 1336.330141][T26414] ? inetdev_init+0x470/0x470 [ 1336.334819][T26414] ? notifier_call_chain+0xc7/0x240 [ 1336.340032][T26414] raw_notifier_call_chain+0x2e/0x40 [ 1336.345346][T26414] call_netdevice_notifiers_info+0x3f/0x90 [ 1336.351181][T26414] rollback_registered_many+0x9c0/0xfd0 [ 1336.356745][T26414] ? generic_xdp_install+0x3d0/0x3d0 [ 1336.362051][T26414] ? mutex_trylock+0x1e0/0x1e0 [ 1336.366826][T26414] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1336.372172][T26414] rollback_registered+0x109/0x1d0 [ 1336.377313][T26414] ? rollback_registered_many+0xfd0/0xfd0 [ 1336.383050][T26414] ? try_to_del_timer_sync+0xc1/0x110 [ 1336.388562][T26414] unregister_netdevice_queue+0x1ee/0x2c0 [ 1336.394298][T26414] unregister_netdev+0x1d/0x30 [ 1336.399129][T26414] slip_close+0x16d/0x1d0 [ 1336.403473][T26414] ? slip_ioctl+0x6d0/0x6d0 [ 1336.408019][T26414] tty_ldisc_close.isra.0+0x100/0x180 [ 1336.413421][T26414] tty_set_ldisc+0x1f8/0x690 [ 1336.418022][T26414] tty_ioctl+0x5dc/0x15c0 [ 1336.422380][T26414] ? tty_register_device+0x40/0x40 [ 1336.427499][T26414] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1336.433768][T26414] ? tomoyo_init_request_info+0x105/0x1d0 [ 1336.439495][T26414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1336.445745][T26414] ? tomoyo_path_number_perm+0x263/0x520 [ 1336.451393][T26414] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1336.457218][T26414] ? __fget+0x35a/0x550 [ 1336.461392][T26414] ? tty_register_device+0x40/0x40 [ 1336.466514][T26414] do_vfs_ioctl+0xd6e/0x1390 [ 1336.471129][T26414] ? ioctl_preallocate+0x210/0x210 [ 1336.476250][T26414] ? __fget+0x381/0x550 [ 1336.480419][T26414] ? ksys_dup3+0x3e0/0x3e0 [ 1336.484853][T26414] ? tomoyo_file_ioctl+0x23/0x30 [ 1336.489796][T26414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1336.496040][T26414] ? security_file_ioctl+0x93/0xc0 [ 1336.501164][T26414] ksys_ioctl+0xab/0xd0 [ 1336.505335][T26414] __x64_sys_ioctl+0x73/0xb0 [ 1336.509935][T26414] do_syscall_64+0x103/0x610 [ 1336.514570][T26414] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1336.520463][T26414] RIP: 0033:0x458c29 [ 1336.524362][T26414] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:05:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x400000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:05:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x409, &(0x7f0000000040)) [ 1336.543975][T26414] RSP: 002b:00007f4156f42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1336.552406][T26414] RAX: ffffffffffffffda RBX: 00007f4156f42c90 RCX: 0000000000458c29 [ 1336.560395][T26414] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 1336.568392][T26414] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1336.576481][T26414] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4156f436d4 [ 1336.584463][T26414] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:05:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffffffffffe7]}) [ 1336.600741][T26486] FAULT_INJECTION: forcing a failure. [ 1336.600741][T26486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1336.636142][T26486] CPU: 1 PID: 26486 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1336.645570][T26486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.645578][T26486] Call Trace: [ 1336.645614][T26486] dump_stack+0x172/0x1f0 [ 1336.645638][T26486] should_fail.cold+0xa/0x15 [ 1336.645661][T26486] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1336.645678][T26486] ? ___might_sleep+0x163/0x280 [ 1336.645707][T26486] should_fail_alloc_page+0x50/0x60 [ 1336.645726][T26486] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1336.645751][T26486] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1336.645771][T26486] ? find_held_lock+0x35/0x130 [ 1336.645790][T26486] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1336.645806][T26486] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1336.645823][T26486] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1336.645845][T26486] alloc_pages_vma+0xdd/0x540 [ 1336.645868][T26486] shmem_alloc_page+0xc0/0x180 [ 1336.645885][T26486] ? shmem_swapin+0x1a0/0x1a0 [ 1336.645920][T26486] ? lock_downgrade+0x880/0x880 [ 1336.645939][T26486] ? __unlock_page_memcg+0x70/0x100 [ 1336.645955][T26486] ? kasan_check_read+0x11/0x20 [ 1336.645969][T26486] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1336.645990][T26486] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1336.646018][T26486] ? shmem_get_link+0x420/0x420 [ 1336.646033][T26486] ? kasan_check_write+0x14/0x20 [ 1336.646056][T26486] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1336.646087][T26486] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1336.663786][T26486] ? do_raw_spin_unlock+0x57/0x270 [ 1336.663807][T26486] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1336.663827][T26486] mfill_zeropage+0x92f/0x1000 [ 1336.663859][T26486] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1336.663874][T26486] ? _parse_integer+0x190/0x190 [ 1336.663900][T26486] ? __lock_acquire+0x548/0x3fb0 [ 1336.685659][T26486] ? userfaultfd_read+0x1940/0x1940 [ 1336.685679][T26486] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1336.685697][T26486] ? tomoyo_init_request_info+0x105/0x1d0 [ 1336.685711][T26486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1336.685733][T26486] ? tomoyo_path_number_perm+0x263/0x520 [ 1336.685751][T26486] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1336.685786][T26486] ? __fget+0x35a/0x550 [ 1336.701717][T26486] ? userfaultfd_read+0x1940/0x1940 [ 1336.701739][T26486] do_vfs_ioctl+0xd6e/0x1390 [ 1336.701754][T26486] ? userfaultfd_read+0x1940/0x1940 [ 1336.701776][T26486] ? do_vfs_ioctl+0xd6e/0x1390 [ 1336.713727][T26486] ? ioctl_preallocate+0x210/0x210 [ 1336.713745][T26486] ? __fget+0x381/0x550 [ 1336.713767][T26486] ? ksys_dup3+0x3e0/0x3e0 [ 1336.713790][T26486] ? tomoyo_file_ioctl+0x23/0x30 [ 1336.713807][T26486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1336.713821][T26486] ? security_file_ioctl+0x93/0xc0 [ 1336.713837][T26486] ksys_ioctl+0xab/0xd0 [ 1336.713855][T26486] __x64_sys_ioctl+0x73/0xb0 [ 1336.713872][T26486] do_syscall_64+0x103/0x610 [ 1336.713893][T26486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1336.713906][T26486] RIP: 0033:0x458c29 [ 1336.713921][T26486] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:06:00 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) recvmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000001680)=[{&(0x7f0000000200)=""/166, 0xa6}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/242, 0xf2}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000001580)=""/223, 0xdf}], 0x8, &(0x7f0000001700)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002780)=""/4, 0x4}, {&(0x7f00000027c0)=""/76, 0x4c}, {&(0x7f0000002840)=""/149, 0x95}, {&(0x7f0000002900)=""/255, 0xff}, {&(0x7f0000002a00)=""/134, 0x86}, {&(0x7f0000002ac0)=""/21, 0x15}, {&(0x7f0000002b00)=""/71, 0x47}, {&(0x7f0000002b80)=""/91, 0x5b}, {&(0x7f0000002c00)=""/127, 0x7f}], 0x9, &(0x7f0000002d40)=""/128, 0x80}, 0x6}, {{&(0x7f0000002dc0)=@generic, 0x80, &(0x7f0000003140)=[{&(0x7f0000002e40)=""/175, 0xaf}, {&(0x7f0000002f00)=""/152, 0x98}, {&(0x7f0000002fc0)=""/206, 0xce}, {&(0x7f00000030c0)=""/81, 0x51}], 0x4, &(0x7f0000003180)=""/195, 0xc3}, 0x2}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/105, 0x69}, {&(0x7f0000003300)=""/51, 0x33}, {&(0x7f0000003340)=""/154, 0x9a}, {&(0x7f0000003400)=""/93, 0x5d}, {&(0x7f0000003480)=""/90, 0x5a}, {&(0x7f0000003500)=""/115, 0x73}, {&(0x7f0000003580)=""/215, 0xd7}], 0x7}, 0xa252}, {{&(0x7f0000003700), 0x80, &(0x7f00000039c0)=[{&(0x7f0000003780)=""/198, 0xc6}, {&(0x7f0000003880)=""/38, 0x26}, {&(0x7f00000038c0)=""/142, 0x8e}, {&(0x7f0000003980)=""/37, 0x25}], 0x4, &(0x7f0000003a00)=""/201, 0xc9}, 0x9}], 0x5, 0x2163, &(0x7f0000003c40)) [ 1336.713928][T26486] RSP: 002b:00007f0323381c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1336.713943][T26486] RAX: ffffffffffffffda RBX: 00007f0323381c90 RCX: 0000000000458c29 [ 1336.713959][T26486] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1336.729662][T26486] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.729672][T26486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233826d4 [ 1336.729681][T26486] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x40a, &(0x7f0000000040)) 14:06:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x700000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}) 14:06:00 executing program 4 (fault-call:6 fault-nth:76): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:06:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7]}) 14:06:00 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x62, 0x6400) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r1, 0x9, 0x30}, &(0x7f00000002c0)=0xc) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x14f, 0x4301) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e20, @multicast2}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1000, 0xffffffffffffff81}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r3, 0x4}, &(0x7f00000001c0)=0x8) 14:06:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x900000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1337.241903][T26626] FAULT_INJECTION: forcing a failure. [ 1337.241903][T26626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:06:00 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x200000010001, 0x291, 0xffffffffffffffff, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='\x00', 0x1, 0x3) [ 1337.311540][T26626] CPU: 1 PID: 26626 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1337.320705][T26626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.330771][T26626] Call Trace: [ 1337.334077][T26626] dump_stack+0x172/0x1f0 [ 1337.338441][T26626] should_fail.cold+0xa/0x15 [ 1337.343046][T26626] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1337.348860][T26626] ? ___might_sleep+0x163/0x280 [ 1337.348887][T26626] should_fail_alloc_page+0x50/0x60 [ 1337.348911][T26626] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1337.364350][T26626] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1337.364373][T26626] ? find_held_lock+0x35/0x130 [ 1337.364398][T26626] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1337.381333][T26626] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1337.387600][T26626] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1337.393871][T26626] alloc_pages_vma+0xdd/0x540 [ 1337.398562][T26626] shmem_alloc_page+0xc0/0x180 [ 1337.398578][T26626] ? shmem_swapin+0x1a0/0x1a0 14:06:00 executing program 2: [ 1337.398620][T26626] ? lock_downgrade+0x880/0x880 [ 1337.398641][T26626] ? __unlock_page_memcg+0x70/0x100 [ 1337.418286][T26626] ? kasan_check_read+0x11/0x20 [ 1337.418304][T26626] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1337.418325][T26626] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1337.418350][T26626] ? shmem_get_link+0x420/0x420 [ 1337.429849][T26626] ? kasan_check_write+0x14/0x20 [ 1337.429884][T26626] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1337.429904][T26626] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1337.445698][T26626] ? do_raw_spin_unlock+0x57/0x270 [ 1337.445720][T26626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1337.445740][T26626] mfill_zeropage+0x92f/0x1000 [ 1337.445772][T26626] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1337.456517][T26626] ? _parse_integer+0x190/0x190 [ 1337.467844][T26626] ? __lock_acquire+0x548/0x3fb0 [ 1337.467869][T26626] ? userfaultfd_read+0x1940/0x1940 [ 1337.467893][T26626] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1337.477746][T26626] ? tomoyo_init_request_info+0x105/0x1d0 [ 1337.477766][T26626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1337.477782][T26626] ? tomoyo_path_number_perm+0x263/0x520 [ 1337.477800][T26626] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1337.477827][T26626] ? __fget+0x35a/0x550 [ 1337.492771][T26626] ? userfaultfd_read+0x1940/0x1940 [ 1337.492793][T26626] do_vfs_ioctl+0xd6e/0x1390 [ 1337.492808][T26626] ? userfaultfd_read+0x1940/0x1940 [ 1337.492821][T26626] ? do_vfs_ioctl+0xd6e/0x1390 [ 1337.492841][T26626] ? ioctl_preallocate+0x210/0x210 [ 1337.492855][T26626] ? __fget+0x381/0x550 [ 1337.492876][T26626] ? ksys_dup3+0x3e0/0x3e0 14:06:00 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000001380)={0x0, 0x0, [], @raw_data=[0x7, 0x6, 0x6, 0x4, 0x5, 0x9, 0x7, 0x3f, 0x5784, 0x1, 0x400, 0x8ef, 0x8, 0x5, 0xfffffffffffffffd, 0x3, 0x4, 0x7, 0x8001, 0x200, 0x9, 0x1f, 0xf06, 0x1, 0x4bbd, 0x5, 0x2, 0x8, 0xfe3, 0x4, 0x100000001, 0x101]}) recvmsg$kcm(r0, &(0x7f0000001340)={&(0x7f0000000040), 0x80, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/102, 0x66}], 0x3, &(0x7f00000012c0)=""/103, 0x67}, 0x100) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) utimes(&(0x7f0000001500)='./file0\x00', &(0x7f0000001580)={{r1, r2/1000+10000}}) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) getsockname$unix(r0, &(0x7f0000001440)=@abs, &(0x7f00000014c0)=0x6e) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000015c0)={0x0, @null, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null]}) [ 1337.492900][T26626] ? tomoyo_file_ioctl+0x23/0x30 [ 1337.504860][T26626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1337.504877][T26626] ? security_file_ioctl+0x93/0xc0 [ 1337.504895][T26626] ksys_ioctl+0xab/0xd0 [ 1337.504919][T26626] __x64_sys_ioctl+0x73/0xb0 [ 1337.526801][T26626] do_syscall_64+0x103/0x610 [ 1337.526824][T26626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1337.526848][T26626] RIP: 0033:0x458c29 [ 1337.537138][T26626] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1337.537148][T26626] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1337.537163][T26626] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1337.537172][T26626] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1337.537181][T26626] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1337.537188][T26626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xa00000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x40b, &(0x7f0000000040)) 14:06:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7ff]}) 14:06:01 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x4, 0x400) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) [ 1337.537205][T26626] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:01 executing program 4 (fault-call:6 fault-nth:77): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000080)) 14:06:01 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfd]}) 14:06:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xe00000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x40e, &(0x7f0000000040)) 14:06:01 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffe7]}) [ 1337.851127][T26798] __ntfs_error: 4 callbacks suppressed [ 1337.851138][T26798] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1337.881938][T26850] FAULT_INJECTION: forcing a failure. [ 1337.881938][T26850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1337.919750][T26850] CPU: 1 PID: 26850 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1337.928926][T26850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.939000][T26850] Call Trace: [ 1337.942325][T26850] dump_stack+0x172/0x1f0 [ 1337.946698][T26850] should_fail.cold+0xa/0x15 [ 1337.951340][T26850] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1337.957160][T26850] ? ___might_sleep+0x163/0x280 [ 1337.962065][T26850] should_fail_alloc_page+0x50/0x60 [ 1337.967307][T26850] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1337.972700][T26850] ? free_unref_page_list+0x86f/0xc40 [ 1337.978109][T26850] ? release_pages+0x60f/0x1d20 [ 1337.983015][T26850] ? free_unref_page_list+0x86f/0xc40 [ 1337.988404][T26850] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1337.994148][T26850] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1338.000406][T26850] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1338.006692][T26850] alloc_pages_vma+0xdd/0x540 [ 1338.011411][T26850] shmem_alloc_page+0xc0/0x180 [ 1338.016211][T26850] ? shmem_swapin+0x1a0/0x1a0 [ 1338.020938][T26850] ? lock_downgrade+0x880/0x880 [ 1338.025810][T26850] ? __unlock_page_memcg+0x70/0x100 [ 1338.031026][T26850] ? kasan_check_read+0x11/0x20 [ 1338.035888][T26850] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1338.042153][T26850] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1338.047727][T26850] ? shmem_get_link+0x420/0x420 [ 1338.052595][T26850] ? kasan_check_write+0x14/0x20 [ 1338.057560][T26850] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1338.062943][T26850] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1338.068323][T26850] ? do_raw_spin_unlock+0x57/0x270 [ 1338.073474][T26850] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1338.079732][T26850] mfill_zeropage+0x92f/0x1000 [ 1338.084556][T26850] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1338.089687][T26850] ? _parse_integer+0x190/0x190 [ 1338.094556][T26850] ? __lock_acquire+0x548/0x3fb0 [ 1338.099522][T26850] ? userfaultfd_read+0x1940/0x1940 [ 1338.104755][T26850] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1338.111034][T26850] ? tomoyo_init_request_info+0x105/0x1d0 [ 1338.116788][T26850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.123055][T26850] ? tomoyo_path_number_perm+0x263/0x520 [ 1338.128805][T26850] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1338.134640][T26850] ? __fget+0x35a/0x550 [ 1338.138818][T26850] ? userfaultfd_read+0x1940/0x1940 [ 1338.144060][T26850] do_vfs_ioctl+0xd6e/0x1390 [ 1338.148686][T26850] ? userfaultfd_read+0x1940/0x1940 [ 1338.153894][T26850] ? do_vfs_ioctl+0xd6e/0x1390 [ 1338.158680][T26850] ? ioctl_preallocate+0x210/0x210 [ 1338.163801][T26850] ? __fget+0x381/0x550 [ 1338.167976][T26850] ? ksys_dup3+0x3e0/0x3e0 [ 1338.172407][T26850] ? tomoyo_file_ioctl+0x23/0x30 [ 1338.177531][T26850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.183783][T26850] ? security_file_ioctl+0x93/0xc0 [ 1338.188904][T26850] ksys_ioctl+0xab/0xd0 [ 1338.193086][T26850] __x64_sys_ioctl+0x73/0xb0 [ 1338.197751][T26850] do_syscall_64+0x103/0x610 [ 1338.203072][T26850] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1338.208983][T26850] RIP: 0033:0x458c29 [ 1338.212908][T26850] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1338.233147][T26850] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1338.241666][T26850] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1338.249656][T26850] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1338.258675][T26850] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:06:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1338.266672][T26850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1338.274659][T26850] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:01 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'ifb0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000980)=0xe8) r5 = accept$packet(0xffffffffffffff9c, &(0x7f0000000a80)={0x11, 0x0, 0x0}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000e80)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'teql0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000001100)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000011c0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a00)=0x14, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001b40)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001d80)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001e80)={'nlmon0\x00', r12}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000001ec0)={@rand_addr, 0x0}, &(0x7f0000001f00)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000009540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000009580)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000009600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009640)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000bcc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000c480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000c440)={&(0x7f000000bd00)={0x710, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x16c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff490}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x150, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x10001, 0xffffffff, 0x6, 0x8}, {0x9, 0xc3d8, 0x5, 0x1}, {0x48dad259, 0x2a9e, 0x100000000, 0x3d60}, {0x100000001, 0x863, 0xffffffffffffffe0, 0xd5e}, {0x70a, 0x488372fa, 0x3f}, {0x8, 0x8, 0xffffffff, 0x1ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r13}, {0x160, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0xa7c, 0x0, 0x1, 0x10001}, {0x8, 0x100, 0x80000001, 0x9}, {0x8, 0x3, 0x401, 0x80}, {0x6, 0x0, 0xd70, 0x40}, {0x1, 0x300, 0x8000, 0x80}, {0x200, 0xffffffff, 0x101, 0x9}, {0x9, 0x5a05, 0x1, 0x101}, {0x0, 0x5, 0x1000, 0xf5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff38}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x238, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xb37}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x100000000, 0x7fff, 0x7, 0x3}, {0x10000, 0x7, 0xd646, 0x88}, {0x1, 0x9a, 0x1, 0xfffffffffffffffa}, {0x9, 0x6, 0x0, 0x258}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x31a0, 0x6, 0x8e05341, 0x40}]}}}]}}]}, 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:06:01 executing program 4 (fault-call:6 fault-nth:78): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x1100000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:01 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x99800]}) 14:06:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x3f00000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:01 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x9, 0x400200) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000580)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000540)) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x100000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000080)="717393a7bb8574dc12d570a8ab5289a5cf3b14424938e9b5dad2f8348cd3061679ae4e0cc206bef557591fda53b2e352b9edd1eb6de22e55ff305021187027f369d378408e11007bd32559231745920fb2b41af4e9a19f1526da7737556910cb7d210863c6ea5e999aec5df80bcca5a2bb89022b7003e7cc45ea0ff5475616cba57b2b04aa3e7fa4dcc0184eb74e018378d5e0ef0ac906172242bd2427ee21713ef35d1c22d912c70416ba96fa37112bfb6150bd8658719677b4508325041a5992d41c662ae0a02db90829", 0xcb, 0x2}, {&(0x7f0000000200)="24d5e19ea77837e443fca9b02091e8a4a37de063a1f097ae71f54940420b83e85e09358a994f341a226b96fa8a70800ecc3e988812ec44c07c81fc6ba32cc615cd6a4467d67c38adfc47b1", 0x4b, 0x1}, {&(0x7f0000000280)="5dec1cf26e1de2bcb1238570af34da782dc673c7a0663666d21f6c4fc1f6d0c5e2681ddfb06e856cadbbfc36eae9aaf18a8275fdb9afa79f2e05b76c4331d0e246e19da7ce583e722dd991974d9d8e11e8e48b549fbee77606ac0d5c372a3348d1b5acd0db98ac733fa4638c6c37a98e5773c2ca2c8de7445ae02e90a8b72ce433320144d3d152cc4e88d10e2365d9390777bf21e8543c0b6d5dc94209a3324f0d297a71bdba9f08e20ec4a67e23c4c4d65ebeec51e27551d092d1d0df209b6253b7b4cacdea7f", 0xc7, 0x6aa}, {&(0x7f0000000380)="898c4c50a3deec27c51f851b2d1d3e868549e6a6ba839b57c65a74217b588d73d754618cd9e4921850beeec0ec81f0ebf5ab2d4ae97a3ea3d4b5d6db966a567d4bf4fc46f9cff7c176d373d938b0001763d759df0798f0791098e95f7a05b26128fc7deadeadf48cf1876daa7d916676ff5f87d32a5752f1b8ab87a85774191b3097787ac68ccb4534f00a459caa5117a7dae3adbe983b29e9ffc6490915a12b000bac012cbac5e46797cd5fe47738a058ef96ef86b0ff89edefe144c3ab15", 0xbf, 0x5}], 0x2000000, 0x0) [ 1338.486941][T27143] FAULT_INJECTION: forcing a failure. [ 1338.486941][T27143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1338.565750][T27143] CPU: 0 PID: 27143 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1338.574919][T27143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.584978][T27143] Call Trace: [ 1338.588294][T27143] dump_stack+0x172/0x1f0 [ 1338.588329][T27143] should_fail.cold+0xa/0x15 [ 1338.597290][T27143] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1338.597308][T27143] ? ___might_sleep+0x163/0x280 [ 1338.597333][T27143] should_fail_alloc_page+0x50/0x60 [ 1338.604993][T27191] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1338.607976][T27143] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1338.607998][T27143] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1338.632897][T27143] ? find_held_lock+0x35/0x130 [ 1338.637658][T27143] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1338.643460][T27143] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1338.649686][T27143] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1338.655953][T27143] alloc_pages_vma+0xdd/0x540 [ 1338.660639][T27143] shmem_alloc_page+0xc0/0x180 [ 1338.665387][T27143] ? shmem_swapin+0x1a0/0x1a0 [ 1338.670339][T27143] ? lock_downgrade+0x880/0x880 [ 1338.675186][T27143] ? __unlock_page_memcg+0x70/0x100 [ 1338.680373][T27143] ? kasan_check_read+0x11/0x20 [ 1338.685208][T27143] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1338.691437][T27143] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1338.696973][T27143] ? shmem_get_link+0x420/0x420 [ 1338.701806][T27143] ? kasan_check_write+0x14/0x20 [ 1338.706732][T27143] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1338.712133][T27143] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1338.717504][T27143] ? do_raw_spin_unlock+0x57/0x270 [ 1338.722618][T27143] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1338.729137][T27143] mfill_zeropage+0x92f/0x1000 [ 1338.733897][T27143] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1338.739010][T27143] ? _parse_integer+0x190/0x190 [ 1338.743848][T27143] ? __lock_acquire+0x548/0x3fb0 [ 1338.748776][T27143] ? userfaultfd_read+0x1940/0x1940 [ 1338.754076][T27143] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1338.760403][T27143] ? tomoyo_init_request_info+0x105/0x1d0 [ 1338.766121][T27143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.772379][T27143] ? tomoyo_path_number_perm+0x263/0x520 [ 1338.778120][T27143] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1338.783922][T27143] ? __fget+0x35a/0x550 [ 1338.788162][T27143] ? userfaultfd_read+0x1940/0x1940 [ 1338.793354][T27143] do_vfs_ioctl+0xd6e/0x1390 [ 1338.797942][T27143] ? userfaultfd_read+0x1940/0x1940 [ 1338.803136][T27143] ? do_vfs_ioctl+0xd6e/0x1390 [ 1338.807892][T27143] ? ioctl_preallocate+0x210/0x210 [ 1338.812998][T27143] ? __fget+0x381/0x550 [ 1338.817139][T27143] ? ksys_dup3+0x3e0/0x3e0 [ 1338.821550][T27143] ? tomoyo_file_ioctl+0x23/0x30 [ 1338.826477][T27143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.832704][T27143] ? security_file_ioctl+0x93/0xc0 [ 1338.837802][T27143] ksys_ioctl+0xab/0xd0 [ 1338.841947][T27143] __x64_sys_ioctl+0x73/0xb0 [ 1338.846625][T27143] do_syscall_64+0x103/0x610 [ 1338.851216][T27143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1338.857127][T27143] RIP: 0033:0x458c29 [ 1338.861025][T27143] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1338.881137][T27143] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1338.889762][T27143] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1338.897790][T27143] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1338.905765][T27143] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:06:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000080)) 14:06:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980001]}) 14:06:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:chkpwd_exec_t:s0\x00', 0x23, 0x3) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 14:06:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x4002000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1338.913720][T27143] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1338.921686][T27143] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:02 executing program 4 (fault-call:6 fault-nth:79): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 1338.992955][T27193] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=e1d52400) 14:06:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980900]}) 14:06:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x8dffffff00000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1339.063641][T27225] FAULT_INJECTION: forcing a failure. [ 1339.063641][T27225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1339.079931][T27191] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1339.166422][T27225] CPU: 0 PID: 27225 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1339.175672][T27225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.185732][T27225] Call Trace: [ 1339.185760][T27225] dump_stack+0x172/0x1f0 [ 1339.185788][T27225] should_fail.cold+0xa/0x15 [ 1339.185812][T27225] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1339.198021][T27225] ? ___might_sleep+0x163/0x280 [ 1339.198048][T27225] should_fail_alloc_page+0x50/0x60 [ 1339.198070][T27225] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1339.219284][T27225] ? free_unref_page_list+0x86f/0xc40 [ 1339.224663][T27225] ? release_pages+0x60f/0x1d20 [ 1339.229521][T27225] ? free_unref_page_list+0x86f/0xc40 [ 1339.234914][T27225] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1339.240664][T27225] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1339.246924][T27225] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1339.253271][T27225] alloc_pages_vma+0xdd/0x540 [ 1339.257996][T27225] shmem_alloc_page+0xc0/0x180 [ 1339.262764][T27225] ? shmem_swapin+0x1a0/0x1a0 [ 1339.267470][T27225] ? lock_downgrade+0x880/0x880 [ 1339.272326][T27225] ? __unlock_page_memcg+0x70/0x100 [ 1339.277525][T27225] ? kasan_check_read+0x11/0x20 [ 1339.282382][T27225] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1339.288635][T27225] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1339.294204][T27225] ? shmem_get_link+0x420/0x420 [ 1339.299058][T27225] ? kasan_check_write+0x14/0x20 [ 1339.304042][T27225] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1339.309869][T27225] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1339.315256][T27225] ? do_raw_spin_unlock+0x57/0x270 [ 1339.320379][T27225] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1339.326624][T27225] mfill_zeropage+0x92f/0x1000 [ 1339.331410][T27225] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1339.336536][T27225] ? _parse_integer+0x190/0x190 [ 1339.341402][T27225] ? __lock_acquire+0x548/0x3fb0 [ 1339.346464][T27225] ? userfaultfd_read+0x1940/0x1940 [ 1339.351770][T27225] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1339.358029][T27225] ? tomoyo_init_request_info+0x105/0x1d0 [ 1339.363779][T27225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.370080][T27225] ? tomoyo_path_number_perm+0x263/0x520 [ 1339.376021][T27225] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1339.381846][T27225] ? __fget+0x35a/0x550 [ 1339.386019][T27225] ? userfaultfd_read+0x1940/0x1940 [ 1339.391230][T27225] do_vfs_ioctl+0xd6e/0x1390 [ 1339.395826][T27225] ? userfaultfd_read+0x1940/0x1940 [ 1339.401026][T27225] ? do_vfs_ioctl+0xd6e/0x1390 [ 1339.405899][T27225] ? ioctl_preallocate+0x210/0x210 [ 1339.411021][T27225] ? __fget+0x381/0x550 [ 1339.415218][T27225] ? ksys_dup3+0x3e0/0x3e0 [ 1339.419649][T27225] ? tomoyo_file_ioctl+0x23/0x30 [ 1339.424598][T27225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.430844][T27225] ? security_file_ioctl+0x93/0xc0 [ 1339.435968][T27225] ksys_ioctl+0xab/0xd0 [ 1339.440663][T27225] __x64_sys_ioctl+0x73/0xb0 [ 1339.445270][T27225] do_syscall_64+0x103/0x610 [ 1339.449878][T27225] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1339.455772][T27225] RIP: 0033:0x458c29 [ 1339.459692][T27225] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1339.479307][T27225] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.487842][T27225] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1339.496013][T27225] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1339.504019][T27225] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:06:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980901]}) [ 1339.511993][T27225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1339.519965][T27225] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:02 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x84000, 0x0) 14:06:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xdc7f000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:02 executing program 4 (fault-call:6 fault-nth:80): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000080)) 14:06:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980902]}) 14:06:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4fadf85f, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCNXCL(r1, 0x540d) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x4, 0x6, 0x1f, 0xc5a}}}, [""]}, 0x30}}, 0x800) 14:06:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xe803000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1339.699863][T27520] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1339.721867][T27521] FAULT_INJECTION: forcing a failure. [ 1339.721867][T27521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1339.768445][T27521] CPU: 1 PID: 27521 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1339.777614][T27521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.787685][T27521] Call Trace: [ 1339.790997][T27521] dump_stack+0x172/0x1f0 [ 1339.795347][T27521] should_fail.cold+0xa/0x15 [ 1339.799952][T27521] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1339.805771][T27521] ? ___might_sleep+0x163/0x280 [ 1339.810650][T27521] should_fail_alloc_page+0x50/0x60 [ 1339.815875][T27521] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1339.821282][T27521] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1339.827025][T27521] ? find_held_lock+0x35/0x130 [ 1339.831815][T27521] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1339.837559][T27521] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1339.843821][T27521] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1339.850083][T27521] alloc_pages_vma+0xdd/0x540 [ 1339.854843][T27521] shmem_alloc_page+0xc0/0x180 [ 1339.859638][T27521] ? shmem_swapin+0x1a0/0x1a0 [ 1339.864360][T27521] ? lock_downgrade+0x880/0x880 [ 1339.869237][T27521] ? __unlock_page_memcg+0x70/0x100 [ 1339.874478][T27521] ? kasan_check_read+0x11/0x20 [ 1339.879348][T27521] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1339.885635][T27521] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1339.891217][T27521] ? shmem_get_link+0x420/0x420 [ 1339.896089][T27521] ? kasan_check_write+0x14/0x20 [ 1339.901065][T27521] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1339.906459][T27521] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1339.911841][T27521] ? do_raw_spin_unlock+0x57/0x270 [ 1339.916971][T27521] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1339.923226][T27521] mfill_zeropage+0x92f/0x1000 [ 1339.928010][T27521] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1339.933144][T27521] ? _parse_integer+0x190/0x190 [ 1339.938008][T27521] ? __lock_acquire+0x548/0x3fb0 [ 1339.942976][T27521] ? userfaultfd_read+0x1940/0x1940 [ 1339.948226][T27521] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1339.954489][T27521] ? tomoyo_init_request_info+0x105/0x1d0 [ 1339.960236][T27521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.966769][T27521] ? tomoyo_path_number_perm+0x263/0x520 [ 1339.972428][T27521] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1339.978262][T27521] ? __fget+0x35a/0x550 [ 1339.982443][T27521] ? userfaultfd_read+0x1940/0x1940 [ 1339.987662][T27521] do_vfs_ioctl+0xd6e/0x1390 [ 1339.992270][T27521] ? userfaultfd_read+0x1940/0x1940 [ 1339.997588][T27521] ? do_vfs_ioctl+0xd6e/0x1390 [ 1340.002375][T27521] ? ioctl_preallocate+0x210/0x210 [ 1340.007496][T27521] ? __fget+0x381/0x550 [ 1340.011668][T27521] ? ksys_dup3+0x3e0/0x3e0 14:06:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1340.016115][T27521] ? tomoyo_file_ioctl+0x23/0x30 [ 1340.021064][T27521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1340.027476][T27521] ? security_file_ioctl+0x93/0xc0 [ 1340.032619][T27521] ksys_ioctl+0xab/0xd0 [ 1340.036788][T27521] __x64_sys_ioctl+0x73/0xb0 [ 1340.041389][T27521] do_syscall_64+0x103/0x610 [ 1340.046007][T27521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1340.051938][T27521] RIP: 0033:0x458c29 [ 1340.055844][T27521] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1340.075466][T27521] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.083907][T27521] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1340.091899][T27521] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1340.100408][T27521] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1340.108745][T27521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:03 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980903]}) [ 1340.116737][T27521] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:03 executing program 4 (fault-call:6 fault-nth:81): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:03 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x3) 14:06:03 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980905]}) 14:06:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xf401000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x3, 0x3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000080)) [ 1340.292946][T27838] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1340.316085][T27837] FAULT_INJECTION: forcing a failure. [ 1340.316085][T27837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:06:03 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980909]}) 14:06:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xff00000000000000, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1340.397121][T27837] CPU: 1 PID: 27837 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1340.406304][T27837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.416388][T27837] Call Trace: [ 1340.419719][T27837] dump_stack+0x172/0x1f0 [ 1340.424108][T27837] should_fail.cold+0xa/0x15 [ 1340.428763][T27837] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1340.434610][T27837] ? ___might_sleep+0x163/0x280 [ 1340.439825][T27837] should_fail_alloc_page+0x50/0x60 [ 1340.445062][T27837] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1340.450485][T27837] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1340.456237][T27837] ? find_held_lock+0x35/0x130 [ 1340.456256][T27837] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1340.456272][T27837] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1340.456285][T27837] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1340.456305][T27837] alloc_pages_vma+0xdd/0x540 [ 1340.456323][T27837] shmem_alloc_page+0xc0/0x180 [ 1340.456338][T27837] ? shmem_swapin+0x1a0/0x1a0 14:06:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) [ 1340.456367][T27837] ? lock_downgrade+0x880/0x880 [ 1340.479374][T27837] ? __unlock_page_memcg+0x70/0x100 [ 1340.479389][T27837] ? kasan_check_read+0x11/0x20 [ 1340.479404][T27837] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1340.479424][T27837] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1340.479448][T27837] ? shmem_get_link+0x420/0x420 [ 1340.479471][T27837] ? kasan_check_write+0x14/0x20 [ 1340.530168][T27837] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1340.536103][T27837] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1340.541510][T27837] ? do_raw_spin_unlock+0x57/0x270 [ 1340.546660][T27837] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.552937][T27837] mfill_zeropage+0x92f/0x1000 [ 1340.557749][T27837] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1340.562975][T27837] ? _parse_integer+0x190/0x190 [ 1340.567862][T27837] ? __lock_acquire+0x548/0x3fb0 [ 1340.572851][T27837] ? userfaultfd_read+0x1940/0x1940 [ 1340.578357][T27837] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1340.584643][T27837] ? tomoyo_init_request_info+0x105/0x1d0 [ 1340.590406][T27837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1340.596730][T27837] ? tomoyo_path_number_perm+0x263/0x520 [ 1340.603032][T27837] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1340.608937][T27837] ? __fget+0x35a/0x550 [ 1340.613156][T27837] ? userfaultfd_read+0x1940/0x1940 [ 1340.618395][T27837] do_vfs_ioctl+0xd6e/0x1390 [ 1340.623058][T27837] ? userfaultfd_read+0x1940/0x1940 [ 1340.628471][T27837] ? do_vfs_ioctl+0xd6e/0x1390 [ 1340.633272][T27837] ? ioctl_preallocate+0x210/0x210 [ 1340.638421][T27837] ? __fget+0x381/0x550 [ 1340.642618][T27837] ? ksys_dup3+0x3e0/0x3e0 14:06:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1340.647208][T27837] ? tomoyo_file_ioctl+0x23/0x30 [ 1340.652200][T27837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1340.658561][T27837] ? security_file_ioctl+0x93/0xc0 [ 1340.663717][T27837] ksys_ioctl+0xab/0xd0 [ 1340.667911][T27837] __x64_sys_ioctl+0x73/0xb0 [ 1340.672640][T27837] do_syscall_64+0x103/0x610 [ 1340.677283][T27837] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1340.683228][T27837] RIP: 0033:0x458c29 14:06:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980912]}) [ 1340.687153][T27837] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1340.706782][T27837] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.715231][T27837] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1340.723224][T27837] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1340.731223][T27837] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1340.739438][T27837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:04 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2000, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x1, 0x2, {0xa, 0x4e21, 0x7ff, @local, 0x800}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="1555a8459725df04415a321215a5f2f7237b16805dbd3682c7f6a2ecbf3db183afb9b017f6bc53f4e56e38af0054a15900c6d2590840f08bc28546a2cb397fe3c520302794ae8b0cce62bd01d2a443d92d9ea2a85f575d2ff83db4ae69b7b911bbf438e59f16a636ed7bf9bf1abbf8ce1168d97c3aff20b765189e100d01b8e22b0056f0df08418afca577f0d647161a435d3bcd92c6f342fa618532f1a2d3d4456c8c2e89a416de57899e847976c76bd39858c6f79dcaf54578", 0xba}], 0x1, &(0x7f0000000280)=[{0x110, 0x0, 0x2, "78fa1d1ede3a0468d3cb797ac581ae0e16dc3fb9827270639c1df93469ff665544b4c23d7ed7f0202c3befe44f82e2d49f7bf37f983bc2cb312006c5ca9ac77b2559084f48ff48704c011a9c28d39ce91797b0c90289862ec0228e9cf5dd0d28036a72d23c3e971055595e93676eb031e53df3acb741c4a180a164acc8fe13ce25572390e52b1903d9d7d25b0fb7d7933878fbafa680ade82a162155bdedb0078dbd84486ee07708db1f2215037e32e7efb9377248058ebe0eeec4d2c4a62d215e1991cf3a48387c040ee5c6adc1200ba7139f464b37ff7c7370e91a6ac5dc39ed21d343f003e58a9ea524d6cf976862c84fce72700a6f1e0d"}, {0x88, 0x10b, 0xffffffffffff9885, "d426407a9c40578b1b244c92ee59c3fc68f8663a5c8d5367d2fdda42dd330186bc1dbc5985df21ee7f8d48371999b619d6aadeeefc5851f511bfa3fc0c76c4f35f06a634480430fa70da557855d3c0e71e3f997cb2d1f845a574fa3e8ccf10a85834f845943253604b16cd0e12115c536f28e1c8d9"}, {0x98, 0x11e, 0xc5ce, "20c64f977b4f07f5a546f0011bbeee2c7aa1a7dcb7987ad32ec2bb269fe04d9138d61aabe68a54b426352d1e298c8ad8d22cf93a85dcd4276f2148592f170eb4962bcce71dac219fd8720681b75fc92e16ed416fac1876755d471edb4256a10e8cc3c91d3969e65f88f259ba9f9b5a9a5dbc6ead0f99b5cac8318bc567ec1f285f"}, {0x58, 0x102, 0x0, "cee12db65240d18c1f5fcca520f109de2f0a12823bc3752a1f195b15f73bc71025a359906228e6b369c6055de4d1d59e122de1417e7646c350eebf06051b9fa0c77d20"}, {0x80, 0x112, 0x9, "f873578fd729baeab814413480075b81b4b4c0fe407444762e2cae9398a8a500d90b8dea017d7fab18c5175cbf1f32987ffa0fef2c9d41dcb28e4bbb8dcabdd558563da48f614e1cd98a554e3d91f44f4943d5b849eae7c16fea8716e342ae51fc27f064cc3e7482ea1d3f"}, {0x100, 0x11b, 0x5, "dad07bbb7d953f9a0c74cfb185038c095b8e31253dcdc5d5a82514251bdef407055978f6cc7a73d1aaf6ed2ecd696a6295bebd6f9ddcee569dc8d12812cdc049d456b0f1ec063f8fad3fea728efb7b4ae63b9c18ed92ad2b07df45663c40deac7d826c562d3b0659067ce93b2ccbf5af42ffb539f77d1ccc8e542c5642df0d303ba0c714aa96c8f12bfb1a38dc7f159ba3604e30bc2dee424ebffde6cd1a8c4021202415a2949c520436c491e8c185fc9101d0b30cd0821835ed37f3a54304d8285e99141e6951d0dfd5948c71d4e38ba3e711fb927bb5fea5124dae29fd8caea0e8998b5b4e93e205ef"}, {0x18, 0x88, 0x7, "031dda762f59"}, {0x1010, 0x10f, 0xea78, "3985eab0c1a396a2529c81cc2dbbea146974f87504a8c849bbacc6e4aa7c6e22f842e7d70493e753eab1cde6255a5cffaa1363fa8793ee2096909c9617743271ef404a5a27ef60e30b471db9ed5c3bcedec3e4947d33a9af69b2052f0159447e55a2ae5b1b21031e91f819f7583fc2eddb712e8685944a9d9913f5652b2b66441ef487cda5751c5ac9272618e5ed4acd4fcd7baa614352f5a01fbddc8dbae76eb106c5fd249ec25de49a3fc1aef768fc718ca20d65df8cf429b6677696877519bf0d91b771e519a6d4e0d76e5711d6e5f1342c3951035f3764e65db9a529699d86a53e0126469958fcdac0db55ef64b9a34dd45359a5184d0cb596b6821c2f3388edfa3aca37e87f1a6220baaa079137964975164d038049319d570f97ea90436aa71987d652c4a1d411fa04759eccb865cdfa30c2ec55563d71c7b129d3ac59269b783039fc15d93ed6d079c1373603f2cef1304501c0dc9e88dc5d54fad10b7f63c6709ed8c2dbd5a780cb05a97e58a37181a262217a7b155d728dc90336af1ba8da98e81b52080c37efe4bcc8f3376c31c247177acbcd4cb52e65a7922c353fddc9f7f4477fee0d8eb16b08959a2cd5ee47a3aaa2212eb312d5451ab57451389e5797bca7df422d2034834224dba27001ec9fe8ac85e1ba7f779f5f820cf11dcdb341d5f463ae6820144bfbf3e8678453bfca414867bd6e9e6f5c2e5a26294b8b0f5a4feaa6e801188518ceb80967262d31fe12f295819438cb728b8add26c3081d58a2f0ea9144c4190d0e3cfddef194a4a536763a5e2d2f5f8ee67b8e598d78b35bd2e1cb5b595b4c3de0834f0c685fe8306ca051609d3961a57379d37088dd7eb2d3dba4127820550a183e0e3b8077d8cb1867227d879b8c2a4874cc779b8b4986364a74652ce24497e82502e1c37fa3622bd73be998a9cd0758ee3ae278b68ce937775dd714696f1bc2e3600af82372462a9ef6e9a113beb3c44c13f0cf834963c4adc0b327cd0a2e85dda24fc36624dd2c0744795523865faea969f996f8cf921405074e09e1975c8da9505cbf9978148527e904ce26fda106e3629a6e4950e46904a54b58ad601d54965797b5ed987439dcdecf9f688e1b9f44d2c974b7e4a2e32c996a626ca72383626fce5aef416e5c02284f78a27dbf3678da83842f95cbeccfcf3738ee0bb47d4b3531a762cc0d00eb2fd711f011cf5a10b6d7f9639ab36754206cc3bdf40cac04b16ab9fdf4ccb65324d5b0cf30ecf4a98279e299ffae1ddd09f68e819f02c9142c314495bc0b728ba1b2d6f3946e6b947e297d3cafdd5e41b079c069238f3e8ff22db169e7d1eaf853fc5ff1c6c31694eee06ebe94111fec79cb9021dfc35d43a4b7615126ac843f29d6109a5bd331bc8dbef89dfe0df87f0f51b045084228a2e0d52a583fe60ce0d2530437463fefb9df8f3988906d5c0416f7937f910537a1103888b5ecfa868b33595e2df37bd2c8e88f360c85541c181f0cf0d3ecd1407ae642cb6157cd4e690d53e9d90b07a690548d9c0e311662c0b091708ced79b31fdf5ed643fad713538d3dd6a84a3a0fa37481bdb6bc1bf8a7d330f09608e0876477dd052a62ada5fcd6b4a58f307f968a2b7573d65696bca0e56999c9dd3e28f188730d863f3524583b3626ee0f867e576ebaaaf8f08eed3ee7fa0e233174f1bba0e789656c1c7db0a24db2220f960912ff7a0a301cbaac8e0acc1db4fbdf0224cf6e574789ad78416a01671d4c273829bb3f42aad75cf6f9a455b9553144f9349e503d9c002ae43369a8fb7d4c60316284588cb742775e6ab7e7bc7452092250c4d7b3accfbb0b52edb80b513356514a91dfbbd218b1a8473e5a27685c79587518abf55beab25c6191742f76339b7aa9747d3a9af36bd255b81634813699b1f6ec13261423b73e4cc57eb76d2ef45d15b94da7272864dbb99fe5ea36c59fd1663b296f552bf6f8d77673997eb2a824592dec95e9cd45d93e6738204cb2b3e206588664b545b398e5f05d0b178813b602750ca3a3522b05f490742431a38dd2b388151c7605f17a1d16f8eb1ff28b85a8939a4b2318d3719d1d650ba72ebc9bba7cb978fefcd20ed164bb9b4da0f088849db20856f5a78b8137f9830720153c645bffd5feb64ae797ac7b494dc39dd8785e1b8ded795f6c94ad29121e0d8bf0248f36c273882c6fb16717d98337699d1030339648bdeea8851e7ed9eb15909af601f330e27e9df0d11e4ff4833c8e35e5331049f469e2326cb341ba38b95b3d5a7f9fd57a81004ca5a9bd4d7bc025529086269bb6817fbb544458fe497365966d4e42039422aeef0e12fd13deb29867b9f57236f4aa470e17e36647854ff3230a9cf84decb71bafe79250122c5358443693f49596cca773497660e9f9903c3396614c509e7a667f9231661c6f6bb231463445ccd892fd984d4d068ff4ff7af0fc8598c5add1bed04852c2f43b26c546c72ff090cf94b973f43afd84788bc9e211f8ab39478c1a00c7b85ee7928d9e6caa1e05f8c68da488cf92ba9e7bc2b5587960e781f90af70f0ee2604c21b4169ef09e9a66df2e35bb7a7d84cbd5633a8d6d7e877a20f636301287869c25134db95536449d083e75969527d7a426c736c2d43671ad4a1f4d169b14aebf0798ebbec2b30c5618f1df6a048d6631a085e275176739d36b728dd2a90c50a9319fc4af284d0a141b45cbf62e693a6570570b0d7f65ebcd20a706a9a08c13dd7a20ca9d9787d6934058897167fdc7d148c5044f304ab909b84d0af438c82ecd17eded51ece408737802561f1e781c9de20e3c196d70a39bf7cf8ad40fc1e685429c24d31de81a8292f3abfd3781730fa7ef09cc9e4d94a5d5822d9e635146150d8c42cc571e9b4e8b73910e913bdd8f8a205f51f5c03b7cfdb707c19fc77eda9007475eeb14ab0b9acd7c952c73ed077bdd50d11ba9179863b13d06203519d26cc5ecbf2b1f87de70c881b7680c0a8dbc3b4fb214550b435452260d4310712568c39fae20efc45f26a98be2c3c527cccd92890f4df8757fde456191d21b66ea690923f2a64afd82905a1a12f128e63bbfc23abbb11b7eec92b8369c147e5dbda1fe8df04090afe03603d9735ce2464b97d65d241d375d501440a42f1b254b43916e1895d557e6708a38095f3990c777407c845ba02fe79d9627f264321c8bfa507a76f60edfa798463fdda1b876086bd536c02e6f16350739aea292908893a06300333f6093e22b717df57715c43b3fa649bfd82da46e39c8f1f22340f8584cfb3c51a6863b8d140efb50550ea65772da0af744e384d958dc589dc4e7ef68292e412317010b39e72d1c2531411eba925d36a8fdb7d658ce6a8bc8486fc6f39d1b5aa7fad11a4dd2d1f8dbf59ffdafece71d1c190f0871bd691eb999c523114881e33179aee75f54ad1401db0f57e73b4da39791712ec41d78c68a2d9977c40c4e0d7b90f1f5b9862b084fccc4eb238484d7c16127b23ef9ff841974870aa24de4829420d8298d7642f4aba8bc8156ecc974e42ffc0e2a51e2180ab26c893af817052caca8aa4303e3611d21cd6c81fc525b87f65bfaadc8404ce97e2dcb53838c9fd357b646a9765fc3200a90585adb66674f6489199d9b797b712e3f4391532c949bacbd3617e73c1f11109c5c953a5b3855be172ad685e399d05f17f52b9a0ffede152dfe066c4b8856d5465bfe1019370dc26496b00e695bbb89828733c71ea002001b5324e441fb995a844c567ebd7aac9cbb0c964b89d9b97abd1ed83ff42f7b082dba130b8be6b3e60db32b8c25d1b54c22c680c206eb1b2111292953013963c2b0f80c34e5f97ef239a30580479dbf90e5fd390dd8511592dc35118b482486e251eb1164a28a67dd3aaed76fe06d91e2184ea86cbba3857dc4236bbff6ec668a7afa91bbabfd2bfcda52c4fabb52c1ddc72696d6bc1afe319f2b2a23fadf4cc8870adbe4cb19c045617417eb5aeac4f18e1497beb703f23b2fdc9bec4a7efc24bc6f8a28d382daaabf06bbd2d0b1ef3bdba4d3ae0e2f83432d2857e6b5d22e649ebec31cc5c13a88d5206101d0cf2d4e2b63063f1aee1be75ed9fb61104d776d5647c1218c5fd2d14dbec7d911de7930a48a8dedd5331fda52dd9951ba0f2132d84820a547da2ec8201590b24aec745f8c0713f06429ab9bd575dc59cd49e8b6575cadaedf2c1c5d3fcbbb878aa9361a9909c777bfae42eeb92d4020dbef9890aa33cf0a05b447b5908b22f9a9643e95eac2a97b825c242c004bf7585311e63fca78a35680bc7f95d4ab5eb8638d7dd8b83e180982352ac4739f5f120736e2b2d380acc1de0be6c21dc2afaffbbb40747ac503da68e58e475003c1fc6def0a9d1a1c8ad9b262acafbc85c865602eaef933e6c16c40dd354633faffd3d8fc5d97e51ea7b70f2b5051b0ae24a9413dc88a5f4b860369ae40685429a4eda1a426e495d4d965033af8ab3fb9b561c95fb10187f3e23a9cfd8e1115df11f36dac8b3666bc71c90ce744bb36e718f58910cd385daecd043e173946bd4caf9fb02901a15e92735e79bafef1f6d486f690db0b4d4c086b17099bb59fe47393da278ca9526ebeed08735908c73b0fabfe9b878b539d417f59e3bf2e04d368cb1628256d6b50fecd3461364231df2cd71d29085d09054b3aa9429cdd91befdff5ff2c7502ed1c573fd03002864687920a6afc6c7c8b00c8e8513f39ec2f72e4ef7d3829d915f8c2aa665d0c2c8f62773a169ffd223ebc388467d38df70d22845bf52c7b828f3c4a16c6a6bda1099f7f4ba2599da25be7cf563d10d5df07ddbd21e888d054f943a2f521c29f4a1dc6c14fed76695b5f82c939069f5752888dba5ffe0c6846e71111bb6bc77a84d18d1b2e1a55de866da3a6a7ff9902b71e38dcdcdc7b8756cf620cb92c579a00f661e4e7f6ede782c0464d28d4d94a25dcaf1369643084862950e29f777dc6c035dab4ca4b9a0bc4ddcfbabc33c92335aa4d561660dbcba639cbee7c63312874f1a631b16039c85f97363ef325d0cd118a7bc85a56612bfb565b3f91ad65ef91d5c7a84890929e1ea37983c32ac45efe291a999fb95485772fc801793395aa82f4e1a28f75c121888540907ad028afcc313ee7fc6b3503e9d9b8e1a0902fdceb41c31e0a94dd0a071670bcd23a294304eaff809fbf1084caea66b3ed36fb7d07ab32d8aced9c901801498159837aa7144a59e6882eee203b0d2830545f315a532ad5140062d8ec0b754327e5c93f1bedc4718a48ade02f5ce8582f17aab4ae2db2008370f0b8f42d5b77d23354105e2f4390a0cef2495c20d01ddcad5c8453fe1168053fff6f409d0557748c6f505ee81e26f9fba5144d723094dc4b8aa814e6a42bccaea77dbf418126ac226de6d58449cc903cc40043ee38ce6c268ed5cfdc7ec2db21680725f0cbdd0ca03b58cfede90f054ac16b27b4fa825a0af8cb40c2af13da83483219cf4b37bd9fa52685f7b981a31501cc97d6886213e68e345bbdcefeb0ba9cf105944e8d6375ca5df8e8cb21c91d2709efe7136da09d124cbf999c7cf9fb9c2b9d0fcbb34f051c60e7ac7a901245e51775b610c3f3f7b68fa73686c1840d181c005ee735ac9837ed386785af31092cee6b7b37cf69fe8c76e0257d43cd3ca24b928b34a7ae6c288093a60b7f326c09c11dfd70fe6d0405f35a7bf604e09e455b94bbb39946e33cb3d6dc8bcbc7f33c67a627ae1712d053d9e5306529551441739aab25e74cdbe49d5f232f8108a91a2ec47eb38defc"}], 0x1430}, 0x1) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 1340.739448][T27837] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:04 executing program 4 (fault-call:6 fault-nth:82): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xffffffff00000000, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000080)) 14:06:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980913]}) 14:06:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000000000000007, 0x31, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1340.903836][T28153] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1340.961370][T28170] FAULT_INJECTION: forcing a failure. [ 1340.961370][T28170] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1341.006070][T28170] CPU: 1 PID: 28170 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1341.015374][T28170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.025457][T28170] Call Trace: [ 1341.028786][T28170] dump_stack+0x172/0x1f0 [ 1341.033237][T28170] should_fail.cold+0xa/0x15 [ 1341.037986][T28170] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1341.044283][T28170] ? ___might_sleep+0x163/0x280 [ 1341.049165][T28170] should_fail_alloc_page+0x50/0x60 [ 1341.054390][T28170] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1341.059783][T28170] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1341.059813][T28170] ? find_held_lock+0x35/0x130 [ 1341.070361][T28170] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1341.070378][T28170] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1341.070392][T28170] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1341.070416][T28170] alloc_pages_vma+0xdd/0x540 [ 1341.070436][T28170] shmem_alloc_page+0xc0/0x180 [ 1341.083146][T28170] ? shmem_swapin+0x1a0/0x1a0 [ 1341.083190][T28170] ? lock_downgrade+0x880/0x880 [ 1341.083208][T28170] ? __unlock_page_memcg+0x70/0x100 [ 1341.083223][T28170] ? kasan_check_read+0x11/0x20 [ 1341.083236][T28170] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1341.083256][T28170] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1341.083281][T28170] ? shmem_get_link+0x420/0x420 [ 1341.094403][T28170] ? kasan_check_write+0x14/0x20 [ 1341.094430][T28170] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1341.094446][T28170] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1341.094461][T28170] ? do_raw_spin_unlock+0x57/0x270 14:06:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4000031, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1341.094479][T28170] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1341.094503][T28170] mfill_zeropage+0x92f/0x1000 [ 1341.094533][T28170] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1341.094548][T28170] ? _parse_integer+0x190/0x190 [ 1341.094565][T28170] ? __lock_acquire+0x548/0x3fb0 [ 1341.094586][T28170] ? userfaultfd_read+0x1940/0x1940 [ 1341.188182][T28170] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1341.194470][T28170] ? tomoyo_init_request_info+0x105/0x1d0 [ 1341.200250][T28170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:06:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xffffffffffffffff, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980914]}) [ 1341.206624][T28170] ? tomoyo_path_number_perm+0x263/0x520 [ 1341.212470][T28170] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1341.218310][T28170] ? __fget+0x35a/0x550 [ 1341.222491][T28170] ? userfaultfd_read+0x1940/0x1940 [ 1341.227748][T28170] do_vfs_ioctl+0xd6e/0x1390 [ 1341.232387][T28170] ? userfaultfd_read+0x1940/0x1940 [ 1341.237607][T28170] ? do_vfs_ioctl+0xd6e/0x1390 [ 1341.242395][T28170] ? ioctl_preallocate+0x210/0x210 [ 1341.247535][T28170] ? __fget+0x381/0x550 [ 1341.251727][T28170] ? ksys_dup3+0x3e0/0x3e0 [ 1341.257313][T28170] ? tomoyo_file_ioctl+0x23/0x30 [ 1341.262273][T28170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1341.268544][T28170] ? security_file_ioctl+0x93/0xc0 [ 1341.273707][T28170] ksys_ioctl+0xab/0xd0 [ 1341.277899][T28170] __x64_sys_ioctl+0x73/0xb0 [ 1341.282516][T28170] do_syscall_64+0x103/0x610 [ 1341.287157][T28170] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1341.293071][T28170] RIP: 0033:0x458c29 14:06:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x29}}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x80000) [ 1341.297009][T28170] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1341.316810][T28170] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.325424][T28170] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1341.333418][T28170] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1341.341411][T28170] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1341.349430][T28170] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:04 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200000, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0xffffffffffffbb8e, 0x12) socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 1341.357511][T28170] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980915]}) 14:06:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 1341.428493][T28340] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:06:04 executing program 4 (fault-call:6 fault-nth:83): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) getsockopt(r0, 0x4, 0x9, &(0x7f0000000140)=""/99, &(0x7f0000000000)=0x63) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x5, 0x30}, &(0x7f0000000100)=0xc) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x2, r1}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x2, 0x20004000000000, 0x6, r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) fsetxattr(r0, &(0x7f0000000280)=@random={'os2.', '/dev/vga_arbiter\x00'}, &(0x7f00000002c0)='eth1%%\x00', 0x7, 0x2) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000180)) 14:06:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x980929]}) 14:06:04 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xec2b, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000240)={0x7, 0x33, 0x2}, 0x7) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xa0000000, 0x8080) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000280)={0x3a, "ec420565bd8657ebdef321c05ea17c8e64cc804c87a2a93b9c5d626e571ebf4a", 0x2, 0x1}) 14:06:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f900]}) 14:06:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 14:06:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000004c40)='/dev/dmmidi#\x00', 0x80000001, 0x240c02) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000004c80)={0x0, @in={{0x2, 0x561, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3f, 0x6, 0x7, 0x7, 0xc0}, &(0x7f0000004d40)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000004d80)=ANY=[@ANYRES32=r3, @ANYBLOB="db0000008fc85863642433a706bdfe454dc27477488e5b5b995082ea6b031d5e948b6998c6065b1b10140ccd67962e6e768b9c842c8bd43e33e16c1dc996bed84f83cebfc0c102b4746bae91b9d227058c3033a66813af0b9ce066e11a8f684a5cc2b3018d64f1c85c4fc145fb1841c063c7db2e307cb216302170b16b9b4108c84525b80595aa4300189bc85340005b260d60920a824977fd53dd3e89d26c4939940f27f6b717bb5be48667b3b87087723e95a2844c60cc150d226c3c3ba5bf3c23d954e06645e8ca502fc3be058b2bcf29ebbf0287342d705e03c0d4647a"], &(0x7f0000004e80)=0xe3) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) dup3(r0, r1, 0x0) [ 1341.663115][T28431] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1341.686708][T28453] FAULT_INJECTION: forcing a failure. [ 1341.686708][T28453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:06:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000080)) [ 1341.832596][T28453] CPU: 1 PID: 28453 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1341.841884][T28453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.851951][T28453] Call Trace: [ 1341.855271][T28453] dump_stack+0x172/0x1f0 [ 1341.859634][T28453] should_fail.cold+0xa/0x15 [ 1341.864242][T28453] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1341.870075][T28453] ? ___might_sleep+0x163/0x280 [ 1341.874969][T28453] should_fail_alloc_page+0x50/0x60 [ 1341.880188][T28453] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1341.885583][T28453] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1341.891320][T28453] ? find_held_lock+0x35/0x130 [ 1341.896128][T28453] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1341.901857][T28453] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1341.908121][T28453] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1341.914389][T28453] alloc_pages_vma+0xdd/0x540 [ 1341.919088][T28453] shmem_alloc_page+0xc0/0x180 [ 1341.923872][T28453] ? shmem_swapin+0x1a0/0x1a0 [ 1341.928587][T28453] ? lock_downgrade+0x880/0x880 [ 1341.933463][T28453] ? __unlock_page_memcg+0x70/0x100 [ 1341.938668][T28453] ? kasan_check_read+0x11/0x20 [ 1341.943525][T28453] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1341.949782][T28453] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1341.955349][T28453] ? shmem_get_link+0x420/0x420 [ 1341.960215][T28453] ? kasan_check_write+0x14/0x20 [ 1341.965197][T28453] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1341.970599][T28453] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1341.975987][T28453] ? do_raw_spin_unlock+0x57/0x270 14:06:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = dup3(r0, r1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) [ 1341.976007][T28453] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1341.976027][T28453] mfill_zeropage+0x92f/0x1000 [ 1341.976057][T28453] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1341.976079][T28453] ? _parse_integer+0x190/0x190 [ 1341.987621][T28453] ? __lock_acquire+0x548/0x3fb0 [ 1342.007288][T28453] ? userfaultfd_read+0x1940/0x1940 [ 1342.013340][T28453] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1342.019749][T28453] ? tomoyo_init_request_info+0x105/0x1d0 14:06:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x20000, 0x0) bind$isdn_base(r1, &(0x7f00000000c0)={0x22, 0x8, 0x9, 0x200, 0x2}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1342.027855][T28453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.034143][T28453] ? tomoyo_path_number_perm+0x263/0x520 [ 1342.039820][T28453] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1342.045667][T28453] ? __fget+0x35a/0x550 [ 1342.049933][T28453] ? userfaultfd_read+0x1940/0x1940 [ 1342.055419][T28453] do_vfs_ioctl+0xd6e/0x1390 [ 1342.060155][T28453] ? userfaultfd_read+0x1940/0x1940 [ 1342.065375][T28453] ? do_vfs_ioctl+0xd6e/0x1390 [ 1342.070165][T28453] ? ioctl_preallocate+0x210/0x210 [ 1342.075295][T28453] ? __fget+0x381/0x550 [ 1342.079475][T28453] ? ksys_dup3+0x3e0/0x3e0 [ 1342.083916][T28453] ? tomoyo_file_ioctl+0x23/0x30 [ 1342.088869][T28453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.095130][T28453] ? security_file_ioctl+0x93/0xc0 [ 1342.100265][T28453] ksys_ioctl+0xab/0xd0 [ 1342.104450][T28453] __x64_sys_ioctl+0x73/0xb0 [ 1342.109273][T28453] do_syscall_64+0x103/0x610 [ 1342.113905][T28453] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1342.119818][T28453] RIP: 0033:0x458c29 [ 1342.123824][T28453] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1342.143470][T28453] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1342.151990][T28453] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1342.159976][T28453] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1342.167960][T28453] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1342.175942][T28453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:05 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f901]}) [ 1342.183917][T28453] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:05 executing program 4 (fault-call:6 fault-nth:84): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:05 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000200)="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", 0x1000, 0x1}, {&(0x7f0000000080)="af01ba199faf", 0x6, 0x9}, {&(0x7f0000001200)="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", 0x11e3, 0x6}], 0x2002410, &(0x7f0000000140)='systemeth0\'+.\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002200)=0x0) rt_sigqueueinfo(r0, 0x22, &(0x7f0000002240)={0x3c, 0x8, 0x3}) 14:06:05 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f902]}) 14:06:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$admmidi(&(0x7f0000001a00)='/dev/admmidi#\x00', 0xa5, 0x4000) statx(r2, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff, &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001a40)={{{@in=@initdev, @in6}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000001b40)=0xe8) dup(r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}], 0xfffffe5a) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) finit_module(r1, &(0x7f00000000c0)='ppp0nodev/\'systemvmnet1*vboxnet1\'vmnet0\x00', 0x3) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) r3 = shmget(0x2, 0x1000, 0x7c000300, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) 14:06:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008b9000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000080)) 14:06:05 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f903]}) 14:06:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x11d) listen(r1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x412281, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x23) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1342.385178][T28840] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1342.425368][T28859] FAULT_INJECTION: forcing a failure. [ 1342.425368][T28859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:06:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xfffffffffffffffd, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10400900}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7eb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) [ 1342.513179][T28859] CPU: 0 PID: 28859 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1342.522367][T28859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.532437][T28859] Call Trace: [ 1342.535827][T28859] dump_stack+0x172/0x1f0 [ 1342.540179][T28859] should_fail.cold+0xa/0x15 [ 1342.545405][T28859] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1342.551235][T28859] ? ___might_sleep+0x163/0x280 [ 1342.556130][T28859] should_fail_alloc_page+0x50/0x60 [ 1342.561361][T28859] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1342.561383][T28859] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1342.561403][T28859] ? find_held_lock+0x35/0x130 [ 1342.561421][T28859] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1342.561443][T28859] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1342.572558][T28859] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1342.572581][T28859] alloc_pages_vma+0xdd/0x540 [ 1342.572600][T28859] shmem_alloc_page+0xc0/0x180 [ 1342.572613][T28859] ? shmem_swapin+0x1a0/0x1a0 [ 1342.572646][T28859] ? lock_downgrade+0x880/0x880 [ 1342.572666][T28859] ? __unlock_page_memcg+0x70/0x100 [ 1342.620054][T28859] ? kasan_check_read+0x11/0x20 [ 1342.624952][T28859] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1342.631214][T28859] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1342.636782][T28859] ? shmem_get_link+0x420/0x420 [ 1342.641643][T28859] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1342.647132][T28859] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1342.652539][T28859] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1342.657936][T28859] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1342.664207][T28859] mfill_zeropage+0x92f/0x1000 [ 1342.669525][T28859] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1342.674645][T28859] ? _parse_integer+0x190/0x190 [ 1342.679508][T28859] ? __lock_acquire+0x548/0x3fb0 [ 1342.684481][T28859] ? userfaultfd_read+0x1940/0x1940 [ 1342.689691][T28859] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1342.695938][T28859] ? tomoyo_init_request_info+0x105/0x1d0 [ 1342.701673][T28859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.707946][T28859] ? tomoyo_path_number_perm+0x263/0x520 [ 1342.713590][T28859] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1342.719418][T28859] ? __fget+0x35a/0x550 [ 1342.723588][T28859] ? userfaultfd_read+0x1940/0x1940 [ 1342.728807][T28859] do_vfs_ioctl+0xd6e/0x1390 [ 1342.733416][T28859] ? userfaultfd_read+0x1940/0x1940 [ 1342.738664][T28859] ? do_vfs_ioctl+0xd6e/0x1390 [ 1342.743466][T28859] ? ioctl_preallocate+0x210/0x210 [ 1342.748584][T28859] ? __fget+0x381/0x550 [ 1342.752761][T28859] ? ksys_dup3+0x3e0/0x3e0 [ 1342.757197][T28859] ? tomoyo_file_ioctl+0x23/0x30 [ 1342.762150][T28859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.768400][T28859] ? security_file_ioctl+0x93/0xc0 [ 1342.773523][T28859] ksys_ioctl+0xab/0xd0 [ 1342.777697][T28859] __x64_sys_ioctl+0x73/0xb0 [ 1342.782307][T28859] do_syscall_64+0x103/0x610 [ 1342.787607][T28859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1342.793504][T28859] RIP: 0033:0x458c29 [ 1342.797426][T28859] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1342.817047][T28859] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1342.825493][T28859] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1342.833470][T28859] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1342.841443][T28859] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1342.849449][T28859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:06 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f904]}) 14:06:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7fff, 0x80) ioctl$TIOCSBRK(r2, 0x5427) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1342.857439][T28859] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:06 executing program 2: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffde6, 0xffffffffffffffff, 0x4, 0x0) 14:06:06 executing program 4 (fault-call:6 fault-nth:85): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:06 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f905]}) 14:06:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000240)=""/122) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0)={0x85}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r3 = socket$inet6(0xa, 0x80006, 0x8) r4 = gettid() write$FUSE_LK(r2, &(0x7f00000000c0)={0x28, 0xfffffffffffffff5, 0x2, {{0x23b9, 0xffffffffffffffff, 0x0, r4}}}, 0x28) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000300)="061f7a3e17010c89861926579b2b3cea490f128df95fd8edc967c4f1060000ca81fc3112c1f12bf7cb4b38dc0a19a8723db211498a0a27b75c2f37aaeb5bd71cd39b010b11fac1020000000a37914700020000c4610800b0aa0ca15ebe736e3a23a802ff226709171556c08a8282d229771da8622265e5ab19c1d94fa61fbda8dec886981c489ede9f72a918171985793f47a9cc18fc3fa2c39f19a36fc7ae967c90e52141ade4602bca32c3e41b7c11300345a3b7eff683ff3358d28c1eae4b40c2b106fce6032b5ed3da91fa7f2fc12d89361bb8b7966dee2d681df79468489a4a357d177bb4dc9d3ad68e13b43f61f68200") sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r3, 0x1000000) 14:06:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x408, &(0x7f0000003180)=""/4096) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x8001, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x93}}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r3 = msgget$private(0x0, 0x4) msgsnd(r3, &(0x7f0000000180)={0x3, "7e8e9639ca1896c195bc42a8ea8d6f8c72820b40b134bdc831a55237b9946f4ffada3a23ff2ca53908eb0dc306b731257ad18b3852ac29573ac0fa46ba3753f69bebcfaafe74e68e4f"}, 0x51, 0x800) 14:06:06 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400000, 0x0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 14:06:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000080)) 14:06:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x402000, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x35) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1343.154385][T29167] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1343.188685][T29168] FAULT_INJECTION: forcing a failure. [ 1343.188685][T29168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1343.214957][T29168] CPU: 1 PID: 29168 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1343.224238][T29168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.234311][T29168] Call Trace: [ 1343.237630][T29168] dump_stack+0x172/0x1f0 [ 1343.242003][T29168] should_fail.cold+0xa/0x15 [ 1343.246621][T29168] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1343.252480][T29168] ? ___might_sleep+0x163/0x280 [ 1343.257373][T29168] should_fail_alloc_page+0x50/0x60 [ 1343.262611][T29168] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1343.268018][T29168] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1343.273787][T29168] ? find_held_lock+0x35/0x130 [ 1343.278574][T29168] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1343.284321][T29168] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1343.290619][T29168] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1343.297154][T29168] alloc_pages_vma+0xdd/0x540 [ 1343.301857][T29168] shmem_alloc_page+0xc0/0x180 [ 1343.306675][T29168] ? shmem_swapin+0x1a0/0x1a0 [ 1343.311394][T29168] ? lock_downgrade+0x880/0x880 [ 1343.316273][T29168] ? __unlock_page_memcg+0x70/0x100 [ 1343.321505][T29168] ? kasan_check_read+0x11/0x20 [ 1343.326385][T29168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1343.332654][T29168] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1343.338242][T29168] ? shmem_get_link+0x420/0x420 [ 1343.343147][T29168] ? retint_kernel+0x2d/0x2d [ 1343.347778][T29168] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1343.353197][T29168] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1343.358640][T29168] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1343.364902][T29168] mfill_zeropage+0x92f/0x1000 [ 1343.369693][T29168] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1343.374821][T29168] ? _parse_integer+0x190/0x190 [ 1343.379696][T29168] ? __lock_acquire+0x548/0x3fb0 [ 1343.384741][T29168] ? userfaultfd_read+0x1940/0x1940 [ 1343.389951][T29168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1343.396207][T29168] ? tomoyo_init_request_info+0x105/0x1d0 [ 1343.401952][T29168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1343.408220][T29168] ? tomoyo_path_number_perm+0x263/0x520 [ 1343.414506][T29168] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1343.421076][T29168] ? __fget+0x35a/0x550 [ 1343.425272][T29168] ? userfaultfd_read+0x1940/0x1940 [ 1343.430508][T29168] do_vfs_ioctl+0xd6e/0x1390 [ 1343.435154][T29168] ? userfaultfd_read+0x1940/0x1940 [ 1343.441360][T29168] ? do_vfs_ioctl+0xd6e/0x1390 [ 1343.446983][T29168] ? ioctl_preallocate+0x210/0x210 [ 1343.452131][T29168] ? __fget+0x381/0x550 [ 1343.456398][T29168] ? ksys_dup3+0x3e0/0x3e0 [ 1343.460933][T29168] ? tomoyo_file_ioctl+0x23/0x30 [ 1343.465892][T29168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1343.472145][T29168] ? security_file_ioctl+0x93/0xc0 [ 1343.477308][T29168] ksys_ioctl+0xab/0xd0 [ 1343.481479][T29168] __x64_sys_ioctl+0x73/0xb0 [ 1343.486084][T29168] do_syscall_64+0x103/0x610 [ 1343.490751][T29168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1343.496664][T29168] RIP: 0033:0x458c29 [ 1343.500577][T29168] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1343.520388][T29168] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.529032][T29168] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1343.537128][T29168] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1343.545136][T29168] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1343.553135][T29168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:06 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f906]}) [ 1343.561129][T29168] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:06 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x0, 0x41) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/156) 14:06:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = dup(r0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xad8a, 0x38000) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000000c0)={0x2, 0x4, 0x101, 0x5}) dup3(r0, r1, 0x0) [ 1343.714804][T29379] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:06:07 executing program 4 (fault-call:6 fault-nth:86): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f907]}) 14:06:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000080)) 14:06:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4d0040, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r3 = dup3(r0, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}]}) 14:06:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f908]}) [ 1343.795920][T29379] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:06:07 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffffffffffd16, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1ff, 0x2000) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffffffffffff0000) 14:06:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000300)={0x0, 0x0, 0x2080, {0x13001}, [], "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", "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"}) rt_sigprocmask(0x0, &(0x7f0000000080)={0x7}, &(0x7f00000000c0), 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) getpeername$netrom(r2, &(0x7f0000000180)={{0x3, @null}, [@bcast, @remote, @default, @netrom, @bcast, @bcast, @rose, @rose]}, &(0x7f0000000200)=0x48) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x4e23, 0xe03a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}, {0xa, 0x4e22, 0x51, @ipv4={[], [], @rand_addr=0x4}}, 0x8, [0x7f, 0x6597, 0x2, 0x6, 0x0, 0x7764, 0x5, 0x3]}, 0x5c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = dup3(r0, r1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="180729bd7000fedbdf251000000060000300080001000000000008000100000000001400060000000000000000000000ffffe00000011400060000000000000000000000ffffe0000001080007004e210000080007004e2300001400020073797a6b616c6c65723000000000000008000500090000000800060000000100"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c040) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000000c0)={0x0, 0x8}) [ 1343.959225][T29497] FAULT_INJECTION: forcing a failure. [ 1343.959225][T29497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1344.028802][T29497] CPU: 0 PID: 29497 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1344.037965][T29497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.048068][T29497] Call Trace: [ 1344.051425][T29497] dump_stack+0x172/0x1f0 [ 1344.055785][T29497] should_fail.cold+0xa/0x15 [ 1344.060414][T29497] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1344.066251][T29497] ? ___might_sleep+0x163/0x280 [ 1344.071147][T29497] should_fail_alloc_page+0x50/0x60 [ 1344.076371][T29497] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1344.081789][T29497] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1344.087537][T29497] ? find_held_lock+0x35/0x130 [ 1344.092325][T29497] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1344.098052][T29497] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1344.104322][T29497] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1344.110733][T29497] alloc_pages_vma+0xdd/0x540 [ 1344.115990][T29497] shmem_alloc_page+0xc0/0x180 [ 1344.120791][T29497] ? shmem_swapin+0x1a0/0x1a0 [ 1344.125512][T29497] ? lock_downgrade+0x880/0x880 [ 1344.130394][T29497] ? __unlock_page_memcg+0x70/0x100 [ 1344.135607][T29497] ? kasan_check_read+0x11/0x20 [ 1344.140463][T29497] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1344.146730][T29497] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1344.152330][T29497] ? shmem_get_link+0x420/0x420 [ 1344.157410][T29497] ? kasan_check_write+0x14/0x20 [ 1344.162660][T29497] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1344.168131][T29497] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1344.173513][T29497] ? do_raw_spin_unlock+0x57/0x270 [ 1344.178633][T29497] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1344.184886][T29497] mfill_zeropage+0x92f/0x1000 [ 1344.189671][T29497] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1344.194809][T29497] ? _parse_integer+0x190/0x190 [ 1344.199849][T29497] ? __lock_acquire+0x548/0x3fb0 [ 1344.204808][T29497] ? userfaultfd_read+0x1940/0x1940 [ 1344.210011][T29497] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1344.216281][T29497] ? tomoyo_init_request_info+0x105/0x1d0 [ 1344.222025][T29497] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1344.228295][T29497] ? tomoyo_path_number_perm+0x263/0x520 [ 1344.233953][T29497] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1344.239794][T29497] ? __fget+0x35a/0x550 [ 1344.244006][T29497] ? userfaultfd_read+0x1940/0x1940 [ 1344.249223][T29497] do_vfs_ioctl+0xd6e/0x1390 [ 1344.253828][T29497] ? userfaultfd_read+0x1940/0x1940 [ 1344.259027][T29497] ? do_vfs_ioctl+0xd6e/0x1390 [ 1344.264024][T29497] ? ioctl_preallocate+0x210/0x210 [ 1344.270876][T29497] ? __fget+0x381/0x550 [ 1344.275160][T29497] ? ksys_dup3+0x3e0/0x3e0 [ 1344.279699][T29497] ? tomoyo_file_ioctl+0x23/0x30 [ 1344.284665][T29497] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1344.290998][T29497] ? security_file_ioctl+0x93/0xc0 [ 1344.296133][T29497] ksys_ioctl+0xab/0xd0 [ 1344.300298][T29497] __x64_sys_ioctl+0x73/0xb0 [ 1344.304955][T29497] do_syscall_64+0x103/0x610 [ 1344.310037][T29497] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1344.315930][T29497] RIP: 0033:0x458c29 [ 1344.319826][T29497] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1344.339451][T29497] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.347882][T29497] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1344.355864][T29497] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1344.363885][T29497] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1344.371889][T29497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:07 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000100)) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x40000) r1 = semget$private(0x0, 0x0, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000300)=""/135) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, [], 0x2a}, 0x7}, @in6={0xa, 0x4e22, 0x4d, @loopback, 0x20000000}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e24, 0x8, @mcast1, 0xfc12}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e21, 0xd945, @loopback, 0x8}], 0xac) accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80800) 14:06:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x98f909]}) [ 1344.379880][T29497] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) r4 = dup3(r2, r3, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x1b, 0x5, 0x690, 0x278, 0x0, 0x3e0, 0x188, 0x278, 0x660, 0x660, 0x660, 0x660, 0x660, 0x5, &(0x7f00000006c0), {[{{@ipv6={@rand_addr="2812b7aa2eaf8c3e095214d2ab937189", @rand_addr="8d84b7c79fb586b711ab8af8030d4626", [0x0, 0xff, 0x0, 0xff], [0xffffffff, 0xffffffff], 'caif0\x00', 'yam0\x00', {}, {0xff}, 0x7f, 0x1, 0x7, 0x1d}, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv6=@mcast2, @port=0x4e20, @gre_key=0xffffffff}}}, {{@ipv6={@empty, @mcast2, [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], [0xffffffff, 0xffffff00, 0xff0000ff, 0xffffffff], 'rose0\x00', 'ip6_vti0\x00', {}, {}, 0x33, 0x8001, 0x5, 0x40}, 0x0, 0xc8, 0xf0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x800, 0x1, 0xff, 0x10, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}, @ipv6=@local, @gre_key, @port=0x4e23}}}, {{@uncond, 0x0, 0x238, 0x280, 0x0, {}, [@common=@inet=@sctp={0x148, 'sctp\x00', 0x0, {0x4e20, 0x4e24, 0x4e22, 0x4e22, [0x0, 0x2, 0x101, 0xfffffffffffffffa, 0x0, 0x5, 0x1, 0x3, 0x8, 0x7, 0xc00000000, 0x100000001, 0x7fffffff, 0x8, 0x1f, 0x8001, 0x0, 0x100000000, 0x0, 0x7fff, 0x1, 0x81, 0x7fffffff, 0x5, 0x4, 0xff, 0x4, 0x9, 0x45, 0x2, 0x2, 0x405, 0x1, 0x10000, 0x0, 0x2, 0x80000000, 0xffffffffffffdb43, 0x5, 0x2bf6, 0x4, 0x2a2, 0x5d67, 0x7fffffff, 0x0, 0x8001, 0x2, 0x8, 0x400, 0x100000000, 0x5, 0x7, 0x1000, 0x5, 0x2, 0x1000, 0x9, 0x1, 0x18, 0x2, 0x749, 0x1, 0x6], 0x4, [{0x7, 0x80, 0x10000}, {0xffffffffffffff7f, 0xffffffffffff8000, 0x81}, {0x5, 0x80, 0x7}, {0xf9e, 0x5, 0x100000001}], 0x4, 0x5, 0x4}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x80, 0x20, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv4=@loopback, @ipv4=@remote, @icmp_id=0x65, @gre_key=0x75}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000004c0)) utimensat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', &(0x7f0000000440)={{0x0, 0x7530}, {0x77359400}}, 0x100) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount(0x0, 0x0, 0x0, 0x80000, 0x0) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="10000100000000002000010000000000"], 0x1, 0x1) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1, [@loopback]}, 0x14) r7 = syz_open_procfs(r1, &(0x7f0000000080)='cgroup\x00') ioctl$TIOCLINUX7(r7, 0x541c, &(0x7f00000000c0)={0x7, 0x4a46}) 14:06:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xf0f002]}) [ 1344.522025][T29709] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:06:07 executing program 4 (fault-call:6 fault-nth:87): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:07 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4, 0x2000) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f00000000c0)={0x3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) 14:06:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000080)) 14:06:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xf0f017]}) [ 1344.577272][T29709] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:06:08 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffff9c, 0x40200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x0, "56f5f47b9168d877"}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x400) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x1, 0x4, 0x9, 0x5679, 0x401, 0x200}}, 0x8) 14:06:08 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xf0f01e]}) 14:06:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1344.751576][T29791] FAULT_INJECTION: forcing a failure. [ 1344.751576][T29791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1344.778453][T29801] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1344.837500][T29791] CPU: 0 PID: 29791 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1344.846684][T29791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.856849][T29791] Call Trace: [ 1344.860186][T29791] dump_stack+0x172/0x1f0 [ 1344.864564][T29791] should_fail.cold+0xa/0x15 [ 1344.869197][T29791] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1344.875032][T29791] ? ___might_sleep+0x163/0x280 [ 1344.879912][T29791] should_fail_alloc_page+0x50/0x60 [ 1344.885132][T29791] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1344.890523][T29791] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1344.896477][T29791] ? find_held_lock+0x35/0x130 [ 1344.901254][T29791] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1344.907011][T29791] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1344.913281][T29791] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1344.919538][T29791] alloc_pages_vma+0xdd/0x540 [ 1344.925045][T29791] shmem_alloc_page+0xc0/0x180 [ 1344.929820][T29791] ? shmem_swapin+0x1a0/0x1a0 [ 1344.934531][T29791] ? lock_downgrade+0x880/0x880 [ 1344.939393][T29791] ? __unlock_page_memcg+0x70/0x100 [ 1344.944611][T29791] ? kasan_check_read+0x11/0x20 [ 1344.949473][T29791] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1344.955729][T29791] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1344.961297][T29791] ? shmem_get_link+0x420/0x420 [ 1344.966159][T29791] ? kasan_check_write+0x14/0x20 [ 1344.971132][T29791] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1344.976523][T29791] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1344.981907][T29791] ? do_raw_spin_unlock+0x57/0x270 [ 1344.987052][T29791] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1344.993322][T29791] mfill_zeropage+0x92f/0x1000 [ 1344.998134][T29791] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1345.003274][T29791] ? _parse_integer+0x190/0x190 [ 1345.008145][T29791] ? __lock_acquire+0x548/0x3fb0 [ 1345.013122][T29791] ? userfaultfd_read+0x1940/0x1940 [ 1345.018335][T29791] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1345.024603][T29791] ? tomoyo_init_request_info+0x105/0x1d0 [ 1345.030332][T29791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.036580][T29791] ? tomoyo_path_number_perm+0x263/0x520 [ 1345.042222][T29791] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1345.048043][T29791] ? __fget+0x35a/0x550 [ 1345.052219][T29791] ? userfaultfd_read+0x1940/0x1940 [ 1345.057518][T29791] do_vfs_ioctl+0xd6e/0x1390 [ 1345.062136][T29791] ? userfaultfd_read+0x1940/0x1940 [ 1345.067370][T29791] ? do_vfs_ioctl+0xd6e/0x1390 [ 1345.072156][T29791] ? ioctl_preallocate+0x210/0x210 [ 1345.077278][T29791] ? __fget+0x381/0x550 [ 1345.081452][T29791] ? ksys_dup3+0x3e0/0x3e0 [ 1345.085914][T29791] ? tomoyo_file_ioctl+0x23/0x30 [ 1345.090873][T29791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.097326][T29791] ? security_file_ioctl+0x93/0xc0 [ 1345.102473][T29791] ksys_ioctl+0xab/0xd0 [ 1345.106704][T29791] __x64_sys_ioctl+0x73/0xb0 [ 1345.112189][T29791] do_syscall_64+0x103/0x610 [ 1345.116886][T29791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1345.122790][T29791] RIP: 0033:0x458c29 [ 1345.126808][T29791] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1345.146536][T29791] RSP: 002b:00007f0323381c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1345.154959][T29791] RAX: ffffffffffffffda RBX: 00007f0323381c90 RCX: 0000000000458c29 [ 1345.162935][T29791] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000003 [ 1345.170926][T29791] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.178912][T29791] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233826d4 14:06:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x40010, r0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x10000, 0xed, 0xfffffffffffff001}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20200, 0x0) bind$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0x2, @local}}, 0x1e) write$9p(r1, &(0x7f00000000c0)="9468cd120b9a5d6c9a19bec50c653be9c928517f28a91ff1ce881c70e1db173e49a80f489069fe9da60bbb8f9dcd74e244e20f4e79a9e6eb8a094a6339fbe2a5f2e074b1af6886e0663d32774921019d19f3aa400c305dc064bb783b544e5ec760b08f2afa6638f52c1049ba0a19c1d3c9f38b", 0x73) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)={{0xcc, 0x8, 0x8001, 0x10a, 0x800000001f0, 0x5e87, 0x260, 0x4}, "f800601d0d5bf1"}, 0x27) 14:06:08 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xf0f025]}) [ 1345.186913][T29791] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000004 [ 1345.207743][T29801] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:06:08 executing program 4 (fault-call:6 fault-nth:88): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:08 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x8) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 14:06:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000080)) 14:06:08 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xf0f041]}) 14:06:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/7, &(0x7f0000000100)=0x7) 14:06:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x7f}}, {0x2, 0x4e24, @local}, 0x120, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000140)='ipddp0\x00', 0x0, 0x1, 0x1e}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r3 = dup3(r0, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000000)={0x1, 0x6, 0xec, 0x8, 'syz1\x00', 0xf}) [ 1345.407699][T30044] FAULT_INJECTION: forcing a failure. [ 1345.407699][T30044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1345.437935][T30048] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 1345.464047][T30044] CPU: 0 PID: 30044 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1345.473228][T30044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.483300][T30044] Call Trace: [ 1345.486615][T30044] dump_stack+0x172/0x1f0 [ 1345.490987][T30044] should_fail.cold+0xa/0x15 [ 1345.495691][T30044] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1345.501517][T30044] ? ___might_sleep+0x163/0x280 [ 1345.506395][T30044] should_fail_alloc_page+0x50/0x60 14:06:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000200)) fstat(r0, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x83e0, 0x400000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="ac0884e48ace821cbb6eccaad6371e0d", 0x10) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) fcntl$setpipe(r0, 0x407, 0x3) dup3(r2, r3, 0x0) [ 1345.511631][T30044] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1345.517144][T30044] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1345.523008][T30044] ? find_held_lock+0x35/0x130 [ 1345.527792][T30044] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1345.533526][T30044] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1345.539826][T30044] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1345.546138][T30044] alloc_pages_vma+0xdd/0x540 [ 1345.550842][T30044] shmem_alloc_page+0xc0/0x180 [ 1345.555818][T30044] ? shmem_swapin+0x1a0/0x1a0 14:06:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000080)={0x4, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1345.560537][T30044] ? lock_downgrade+0x880/0x880 [ 1345.565424][T30044] ? __unlock_page_memcg+0x70/0x100 [ 1345.570645][T30044] ? kasan_check_read+0x11/0x20 [ 1345.575514][T30044] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1345.581827][T30044] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1345.587421][T30044] ? shmem_get_link+0x420/0x420 [ 1345.592307][T30044] ? kasan_check_write+0x14/0x20 [ 1345.597330][T30044] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1345.602742][T30044] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1345.608170][T30044] ? do_raw_spin_unlock+0x57/0x270 [ 1345.613329][T30044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1345.620049][T30044] mfill_zeropage+0x92f/0x1000 [ 1345.625045][T30044] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1345.630212][T30044] ? _parse_integer+0x190/0x190 [ 1345.635119][T30044] ? __lock_acquire+0x548/0x3fb0 [ 1345.640120][T30044] ? userfaultfd_read+0x1940/0x1940 [ 1345.645386][T30044] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1345.651668][T30044] ? tomoyo_init_request_info+0x105/0x1d0 [ 1345.657431][T30044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:06:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x2, 0x101080) ioctl$TIOCSCTTY(r1, 0x540e, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x100000001, 0x2, 0x5, 0x0, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={r3, 0x5}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1345.663907][T30044] ? tomoyo_path_number_perm+0x263/0x520 [ 1345.669651][T30044] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1345.675517][T30044] ? __fget+0x35a/0x550 [ 1345.679748][T30044] ? userfaultfd_read+0x1940/0x1940 [ 1345.684986][T30044] do_vfs_ioctl+0xd6e/0x1390 [ 1345.689628][T30044] ? userfaultfd_read+0x1940/0x1940 [ 1345.695070][T30044] ? do_vfs_ioctl+0xd6e/0x1390 [ 1345.699895][T30044] ? ioctl_preallocate+0x210/0x210 [ 1345.705072][T30044] ? __fget+0x381/0x550 [ 1345.709290][T30044] ? ksys_dup3+0x3e0/0x3e0 [ 1345.713779][T30044] ? tomoyo_file_ioctl+0x23/0x30 [ 1345.718749][T30044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.725171][T30044] ? security_file_ioctl+0x93/0xc0 [ 1345.730328][T30044] ksys_ioctl+0xab/0xd0 [ 1345.734567][T30044] __x64_sys_ioctl+0x73/0xb0 [ 1345.739218][T30044] do_syscall_64+0x103/0x610 [ 1345.743861][T30044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1345.749790][T30044] RIP: 0033:0x458c29 14:06:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000180)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) [ 1345.753710][T30044] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1345.773360][T30044] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1345.782598][T30044] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1345.790696][T30044] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1345.799078][T30044] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1345.807116][T30044] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xf0f048]}) [ 1345.815157][T30044] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:09 executing program 4 (fault-call:6 fault-nth:89): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 1345.878559][T30335] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:06:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xf99800]}) 14:06:09 executing program 2: r0 = geteuid() r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x600000, 0x160) accept4$packet(0xffffffffffffff9c, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001600)=0x14, 0x80000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001640)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@broadcast, 0x4e21, 0x0, 0x4e20, 0x6, 0x2, 0x20, 0x80, 0xff, r2, r0}, {0xffffffff, 0x80000000, 0x7, 0x5, 0x401, 0x100000001, 0xfe, 0xe4c}, {0x35d1, 0x5, 0x3}, 0x8, 0x0, 0x0, 0x1, 0x3, 0x3}, {{@in6=@remote, 0x4d2, 0xff}, 0x2, @in6=@remote, 0x0, 0x2, 0x3, 0xe9, 0xfffffffffffffc01, 0x3, 0x5}}, 0xe8) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x10000, 0x7, &(0x7f0000001440)=[{&(0x7f0000000080)="6f3708b5627df0eb86da89dba6c1a8dd7d969245d6bd87b12e744a23fe34ab2080a70b1db9065cec27db2d32b4dbc16feda22c5c5d3c184a1f42bc206855558e26407c86e5e1505fc601213c18a1578681734baa834738734cd33386cca6abf970b7778a8f4ad381ec9d255ed2e5e6e5f282bee9176f83f6e39b1e3701439f2368ac7fb4fc6521968e1043a0a412403ad70cfadaecb01ecf6b629b5d0aa88df6fcb7d07df093762c210839c4e63ffa0b415c8999e2f72a16bb896849f4d3e7df20ac56be498af6bccf64a6435d845de3e57fa8a3acaf40550d6f3605388d4e2c011a72caed6f6227c8ff79cc5fd35bde4eb8ca5184", 0xf5, 0x8}, {&(0x7f0000000180)="70b6c63854039ff8b3c83ea9fb88c22a8717f53ba0a98e0c7f2bd5678d66c4463f128e2c173f2309cee16e2d27e85f1ceb287d9136823ce4829bea99fb10098907c9dd1f4dd1c7f8297018a1858078134e75c1c4381615616676c512cd0e6b12998eaf0158ba4429ecf9ee500d54388b3c4bdd84a8d21fa04719dda130d5", 0x7e, 0x401}, {&(0x7f0000000200)="c1f909cab5170572847a3dc5b68df0c9f3d872413eb7f697cfedd131e38acfb232d82fe991360e52c7f498f2cca32c19e37547896aa8b271123c2c5fc082158e068a282977a1fff4f0923561731238f58b7faa129e4be21f0682903fa39f72dc2c7563f11222a886fcb6e9478726be9cef43eeb900a022403c442842ad5c940a35596ca92c2238e57d25d8aded383b6ab062b8fdb0b1b733b68314286d19b2808dc1ae548ac509aac9fb1386adce8125ff1211d1", 0xb4, 0x1}, {&(0x7f00000002c0), 0x0, 0x7}, {&(0x7f0000000300)="00c8f908ec261a2dd9f288953198c6c31a081a82fba2ce5fcc6a31fc41cb77de56624bed57e912d4426c2d98eb001ae673ab1dc5577837bfe76b5d2bb4efd9a6a406057c5e07e74e9f685f27176612fd1154eaf8d326dbdad0ccecf60a76aed528d2073fd833b0704458b357d579357a11a236656a951f6ea09162831bb7a92d48c87608ce1044f82211524240fea6760d1e0c13c036f5343159c92091edf1f1a141a1ae8e82c418c2ca17af9a", 0xad, 0x4}, {&(0x7f00000003c0)="bd0591a443e0443ef73c8c83b91bdb09d9e7277b3e33840ae62eec2d838364b68a82d9510cb8ce998efab43b5874cd1557fa903be1f80eedc1552c3d010461fafc0ee256493f88c7404c126f74399a05b614822cea14daa2a9596821ba1d969d416b97d0f411468b352a4b8f02c404a345262ae554", 0x75, 0x7}, {&(0x7f0000000440)="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", 0x1000, 0x1f}], 0x1, &(0x7f0000001500)={[{@notreelog='notreelog'}, {@fragment_metadata='fragment=metadata'}, {@skip_balance='skip_balance'}], [{@fowner_gt={'fowner>', r0}}, {@smackfshat={'smackfshat', 0x3d, 'eth0cgroup$'}}, {@obj_type={'obj_type', 0x3d, 'eth0-/'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x3d}}]}) [ 1346.004517][T30469] FAULT_INJECTION: forcing a failure. [ 1346.004517][T30469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1346.056047][T30469] CPU: 1 PID: 30469 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1346.065236][T30469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.075483][T30469] Call Trace: [ 1346.078796][T30469] dump_stack+0x172/0x1f0 [ 1346.083331][T30469] should_fail.cold+0xa/0x15 [ 1346.087937][T30469] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1346.087956][T30469] ? ___might_sleep+0x163/0x280 [ 1346.087988][T30469] should_fail_alloc_page+0x50/0x60 [ 1346.104320][T30469] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1346.109912][T30469] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1346.109934][T30469] ? find_held_lock+0x35/0x130 [ 1346.109956][T30469] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1346.126135][T30469] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1346.126150][T30469] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1346.126171][T30469] alloc_pages_vma+0xdd/0x540 [ 1346.126191][T30469] shmem_alloc_page+0xc0/0x180 [ 1346.126205][T30469] ? shmem_swapin+0x1a0/0x1a0 [ 1346.126237][T30469] ? lock_downgrade+0x880/0x880 [ 1346.126254][T30469] ? __unlock_page_memcg+0x70/0x100 [ 1346.126269][T30469] ? kasan_check_read+0x11/0x20 [ 1346.126281][T30469] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1346.126306][T30469] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1346.144117][T30469] ? shmem_get_link+0x420/0x420 [ 1346.144135][T30469] ? kasan_check_write+0x14/0x20 [ 1346.144155][T30469] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1346.144170][T30469] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1346.144185][T30469] ? do_raw_spin_unlock+0x57/0x270 [ 1346.144202][T30469] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1346.144219][T30469] mfill_zeropage+0x92f/0x1000 [ 1346.144248][T30469] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1346.222297][T30469] ? _parse_integer+0x190/0x190 [ 1346.227197][T30469] ? __lock_acquire+0x548/0x3fb0 [ 1346.232163][T30469] ? userfaultfd_read+0x1940/0x1940 [ 1346.237384][T30469] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1346.243652][T30469] ? tomoyo_init_request_info+0x105/0x1d0 [ 1346.249614][T30469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1346.259464][T30469] ? tomoyo_path_number_perm+0x263/0x520 [ 1346.265134][T30469] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1346.270973][T30469] ? __fget+0x35a/0x550 [ 1346.275174][T30469] ? userfaultfd_read+0x1940/0x1940 [ 1346.280385][T30469] do_vfs_ioctl+0xd6e/0x1390 [ 1346.284993][T30469] ? userfaultfd_read+0x1940/0x1940 [ 1346.290202][T30469] ? do_vfs_ioctl+0xd6e/0x1390 [ 1346.294980][T30469] ? ioctl_preallocate+0x210/0x210 [ 1346.300104][T30469] ? __fget+0x381/0x550 [ 1346.304279][T30469] ? ksys_dup3+0x3e0/0x3e0 [ 1346.309122][T30469] ? tomoyo_file_ioctl+0x23/0x30 [ 1346.314080][T30469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1346.320424][T30469] ? security_file_ioctl+0x93/0xc0 [ 1346.325561][T30469] ksys_ioctl+0xab/0xd0 [ 1346.330625][T30469] __x64_sys_ioctl+0x73/0xb0 [ 1346.335232][T30469] do_syscall_64+0x103/0x610 [ 1346.339833][T30469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1346.345743][T30469] RIP: 0033:0x458c29 [ 1346.349682][T30469] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1346.370778][T30469] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.379234][T30469] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1346.387315][T30469] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1346.395305][T30469] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:06:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000080)) 14:06:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x13d) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000200)={0x2, 0xac, &(0x7f0000000140)="e0d335ff5140cc6d268ba8e1aea947fcd69a97c2ef73fcb9ecf160cec69f46b226f48c6f957afa262353fd09dec95feb7c58bf21ef348c6d5ec935ee10a889fd34d7b8dcd7c2f32bced3b530f64bd9e8aefbc60e1dd55ac40cf06b66b1750a0cf2238512feb17e4029b1f101ca814b014761eb3468163d37ba9d4ce9f59f03d011ca09773a31800383b0e56ad57b349fbfe375142d89c9f1f27cdb20f74d0a6f9577ba5baf29c1cc555f7b35"}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000300)={0x7b, 0x0, [0x10a]}) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r4 = dup3(r0, r1, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) [ 1346.403327][T30469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1346.411309][T30469] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:09 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0xffffffffffffffff, 0x820001, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x337b, "d744b9b21b5bb9d3efb98195646137fa65206ebdacc5658489708e57b4e751a4", 0x1, 0x1}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0xffffffffffffffff, 0x100000001, 0x4, 0x5, 0x1000000000, 0x3, 0x8, 0x1, 0x3, 0xfff, 0x7a2c, 0x6, 0x9, 0x9, 0x1, 0x9, 0x5338, 0x1, 0x9, 0x0, 0x7, 0x9, 0x7, 0x1, 0x7, 0x8, 0xddb5, 0x364, 0x5, 0x4, 0xfa9, 0x2]}) 14:06:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1000000]}) 14:06:09 executing program 4 (fault-call:6 fault-nth:90): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1009800]}) 14:06:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6a, 0x41c000) clock_gettime(0x0, &(0x7f0000008500)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000082c0)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/248, 0xf8}], 0x4, &(0x7f00000000c0)}, 0x1ff}, {{&(0x7f0000000440)=@nl=@proc, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/241, 0xf1}, {&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/31, 0x1f}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/205, 0xcd}], 0x7, &(0x7f00000008c0)=""/175, 0xaf}, 0x1}, {{&(0x7f0000000980)=@vsock, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/134, 0x86}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/164, 0xa4}, {&(0x7f0000000c00)=""/41, 0x29}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/153, 0x99}, {&(0x7f0000000dc0)=""/106, 0x6a}], 0x7, &(0x7f0000000ec0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/246, 0xf6}, {&(0x7f0000003fc0)=""/178, 0xb2}, {&(0x7f0000004080)=""/97, 0x61}, {&(0x7f0000004100)=""/227, 0xe3}, {&(0x7f0000004200)=""/190, 0xbe}, {&(0x7f00000042c0)=""/4, 0x4}], 0x8, &(0x7f0000004380)=""/188, 0xbc}, 0xfffffffffffffffa}, {{&(0x7f0000004440), 0x80, &(0x7f0000005900)=[{&(0x7f00000044c0)=""/207, 0xcf}, {&(0x7f00000045c0)=""/147, 0x93}, {&(0x7f0000004680)=""/168, 0xa8}, {&(0x7f0000004740)=""/204, 0xcc}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/178, 0xb2}], 0x6, &(0x7f0000005980)=""/125, 0x7d}, 0x81}, {{&(0x7f0000005a00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005a80)=""/14, 0xe}, {&(0x7f0000005ac0)=""/195, 0xc3}, {&(0x7f0000005bc0)=""/95, 0x5f}], 0x3, &(0x7f0000005c80)=""/115, 0x73}, 0x8}, {{&(0x7f0000005d00)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000005d80)=""/101, 0x65}, {&(0x7f0000005e00)=""/45, 0x2d}, {&(0x7f0000005e40)=""/4096, 0x1000}], 0x3, &(0x7f0000006e80)=""/154, 0x9a}, 0x125c}, {{&(0x7f0000006f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000008180)=[{&(0x7f0000006fc0)=""/244, 0xf4}, {&(0x7f00000070c0)=""/4096, 0x1000}, {&(0x7f00000080c0)=""/107, 0x6b}, {&(0x7f0000008140)=""/4, 0x4}], 0x4}, 0x6}, {{&(0x7f00000081c0)=@ll, 0x80, &(0x7f0000008280)=[{&(0x7f0000008240)=""/13, 0xd}], 0x1}, 0x7b}], 0x9, 0x0, &(0x7f0000008540)={r3, r4+10000000}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000008580), &(0x7f00000085c0)=0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x4) write$P9_RCLUNK(r2, &(0x7f0000008600)={0x7, 0x79, 0x2}, 0x7) sendto$inet6(r0, &(0x7f0000008600), 0x0, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) fchdir(r0) 14:06:09 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) stat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xe538, 0x4, &(0x7f0000000240)=[{&(0x7f0000000080)="8d2a7097eb", 0x5, 0x1}, {&(0x7f00000000c0)="e2e8efef0ee62c6d9335da46f5ad9e04728271f8e485d4", 0x17, 0x1}, {&(0x7f0000000100)="3ad77ccd1f3532e7e0310c8e641e37ed2064f8fd42c924fa1f095ac42ac770a05d21729d09c7bab5895f9ba45ce2159e58d66df0e0ecaba9098d1887a054a784886fd7", 0x43, 0x2}, {&(0x7f0000000200)="98fdebd978de5c4dc8aec2bca4e8419ca50f60755fa95e39", 0x18, 0xffffffff}], 0x400, &(0x7f0000000640)=ANY=[@ANYBLOB='nobarrier,uid=', @ANYRESHEX=r0, @ANYBLOB=',nobarrier,umask=00000000000000000000003,fsmagic=0x0000000000000003,subj_role=ntfs\x00,euid=', @ANYRESDEC=r1, @ANYBLOB=',fsmagic=0x0000000000000004,measure,euid<', @ANYRESDEC=r2, @ANYBLOB="2c636f6e746578743d757365725f752c004abd555680b5548c2bbbb5a1696fa7953ca481f2c61192f34cd561cb4cc541d26d5ce4523a85db0a7b712589eeb45320fae2596b0af516ffb982dd3a0533bca020426f46f9b1c96d57ecfeca83fdae35d71fe00654df29d053dc031ed62f8de8cfbf131686c787691133c1dd771353df831d0c415891376c2b2dc49eb5590f3dcd56dcb773361ec4fcdc5748350d1582335664761b386141ffd8454f9b625854cd69"]) r3 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x1d87, 0x161800) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x110, r3, 0x0) 14:06:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1099800]}) 14:06:09 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x3ff0000000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x6, 0x4c}, &(0x7f0000000180)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) 14:06:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = dup3(r0, r1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000140)={r1, 0x100, 0x0, "41d421e3d1318bad7790770e6865207d1f9bfb76523d2a122e67df9ef701d93b629cddef6181f0c0ceb9b08f4c96dd663c221fd0bff336b31101b9bdf57297142b9b951e37f98dc6420632b7f20d0d6758ef"}) [ 1346.723072][T30679] FAULT_INJECTION: forcing a failure. [ 1346.723072][T30679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1346.739372][T30703] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 14:06:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x541f, &(0x7f0000000080)) 14:06:10 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1f99800]}) 14:06:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x238, 0x2, 0x200000000, 0x20, 0x1ff}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x3, 0x6, 0x300000000000}, &(0x7f00000001c0)=0x10) 14:06:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x5, 0x0, [{0x2, 0x1, 0x7, 0x80000000, 0x7e, 0x7fff, 0x6}, {0x0, 0x3, 0x1, 0x4000400000000, 0x1, 0x3ff, 0x101}, {0x0, 0xfffffffffffffffb, 0x2, 0x0, 0xebcc, 0x0, 0x7fff}, {0xc0000001, 0x2, 0x3, 0x5, 0xffffffff80000000, 0x1, 0x3}, {0xd, 0x5, 0x1, 0x3, 0x100000000, 0x400, 0x2}]}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x7, 0x9}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000240)=0xc) process_vm_readv(r3, &(0x7f0000001700)=[{&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/28, 0x1c}, {&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/149, 0x95}, {&(0x7f0000001540)=""/178, 0xb2}, {&(0x7f0000001600)=""/205, 0xcd}], 0x8, &(0x7f0000002940)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/44, 0x2c}, {&(0x7f00000027c0)=""/150, 0x96}, {&(0x7f0000002880)=""/137, 0x89}], 0x4, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:10 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x80, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, 0xee, "07d935a2097cac2ba071013f874ed16a4d6e6ab358e5164312eb49dc629d30f020f8a3d6af1e0305d9f3075844b26036d7e5590911b4eef3c0d1e0628e477485935d587083f0dcaf564d749729657f6857fc402a5f09d06f98f7e148a46350f3cdea3e82824a9df41f766844450536c09bc3c4cf24cc35ce4ba0e06db10698ac77f43e45e660bdf909d229088d7d88aa37b2ef7cce9119ede57ccc3bf72dbc65c2e4e1ca539e42d205e63a7f98f42b3aea4a3a52c444506b898972df2673039bbfd0dbc762d794ea83ff6375cd964c795ec2f1b02416eaf42188ac2e2284e64411a48da4447177e1590c221d7aa3"}, 0xf4) [ 1346.941546][T30679] CPU: 1 PID: 30679 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1346.950709][T30679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.960773][T30679] Call Trace: [ 1346.960806][T30679] dump_stack+0x172/0x1f0 [ 1346.960830][T30679] should_fail.cold+0xa/0x15 [ 1346.960853][T30679] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1346.960872][T30679] ? ___might_sleep+0x163/0x280 [ 1346.960904][T30679] should_fail_alloc_page+0x50/0x60 [ 1346.960921][T30679] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1346.960941][T30679] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1346.960960][T30679] ? find_held_lock+0x35/0x130 [ 1346.960982][T30679] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1346.994779][T30679] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1347.017194][T30679] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1347.017218][T30679] alloc_pages_vma+0xdd/0x540 [ 1347.028138][T30679] shmem_alloc_page+0xc0/0x180 [ 1347.032907][T30679] ? shmem_swapin+0x1a0/0x1a0 [ 1347.037619][T30679] ? lock_downgrade+0x880/0x880 [ 1347.042475][T30679] ? __unlock_page_memcg+0x70/0x100 [ 1347.047675][T30679] ? kasan_check_read+0x11/0x20 [ 1347.047691][T30679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1347.047714][T30679] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1347.064506][T30679] ? shmem_get_link+0x420/0x420 [ 1347.064528][T30679] ? kasan_check_write+0x14/0x20 [ 1347.074403][T30679] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1347.074420][T30679] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1347.074435][T30679] ? do_raw_spin_unlock+0x57/0x270 [ 1347.074456][T30679] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1347.096525][T30679] mfill_zeropage+0x92f/0x1000 [ 1347.101322][T30679] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1347.106523][T30679] ? _parse_integer+0x190/0x190 [ 1347.106542][T30679] ? __lock_acquire+0x548/0x3fb0 [ 1347.106565][T30679] ? userfaultfd_read+0x1940/0x1940 [ 1347.116335][T30679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1347.116353][T30679] ? tomoyo_init_request_info+0x105/0x1d0 [ 1347.116370][T30679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.116384][T30679] ? tomoyo_path_number_perm+0x263/0x520 [ 1347.116409][T30679] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1347.133557][T30679] ? __fget+0x35a/0x550 [ 1347.133580][T30679] ? userfaultfd_read+0x1940/0x1940 [ 1347.133607][T30679] do_vfs_ioctl+0xd6e/0x1390 [ 1347.145557][T30679] ? userfaultfd_read+0x1940/0x1940 [ 1347.145573][T30679] ? do_vfs_ioctl+0xd6e/0x1390 [ 1347.145592][T30679] ? ioctl_preallocate+0x210/0x210 [ 1347.145612][T30679] ? __fget+0x381/0x550 [ 1347.145632][T30679] ? ksys_dup3+0x3e0/0x3e0 [ 1347.145664][T30679] ? tomoyo_file_ioctl+0x23/0x30 [ 1347.165440][T30679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.165456][T30679] ? security_file_ioctl+0x93/0xc0 [ 1347.165476][T30679] ksys_ioctl+0xab/0xd0 [ 1347.184840][T30679] __x64_sys_ioctl+0x73/0xb0 [ 1347.194162][T30679] do_syscall_64+0x103/0x610 [ 1347.194184][T30679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.194195][T30679] RIP: 0033:0x458c29 [ 1347.194217][T30679] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1347.224774][T30679] RSP: 002b:00007f0323360c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.224789][T30679] RAX: ffffffffffffffda RBX: 00007f0323360c90 RCX: 0000000000458c29 [ 1347.224798][T30679] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000003 [ 1347.224805][T30679] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 1347.224820][T30679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233616d4 [ 1347.288689][T30679] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000004 14:06:10 executing program 4 (fault-call:6 fault-nth:91): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:10 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:06:10 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2000000]}) 14:06:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000140)={{0x2000000020}, 'port0\x00', 0x90, 0x8c90734aa68c55dd, 0x100000000, 0x8000, 0xdac, 0x8, 0x5, 0x0, 0x0, 0xff}) 14:06:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000080)) 14:06:10 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2099800]}) 14:06:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xd5a, 0x80880) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000000c0)=0x7) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x80000) 14:06:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x90000, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000000c0)={0x30, 0x6, 0x0, {0x2, 0x3, 0x7, 0x0, 'system:'}}, 0x30) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000140)=""/152) dup3(r0, r1, 0x0) [ 1347.428543][T30826] FAULT_INJECTION: forcing a failure. [ 1347.428543][T30826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:06:10 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffff97, 0xffffffffffffffff, 0xc7c334d6aefa1bc4, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r0, r1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2000) socket$inet6_udp(0xa, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2900000004000000000000000000000000000000000005000000000000000000010000000000000000"], 0x29) [ 1347.537055][T30826] CPU: 1 PID: 30826 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1347.546240][T30826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.556325][T30826] Call Trace: [ 1347.559656][T30826] dump_stack+0x172/0x1f0 [ 1347.564020][T30826] should_fail.cold+0xa/0x15 [ 1347.568660][T30826] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1347.574491][T30826] ? ___might_sleep+0x163/0x280 [ 1347.579383][T30826] should_fail_alloc_page+0x50/0x60 [ 1347.585305][T30826] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1347.585326][T30826] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1347.585343][T30826] ? find_held_lock+0x35/0x130 [ 1347.585359][T30826] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1347.585374][T30826] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1347.585387][T30826] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1347.585404][T30826] alloc_pages_vma+0xdd/0x540 [ 1347.585420][T30826] shmem_alloc_page+0xc0/0x180 [ 1347.585433][T30826] ? shmem_swapin+0x1a0/0x1a0 [ 1347.585464][T30826] ? lock_downgrade+0x880/0x880 [ 1347.585479][T30826] ? __unlock_page_memcg+0x70/0x100 [ 1347.585492][T30826] ? kasan_check_read+0x11/0x20 [ 1347.585505][T30826] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1347.585523][T30826] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1347.585547][T30826] ? shmem_get_link+0x420/0x420 [ 1347.607181][T30826] ? kasan_check_write+0x14/0x20 [ 1347.607209][T30826] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1347.607230][T30826] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1347.607246][T30826] ? do_raw_spin_unlock+0x57/0x270 [ 1347.607262][T30826] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1347.607279][T30826] mfill_zeropage+0x92f/0x1000 [ 1347.607307][T30826] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1347.607323][T30826] ? _parse_integer+0x190/0x190 [ 1347.607338][T30826] ? __lock_acquire+0x548/0x3fb0 [ 1347.607369][T30826] ? userfaultfd_read+0x1940/0x1940 [ 1347.718199][T30826] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1347.724464][T30826] ? tomoyo_init_request_info+0x105/0x1d0 [ 1347.730234][T30826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.736505][T30826] ? tomoyo_path_number_perm+0x263/0x520 [ 1347.742271][T30826] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1347.748135][T30826] ? __fget+0x35a/0x550 [ 1347.752362][T30826] ? userfaultfd_read+0x1940/0x1940 [ 1347.757582][T30826] do_vfs_ioctl+0xd6e/0x1390 [ 1347.762196][T30826] ? userfaultfd_read+0x1940/0x1940 [ 1347.767409][T30826] ? do_vfs_ioctl+0xd6e/0x1390 [ 1347.772226][T30826] ? ioctl_preallocate+0x210/0x210 [ 1347.777446][T30826] ? __fget+0x381/0x550 [ 1347.781705][T30826] ? ksys_dup3+0x3e0/0x3e0 [ 1347.786257][T30826] ? tomoyo_file_ioctl+0x23/0x30 [ 1347.791259][T30826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.797568][T30826] ? security_file_ioctl+0x93/0xc0 [ 1347.802797][T30826] ksys_ioctl+0xab/0xd0 [ 1347.807035][T30826] __x64_sys_ioctl+0x73/0xb0 [ 1347.811788][T30826] do_syscall_64+0x103/0x610 [ 1347.816441][T30826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.822637][T30826] RIP: 0033:0x458c29 [ 1347.826555][T30826] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1347.846730][T30826] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.855269][T30826] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1347.863306][T30826] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1347.871361][T30826] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1347.879376][T30826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2f0f000]}) 14:06:11 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000f741000004000000000000000000000000002cc0961e72302cc5ae76e4dc2a0bc7263bb7dd10ea8422e378d96aa9073f8868bd66ae2d1a"]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) dup3(r1, r2, 0x0) 14:06:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x80, 0xfffffffffffffff7, 0x3, 0x6, 0x3, [{0x800, 0x2, 0x497b}, {0x7fff, 0x4ed, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x35, 0x6e85, 0x0, 0x0, 0x980}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 1347.887447][T30826] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:11 executing program 4 (fault-call:6 fault-nth:92): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:11 executing program 2: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x20, 0x0) 14:06:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2f99800]}) 14:06:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000080)) 14:06:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000, 0x0) bind$rds(r2, &(0x7f00000001c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) dup3(r0, r1, 0x0) 14:06:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") io_setup(0x2, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x80000001, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)={0x0, 0x1c9c380}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x32, r0, 0x1000000000000000) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3099800]}) 14:06:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000200)={0x2, 0xac, &(0x7f0000000140)="e0d335ff5140cc6d268ba8e1aea947fcd69a97c2ef73fcb9ecf160cec69f46b226f48c6f957afa262353fd09dec95feb7c58bf21ef348c6d5ec935ee10a889fd34d7b8dcd7c2f32bced3b530f64bd9e8aefbc60e1dd55ac40cf06b66b1750a0cf2238512feb17e4029b1f101ca814b014761eb3468163d37ba9d4ce9f59f03d011ca09773a31800383b0e56ad57b349fbfe375142d89c9f1f27cdb20f74d0a6f9577ba5baf29c1cc555f7b35"}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000300)={0x7b, 0x0, [0x10a]}) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r4 = dup3(r0, r1, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) 14:06:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9bb, 0x40) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000000c0)={0xa, 0x101, 0x4, {0x200, 0x3, 0x4, 0x2}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1348.206876][T31185] FAULT_INJECTION: forcing a failure. [ 1348.206876][T31185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1348.261421][T31185] CPU: 0 PID: 31185 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1348.270582][T31185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.280763][T31185] Call Trace: [ 1348.284151][T31185] dump_stack+0x172/0x1f0 [ 1348.288565][T31185] should_fail.cold+0xa/0x15 [ 1348.293179][T31185] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1348.299000][T31185] ? ___might_sleep+0x163/0x280 [ 1348.303875][T31185] should_fail_alloc_page+0x50/0x60 [ 1348.309635][T31185] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1348.315033][T31185] ? free_unref_page_list+0x86f/0xc40 [ 1348.320419][T31185] ? release_pages+0x60f/0x1d20 [ 1348.325278][T31185] ? free_unref_page_list+0x86f/0xc40 [ 1348.330659][T31185] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1348.336423][T31185] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1348.342690][T31185] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1348.348958][T31185] alloc_pages_vma+0xdd/0x540 [ 1348.353663][T31185] shmem_alloc_page+0xc0/0x180 [ 1348.358447][T31185] ? shmem_swapin+0x1a0/0x1a0 [ 1348.363164][T31185] ? lock_downgrade+0x880/0x880 [ 1348.368038][T31185] ? __unlock_page_memcg+0x70/0x100 [ 1348.373254][T31185] ? kasan_check_read+0x11/0x20 [ 1348.378138][T31185] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1348.384407][T31185] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1348.389985][T31185] ? shmem_get_link+0x420/0x420 [ 1348.394848][T31185] ? kasan_check_write+0x14/0x20 [ 1348.399800][T31185] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1348.405186][T31185] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1348.410570][T31185] ? do_raw_spin_unlock+0x57/0x270 [ 1348.415695][T31185] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1348.421972][T31185] mfill_zeropage+0x92f/0x1000 [ 1348.426765][T31185] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1348.431891][T31185] ? _parse_integer+0x190/0x190 [ 1348.436756][T31185] ? __lock_acquire+0x548/0x3fb0 [ 1348.441717][T31185] ? userfaultfd_read+0x1940/0x1940 [ 1348.446937][T31185] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1348.453200][T31185] ? tomoyo_init_request_info+0x105/0x1d0 [ 1348.458946][T31185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.465202][T31185] ? tomoyo_path_number_perm+0x263/0x520 [ 1348.470864][T31185] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1348.476735][T31185] ? __fget+0x35a/0x550 [ 1348.480928][T31185] ? userfaultfd_read+0x1940/0x1940 [ 1348.486153][T31185] do_vfs_ioctl+0xd6e/0x1390 [ 1348.490758][T31185] ? userfaultfd_read+0x1940/0x1940 [ 1348.495972][T31185] ? do_vfs_ioctl+0xd6e/0x1390 [ 1348.500754][T31185] ? ioctl_preallocate+0x210/0x210 [ 1348.505875][T31185] ? __fget+0x381/0x550 [ 1348.510049][T31185] ? ksys_dup3+0x3e0/0x3e0 [ 1348.514490][T31185] ? tomoyo_file_ioctl+0x23/0x30 [ 1348.519442][T31185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.525726][T31185] ? security_file_ioctl+0x93/0xc0 [ 1348.530883][T31185] ksys_ioctl+0xab/0xd0 [ 1348.535070][T31185] __x64_sys_ioctl+0x73/0xb0 [ 1348.539802][T31185] do_syscall_64+0x103/0x610 [ 1348.544422][T31185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.550322][T31185] RIP: 0033:0x458c29 [ 1348.554226][T31185] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1348.573862][T31185] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.582990][T31185] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1348.590977][T31185] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1348.598959][T31185] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:06:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3f99800]}) 14:06:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4f99800]}) 14:06:11 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5099800]}) [ 1348.607045][T31185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1348.615151][T31185] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 [ 1348.638115][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:06:12 executing program 4 (fault-call:6 fault-nth:93): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:12 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x99800]}) 14:06:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5f99800]}) 14:06:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000080)) 14:06:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x20000, 0x0) r5 = socket(0x5, 0xa, 0xff) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x10002, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6f99800]}) 14:06:12 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f00000001c0)={0xfffffffffffffff8, 'syz0\x00'}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x7f, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) tee(r3, r3, 0x400, 0x9) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r4 = dup3(r1, r3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) 14:06:12 executing program 2 (fault-call:3 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7f99800]}) 14:06:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd0708ff0e276ce98d50177fb792addd2cfa08b48d44e45c6c9e36d4f1834832b311f808399354a03ae24635b024a298367e418c60f5e743e6488d6") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @local, 0x9}, {0xa, 0x4e22, 0xfa3f, @ipv4={[], [], @loopback}, 0x4}, r3, 0x7f}}, 0x48) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f00000002c0)) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1349.220123][T31493] FAULT_INJECTION: forcing a failure. [ 1349.220123][T31493] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.282967][T31493] CPU: 0 PID: 31493 Comm: syz-executor.2 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1349.292144][T31493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.302214][T31493] Call Trace: [ 1349.305550][T31493] dump_stack+0x172/0x1f0 [ 1349.310404][T31493] should_fail.cold+0xa/0x15 [ 1349.315131][T31493] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1349.320962][T31493] ? ___might_sleep+0x163/0x280 [ 1349.325825][T31493] __should_failslab+0x121/0x190 [ 1349.330782][T31493] should_failslab+0x9/0x14 [ 1349.335296][T31493] kmem_cache_alloc_node_trace+0x270/0x720 [ 1349.341136][T31493] __kmalloc_node+0x3d/0x70 [ 1349.345672][T31493] kvmalloc_node+0x68/0x100 [ 1349.345694][T31493] video_usercopy+0x217/0x10d0 [ 1349.345713][T31493] ? v4l_s_fmt+0xab0/0xab0 [ 1349.352829][T31604] FAULT_INJECTION: forcing a failure. [ 1349.352829][T31604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1349.355014][T31493] ? v4l_enumstd+0x70/0x70 [ 1349.372609][T31493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.372634][T31493] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1349.372661][T31493] ? video_usercopy+0x10d0/0x10d0 [ 1349.372674][T31493] video_ioctl2+0x2d/0x35 [ 1349.372693][T31493] v4l2_ioctl+0x156/0x1b0 [ 1349.383458][T31493] ? video_devdata+0xa0/0xa0 [ 1349.383478][T31493] do_vfs_ioctl+0xd6e/0x1390 [ 1349.383497][T31493] ? ioctl_preallocate+0x210/0x210 [ 1349.383511][T31493] ? __fget+0x381/0x550 [ 1349.383531][T31493] ? ksys_dup3+0x3e0/0x3e0 [ 1349.383554][T31493] ? tomoyo_file_ioctl+0x23/0x30 [ 1349.394404][T31493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.394421][T31493] ? security_file_ioctl+0x93/0xc0 [ 1349.394439][T31493] ksys_ioctl+0xab/0xd0 [ 1349.394459][T31493] __x64_sys_ioctl+0x73/0xb0 [ 1349.394476][T31493] do_syscall_64+0x103/0x610 [ 1349.394502][T31493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.462049][T31493] RIP: 0033:0x458c29 [ 1349.465961][T31493] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1349.485577][T31493] RSP: 002b:00007f7607e8cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.494015][T31493] RAX: ffffffffffffffda RBX: 00007f7607e8cc90 RCX: 0000000000458c29 [ 1349.502007][T31493] RDX: 0000000020000080 RSI: 00000000c0205649 RDI: 0000000000000003 [ 1349.509994][T31493] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1349.517983][T31493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7607e8d6d4 [ 1349.525979][T31493] R13: 00000000004c3e2b R14: 00000000004d7478 R15: 0000000000000005 [ 1349.535814][T31604] CPU: 1 PID: 31604 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1349.545060][T31604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.545068][T31604] Call Trace: [ 1349.545108][T31604] dump_stack+0x172/0x1f0 [ 1349.545131][T31604] should_fail.cold+0xa/0x15 [ 1349.545148][T31604] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1349.545163][T31604] ? ___might_sleep+0x163/0x280 [ 1349.545186][T31604] should_fail_alloc_page+0x50/0x60 [ 1349.545206][T31604] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1349.545226][T31604] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1349.545244][T31604] ? find_held_lock+0x35/0x130 [ 1349.545262][T31604] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1349.545289][T31604] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1349.562969][T31604] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1349.562991][T31604] alloc_pages_vma+0xdd/0x540 [ 1349.563011][T31604] shmem_alloc_page+0xc0/0x180 [ 1349.563025][T31604] ? shmem_swapin+0x1a0/0x1a0 [ 1349.563064][T31604] ? lock_downgrade+0x880/0x880 [ 1349.573474][T31604] ? __unlock_page_memcg+0x70/0x100 [ 1349.573489][T31604] ? kasan_check_read+0x11/0x20 [ 1349.573503][T31604] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1349.573524][T31604] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1349.573547][T31604] ? shmem_get_link+0x420/0x420 [ 1349.573563][T31604] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1349.573586][T31604] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1349.588997][T31604] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1349.589019][T31604] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1349.589046][T31604] mfill_zeropage+0x92f/0x1000 [ 1349.599557][T31604] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1349.599575][T31604] ? _parse_integer+0x190/0x190 [ 1349.599607][T31604] ? __lock_acquire+0x548/0x3fb0 [ 1349.705708][T31604] ? userfaultfd_read+0x1940/0x1940 [ 1349.710928][T31604] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1349.717277][T31604] ? tomoyo_init_request_info+0x105/0x1d0 [ 1349.723011][T31604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.729281][T31604] ? tomoyo_path_number_perm+0x263/0x520 [ 1349.734932][T31604] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1349.740772][T31604] ? __fget+0x35a/0x550 [ 1349.744954][T31604] ? userfaultfd_read+0x1940/0x1940 [ 1349.750167][T31604] do_vfs_ioctl+0xd6e/0x1390 [ 1349.754765][T31604] ? userfaultfd_read+0x1940/0x1940 [ 1349.759970][T31604] ? do_vfs_ioctl+0xd6e/0x1390 [ 1349.764744][T31604] ? ioctl_preallocate+0x210/0x210 [ 1349.769860][T31604] ? __fget+0x381/0x550 [ 1349.774154][T31604] ? ksys_dup3+0x3e0/0x3e0 [ 1349.778590][T31604] ? tomoyo_file_ioctl+0x23/0x30 [ 1349.783555][T31604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.789820][T31604] ? security_file_ioctl+0x93/0xc0 [ 1349.794961][T31604] ksys_ioctl+0xab/0xd0 [ 1349.799139][T31604] __x64_sys_ioctl+0x73/0xb0 [ 1349.803750][T31604] do_syscall_64+0x103/0x610 [ 1349.808371][T31604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.814275][T31604] RIP: 0033:0x458c29 [ 1349.818185][T31604] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1349.837804][T31604] RSP: 002b:00007f0323381c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.846239][T31604] RAX: ffffffffffffffda RBX: 00007f0323381c90 RCX: 0000000000458c29 [ 1349.854235][T31604] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000003 [ 1349.862248][T31604] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.870347][T31604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233826d4 [ 1349.878334][T31604] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000004 14:06:13 executing program 4 (fault-call:6 fault-nth:94): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x8f99800]}) 14:06:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40200, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x9) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000140)={0x3bdd, 0x6, 0x1}) dup3(r0, r1, 0x0) 14:06:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000080)) 14:06:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:13 executing program 2 (fault-call:3 fault-nth:1): r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2, 0x6, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x600, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4004801) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r4 = dup3(r0, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e24, @rand_addr=0x2}], 0x10) 14:06:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9099800]}) 14:06:13 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) [ 1350.054228][T31629] FAULT_INJECTION: forcing a failure. [ 1350.054228][T31629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1350.131929][T31629] CPU: 1 PID: 31629 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1350.141122][T31629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.151292][T31629] Call Trace: [ 1350.154618][T31629] dump_stack+0x172/0x1f0 [ 1350.159010][T31629] should_fail.cold+0xa/0x15 [ 1350.163647][T31629] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1350.169562][T31629] ? ___might_sleep+0x163/0x280 [ 1350.174448][T31629] should_fail_alloc_page+0x50/0x60 [ 1350.179689][T31629] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1350.185078][T31629] ? free_unref_page_list+0x86f/0xc40 [ 1350.190469][T31629] ? release_pages+0x60f/0x1d20 [ 1350.195327][T31629] ? free_unref_page_list+0x86f/0xc40 [ 1350.200726][T31629] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1350.206474][T31629] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1350.212733][T31629] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1350.218999][T31629] alloc_pages_vma+0xdd/0x540 [ 1350.223708][T31629] shmem_alloc_page+0xc0/0x180 [ 1350.223724][T31629] ? shmem_swapin+0x1a0/0x1a0 [ 1350.223760][T31629] ? lock_downgrade+0x880/0x880 [ 1350.223777][T31629] ? __unlock_page_memcg+0x70/0x100 [ 1350.223791][T31629] ? kasan_check_read+0x11/0x20 [ 1350.223805][T31629] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1350.223823][T31629] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1350.223848][T31629] ? shmem_get_link+0x420/0x420 [ 1350.223860][T31629] ? kasan_check_write+0x14/0x20 [ 1350.223884][T31629] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1350.238212][T31629] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1350.238229][T31629] ? do_raw_spin_unlock+0x57/0x270 [ 1350.238249][T31629] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1350.238269][T31629] mfill_zeropage+0x92f/0x1000 [ 1350.238300][T31629] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1350.238322][T31629] ? _parse_integer+0x190/0x190 [ 1350.310943][T31629] ? __lock_acquire+0x548/0x3fb0 [ 1350.315936][T31629] ? userfaultfd_read+0x1940/0x1940 [ 1350.321148][T31629] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 14:06:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9f99800]}) [ 1350.327412][T31629] ? tomoyo_init_request_info+0x105/0x1d0 [ 1350.333160][T31629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.339446][T31629] ? tomoyo_path_number_perm+0x263/0x520 [ 1350.345109][T31629] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1350.350982][T31629] ? __fget+0x35a/0x550 [ 1350.355251][T31629] ? userfaultfd_read+0x1940/0x1940 [ 1350.360488][T31629] do_vfs_ioctl+0xd6e/0x1390 [ 1350.365107][T31629] ? userfaultfd_read+0x1940/0x1940 [ 1350.370330][T31629] ? do_vfs_ioctl+0xd6e/0x1390 [ 1350.375116][T31629] ? ioctl_preallocate+0x210/0x210 14:06:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @rand_addr, 0xaf10}, 0xfffffffffffffe0b) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe, 0x0, 0x0) dup3(r0, r1, 0x0) 14:06:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x10002) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = accept$alg(r1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)) r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x4) setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f00000000c0), 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000280)="00060000000000000000003f4c6b9843438164a64ed80ef483cc9ad75c873953248e2bf64e36519f38180f0000b0cdff3bcdcf615ca7d86308823904243590d3d1d0e9e463bd9063e30dd69b61aa34c930e4e2866e5871ae7bfe0b106020833d2b8448c71961c4568d3f76b0a9c1b5d978fa35585c6a7d7e021db76d08c8bfc70e50d1d2bf39d6316f50ff68f336fd4d5e607f0edbeefc5a849836bc55e15345115fe534b7e5bd9b824405d8ccabc5720331bd2120ad0e47c9a872e66317b8837b2f3d7952615ddbd3fe028d9e226b9be91039bd750541d620bb74f8802baba1b3cdbe09135213eb193d77b6fdc0071285e1b0f5052d33b3b91a2155d6564b478e3782f57d3e69a15b62676838947504cd0f8a56a5d0df50697abac9e542f99d34bde6ceafcbb26afc88efaaa71774e398045eab5c02d6699e37357adf5c73582b61c3be48907a59cced8783ba3a690d7c6b993e9015f29bea85c84a4481f7ec7736ac9c") fcntl$getownex(r0, 0x10, &(0x7f0000000080)) [ 1350.380279][T31629] ? __fget+0x381/0x550 [ 1350.385122][T31629] ? ksys_dup3+0x3e0/0x3e0 [ 1350.389586][T31629] ? tomoyo_file_ioctl+0x23/0x30 [ 1350.394557][T31629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.400860][T31629] ? security_file_ioctl+0x93/0xc0 [ 1350.406002][T31629] ksys_ioctl+0xab/0xd0 [ 1350.410727][T31629] __x64_sys_ioctl+0x73/0xb0 [ 1350.415339][T31629] do_syscall_64+0x103/0x610 [ 1350.419947][T31629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1350.425863][T31629] RIP: 0033:0x458c29 [ 1350.429774][T31629] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1350.449956][T31629] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.449972][T31629] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1350.449979][T31629] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1350.449986][T31629] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1350.449994][T31629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1350.450003][T31629] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:13 executing program 4 (fault-call:6 fault-nth:95): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x12099800]}) 14:06:13 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000080)) 14:06:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r1, 0x8, r2) dup3(r0, r1, 0x0) [ 1350.682274][T31944] FAULT_INJECTION: forcing a failure. [ 1350.682274][T31944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1350.742646][T31944] CPU: 0 PID: 31944 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1350.751800][T31944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.761862][T31944] Call Trace: [ 1350.765256][T31944] dump_stack+0x172/0x1f0 [ 1350.769612][T31944] should_fail.cold+0xa/0x15 [ 1350.774218][T31944] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1350.780060][T31944] ? ___might_sleep+0x163/0x280 [ 1350.784940][T31944] should_fail_alloc_page+0x50/0x60 [ 1350.790149][T31944] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1350.795541][T31944] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1350.801369][T31944] ? find_held_lock+0x35/0x130 [ 1350.806183][T31944] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1350.811908][T31944] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1350.818159][T31944] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1350.824416][T31944] alloc_pages_vma+0xdd/0x540 [ 1350.829128][T31944] shmem_alloc_page+0xc0/0x180 [ 1350.833906][T31944] ? shmem_swapin+0x1a0/0x1a0 [ 1350.838624][T31944] ? lock_downgrade+0x880/0x880 [ 1350.843493][T31944] ? __unlock_page_memcg+0x70/0x100 [ 1350.848715][T31944] ? kasan_check_read+0x11/0x20 [ 1350.853571][T31944] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1350.859822][T31944] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1350.865393][T31944] ? shmem_get_link+0x420/0x420 [ 1350.870254][T31944] ? kasan_check_write+0x14/0x20 [ 1350.875223][T31944] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1350.880611][T31944] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1350.885989][T31944] ? do_raw_spin_unlock+0x57/0x270 [ 1350.891126][T31944] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1350.897382][T31944] mfill_zeropage+0x92f/0x1000 [ 1350.902190][T31944] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1350.907336][T31944] ? _parse_integer+0x190/0x190 [ 1350.912210][T31944] ? __lock_acquire+0x548/0x3fb0 [ 1350.917234][T31944] ? userfaultfd_read+0x1940/0x1940 [ 1350.922450][T31944] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1350.928712][T31944] ? tomoyo_init_request_info+0x105/0x1d0 [ 1350.934446][T31944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.940708][T31944] ? tomoyo_path_number_perm+0x263/0x520 [ 1350.946382][T31944] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1350.952215][T31944] ? __fget+0x35a/0x550 [ 1350.956397][T31944] ? userfaultfd_read+0x1940/0x1940 [ 1350.961604][T31944] do_vfs_ioctl+0xd6e/0x1390 [ 1350.966202][T31944] ? userfaultfd_read+0x1940/0x1940 [ 1350.971423][T31944] ? do_vfs_ioctl+0xd6e/0x1390 [ 1350.976217][T31944] ? ioctl_preallocate+0x210/0x210 [ 1350.981339][T31944] ? __fget+0x381/0x550 [ 1350.985518][T31944] ? ksys_dup3+0x3e0/0x3e0 [ 1350.989961][T31944] ? tomoyo_file_ioctl+0x23/0x30 [ 1350.994913][T31944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.001162][T31944] ? security_file_ioctl+0x93/0xc0 [ 1351.006379][T31944] ksys_ioctl+0xab/0xd0 [ 1351.010544][T31944] __x64_sys_ioctl+0x73/0xb0 [ 1351.015171][T31944] do_syscall_64+0x103/0x610 [ 1351.019784][T31944] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1351.025682][T31944] RIP: 0033:0x458c29 14:06:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5421, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:14 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0xa1e, 0x2, 0xc0, 0x5, 0x1e}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000440)={r1, 0x3, 0x7}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x80}, &(0x7f0000000140)=0x8) setitimer(0x0, &(0x7f0000000300)={{0x0, 0x7530}}, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @broadcast}}, 0xffffffffffffff00, 0x1}, &(0x7f0000000240)=0x90) socket$netlink(0x10, 0x3, 0xf) syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x40080) prctl$PR_GET_TSC(0x19, &(0x7f0000000280)) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000080)) 14:06:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x13099800]}) 14:06:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300)=0x1000, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10200, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e23, 0xfde, @mcast2, 0xf9}, {0xa, 0x4e22, 0x690d, @remote, 0x100000001}, 0x8000, [0x1ff, 0x2, 0x2, 0x0, 0xd3, 0x7, 0x3, 0x81ea]}, 0x5c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @remote}}}, 0x84) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5450, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x14099800]}) 14:06:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) [ 1351.029579][T31944] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1351.049362][T31944] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1351.049378][T31944] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1351.049387][T31944] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1351.049396][T31944] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1351.049405][T31944] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 14:06:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x15099800]}) 14:06:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000), 0xfffffffffffffcbb) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x400, 0xfff, 0xfffffffffffffffe, 0x7fff, 0x3}, 0x14) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:14 executing program 4 (fault-call:6 fault-nth:96): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 1351.049414][T31944] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5451, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000100}, 0x3, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4801) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) eventfd2(0x23, 0x801) [ 1351.170421][T32079] FAULT_INJECTION: forcing a failure. [ 1351.170421][T32079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1351.204712][T32079] CPU: 0 PID: 32079 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1351.213844][T32079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.223904][T32079] Call Trace: [ 1351.223931][T32079] dump_stack+0x172/0x1f0 [ 1351.223958][T32079] should_fail.cold+0xa/0x15 [ 1351.223983][T32079] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1351.224008][T32079] ? ___might_sleep+0x163/0x280 [ 1351.236198][T32079] should_fail_alloc_page+0x50/0x60 [ 1351.236218][T32079] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1351.236246][T32079] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1351.246893][T32079] ? find_held_lock+0x35/0x130 [ 1351.246912][T32079] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1351.246928][T32079] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1351.246947][T32079] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1351.267211][T32079] alloc_pages_vma+0xdd/0x540 [ 1351.267234][T32079] shmem_alloc_page+0xc0/0x180 [ 1351.267249][T32079] ? shmem_swapin+0x1a0/0x1a0 [ 1351.267290][T32079] ? lock_downgrade+0x880/0x880 [ 1351.290253][T32079] ? __unlock_page_memcg+0x70/0x100 [ 1351.290271][T32079] ? kasan_check_read+0x11/0x20 [ 1351.290286][T32079] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1351.290313][T32079] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1351.309367][T32079] ? shmem_get_link+0x420/0x420 [ 1351.309382][T32079] ? kasan_check_write+0x14/0x20 [ 1351.309406][T32079] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1351.309426][T32079] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1351.325694][T32079] ? do_raw_spin_unlock+0x57/0x270 [ 1351.325716][T32079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1351.325737][T32079] mfill_zeropage+0x92f/0x1000 14:06:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x17f0f000]}) 14:06:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1ef0f000]}) [ 1351.325774][T32079] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1351.336166][T32079] ? _parse_integer+0x190/0x190 [ 1351.336186][T32079] ? __lock_acquire+0x548/0x3fb0 [ 1351.336208][T32079] ? userfaultfd_read+0x1940/0x1940 [ 1351.336228][T32079] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1351.346520][T32079] ? tomoyo_init_request_info+0x105/0x1d0 [ 1351.346538][T32079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.346558][T32079] ? tomoyo_path_number_perm+0x263/0x520 [ 1351.363272][T32079] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1351.363305][T32079] ? __fget+0x35a/0x550 [ 1351.363325][T32079] ? userfaultfd_read+0x1940/0x1940 [ 1351.363346][T32079] do_vfs_ioctl+0xd6e/0x1390 [ 1351.373205][T32079] ? userfaultfd_read+0x1940/0x1940 [ 1351.373220][T32079] ? do_vfs_ioctl+0xd6e/0x1390 [ 1351.373241][T32079] ? ioctl_preallocate+0x210/0x210 [ 1351.373256][T32079] ? __fget+0x381/0x550 [ 1351.373278][T32079] ? ksys_dup3+0x3e0/0x3e0 [ 1351.373302][T32079] ? tomoyo_file_ioctl+0x23/0x30 [ 1351.383061][T32079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:06:14 executing program 4 (fault-call:6 fault-nth:97): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xce, 0x8040) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4008004) sendto$inet6(r1, 0x0, 0x15b, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e24, @multicast2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x25f0f000]}) 14:06:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5452, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) [ 1351.383078][T32079] ? security_file_ioctl+0x93/0xc0 [ 1351.383112][T32079] ksys_ioctl+0xab/0xd0 [ 1351.383132][T32079] __x64_sys_ioctl+0x73/0xb0 [ 1351.383151][T32079] do_syscall_64+0x103/0x610 [ 1351.383174][T32079] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1351.394577][T32079] RIP: 0033:0x458c29 [ 1351.394594][T32079] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1351.394602][T32079] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1351.394616][T32079] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1351.394625][T32079] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1351.394634][T32079] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1351.394643][T32079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1351.394651][T32079] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5460, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:14 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x29099800]}) [ 1351.596176][T32173] FAULT_INJECTION: forcing a failure. [ 1351.596176][T32173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1351.625929][T32173] CPU: 1 PID: 32173 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1351.635073][T32173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 14:06:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f0000000240)={0x90, 0x0, 0x2, {0x2, 0x3, 0x0, 0x84, 0x7f, 0x62, {0x4, 0x1000, 0x181b420c, 0x7, 0x587, 0x100000000, 0x101, 0xaed9, 0x100, 0x3ab, 0x9, r3, r4, 0x4, 0x3}}}, 0x90) dup3(r0, r1, 0x0) [ 1351.645142][T32173] Call Trace: [ 1351.645169][T32173] dump_stack+0x172/0x1f0 [ 1351.645195][T32173] should_fail.cold+0xa/0x15 [ 1351.645218][T32173] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1351.645238][T32173] ? ___might_sleep+0x163/0x280 [ 1351.645265][T32173] should_fail_alloc_page+0x50/0x60 [ 1351.673265][T32173] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1351.678659][T32173] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1351.684394][T32173] ? find_held_lock+0x35/0x130 [ 1351.689169][T32173] ? shmem_add_to_page_cache+0xa8c/0x1130 [ 1351.694892][T32173] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1351.694907][T32173] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1351.694928][T32173] alloc_pages_vma+0xdd/0x540 [ 1351.694949][T32173] shmem_alloc_page+0xc0/0x180 [ 1351.694967][T32173] ? shmem_swapin+0x1a0/0x1a0 [ 1351.721597][T32173] ? lock_downgrade+0x880/0x880 [ 1351.721621][T32173] ? __unlock_page_memcg+0x70/0x100 [ 1351.731673][T32173] ? kasan_check_read+0x11/0x20 [ 1351.736541][T32173] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1351.742799][T32173] shmem_mfill_atomic_pte+0x12e7/0x2230 [ 1351.742829][T32173] ? shmem_get_link+0x420/0x420 [ 1351.742844][T32173] ? kasan_check_write+0x14/0x20 [ 1351.742868][T32173] shmem_mfill_zeropage_pte+0x98/0xd0 [ 1351.742883][T32173] ? shmem_mcopy_atomic_pte+0x60/0x60 [ 1351.742897][T32173] ? do_raw_spin_unlock+0x57/0x270 [ 1351.742916][T32173] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1351.742934][T32173] mfill_zeropage+0x92f/0x1000 [ 1351.742963][T32173] userfaultfd_ioctl+0x1cc2/0x3aa0 [ 1351.742979][T32173] ? _parse_integer+0x190/0x190 [ 1351.742997][T32173] ? __lock_acquire+0x548/0x3fb0 [ 1351.743017][T32173] ? userfaultfd_read+0x1940/0x1940 [ 1351.758343][T32173] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1351.758363][T32173] ? tomoyo_init_request_info+0x105/0x1d0 [ 1351.758384][T32173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.780586][T32173] ? tomoyo_path_number_perm+0x263/0x520 [ 1351.780612][T32173] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1351.780640][T32173] ? __fget+0x35a/0x550 [ 1351.780662][T32173] ? userfaultfd_read+0x1940/0x1940 [ 1351.780682][T32173] do_vfs_ioctl+0xd6e/0x1390 [ 1351.780703][T32173] ? userfaultfd_read+0x1940/0x1940 [ 1351.818214][T32173] ? do_vfs_ioctl+0xd6e/0x1390 [ 1351.818238][T32173] ? ioctl_preallocate+0x210/0x210 [ 1351.818254][T32173] ? __fget+0x381/0x550 [ 1351.818276][T32173] ? ksys_dup3+0x3e0/0x3e0 [ 1351.818300][T32173] ? tomoyo_file_ioctl+0x23/0x30 [ 1351.846358][T32173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.846375][T32173] ? security_file_ioctl+0x93/0xc0 [ 1351.846394][T32173] ksys_ioctl+0xab/0xd0 [ 1351.846412][T32173] __x64_sys_ioctl+0x73/0xb0 [ 1351.846431][T32173] do_syscall_64+0x103/0x610 [ 1351.846452][T32173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1351.846464][T32173] RIP: 0033:0x458c29 [ 1351.846480][T32173] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1351.846488][T32173] RSP: 002b:00007f03233a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1351.846501][T32173] RAX: ffffffffffffffda RBX: 00007f03233a2c90 RCX: 0000000000458c29 [ 1351.846508][T32173] RDX: 0000000020000080 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1351.846516][T32173] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1351.846524][T32173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03233a36d4 [ 1351.846532][T32173] R13: 00000000004c342e R14: 00000000004d68d8 R15: 0000000000000005 14:06:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000080)) 14:06:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x41f0f000]}) 14:06:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0xffffffffffffffff) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = dup3(r0, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x498, 0x280, 0x280, 0x280, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="504d03725f1d", @empty, @multicast1, @local, 0xf, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2, 0x4, 0x1}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0xde, 0xffffffffffffffc0}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) 14:06:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:15 executing program 4 (fault-call:6 fault-nth:98): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x48f0f000]}) 14:06:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x18d) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000080)) 14:06:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7ffffff]}) 14:06:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}) 14:06:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'netdevsim0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}}) acct(&(0x7f0000000000)='./file0\x00') r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0xd00, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000140), 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x808, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2200, 0x0) write$9p(r1, &(0x7f0000000280)="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", 0x1000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)={0x54, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x58d8}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x4, 0x2, 0x8, 0x100000001]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0xc001) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}) 14:06:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/39, 0x27}], 0x9, &(0x7f0000000780)=""/147, 0x93}, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000880)={r1}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r3 = dup3(r0, r1, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000000c0)={0x2, 0x5}) 14:06:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffe7]}) 14:06:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = dup3(r0, r1, 0x0) write$apparmor_current(r2, &(0x7f0000000140)=@hat={'permhat ', 0x4, 0x5e, ['trusted)vmnet1:cgroupppp0bdevvmnet0/securityvmnet1\x00']}, 0x4e) 14:06:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000080)) 14:06:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9980000000000]}) 14:06:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x47}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x44800, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000001c0)={r3, 0x3}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000140)={0x8, 0x3, 0x516}, 0xc) 14:06:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x2, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000140)={&(0x7f000013c000/0x2000)=nil, 0x8, 0x4, 0x4, &(0x7f0000fff000/0x1000)=nil, 0xafb0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x100, 0x0) 14:06:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xf9980000000000]}) 14:06:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205667, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x5421, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000080)) 14:06:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x100000000000000]}) 14:06:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x1, 0x0, 0x0) dup3(r0, r1, 0x0) 14:06:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x5450, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x400000, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000340)={0xffff, 0x2, 0x20}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x0, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000400)) io_setup(0x7, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xff, r1, &(0x7f0000000440)="d7829308f5018bd7f6b0fec3ff3f80543a14274eb6f47225dab075fa3414000f0d08a3f98e6a19fc1fadae71bc711f7084e5d94c2907e25dd171911be94df9bd698a535299c1e147f2e93bfc05242acea3f9186a96f79e2fd17f861be96d3bf89a17b64da2b4e04e077c6ed715191fbb4e3274b5fc382085fcf1add050985ec43fcde4afbb3ba862ac362b45309ba4a26d0d9a52672b695d52a4e0291b1d7dd9ad65d6ad668d0c8a9a38137e95a2b1ff309ac1f2ac45599a8337ed6deecbcd91fc9e5548bda5f0e0e12918913894ddae4d4e3dde0562b97977987d9c130b8ecf0ebda46230b4be3f90eb", 0xb7, 0x7ff, 0x0, 0x0, r1}, &(0x7f0000000580)) fcntl$getownex(r0, 0x10, &(0x7f0000000680)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000380)='trusted.overlay.redirect\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x0) recvfrom$inet(r0, &(0x7f00000001c0)=""/244, 0xf4, 0x2000, &(0x7f00000002c0)={0x2, 0x4e1f}, 0x10) fsetxattr$security_selinux(r0, &(0x7f00000005c0)='security.selinux\x00', &(0x7f0000000600)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x1) 14:06:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x20800, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000180)=0x4, 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = socket(0x8, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0xa03, 0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r4 = shmget(0x1, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)) 14:06:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x100980000000000]}) 14:06:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x5451, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000080)) 14:06:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x109980000000000]}) 14:06:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = dup(r0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x60001, 0x0, [0x4, 0x8001, 0x2, 0x344e, 0xbe49, 0x2, 0x80000000, 0x400]}) listen(r0, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0x7fff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0xfffffffffffffe6c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r4 = dup3(r0, r1, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@v1={0x2, "62d6"}, 0x3, 0x0) 14:06:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1f9980000000000]}) 14:06:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x5452, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x20) listen(r1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000280)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f00000002c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x155) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x5, 0x8, 0x1, 0x7, 0x7f}) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000080)={0x1000000077, 0x0, [0x480]}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x200000000000000]}) 14:06:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x5460, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5460, &(0x7f0000000080)) 14:06:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3, 0x2e800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40100001900000729bd7000fcdbdf25ac141420000000000000000000000000639b2b31071eac6e6101deaa58af085d4e2100094e230000000020a033000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="040000000000000003000000000000000700000000000000faf8ffffffffffff6010000000000000ff070000000000000700000000000000050000000000000065d800000000000006000000000000000600000000000000ff030000000000002c000000bd6b6e0003010100000000000c000f00b50a0000000000009c0014006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070020000000100008ed7c46827c7f31166c927cfd576d1bfcc217853d0ac9a108ce31cfa4cfbcbeb524d1f6a8e9d8130f9984d7171592cb7d1ec0c9e4b6dc2aea7c1705ee623812e0585de0f7d064ada736c9ff228b400000800190033000000080003001e0f000008000300091a000010000a0029bd700025bd7000ffffffff2c001300fe8000000000000000000000000000287f000001000000000000000000000000f3f368352dfc3a0000000000000000"], 0x1b4}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xc6, 0x50800) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000000c0)={0x4, 0x100000001}) ioctl$TIOCSIG(r4, 0x40045436, 0x1a) ftruncate(r0, 0x100) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000140)={0xcf4, 0x7, 0x5, 0x40, 0x8, 0x81, 0x8, 0x4, 0xffffffffffff5425, 0x0, 0x2, 0x10001}) dup3(r0, r3, 0x0) 14:06:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x209980000000000]}) 14:06:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2f0f00000000000]}) 14:06:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x40049409, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000240)={'veth0_to_bond\x00', 0x10001}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x18}, 0x9}, r3}}, 0x38) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xd99, 0x7fffffff, 0x7cc1, 0x5c, 0x3}) getegid() syncfs(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x3b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 'ovf\x00', 0x4, 0x7, 0x5c}, 0x2c) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140)=0x2, 0x4) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 14:06:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2f9980000000000]}) 14:06:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x4020940d, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000080)) 14:06:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x2, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x246040) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000140)={0x3, "33099611ef0f715cc3f909c1ee15eeeed402a748b812dea1833750ab4ae5da1c", 0x1, 0x1}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x1, 0x0) readlinkat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/202, 0xca) personality(0x40000) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000380)) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffffffff8000, @default, @netrom={'nr', 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) inotify_add_watch(r1, &(0x7f0000000440)='./file0\x00', 0x30004a0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000000c0)="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") syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) sendfile(r2, r0, &(0x7f00000001c0), 0x1) 14:06:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x309980000000000]}) 14:06:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0xffffff2e) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000000c0)={0x20, @broadcast}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x80) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000140)={0x11, "61ea012d513a766c5a2b3ba452b3af30fa3cb4198d576f28225a7b9952205b1b3af4847aff7925c8e756bf0b246275c498baf22dc2ab1d892ec26c7d1fb1ea8a4a4b2f93320f349fbd502bd0dcbce41de5549e92f0f2b6897798c1e9db3f7fef587f8ddec18ddf8c20e1b5b2d3df5d6aff2db54e62d0daa196c54701fddf2451"}) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xf, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 14:06:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3f9980000000000]}) 14:06:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000080)) 14:06:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x10f, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4f9980000000000]}) 14:06:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x8000, 0x0) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x2, 0x81) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0xfffffffffffffffb, 0x101, 0x7, 0x0, 0x8001, 0x10420, 0x2, 0x3, 0x4, 0x78486a61, 0xff, 0x0, 0x9, 0x80000001, 0x8, 0x7ff, 0xfffffffffffffe00, 0x8001, 0x2, 0x7, 0x4, 0x0, 0x3, 0x3e997346, 0x101, 0x9, 0x81, 0x6, 0x4, 0xfffffffffffffff9, 0x401, 0x9, 0x4, 0x1ff, 0x7f, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x8209, 0x66e, 0x3ff, 0x0, 0x2, 0x2b, 0x4}, r1, 0x10, r2, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000200)={0x1, 0x7}) 14:06:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe1000016, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000140)="5710f4d5ac40630d5863a02979b2aa2c13f4917c621cd1e7baf2d88827b19429e428869100162a5af1bd0ad913e36a6f7315803bacc828f2cf797fa92e0c3f95ad1ebd988f72cfcdca2a3c3243b2c3dfa77b3bca6bd0bb78f10880c2f208fbb239bd446f66782a08d586f0fb833bb7a3e3d819c5bf5c6d57d2b9e3ce0d9a2cacc600e753edaba62b317d68de5653", 0x8e) 14:06:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x210, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc0045878, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = dup3(r0, r1, 0x80000) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) 14:06:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000080)) 14:06:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x2}) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x64, 0x401, 0x7ff, 0x9c8, 0x9, 0x3, 0x3f, 0x400, 0x3a7, 0x40, 0x319, 0x20, 0xbed, 0x38, 0x2, 0x1000, 0x6, 0x1000}, [{0x2, 0x0, 0xc2, 0x9, 0x8001, 0x3f, 0x6, 0xef00}, {0x6474e553, 0x4, 0x0, 0x80000001, 0x5, 0x5, 0x80, 0x8}], "72517c4f8239820097b5cf4212067e6ed911c29ba2b98658c1047303a62c84a1e44d4776b83e93747cd452388a2b4527b8dfe4205751cec6564e9eec84c19e1dfe7e23d0ab0fe616b61ddb81c517adbd849f2f403d5492fdec90301771dc11e42eb19d4594eb3a936c1a3ac5a3802fadf015922a39ac87a2fbfe16669a8235594c68aa06d8d84764c8a27df427eb9b5f1abc2d", [[]]}, 0x243) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) 14:06:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x509980000000000]}) 14:06:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x1002, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc0045878, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$sndpcmc(&(0x7f0000001400)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x800) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000013c0)) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r3 = dup3(r0, r0, 0x0) sendmsg$nfc_llcp(r3, &(0x7f00000000c0)={&(0x7f0000000140)={0x27, 0x1, 0x1, 0x3, 0x3, 0xe271, "31e08c6ddd4ca1feb2e84ec760effe8e9129d43c295e67d2e6751851cd9cab89bc41b55dd463a40c49b3dc28ad30eb2acd885c9580cd6d20c05bfb658b6eb8", 0x8}, 0x60, &(0x7f0000000000)=[{&(0x7f00000001c0)="d07273f54422544617f82685b046ed61e3b7818a94aa8e3d15498f5515e25b6a0c64bf60f853bda46fbe8ab1e26c6a0c5b8dc31a85a11c5b603eae93a0895e38dc5319952b6ffb58c0a8db3f3eecc5906265c70b06241d8ced8fac508991e28bdfd16d32f7e7602923a53052a6a95ecee07ca0068b52dddbcd375ff6924dbe88ebbfc42be6c18bd3f4027ce5d3268c87870f10ead6553fe9c36d1aada552fcdcca89a7b6", 0xa4}, {&(0x7f0000000280)="a51d1e1b3ed8ece531bdde27de731c95df04611f83f7e90e164ad239792f10eb04c0e9d7dc7a564d15b92868f6b4458f8f09f88e0edebc02b16077519ae088ec844dadb7cfce8fdce4652653afbdc767867bc089abe7c00d0d5fb096aeebab2ec012838c8cec118cba07709bed", 0x6d}, {&(0x7f0000000300)="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", 0x1000}], 0x3, &(0x7f0000001300)={0x88, 0x13f, 0x2, "4ae6192bfa6eb89bded92ef354b4801b2aa45bf3e094248fcd214100a4e990abf1bb43ca6811d04d9e7f68fbe865894d20b39742f05fcccc64059ba26873dc0fedbdf979d5f30664c392d6325847533e1defd0bad52770bc503fe871f596223940a60e60c95e02eaf8257ab010c0a097582130"}, 0x88, 0x4884}, 0x10) 14:06:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5f9980000000000]}) 14:06:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x80000001, 0x10001, 0x1, 0x3, 0x6, [{0x3f, 0x7ff, 0xffffffff, 0x0, 0x0, 0x800}, {0x0, 0x60b1, 0x10000, 0x0, 0x0, 0x805}, {0x1, 0xfab4, 0x1ff}, {0x7fff, 0x34e, 0x6, 0x0, 0x0, 0x1280}, {0x2, 0x5, 0x2, 0x0, 0x0, 0x200}, {0x5ab1, 0x800, 0xf230, 0x0, 0x0, 0x400}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x4000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc0189436, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6f9980000000000]}) 14:06:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000140)=""/77) 14:06:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000080)) 14:06:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x60ff, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7f9980000000000]}) 14:06:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc018aa3f, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 14:06:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x9, &(0x7f00000025c0)=[{&(0x7f0000000140)="3c58441065b7fa6be5557410d2475efb2addffc288386147c7912c3151fd947bc316c730c6b845e3713de8b88a9c4e3cf42aefb04906", 0x36, 0x5}, {&(0x7f0000000180)="f68d16da", 0x4, 0x8}, {&(0x7f00000001c0)="17eb68c80117699897f4b81e1e0485ac0332ab52a8c68b3074438f6dd9cc0452fc8be6e8d22783041c693f07f7f11f0d4c3647554dcf3243e2b42a6ae0078b408be50ec90753d4a2bdaeed3cf5a35227d7cbdd257bad7894265da6b412a3b8f4967cedb90fc6302cc3878f0281c96f36b132c1150012df6809e8d24ecd87bee6dca40ebd518477806055150d76bb7a21aa34fd0a6cff1460322f15047681c90e0280bbb4f1aea40ba1f268c276ffb06f1e534eb1800b4e83ad57fea79570baec3875090be3b02d81302bada901161dd4f95750672a60d870379f11bc18d3d4d8d3536bbc625e9d1d6fa7", 0xea, 0x8}, {&(0x7f00000002c0)="9a63997a9f950f6729564af7735f3048fde4414019be3127277f52ef5e1bd2dfdbf4524ca6bc1eda2ba5caf72715cc3c2951c4820c25906df74953a86c5305d9cec055b8fde2e4360c65762969fef39f28dc28bbaf43aaf492f4aa51ab12fe8b71fe3ac3760b6f8096dde091aa246d527c26d0060fd10762479fa759fc3463e552bfb82121977eca42f08aebe652bc5765c903065fdeabcc0f8475b74163cdd49a9d8792458bdb44f22b4865be0eb83f9a04b7df9370d1b0721787fa0da3034ea98f1b7e50b18f04c76d19d237a047c83f", 0xd1, 0x3}, {&(0x7f00000003c0)="67f1cf83f1562dae61d249ce4517ac8da301becb26f61a8651b4e9e8cf08a52986dbd108a2c792e0d08543367a303a5c24f411808518ed9cc8ec6c1854d2e9df52aae59c7ec6a7836763310c934ffb896c37e509e9c9012753ebc69aaaa1e7fbdaee2e03596fdc5d685ba3c21688e8a735270f0ced4fc542c1864af1073ad60f26bdaf7c60a6eb29597ae11e49c61d104bfba9c0899529eaf43900522d0fa36339b4fbe4175727a0fdcfce969140454bf1b578745d4f30efcb3a91dfa4", 0xbd, 0x9298}, {&(0x7f0000000480)="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", 0x1000, 0xffffffffffffff80}, {&(0x7f0000001480)="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", 0x1000, 0x549}, {&(0x7f0000002480)="1520c7b80416a625901f4e6a50985ccbf4ad18d44726195a411a01d8482a67189aaaef1c3eb599e81f67d03973d420282a5446e4e4514c6563a86fb4bf6525319b4917d07abbb50241696cf615e3bc39dbc98c3b0820090b874ee0ec6e11ed657546d3909603023701921174992b874160d93a07d9069bf945c16b403d539ddfab9635627a59817cc4a2ffc60d7a946c390a2ef0a3d6452c4114bd669082a8d78983272fde3fc7185383", 0xaa, 0x80}, {&(0x7f0000002540)="e5783b82a27846546a045389df7db0733d1bba13e96853b0a5df24e91dd0eb6922956866a02309ab07962e33a6d2d29a04164d7eafb7c753c84666179de32e74dc8d5b7fd756ecea1da690a042a7fd24bcfbe571c92a10500a0927d07d908059712b85956b81ea8fcfa2f35da81938508c77265797", 0x75, 0x6}], 0x82, &(0x7f00000026c0)={[{@lockproto_dlm='lockproto=dlm'}, {@loccookie='loccookie'}, {@quota_on='quota=on'}, {@nodiscard='nodiscard'}, {@quota_on='quota=on'}, {@rgrplvb='rgrplvb'}, {@noloccookie='noloccookie'}, {@nosuiddir='nosuiddir'}, {@lockproto_nolock='lockproto=lock_nolock'}, {@statfs_quantum={'statfs_quantum', 0x3d, 0x2}}], [{@dont_measure='dont_measure'}]}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) getsockname$packet(0xffffffffffffff9c, &(0x7f00000027c0)={0x11, 0x0, 0x0}, &(0x7f0000002800)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002840)={'team0\x00', r2}) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000002780)) 14:06:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x7400, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:19 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x8f9980000000000]}) 14:06:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020660b, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000100)=0x20040, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x103040) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 14:06:19 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x909980000000000]}) [ 1355.835099][ T2237] gfs2: invalid mount option: dont_measure [ 1355.841496][ T2237] gfs2: can't parse mount arguments 14:06:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000080)) 14:06:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000240)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r3}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x9400, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:19 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9f9980000000000]}) 14:06:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x400000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r1, 0x0, 0x3, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x7, @remote, 0x1}, 0xffffff9e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000340)="0adc1f123c123f319bd070bc427792328e614e3d2a2256122244b90408d3f4342fbf1f88dec22674914a5b203cf2e1cc64899b342de054ac22beedd7caf46b2c8e5e30bae0c90d01ed58103dead6066efa27e26765f541d39f4ccad4bbb6a549a293f83bbbf1ca65ecf3908ec1555d4ca7b4c15031637966e55868b9325d3e95a15f0ea718663abf78b648218d81d2c4e7483157b1334826de3919c592a3e59a02000000ca12038124434f5fa30f3201043e1a5ab10d4ffb77cbcc6fc4c1bb2cbb13a7d3cd23097061567a55e3fac65a260003ca20f80052f2bff9d31b83971b3cce4764a3104e12275bc632af871978f1c3e014536d8d4246de07200282ae0bbdad7babe12ed76f3c77ed") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @bcast, @netrom={'nr', 0x0}, 0x0, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) 14:06:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa0f, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x507100, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:19 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1209980000000000]}) 14:06:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000080)) 14:06:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10100002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x13c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xea}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x886}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe31f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a46d46c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000000) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000100)='keyring\x00', 0xffffffffffffffff}, 0x30) rt_sigqueueinfo(r1, 0xb, &(0x7f0000000200)={0x40, 0x8, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r2, 0xf6, 0xfff, r3) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x10) 14:06:19 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1309980000000000]}) 14:06:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x50d000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x4c8, 0x200}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r3, 0x7}, &(0x7f00000001c0)=0x8) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc028aa03, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') statx(r1, &(0x7f0000000100)='./file0\x00', 0x5100, 0xfff, &(0x7f0000000180)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x6, 0x5, 0x0, &(0x7f00006ad000/0x3000)=nil, 0x20}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 14:06:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2000}}) 14:06:19 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1409980000000000]}) 14:06:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x70c000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/253) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000080)) 14:06:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1509980000000000]}) 14:06:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x715000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f00008c7000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xf42, 0x1000, 0x0, 0x5}]}) fsync(r0) 14:06:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', r2}) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3000}}) 14:06:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x740000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x17f0f00000000000]}) 14:06:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xfff, 0x80) ioctl$TIOCSTI(r2, 0x5412, 0x2) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000001c0)=""/206) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x4a4200) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r1, r4}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4000}}) 14:06:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000080)) 14:06:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x414000, 0x0) accept$alg(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1ef0f00000000000]}) 14:06:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x940000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x80100000004e22, 0x0, @loopback}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f0000000140)='9[U', 0xe10000de, 0x0, 0x0, 0xfffffffffffffe39) dup3(r0, r1, 0x0) 14:06:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5000}}) 14:06:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x25f0f00000000000]}) 14:06:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'teql0\x00', 0x6}) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000980000/0x4000)=nil, 0x4000, 0x4, 0x50, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x1c5000) write$FUSE_LSEEK(r1, &(0x7f0000000280)={0x18, 0x0, 0x2, {0x4b}}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84debdfb8c3b6785}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c0000004df67fa4771142d3e3442f231ade53379650830d8224b79398a341e5e39ac1ca6faa0f78f8bbe801db8776e5ed382b1688f4b3f0cb5d7a0b8b27a2704a7d8dd80bce4296c5ed49ec7182e870b3236cbb8459e004acd294d5bed9d78dafa6c050ec075522799c9b490d1d9a39b5668078a47c7e4683a9dff1a3dd775d88ac201197052adee54756efb375c28c13e34ef2186ee41fa821f30756d8745ec63697cf6554996ee735e676b08dc0f8cda91a8d17e95f348be2e9642fd53e304708acb1", @ANYRES16=r3, @ANYBLOB="00032abd7000ffdbdf25020000000800020001040000140004004000000002000000060000007f0000001000040001000000010000000500000014000100fe800000000000000000000000000024080005000400000008000200da140000080004000400000008000400060000000800020007000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xc07000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2909980000000000]}) 14:06:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6000}}) 14:06:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 14:06:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000000)=0x96, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = dup3(r0, r1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) 14:06:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)='sit0\x00') ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r2, 0x0, 0x0, 0x4, 0x100000000}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x100000000, 0x5, 0x8, 0x8, 0x15, 0x7, 0x8, 0x1ff, 0x8, 0x1, 0x27f, 0x10001}) 14:06:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xd05000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x40000000008) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0xfffffffffffffd9e) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x4e24, @rand_addr=0x3}}}, 0x88) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r2, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)) 14:06:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7000}}) 14:06:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x41f0f00000000000]}) 14:06:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x1000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x200000000002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000070000008908141700000022"], 0x18}}], 0x1, 0x0) connect$inet6(r2, &(0x7f00000000c0), 0x1c) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9000}}) 14:06:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x48f0f00000000000]}) 14:06:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x96bd5f36899149bd) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000240)={r3, 0x1}) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) fchmod(r1, 0x2) write$P9_RMKNOD(r4, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x1, 0x4, 0x2}}, 0x14) r5 = open(&(0x7f0000000080)='./file0\x00', 0x2001, 0x12) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000000c0)=0xc8, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) 14:06:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x2000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa000}}) 14:06:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7ffffffffffffff]}) 14:06:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x40, 0x8080) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000140)={0xfb2eeae, 0x102, "caedb2bd9af2e1d533579304ef7592254b6728aad348832793ace527835f79ba", 0x10000, 0x8, 0x1, 0x1, 0x30}) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xb000}}) 14:06:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000180)=""/101) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x10000) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x9, 0xffffffffffffff80, 0xc8, 0x1}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x20400000, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) 14:06:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff00000000]}) 14:06:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xf000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4) 14:06:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @pic={0x0, 0x6, 0x3, 0x7, 0xfffffffffffffff7, 0x287, 0x4, 0x80000001, 0x553c6dce, 0xff, 0x3, 0x7ff, 0x4, 0xf0, 0x1, 0x7}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x80000, 0x0) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x8000) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f00000001c0)='+(\x00', 0x3, 0x2) sendto$inet6(r0, &(0x7f00000003c0)="befac85fa174d763dbbd3b661a1c090d296adcb894a5f838fbc61887af3db8394f4efe1613daa6ccc9e66b650cb84a1166ce160966be4dfe80fec930b2ab7713f21db54a3c8e5bd87bdef4a4ea7947143e7077da05783f384ffc86d1c11e80d814c613e83f65a3a91f59e5302913cc60ef3a41dc4d1cc0fa2cba097b552b20c425ca8e3cde96de3e98d0f5b249b3dfa1d66aae76b7e62bb0f343750aad9d42484c82312fc34b59", 0xa7, 0x20004040, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x10) fcntl$setstatus(r4, 0x4, 0x40000) dup3(r3, r1, 0xffffffffffffffff) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000200)=""/107, &(0x7f0000000280)=0x6b) 14:06:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xc000}}) 14:06:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffffffffffff]}) 14:06:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xf010000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400000, 0x0) 14:06:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x100000000000000d) clone(0x0, 0x0, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) 14:06:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffdfd]}) 14:06:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xd000}}) 14:06:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x460, 0x0, 0xf0, 0x0, 0xf0, 0xf0, 0x390, 0x390, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0x1e}, [0x0, 0x0, 0xff], [0xff000000, 0xffffffff, 0xffffffff, 0xff], 'netdevsim0\x00', 'syzkaller0\x00', {}, {}, 0x3d, 0x9, 0x2, 0x4}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x1f, 0x5, 0x200, 0x1}}, @common=@inet=@tos={0x28, 'tos\x00', 0x0, {0x7, 0x4, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x67, 0x4, 0x1f, 0x4, 0x3, 0x3120, 0x400}}, @common=@unspec=@connlimit={0x40, 'connlimit\x00', 0x1, {[0xffffffff, 0x0, 0xffffff00, 0xff000000], 0x3ff, 0x2, 0x8}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x40, 0x80000000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) getpid() dup3(r0, r1, 0x0) 14:06:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x10020000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffffffffffe7]}) 14:06:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) 14:06:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xe000}}) 14:06:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) sysinfo(&(0x7f0000000080)=""/196) 14:06:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xff600000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}) 14:06:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xf000}}) 14:06:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x4000) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x4, 0x7, 0x1, 0x6, 0x2, 0x7fffffff, 0x2}, 0x1c) dup3(r0, r1, 0x0) 14:06:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xf00000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) [ 1358.847301][ T3961] mkiss: ax0: crc mode is auto. 14:06:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7]}) 14:06:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x11000}}) 14:06:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ff]}) 14:06:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) 14:06:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x32, r0, 0x0) fallocate(r0, 0x21, 0x8, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffff, 0x400401) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r3, 0x1, 0x4, [0x6, 0x9, 0x4, 0x3]}, 0x10) dup3(r0, r1, 0x0) 14:06:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfd]}) 14:06:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x10f00000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x12000}}) 14:06:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x5, 0x8, 0x2) 14:06:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffe7]}) 14:06:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x400000000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x13000}}) 14:06:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x31, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 14:06:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x60ffffffffff, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) 14:06:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x99800]}) 14:06:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000140)={0x80000001, {{0x2, 0x4e20, @multicast1}}}, 0x88) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x14000}}) 14:06:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) r10 = getgid() getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="000000ce", @ANYRES32=r5, @ANYBLOB="02000600", @ANYRES32=r6, @ANYBLOB="02000700", @ANYRES32=r7, @ANYBLOB="02000300", @ANYRES32=r8, @ANYBLOB="040003000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000200", @ANYRES32=r14, @ANYBLOB="10000100000000002000020000000000"], 0x94, 0x1) 14:06:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x740000000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980001]}) 14:06:22 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x77, 0x4400) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40000, 0x0) renameat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r2, r3, 0x0) 14:06:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x4, 0x202) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0xff) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000100)) [ 1359.697833][ T4530] sp0: Synchronizing with TNC 14:06:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x15000}}) 14:06:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980900]}) 14:06:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x7fffffffefff, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8) 14:06:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xd77) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x800) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x16000}}) 14:06:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980901]}) 14:06:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x940000000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0xf6bda916a5dab26c) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r2, r3}}, 0xffffff76) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x50710000000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x17000}}) 14:06:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x5, 0x3, 0x2}) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r0, 0x80000) 14:06:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="dc1f123c123f149bd07000") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980902]}) 14:06:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980903]}) 14:06:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10) 14:06:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xc0700000000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0x10000, 0x4000, 0x3, 0x8, 0x9}) listen(r1, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000001c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x6) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x44000) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000500)=0x107) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000540)={r4, 0x5, 0x0, 0x8, 0x80000000, 0xf79}, &(0x7f0000000580)=0x14) r6 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000003c0)={r5, 0x101}, 0x8) getsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0xc, 0x101, 0x5, 0x5, 0x1, 0x81}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) dup3(r6, r1, 0x0) 14:06:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x18000}}) 14:06:23 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) 14:06:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980905]}) 14:06:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x5) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xd0500000000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 14:06:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x19000}}) 14:06:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980909]}) 14:06:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x100000000000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1d) 14:06:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1a000}}) 14:06:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980912]}) 14:06:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x200000000000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980913]}) 14:06:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r3, 0x4}, 0x8) 14:06:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1b000}}) 14:06:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x1002000000000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980914]}) 14:06:24 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64655730303030303030303030303030303030303030401730302c646f7072616973652c646f6e745f6d6561737572652c00197bfc6b05f7908e00000000003914faf23e180e03bf2c3313bf8dbd77eabaf93d2fe22a47fbd0ec0946c5863be173283511cf78ceac846c4916d89032e81f04c89a4b830fb5bb27340e5e4fe5d8434d7dc1b5ce515a1daa3f2482661f213b805186048dbf341e3920ad412a3b17318049ad060161a672417f3a508f8917612f32146c3f9e6367d66b2ded7e9d00000000e77d045f0f07508458f44cee52e96c35a36e24e75bad44190b3040b6ca3c3b32d54422ce885437a0d25127bfa1348569f5b355044c0b81db293dfdcdea25b3b43f2b0e76a4f440a46f0f673a05ae86e3f0d1ed41a989cd68a5c6a8cd43abbe14dbfa9032e765b3afd179aea67c06d6b899856365a99d176feb8f5160ee3f0e80e4fba52511ec5ec06d627f0270bfdf8cd578e12852bba05dff7eb47deb18ac64d3459795af20"]) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = dup3(r0, r1, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000002c0)={r3, r4/1000+10000}, 0x10) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/19) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x5, 0xba90, 0xff}) 14:06:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x45) 14:06:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mlockall(0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x36f, 0x0) ioctl(r0, 0x80000001, &(0x7f00000000c0)="0adc9be970000000000000a806ed281cf5d842f4b07a009344eb78215244889186b144d3c3f226b77d66ddfe5313d314d6cd51e220535956e5c63aad29e93f68e905990c1b2edb4f3d2a9f94aaad2bef03e76632db267fc6c85b295aaac831f682f412114856a93947eed2cead6e2587b8e4c2dd9e45c1e0458638d3") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) accept$alg(r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x7, &(0x7f00000005c0)=[{&(0x7f00000001c0)="7c646fcedef0e9e6828e84e2b18d9d60bfab5ebcb4e3c1b0a51cbca4907a0ef23cad33379dbcb6ca18bf504ca3a6b43bb403cf624541b690d7708ec8d6545b94b5f34675c722fe9701d07ddac30b15c6877b0f1e73aba9444c852e3ad3ae5480ae51288cce3652821c55230ea402513ee60faef06b4434f9e2dc2e9aacdd57bed8600e3757151b14fbfd8ab49c5c4f295a8c2261e83fe22f6b59ba74a1687544fc4ae791b2453651a7b3c220c2e0f97394a250158d52dd8576c08b6c16", 0xbd, 0x401}, {&(0x7f0000000280)="79a369d1426e5c46f0578bd9a1b5cd341f6327782aef694786699f4bf0b7b54a248918f820f233c99be2969cca1042d60eb16ca167085c8cf7d25da0", 0x3c, 0x4}, {&(0x7f00000002c0)="53c20f78092a02ff9471cbe727b56423af15119324faa6a87542c9cced15352a21901e88887884c8f1cd03ef73dbeba7c330a5c78e82800d16ac69872b5aa601d9ea82ca3547d19c4a7136ff579637641e62530bfce579cd11e6046d1463de3dfd90b57ce6f36ae637bfbfd976f9dded442b07d47930095526102a766f2920d06565503ff744b4d4f27562447291a81956957d2e348278c9719025e2152e5bc91e3d142803ab847f561fdbfa21f80a1776d9c9", 0xb3, 0x7}, {&(0x7f0000000380)="7932822b1f79273a8cff5b3a344babda66ef23eebe762dc46926daadce56deed74caa401704548cc83454e0ec016c93430209e50bd963327fb4170f43a764149f60046bd75e448c7e7cf25e8202c0768f0677f05d71afba96b49bff7fcd1ad0296529f0c7741c1f5d7f1d8aa337a177bbebc71fb7334c5fe1197dea544aeb78a6dfb2ed080621715e504eb03647310", 0x8f, 0x3}, {&(0x7f0000000440)="196b3802a1f3c3360b184f27e83e18c5e80013e1a85da5242bcd9be72ec508fafaa1202f8bd930171a6f5d7b8f40119d3e90cfae88b4e50d2588556b2cff00905e2d3ca49a8cfaa81a683c85420a92789730598844fb09f3d88f03d18c597be0f75910c27d8459d6a8e2ed114da414603a847dcca8209b53ca8bfabd667c0efca7c2e669571a12955ae2317c0b38e9bc01e260c57504075a783fd6b3ad", 0x9d, 0xc453}, {&(0x7f0000000500)="fd5ae77656f0f7705854ea", 0xb, 0x100000001}, {&(0x7f0000000540)="ddcb34356fb4de358b4f41b60b65062de1236fa85c6906b2391783d67262d0cb710233f06bb15e1f77424a7e6bcf3109e1fb136c54b732db33c13be078c8cd430ae03c21ca207272", 0x48, 0xffff}], 0x420, &(0x7f0000000680)='-\x00') 14:06:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1c000}}) 14:06:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xffefffffff7f0000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980915]}) 14:06:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x420000) faccessat(r2, &(0x7f00000000c0)='./file0\x00', 0x40, 0x400) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x980929]}) 14:06:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr="8f4343e39cee8f32841b50780507c83d", 0x9}, 0xfdef) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40, 0x100) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x1, 0x4) dup3(r0, r1, 0x0) 14:06:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xffffffffff600000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1d000}}) 14:06:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f900]}) 14:06:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x60) 14:06:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1400008912, &(0x7f0000000040)="0ad81f6eb0dbea7870adc659f7fdb276c263f5016ae7864d7362f701ddae0cee050abd27a40db3513f517e109547edcd78ea9d22ece2089d8c0714e571973f12612ad955096e61076e4a22abcc917fff246c40885974fd455b6ffcb43970c09bec917154291b") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) 14:06:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) listen(r1, 0x3f) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xbe7a0a}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x4, 0x81, 0x5, 0x9, 0xfffffffffffffff7}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1e000}}) 14:06:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f901]}) 14:06:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x4, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1f000}}) 14:06:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000001c0)=0x95cf, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f902]}) 14:06:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x300) 14:06:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) getsockopt$inet_dccp_buf(r1, 0x21, 0xc2, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000011c0)) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) clone(0x400, &(0x7f0000001200)="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", &(0x7f0000001180), &(0x7f0000001300), &(0x7f0000001340)="ca8acd36217995236eddf8a71f5d25e401c19ab053dd47484c5684cf4228f6103d58074a0b5de0559d34fc1b514526a733b82d49ea83ffc190cc67efab423a84717107e3a25fc33ac68bf396b341b821ea6edf7a2a5a3927016ac2938d9810890892edce5ad4db5ee31e5107d4ac0074125a6cbb810506a318ddd55941bc0f8d4a6081ab22017df7cd3fdc4d844bbfeb0664ef35c0b1d1e57623f55be51e34141842885fb3f668fb13b344ad1a8e63d4f2b3e04d83c4867de2e5c7b45d1f9b73f1529b6e30c2a380a6c8be5a0d474abdb4867cb6415b5b2ca425912530ed01573b828866") r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:06:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x300, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x20000}}) 14:06:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f903]}) 14:06:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0xffffff1f, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x5, 0x222040) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60, 0x0, 0x7, {{0x5, 0x3ff, 0x800, 0x3, 0x200, 0x1ff, 0x3f, 0x2}}}, 0x60) syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x21000}}) 14:06:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = fcntl$dupfd(r1, 0x406, r0) write$P9_RXATTRWALK(r2, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x9}, 0xf) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={r4, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f00000003c0)=0x84) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) dup3(r0, r1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000180)) 14:06:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f904]}) 14:06:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x2, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x500) 14:06:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f905]}) 14:06:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x22000}}) 14:06:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x20000) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000100)={{}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) r3 = accept4$bt_l2cap(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x9, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000280)=0x0) io_cancel(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0xb2df, r3, &(0x7f00000003c0)="2340f0196186ee3a9afb8c92ce9f1cee272dd6a29e60354432c28c9d2f", 0x1d, 0xca47, 0x0, 0x0, r1}, &(0x7f0000000440)) io_cancel(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f00000002c0)="cec60039ee21e03bcd8dcf96fa82ba9ebdcc4bf5a7f660189b3f9cb55821e3f425d358e83bf272ccdbcb7aadcd34829163070ddf871b655003680ab122fc9a37ea87512c1e404b31ae9d12af7c96f955da9078572a5581ff72c5c75d79ecbe0045150dc15f6909e7122933", 0x6b, 0x81, 0x0, 0x1}, &(0x7f0000000380)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xf, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f906]}) 14:06:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) recvmmsg(r0, &(0x7f0000003080)=[{{&(0x7f0000000140)=@tipc=@name, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f0000000000)=""/11, 0xb}], 0x2, &(0x7f00000002c0)=""/76, 0x4c}, 0x1}, {{&(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/83, 0x53}], 0x2, &(0x7f0000000580)=""/167, 0xa7}, 0x3}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/132, 0x84}, {&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/110, 0x6e}, {&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000000a00)=""/161, 0xa1}, {&(0x7f0000000ac0)=""/122, 0x7a}], 0x7, &(0x7f0000000bc0)=""/245, 0xf5}, 0x9e}, {{&(0x7f0000000cc0)=@nfc, 0x80, &(0x7f0000002000)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/31, 0x1f}, {&(0x7f0000001d80)=""/114, 0x72}, {&(0x7f0000001e00)=""/70, 0x46}, {&(0x7f0000001e80)=""/63, 0x3f}, {&(0x7f0000001ec0)=""/171, 0xab}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)}], 0x8, &(0x7f0000002080)=""/4096, 0x1000}, 0x100000000}], 0x4, 0x1, &(0x7f0000003180)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000031c0)={'team0\x00', r2}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x23000}}) 14:06:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x10f, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f907]}) 14:06:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x600) 14:06:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x2}, 0x10) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = accept4(r1, 0x0, &(0x7f0000000100), 0x80000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x111d00, 0x0) write$P9_RRENAME(r3, &(0x7f0000000180)={0x293, 0x15, 0x1}, 0xfffffffffffffc65) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote, @in=@loopback, 0x4e21, 0x100, 0x4e20, 0xf232, 0xa, 0x80, 0x0, 0x0, r4, r5}, {0xc6, 0x10000, 0x7fffffff, 0xdce, 0x87, 0x7, 0x2, 0x4}, {0x100000001, 0x10000, 0xb3, 0x55fcd586}, 0x9, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d6, 0x7f}, 0xa, @in=@multicast2, 0x3504, 0x2, 0x0, 0x8, 0x586d, 0x0, 0x2}}, 0xe8) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000001c0)={0x65, 0x7}, 0x2) 14:06:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffffffffffe}, 0x1c) listen(r1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x800) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000480)={0x7, [0x8, 0x9, 0x9, 0x3, 0x8, 0x9, 0x1]}, &(0x7f00000004c0)=0x12) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x501100, 0x0) fallocate(r1, 0x0, 0xffff, 0x3ff) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000008c0)='trusted.overlay.nlink\x00', &(0x7f0000000940)={'L-', 0x4}, 0x28, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x9a, "402eb906399b666d97ed7189ff11facacdb6046f3754fcfb5500b4366bb722d7da50e3ad948ba156ee4c451ba4c9341475a5b99c2b39bbc17ad2ab7a1d211eb4928be71233709c0cba7500d13788c2a843bccc27f7d212ca2d51acfc6f56ac9f8f8bd6394d459bdf0b796aecddc08fc2d55f78cc3526a32332b551517aedea046c81c6de3a1d4b294c0e3f8a72514932e06ff36dc7a96b03f9ac"}, &(0x7f0000000300)=0xa2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x2c0, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc84}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe876}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffe00}]}]}, @TIPC_NLA_BEARER={0x144, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @remote, 0x7ba}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @empty, 0x81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff7fff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe76}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'nlmon0\x00'}}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0x58, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x8, @remote, 0x800}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x0, @remote, 0xffffffff}]}, &(0x7f0000000400)=0x10) dup3(r0, r1, 0x0) 14:06:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x210, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x24000}}) 14:06:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f908]}) 14:06:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = dup(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x8, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x6bc, r2}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="7113d85b487084818637d4a60cfa2f83ff7355d7fc679e9a190636d19a4270b80b3d2abbcf5fd234127c74bebc1bd778a7e018c6235ee5be7dfda5b6786fc1f06aea2d1cf4326769292edbf84195e6420d0d5a54fcd613d6d5b2f87e7950", 0x5e}, {&(0x7f00000001c0)="5cf5bcc22f10d44498c0156920b1a15b5a43f405064b05ffd0490320c0feb893c25522085c2e232d0a5a04e323e7e11257a097ad276edbe9171493f3caa64ed04e8462c99deba1b01577a574385858b77ad329d7c2f028e1d6bf7636d2367e160cb0435f4ab57441d42ff664adc09a422764a8c6a7d37b9fd283708168ff854b7f1279", 0x83}, {&(0x7f0000000280)="78f2e2d919c0cd2698c61f7914e6fce01a845d73dc02f08788db", 0x1a}], 0x3, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:26 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x48000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x3, 'syzkaller0\x00', 0x2}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r1, r2, 0x0) 14:06:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x1002, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:26 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x3, 0x8a000) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000240)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xffffffff, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000100)={{0x3, @name="48e110e802b6655493dc49859d9542483ba8ea4174067f602a87f19fbc8c5a91"}, "076cb2979d15f0a746dfefc102735beef3316af525ec5b7a1ecfe8af2663bf55", 0x1}) write$eventfd(r2, &(0x7f00000000c0)=0xd8f, 0x8) pipe(&(0x7f0000000280)) 14:06:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x98f909]}) 14:06:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x25000}}) 14:06:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x700) 14:06:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x14000, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000180)={0x3, 0x4d592ee, 0x4}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0xffffffffffffff30) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) dup3(r0, r1, 0x0) 14:06:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x4000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf0f002]}) 14:06:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x26000}}) 14:06:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB]) 14:06:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x60ff, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x60d40, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000200)={0x5, 0xffff, 0x1}) accept4$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x80000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000140)=""/153, &(0x7f0000000000)=0x99) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x3, r2}) 14:06:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf0f017]}) 14:06:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x7400, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x27000}}) 14:06:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf26) 14:06:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf0f01e]}) 14:06:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x20, 0x40000) write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x9400, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x28000}}) 14:06:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf0f025]}) [ 1364.062663][ T6499] EXT4-fs (sda1): re-mounted. Opts: [ 1364.112168][ T6824] EXT4-fs (sda1): re-mounted. Opts: 14:06:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$binfmt_misc(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB='syz1'], 0x4) 14:06:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x400000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000000c0)=""/137) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf0f041]}) 14:06:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1d00) 14:06:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x29000}}) 14:06:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf0f048]}) 14:06:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001fc0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)='h', 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x48040) 14:06:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x507100, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2a000}}) 14:06:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf99800]}) 14:06:27 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x900, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x6, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") signalfd4(r1, &(0x7f0000000040)={0x20}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 14:06:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1f00) 14:06:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1000000]}) 14:06:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) fchmod(r0, 0x0) 14:06:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x50d000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2b000}}) 14:06:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1009800]}) 14:06:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x404004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x751, 0x100) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x100000000) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000140)=0x1) 14:06:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x70c000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2c000}}) 14:06:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1099800]}) 14:06:28 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000040), 0x0) 14:06:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2000) 14:06:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x715000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1f99800]}) 14:06:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x3, 0xa, 0x9) getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='lapb0\x00') ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adcba833c123f9a9bd07053656d043967a88c902c0bd2f283dd6c250f37ee3071f763ad94a68de474fc10e7a1185fb39ab17b362a81f26bd6b142506a92c9e3e8735c3608ef61794edd2550b206ffe12a3628d54141765871ec1567db03775e3ddacf48406868ef5d390862430044167d71acb7d004cecbf4d9b888117d5fce03a00644") mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @broadcast}, 0xdf}, @in={0x2, 0x4e24, @broadcast}], 0x2c) 14:06:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2d000}}) 14:06:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") dup2(r3, r2) 14:06:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000]}) 14:06:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x740000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2e000}}) 14:06:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x260f) 14:06:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) 14:06:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x940000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2099800]}) 14:06:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2f000}}) 14:06:28 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 14:06:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xc07000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2f0f000]}) 14:06:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x30000}}) 14:06:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2f99800]}) 14:06:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001180)=0x1008) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000011c0)={r2, @in6={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}}, &(0x7f0000001280)=0x84) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x5, 0x3, 0x1000, 0x71, 0xfffffffffffffffc, 0x800, 0x7, 0x1, 0x3, 0x8, 0xb9fd}, 0xb) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) 14:06:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3f00) 14:06:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xd05000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x31000}}) 14:06:29 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3099800]}) 14:06:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 14:06:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x1000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:29 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 14:06:29 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3f99800]}) 14:06:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x32000}}) 14:06:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4000) 14:06:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x2000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:29 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x100000000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x28, &(0x7f0000000200)}, 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff00, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) 14:06:29 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4f99800]}) 14:06:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xf000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x33000}}) 14:06:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9, 0x82100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x5}, 0x8) 14:06:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5099800]}) 14:06:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xf010000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 14:06:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4500) 14:06:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x34000}}) 14:06:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000bdb000/0x4000)=nil, 0x4000, 0x1000000, 0x31, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5f99800]}) 14:06:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x10020000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6f99800]}) 14:06:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x35000}}) 14:06:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xff600000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x31, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 14:06:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xf00000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7f99800]}) 14:06:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 14:06:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x36000}}) 14:06:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6000) 14:06:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8f99800]}) 14:06:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x10f00000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000140)={0x0, @speck128}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000001c0)=""/219) ioctl$KDSETLED(r2, 0x4b32, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000180)) 14:06:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x400000000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9099800]}) 14:06:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x37000}}) 14:06:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x60ffffffffff, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10002, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x46c}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r2, 0x4) 14:06:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9f99800]}) 14:06:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0)}, 0x0) 14:06:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x38000}}) 14:06:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1000000) 14:06:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x12099800]}) 14:06:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x740000000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x202000, 0x0) 14:06:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x13099800]}) 14:06:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x7fffffffefff, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x39000}}) 14:06:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x10, &(0x7f00000000c0)={&(0x7f0000001240)=""/228, 0xe4, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x10, &(0x7f0000000140)={&(0x7f0000000240)=""/4096, 0x1000, r2}}, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000180)=0xfffffffffffffdba) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 14:06:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x14099800]}) 14:06:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x940000000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:33 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r0, 0x0, 0x0, 0x0}, 0x30) 14:06:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2000000) 14:06:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3a000}}) 14:06:33 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 14:06:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x15099800]}) 14:06:33 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x50710000000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x17f0f000]}) 14:06:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3b000}}) 14:06:33 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 14:06:33 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xc0700000000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3000000) 14:06:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1ef0f000]}) 14:06:33 executing program 1: 14:06:33 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x1, 0x0, 0x200, 0x0, 0x40, 0x0, 0x3ff, 0x300000000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x100, 0x0, 0x3, 0x0, 0x6, 0x6, 0x0, 0x5, 0x1ff, 0x0, 0x1, 0x1, @perf_config_ext={0xff}, 0x1, 0x0, 0x5, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r0, 0x0, 0x0, 0x0}, 0x30) 14:06:33 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xd0500000000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3c000}}) 14:06:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x25f0f000]}) 14:06:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4000000) 14:06:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x29099800]}) 14:06:34 executing program 1: 14:06:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x100000000000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3d000}}) 14:06:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x41f0f000]}) 14:06:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x200000000000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:34 executing program 1: 14:06:34 executing program 0: 14:06:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3e000}}) 14:06:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5000000) 14:06:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x48f0f000]}) 14:06:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x1002000000000000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:34 executing program 0: 14:06:34 executing program 1: 14:06:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3f000}}) 14:06:34 executing program 0: 14:06:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ffffff]}) 14:06:34 executing program 1: 14:06:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xffefffffff7f0000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:34 executing program 0: 14:06:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6000000) 14:06:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}) 14:06:34 executing program 1: 14:06:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x40000}}) 14:06:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0xffffffffff600000, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:34 executing program 0: 14:06:34 executing program 1: 14:06:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}) 14:06:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x41000}}) 14:06:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x2], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:34 executing program 0: 14:06:34 executing program 1: 14:06:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7000000) 14:06:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffe7]}) 14:06:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x42000}}) 14:06:35 executing program 1: 14:06:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xf], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:35 executing program 0: 14:06:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9980000000000]}) 14:06:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x43000}}) 14:06:35 executing program 1: 14:06:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf9980000000000]}) 14:06:35 executing program 0: 14:06:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:06:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8000000) 14:06:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x10f], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}) 14:06:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x44000}}) 14:06:35 executing program 0: clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xc1040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pause() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x8, r0) 14:06:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x210], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) [ 1372.206640][ T9969] IPVS: ftp: loaded support on port[0] = 21 14:06:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x100980000000000]}) 14:06:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x45000}}) 14:06:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/88) 14:06:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x109980000000000]}) 14:06:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x1002], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1f9980000000000]}) 14:06:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10000000) 14:06:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x46000}}) 14:06:35 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) 14:06:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="8f5da25ea337206355aa632f2b20821b", 0x10}], 0x1}, 0x20000000) 14:06:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x4000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x200000000000000]}) 14:06:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) 14:06:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x47000}}) 14:06:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x209980000000000]}) 14:06:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x60ff], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1d000000) 14:06:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x48000}}) 14:06:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2f0f00000000000]}) 14:06:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x246040) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000140)={0x3, "33099611ef0f715cc3f909c1ee15eeeed402a748b812dea1833750ab4ae5da1c", 0x1, 0x1}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup3(r0, r1, 0x0) 14:06:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x7400], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2f9980000000000]}) 14:06:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x49000}}) 14:06:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1f000000) 14:06:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x309980000000000]}) 14:06:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x9400], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3f9980000000000]}) 14:06:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4a000}}) 14:06:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x400000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4f9980000000000]}) 14:06:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4b000}}) 14:06:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x20000000) 14:06:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x509980000000000]}) 14:06:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x507100], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4c000}}) 14:06:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5f9980000000000]}) 14:06:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x50d000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4d000}}) 14:06:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x260f0000) 14:06:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6f9980000000000]}) 14:06:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x70c000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7f9980000000000]}) 14:06:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4e000}}) 14:06:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x715000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3f000000) 14:06:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8f9980000000000]}) 14:06:37 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)) 14:06:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4f000}}) 14:06:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x740000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x909980000000000]}) 14:06:38 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)) 14:06:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x9f9980000000000]}) 14:06:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x50000}}) 14:06:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x940000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x40000000) 14:06:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:38 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)) 14:06:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1209980000000000]}) 14:06:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x51000}}) 14:06:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xc07000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1309980000000000]}) 14:06:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xd05000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x52000}}) 14:06:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x45000000) 14:06:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1409980000000000]}) 14:06:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x1000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x53000}}) 14:06:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1509980000000000]}) 14:06:38 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x2000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x17f0f00000000000]}) 14:06:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x54000}}) 14:06:39 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xf000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x60000000) 14:06:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1ef0f00000000000]}) 14:06:39 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x55000}}) 14:06:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xf010000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x25f0f00000000000]}) 14:06:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:39 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x10020000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xfeffffff) 14:06:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2909980000000000]}) 14:06:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x56000}}) 14:06:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:39 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x41f0f00000000000]}) 14:06:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xff600000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x57000}}) 14:06:39 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x48f0f00000000000]}) 14:06:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xf00000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xfffffffe) 14:06:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x58000}}) 14:06:39 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ffffffffffffff]}) 14:06:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) 14:06:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x10f00000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:40 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x59000}}) 14:06:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffffffffffff]}) 14:06:40 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1000000000) 14:06:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x400000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffdfd]}) 14:06:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5a000}}) 14:06:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffffffffffe7]}) 14:06:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x60ffffffffff], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)) 14:06:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}) 14:06:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5b000}}) 14:06:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1000000000000) 14:06:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7]}) 14:06:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)) 14:06:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x740000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7ff]}) 14:06:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5c000}}) 14:06:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x7fffffffefff], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)) 14:06:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfd]}) 14:06:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x940000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x100000000000000) 14:06:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffe7]}) 14:06:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5d000}}) 14:06:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x50710000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)) 14:06:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x99800]}) 14:06:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5e000}}) 14:06:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xc0700000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980001]}) 14:06:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x200000000000000) 14:06:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xd0500000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5f000}}) 14:06:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980900]}) 14:06:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x100000000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x60000}}) 14:06:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980901]}) 14:06:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x200000000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x300000000000000) 14:06:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980902]}) 14:06:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x61000}}) 14:06:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x1002000000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980903]}) 14:06:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x62000}}) 14:06:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980905]}) 14:06:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xffefffffff7f0000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x400000000000000) 14:06:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x63000}}) 14:06:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0xffffffffff600000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980909]}) 14:06:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980912]}) 14:06:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x64000}}) 14:06:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x2], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980913]}) 14:06:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xf], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980914]}) 14:06:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x500000000000000) 14:06:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x65000}}) 14:06:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980915]}) 14:06:42 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 14:06:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x10f], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x66000}}) 14:06:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x980929]}) 14:06:42 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 14:06:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x210], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x67000}}) 14:06:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x600000000000000) 14:06:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:43 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 14:06:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f900]}) 14:06:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x1002], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f901]}) 14:06:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x68000}}) 14:06:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f902]}) 14:06:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x4000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x700000000000000) 14:06:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f903]}) 14:06:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x69000}}) 14:06:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f904]}) 14:06:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x60ff], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6a000}}) 14:06:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x800000000000000) 14:06:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f905]}) 14:06:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x7400], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6b000}}) 14:06:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x9400], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f906]}) 14:06:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f907]}) 14:06:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1d00000000000000) 14:06:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6c000}}) 14:06:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x400000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f908]}) 14:06:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x507100], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6d000}}) 14:06:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x98f909]}) 14:06:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x50d000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1f00000000000000) 14:06:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6e000}}) 14:06:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x70c000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf0f002]}) 14:06:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x715000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf0f017]}) 14:06:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6f000}}) 14:06:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x740000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2000000000000000) 14:06:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf0f01e]}) 14:06:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, 0x0) 14:06:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf0f025]}) 14:06:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x940000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x70000}}) 14:06:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 14:06:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf0f041]}) 14:06:45 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xc07000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x260f000000000000) 14:06:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x71000}}) 14:06:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf0f048]}) 14:06:45 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xd05000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 14:06:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf99800]}) 14:06:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 14:06:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x72000}}) 14:06:45 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x1000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3f00000000000000) 14:06:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}) 14:06:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)) 14:06:45 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x2000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x73000}}) 14:06:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1009800]}) 14:06:45 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xf000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x74000}}) 14:06:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)) 14:06:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1099800]}) 14:06:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4000000000000000) 14:06:45 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xf010000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f99800]}) 14:06:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x75000}}) 14:06:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)) 14:06:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}) 14:06:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x10020000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2099800]}) 14:06:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xff600000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x76000}}) 14:06:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4500000000000000) 14:06:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x77000}}) 14:06:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2f0f000]}) 14:06:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xf00000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2f99800]}) 14:06:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x10f00000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:46 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3099800]}) 14:06:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x78000}}) 14:06:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6000000000000000) 14:06:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x400000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f99800]}) 14:06:46 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x79000}}) 14:06:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4f99800]}) 14:06:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x60ffffffffff], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:46 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x740000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7a000}}) 14:06:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xfeffffff00000000) 14:06:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x7fffffffefff], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5099800]}) 14:06:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7b000}}) 14:06:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5f99800]}) 14:06:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x940000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 14:06:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7c000}}) 14:06:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6f99800]}) 14:06:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xffffffff00000000) 14:06:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, 0x0) 14:06:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x50710000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7f99800]}) 14:06:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7d000}}) 14:06:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xc0700000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8f99800]}) 14:06:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, 0x0) 14:06:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9099800]}) 14:06:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7e000}}) 14:06:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000100)={{0x5, 0x6}, 'port1\x00', 0x0, 0x0, 0xe5, 0x7e5c66c4, 0x5, 0x5, 0x0, 0x0, 0x7, 0x4}) 14:06:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xd0500000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, 0x0) 14:06:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9f99800]}) 14:06:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7f000}}) 14:06:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1f000000) 14:06:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x12099800]}) 14:06:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x100000000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x13099800]}) 14:06:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x80000}}) 14:06:48 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x3, 0x1ff, 0xfff, 0x3}, 'syz0\x00', 0x11}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0x1) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000003c0), &(0x7f00000004c0)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000700000009000000000000000700000000000500000000000000000008ef000000000008e400000000000000faffffffffffffff1f00000000000000360c00000000000009000000000000000700000000000000c5daebecffa50bf311a5b7eb4ab48e80a9914eee694cbf9b64dd55d7d9577190602e6898a66ca7d73b44b59ebc140f8609de676b4230714e68b56c764491d9fd512d8b8ac4882324df74e9f4fd05affdbfc79d2fd0f6e93f56ba12ecd5ef7465c958c7c0e467120123a9911b110a288d03cde98b46c4669163dd4046e070a2"]) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xfffffffffffffffa}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000380)=r4, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="41f6dd6a10d4d09944232606cc936c5cddc52dde58ec177abc16bf49955d2775cf15b32b7164b330c5229ee5e49b862b8fd8823a4f97bddc8830f8a42e6305d621b4a239e4988954a186d75526c3063075c44b9e515a889f14de6f04f7d6783ce300"], &(0x7f0000000040)=0x66) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xa) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) 14:06:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 14:06:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x200000000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1f000000) 14:06:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x14099800]}) 14:06:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x81000}}) 14:06:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0x1002000000000000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 14:06:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x20001000008, 0x2011, r0, 0xeffffffffffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:06:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x15099800]}) 14:06:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1f000000) 14:06:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xffefffffff7f0000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x82000}}) 14:06:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 14:06:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x17f0f000]}) 14:06:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x0, 0xffffffffff600000], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 14:06:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1ef0f000]}) 14:06:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x83000}}) 14:06:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:06:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 14:06:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x25f0f000]}) 14:06:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x84000}}) 14:06:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x29099800]}) 14:06:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 14:06:48 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:48 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x41f0f000]}) 14:06:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x85000}}) 14:06:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 14:06:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48f0f000]}) 14:06:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000080)) 14:06:49 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7ffffff]}) 14:06:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x86000}}) 14:06:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:49 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}) 14:06:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:49 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x48000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0x4b, ""/75}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 14:06:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x87000}}) [ 1386.232849][T15026] FAULT_INJECTION: forcing a failure. [ 1386.232849][T15026] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.282744][T15026] CPU: 1 PID: 15026 Comm: syz-executor.1 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1386.291910][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.301979][T15026] Call Trace: [ 1386.305323][T15026] dump_stack+0x172/0x1f0 [ 1386.310106][T15026] should_fail.cold+0xa/0x15 [ 1386.314816][T15026] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1386.314841][T15026] ? ___might_sleep+0x163/0x280 [ 1386.314871][T15026] __should_failslab+0x121/0x190 [ 1386.330454][T15026] should_failslab+0x9/0x14 [ 1386.330475][T15026] kmem_cache_alloc_node_trace+0x270/0x720 [ 1386.330491][T15026] ? mutex_trylock+0x1e0/0x1e0 [ 1386.330513][T15026] __kmalloc_node+0x3d/0x70 [ 1386.350047][T15026] kvmalloc_node+0x68/0x100 [ 1386.354685][T15026] alloc_netdev_mqs+0x98/0xd30 [ 1386.359467][T15026] ? sl_free_netdev+0x70/0x70 [ 1386.364160][T15026] slip_open+0x38e/0x1138 [ 1386.368506][T15026] ? sl_uninit+0x20/0x20 [ 1386.372763][T15026] ? lock_downgrade+0x880/0x880 [ 1386.377635][T15026] ? sl_uninit+0x20/0x20 [ 1386.381891][T15026] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1386.387029][T15026] tty_set_ldisc+0x2d7/0x690 [ 1386.391644][T15026] tty_ioctl+0x5dc/0x15c0 [ 1386.395989][T15026] ? tty_register_device+0x40/0x40 [ 1386.401118][T15026] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1386.407386][T15026] ? tomoyo_init_request_info+0x105/0x1d0 [ 1386.413137][T15026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1386.419389][T15026] ? tomoyo_path_number_perm+0x263/0x520 [ 1386.425043][T15026] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1386.430869][T15026] ? __fget+0x35a/0x550 [ 1386.435040][T15026] ? tty_register_device+0x40/0x40 [ 1386.440161][T15026] do_vfs_ioctl+0xd6e/0x1390 [ 1386.445121][T15026] ? ioctl_preallocate+0x210/0x210 [ 1386.450246][T15026] ? __fget+0x381/0x550 [ 1386.454415][T15026] ? ksys_dup3+0x3e0/0x3e0 [ 1386.458845][T15026] ? tomoyo_file_ioctl+0x23/0x30 [ 1386.463797][T15026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1386.470043][T15026] ? security_file_ioctl+0x93/0xc0 [ 1386.475175][T15026] ksys_ioctl+0xab/0xd0 [ 1386.479341][T15026] __x64_sys_ioctl+0x73/0xb0 [ 1386.483954][T15026] do_syscall_64+0x103/0x610 [ 1386.488558][T15026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1386.494477][T15026] RIP: 0033:0x458c29 [ 1386.498378][T15026] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1386.517998][T15026] RSP: 002b:00007f26afe49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:06:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) 14:06:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 1386.526610][T15026] RAX: ffffffffffffffda RBX: 00007f26afe49c90 RCX: 0000000000458c29 [ 1386.534684][T15026] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1386.542672][T15026] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1386.550655][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26afe4a6d4 [ 1386.558637][T15026] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:49 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffe7]}) 14:06:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x88000}}) 14:06:50 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x2, @mcast1, 0x2}, @in6={0xa, 0x4e23, 0x7c, @remote, 0x84be}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e21, 0x4700000, @remote, 0x200}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x1f, @local, 0x3}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x80, @rand_addr="2f20ab679190f7f99baad1b2cfb5bb0d", 0xb97a}], 0xbc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x7, 0x7f, 0x401, 0x9, 0x7638}, 0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)) r2 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0xeb3ffc2aa589bc4, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f00000002c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4}) 14:06:50 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9980000000000]}) [ 1386.801442][T15151] FAULT_INJECTION: forcing a failure. [ 1386.801442][T15151] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.844790][T15151] CPU: 0 PID: 15151 Comm: syz-executor.1 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1386.853947][T15151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.864011][T15151] Call Trace: [ 1386.867323][T15151] dump_stack+0x172/0x1f0 [ 1386.871679][T15151] should_fail.cold+0xa/0x15 [ 1386.876292][T15151] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1386.882133][T15151] ? find_held_lock+0x35/0x130 [ 1386.887540][T15151] __should_failslab+0x121/0x190 [ 1386.892524][T15151] should_failslab+0x9/0x14 [ 1386.897044][T15151] kmem_cache_alloc_trace+0x4b/0x760 [ 1386.902436][T15151] __hw_addr_create_ex+0x5e/0x310 [ 1386.907498][T15151] __hw_addr_add_ex+0x1ef/0x2b0 [ 1386.912362][T15151] dev_addr_init+0x118/0x200 [ 1386.916970][T15151] ? dev_mc_flush+0x40/0x40 [ 1386.921489][T15151] ? __kmalloc_node+0x4e/0x70 [ 1386.926189][T15151] alloc_netdev_mqs+0x142/0xd30 [ 1386.931055][T15151] ? sl_free_netdev+0x70/0x70 [ 1386.935773][T15151] slip_open+0x38e/0x1138 [ 1386.940223][T15151] ? sl_uninit+0x20/0x20 [ 1386.944492][T15151] ? lock_downgrade+0x880/0x880 [ 1386.949542][T15151] ? sl_uninit+0x20/0x20 [ 1386.953795][T15151] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1386.958930][T15151] tty_set_ldisc+0x2d7/0x690 [ 1386.963725][T15151] tty_ioctl+0x5dc/0x15c0 [ 1386.968083][T15151] ? tty_register_device+0x40/0x40 [ 1386.973231][T15151] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1386.979494][T15151] ? tomoyo_init_request_info+0x105/0x1d0 [ 1386.979513][T15151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1386.979528][T15151] ? tomoyo_path_number_perm+0x263/0x520 [ 1386.979548][T15151] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1386.979575][T15151] ? __fget+0x35a/0x550 [ 1386.979597][T15151] ? tty_register_device+0x40/0x40 [ 1386.997294][T15151] do_vfs_ioctl+0xd6e/0x1390 [ 1386.997323][T15151] ? ioctl_preallocate+0x210/0x210 [ 1386.997361][T15151] ? __fget+0x381/0x550 [ 1386.997383][T15151] ? ksys_dup3+0x3e0/0x3e0 [ 1387.017027][T15151] ? tomoyo_file_ioctl+0x23/0x30 [ 1387.017047][T15151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:06:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf9980000000000]}) 14:06:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}) 14:06:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100980000000000]}) [ 1387.017061][T15151] ? security_file_ioctl+0x93/0xc0 [ 1387.017104][T15151] ksys_ioctl+0xab/0xd0 [ 1387.031592][T15151] __x64_sys_ioctl+0x73/0xb0 [ 1387.031624][T15151] do_syscall_64+0x103/0x610 [ 1387.047897][T15151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1387.047911][T15151] RIP: 0033:0x458c29 [ 1387.047928][T15151] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:06:50 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x89000}}) [ 1387.047936][T15151] RSP: 002b:00007f26afe49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.047951][T15151] RAX: ffffffffffffffda RBX: 00007f26afe49c90 RCX: 0000000000458c29 [ 1387.047959][T15151] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1387.047974][T15151] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1387.056702][T15151] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26afe4a6d4 [ 1387.071124][T15151] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x109980000000000]}) 14:06:50 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:50 executing program 5: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000240)={0x1, 0x5, 0xb6f}) r2 = syz_open_dev$vbi(&(0x7f00000023c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xa0000, 0x0, [0x1f, 0x7, 0x2, 0x0, 0x6, 0x9, 0x9, 0x20e28c81]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000002400)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', r3}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x6, 0x3, 0x8, 0x4, 0x100000000, 0x7}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x401, 0x40}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:06:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 14:06:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8a000}}) 14:06:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f9980000000000]}) 14:06:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) [ 1387.347372][T15385] FAULT_INJECTION: forcing a failure. [ 1387.347372][T15385] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.414081][T15385] CPU: 0 PID: 15385 Comm: syz-executor.1 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1387.423271][T15385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.433340][T15385] Call Trace: [ 1387.436650][T15385] dump_stack+0x172/0x1f0 [ 1387.441433][T15385] should_fail.cold+0xa/0x15 [ 1387.446047][T15385] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1387.451870][T15385] ? find_held_lock+0x35/0x130 [ 1387.456664][T15385] __should_failslab+0x121/0x190 [ 1387.461622][T15385] should_failslab+0x9/0x14 [ 1387.466144][T15385] kmem_cache_alloc_trace+0x4b/0x760 [ 1387.471450][T15385] __hw_addr_create_ex+0x5e/0x310 [ 1387.476493][T15385] __hw_addr_add_ex+0x1ef/0x2b0 [ 1387.481355][T15385] dev_addr_init+0x118/0x200 [ 1387.485952][T15385] ? dev_mc_flush+0x40/0x40 [ 1387.490469][T15385] ? __kmalloc_node+0x4e/0x70 [ 1387.495181][T15385] alloc_netdev_mqs+0x142/0xd30 [ 1387.495203][T15385] ? sl_free_netdev+0x70/0x70 [ 1387.495222][T15385] slip_open+0x38e/0x1138 [ 1387.495243][T15385] ? sl_uninit+0x20/0x20 [ 1387.495258][T15385] ? lock_downgrade+0x880/0x880 [ 1387.495277][T15385] ? sl_uninit+0x20/0x20 [ 1387.495293][T15385] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1387.495312][T15385] tty_set_ldisc+0x2d7/0x690 [ 1387.504871][T15385] tty_ioctl+0x5dc/0x15c0 [ 1387.537350][T15385] ? tty_register_device+0x40/0x40 [ 1387.542475][T15385] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1387.549173][T15385] ? tomoyo_init_request_info+0x105/0x1d0 [ 1387.555175][T15385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1387.561432][T15385] ? tomoyo_path_number_perm+0x263/0x520 [ 1387.567109][T15385] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1387.573030][T15385] ? __fget+0x35a/0x550 [ 1387.577206][T15385] ? tty_register_device+0x40/0x40 [ 1387.582349][T15385] do_vfs_ioctl+0xd6e/0x1390 [ 1387.586958][T15385] ? ioctl_preallocate+0x210/0x210 [ 1387.592076][T15385] ? __fget+0x381/0x550 [ 1387.596261][T15385] ? ksys_dup3+0x3e0/0x3e0 [ 1387.600702][T15385] ? tomoyo_file_ioctl+0x23/0x30 [ 1387.605650][T15385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:06:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}) 14:06:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x209980000000000]}) [ 1387.611904][T15385] ? security_file_ioctl+0x93/0xc0 [ 1387.617028][T15385] ksys_ioctl+0xab/0xd0 [ 1387.621199][T15385] __x64_sys_ioctl+0x73/0xb0 [ 1387.621225][T15385] do_syscall_64+0x103/0x610 [ 1387.621248][T15385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1387.621261][T15385] RIP: 0033:0x458c29 [ 1387.621275][T15385] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:06:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2f0f00000000000]}) 14:06:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 1387.621291][T15385] RSP: 002b:00007f26afe49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.636410][T15385] RAX: ffffffffffffffda RBX: 00007f26afe49c90 RCX: 0000000000458c29 [ 1387.636419][T15385] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1387.636427][T15385] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1387.636435][T15385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26afe4a6d4 [ 1387.636444][T15385] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2f9980000000000]}) 14:06:51 executing program 1 (fault-call:1 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x5, 0x1000, 0x3, 0xfffffffffffffffc, 0x13, 0x3a4, 0x0, 0x3, 0x7f, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:06:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 14:06:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8b000}}) 14:06:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x309980000000000]}) 14:06:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) [ 1387.963439][T15523] FAULT_INJECTION: forcing a failure. [ 1387.963439][T15523] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.010310][T15523] CPU: 0 PID: 15523 Comm: syz-executor.1 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1388.019479][T15523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.029551][T15523] Call Trace: [ 1388.032866][T15523] dump_stack+0x172/0x1f0 [ 1388.037218][T15523] should_fail.cold+0xa/0x15 [ 1388.041831][T15523] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1388.047766][T15523] ? ___might_sleep+0x163/0x280 [ 1388.052736][T15523] __should_failslab+0x121/0x190 [ 1388.052759][T15523] should_failslab+0x9/0x14 [ 1388.052777][T15523] kmem_cache_alloc_node_trace+0x270/0x720 [ 1388.052795][T15523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1388.052815][T15523] ? dev_addr_init+0x17f/0x200 [ 1388.074287][T15523] __kmalloc_node+0x3d/0x70 [ 1388.074308][T15523] kvmalloc_node+0x68/0x100 [ 1388.074325][T15523] alloc_netdev_mqs+0x67f/0xd30 [ 1388.074343][T15523] ? sl_free_netdev+0x70/0x70 [ 1388.074360][T15523] slip_open+0x38e/0x1138 [ 1388.074381][T15523] ? sl_uninit+0x20/0x20 [ 1388.106207][T15523] ? lock_downgrade+0x880/0x880 [ 1388.111104][T15523] ? sl_uninit+0x20/0x20 [ 1388.115368][T15523] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1388.120517][T15523] tty_set_ldisc+0x2d7/0x690 [ 1388.125163][T15523] tty_ioctl+0x5dc/0x15c0 [ 1388.130474][T15523] ? tty_register_device+0x40/0x40 [ 1388.135606][T15523] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1388.141929][T15523] ? tomoyo_init_request_info+0x105/0x1d0 [ 1388.147697][T15523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1388.153952][T15523] ? tomoyo_path_number_perm+0x263/0x520 [ 1388.159595][T15523] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1388.165443][T15523] ? __fget+0x35a/0x550 [ 1388.169630][T15523] ? tty_register_device+0x40/0x40 [ 1388.174755][T15523] do_vfs_ioctl+0xd6e/0x1390 [ 1388.179360][T15523] ? ioctl_preallocate+0x210/0x210 [ 1388.184476][T15523] ? __fget+0x381/0x550 [ 1388.188642][T15523] ? ksys_dup3+0x3e0/0x3e0 [ 1388.193072][T15523] ? tomoyo_file_ioctl+0x23/0x30 [ 1388.198028][T15523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1388.204309][T15523] ? security_file_ioctl+0x93/0xc0 [ 1388.209518][T15523] ksys_ioctl+0xab/0xd0 [ 1388.213686][T15523] __x64_sys_ioctl+0x73/0xb0 [ 1388.218282][T15523] do_syscall_64+0x103/0x610 [ 1388.222882][T15523] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1388.228780][T15523] RIP: 0033:0x458c29 [ 1388.232690][T15523] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:06:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8c000}}) 14:06:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f9980000000000]}) 14:06:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 1388.252351][T15523] RSP: 002b:00007f26afe49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.263729][T15523] RAX: ffffffffffffffda RBX: 00007f26afe49c90 RCX: 0000000000458c29 [ 1388.271799][T15523] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1388.279991][T15523] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1388.287968][T15523] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26afe4a6d4 [ 1388.295943][T15523] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:51 executing program 1 (fault-call:1 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 14:06:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8d000}}) 14:06:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 14:06:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4f9980000000000]}) 14:06:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 14:06:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x509980000000000]}) 14:06:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5f9980000000000]}) 14:06:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8e000}}) 14:06:52 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 1388.755371][T15642] FAULT_INJECTION: forcing a failure. [ 1388.755371][T15642] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.837099][T15642] CPU: 1 PID: 15642 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1388.846442][T15642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.856510][T15642] Call Trace: [ 1388.860257][T15642] dump_stack+0x172/0x1f0 [ 1388.864696][T15642] should_fail.cold+0xa/0x15 [ 1388.869306][T15642] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1388.875169][T15642] ? ___might_sleep+0x163/0x280 [ 1388.880047][T15642] __should_failslab+0x121/0x190 [ 1388.885006][T15642] should_failslab+0x9/0x14 [ 1388.889526][T15642] kmem_cache_alloc_node_trace+0x270/0x720 [ 1388.895436][T15642] ? mutex_trylock+0x1e0/0x1e0 [ 1388.900225][T15642] __kmalloc_node+0x3d/0x70 [ 1388.904743][T15642] kvmalloc_node+0x68/0x100 [ 1388.909283][T15642] alloc_netdev_mqs+0x98/0xd30 [ 1388.914084][T15642] ? sl_free_netdev+0x70/0x70 [ 1388.918807][T15642] slip_open+0x38e/0x1138 [ 1388.923157][T15642] ? sl_uninit+0x20/0x20 [ 1388.927407][T15642] ? lock_downgrade+0x880/0x880 [ 1388.932273][T15642] ? sl_uninit+0x20/0x20 [ 1388.936529][T15642] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1388.941645][T15642] tty_set_ldisc+0x2d7/0x690 [ 1388.946249][T15642] tty_ioctl+0x5dc/0x15c0 [ 1388.950595][T15642] ? tty_register_device+0x40/0x40 [ 1388.955724][T15642] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1388.961976][T15642] ? tomoyo_init_request_info+0x105/0x1d0 [ 1388.967718][T15642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1388.973972][T15642] ? tomoyo_path_number_perm+0x263/0x520 [ 1388.979621][T15642] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1388.985444][T15642] ? __fget+0x35a/0x550 [ 1388.989627][T15642] ? tty_register_device+0x40/0x40 [ 1388.994755][T15642] do_vfs_ioctl+0xd6e/0x1390 [ 1388.999362][T15642] ? ioctl_preallocate+0x210/0x210 [ 1389.004478][T15642] ? __fget+0x381/0x550 [ 1389.008670][T15642] ? ksys_dup3+0x3e0/0x3e0 [ 1389.013283][T15642] ? tomoyo_file_ioctl+0x23/0x30 [ 1389.018236][T15642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1389.024489][T15642] ? security_file_ioctl+0x93/0xc0 [ 1389.029619][T15642] ksys_ioctl+0xab/0xd0 [ 1389.034053][T15642] __x64_sys_ioctl+0x73/0xb0 [ 1389.038667][T15642] do_syscall_64+0x103/0x610 [ 1389.043276][T15642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1389.049180][T15642] RIP: 0033:0x458c29 [ 1389.053264][T15642] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1389.072992][T15642] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1389.081420][T15642] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 [ 1389.089418][T15642] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1389.097404][T15642] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1389.105388][T15642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1389.113370][T15642] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6f9980000000000]}) 14:06:52 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:52 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x20000, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x400000) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:06:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8f000}}) [ 1389.227420][T15677] FAULT_INJECTION: forcing a failure. [ 1389.227420][T15677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1389.240673][T15677] CPU: 0 PID: 15677 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1389.249781][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1389.259841][T15677] Call Trace: [ 1389.263252][T15677] dump_stack+0x172/0x1f0 [ 1389.267617][T15677] should_fail.cold+0xa/0x15 [ 1389.272226][T15677] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1389.272244][T15677] ? __lock_acquire+0x548/0x3fb0 [ 1389.272269][T15677] should_fail_alloc_page+0x50/0x60 [ 1389.272291][T15677] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1389.293583][T15677] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1389.293598][T15677] ? find_held_lock+0x35/0x130 [ 1389.293625][T15677] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1389.293653][T15677] cache_grow_begin+0x9c/0x860 [ 1389.314707][T15677] ? __kmalloc_node+0x3d/0x70 [ 1389.319397][T15677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1389.325654][T15677] kmem_cache_alloc_node_trace+0x658/0x720 [ 1389.331479][T15677] ? mutex_trylock+0x1e0/0x1e0 [ 1389.336358][T15677] __kmalloc_node+0x3d/0x70 [ 1389.340889][T15677] kvmalloc_node+0x68/0x100 [ 1389.345404][T15677] alloc_netdev_mqs+0x98/0xd30 [ 1389.350181][T15677] ? sl_free_netdev+0x70/0x70 [ 1389.354871][T15677] slip_open+0x38e/0x1138 [ 1389.359283][T15677] ? sl_uninit+0x20/0x20 [ 1389.363532][T15677] ? lock_downgrade+0x880/0x880 [ 1389.368405][T15677] ? sl_uninit+0x20/0x20 [ 1389.372677][T15677] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1389.377895][T15677] tty_set_ldisc+0x2d7/0x690 [ 1389.377919][T15677] tty_ioctl+0x5dc/0x15c0 [ 1389.377938][T15677] ? tty_register_device+0x40/0x40 [ 1389.377961][T15677] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1389.392025][T15677] ? tomoyo_init_request_info+0x105/0x1d0 [ 1389.392047][T15677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1389.392063][T15677] ? tomoyo_path_number_perm+0x263/0x520 [ 1389.392081][T15677] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1389.392120][T15677] ? __fget+0x35a/0x550 [ 1389.425921][T15677] ? tty_register_device+0x40/0x40 [ 1389.431075][T15677] do_vfs_ioctl+0xd6e/0x1390 [ 1389.435702][T15677] ? ioctl_preallocate+0x210/0x210 [ 1389.441722][T15677] ? __fget+0x381/0x550 [ 1389.445899][T15677] ? ksys_dup3+0x3e0/0x3e0 [ 1389.450338][T15677] ? tomoyo_file_ioctl+0x23/0x30 [ 1389.455303][T15677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1389.461596][T15677] ? security_file_ioctl+0x93/0xc0 [ 1389.466722][T15677] ksys_ioctl+0xab/0xd0 [ 1389.466741][T15677] __x64_sys_ioctl+0x73/0xb0 14:06:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7f9980000000000]}) 14:06:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8f9980000000000]}) 14:06:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x909980000000000]}) [ 1389.466761][T15677] do_syscall_64+0x103/0x610 [ 1389.466784][T15677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1389.466796][T15677] RIP: 0033:0x458c29 [ 1389.466813][T15677] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1389.466820][T15677] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1389.480163][T15677] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 14:06:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9f9980000000000]}) 14:06:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 1389.480173][T15677] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1389.480181][T15677] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1389.480190][T15677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1389.480199][T15677] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x90000}}) 14:06:52 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1209980000000000]}) 14:06:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="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") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:06:53 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x91000}}) 14:06:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1309980000000000]}) 14:06:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x800000200000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 1389.827940][T15808] FAULT_INJECTION: forcing a failure. [ 1389.827940][T15808] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.887472][T15808] CPU: 1 PID: 15808 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1389.896844][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1389.906923][T15808] Call Trace: [ 1389.910239][T15808] dump_stack+0x172/0x1f0 [ 1389.914608][T15808] should_fail.cold+0xa/0x15 [ 1389.919262][T15808] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1389.925124][T15808] ? find_held_lock+0x35/0x130 [ 1389.929917][T15808] __should_failslab+0x121/0x190 [ 1389.934877][T15808] should_failslab+0x9/0x14 [ 1389.939397][T15808] kmem_cache_alloc_trace+0x4b/0x760 [ 1389.944710][T15808] __hw_addr_create_ex+0x5e/0x310 [ 1389.949755][T15808] __hw_addr_add_ex+0x1ef/0x2b0 [ 1389.954635][T15808] dev_addr_init+0x118/0x200 [ 1389.959243][T15808] ? dev_mc_flush+0x40/0x40 [ 1389.963855][T15808] ? __kmalloc_node+0x4e/0x70 [ 1389.968561][T15808] alloc_netdev_mqs+0x142/0xd30 [ 1389.973461][T15808] ? sl_free_netdev+0x70/0x70 [ 1389.978188][T15808] slip_open+0x38e/0x1138 [ 1389.982554][T15808] ? sl_uninit+0x20/0x20 [ 1389.982570][T15808] ? lock_downgrade+0x880/0x880 [ 1389.982591][T15808] ? sl_uninit+0x20/0x20 [ 1389.982614][T15808] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1389.982628][T15808] tty_set_ldisc+0x2d7/0x690 [ 1389.982647][T15808] tty_ioctl+0x5dc/0x15c0 [ 1389.982665][T15808] ? tty_register_device+0x40/0x40 [ 1389.982680][T15808] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1389.982703][T15808] ? tomoyo_init_request_info+0x105/0x1d0 [ 1389.991806][T15808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1389.991824][T15808] ? tomoyo_path_number_perm+0x263/0x520 [ 1389.991843][T15808] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1389.991877][T15808] ? __fget+0x35a/0x550 [ 1390.049458][T15808] ? tty_register_device+0x40/0x40 [ 1390.054615][T15808] do_vfs_ioctl+0xd6e/0x1390 [ 1390.059234][T15808] ? ioctl_preallocate+0x210/0x210 [ 1390.064373][T15808] ? __fget+0x381/0x550 [ 1390.068563][T15808] ? ksys_dup3+0x3e0/0x3e0 [ 1390.073016][T15808] ? tomoyo_file_ioctl+0x23/0x30 [ 1390.077984][T15808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:06:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3fd, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) [ 1390.084253][T15808] ? security_file_ioctl+0x93/0xc0 [ 1390.089399][T15808] ksys_ioctl+0xab/0xd0 [ 1390.093576][T15808] __x64_sys_ioctl+0x73/0xb0 [ 1390.098190][T15808] do_syscall_64+0x103/0x610 [ 1390.102804][T15808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1390.108724][T15808] RIP: 0033:0x458c29 [ 1390.108742][T15808] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:06:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1409980000000000]}) [ 1390.108748][T15808] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.108761][T15808] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 [ 1390.108770][T15808] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1390.108778][T15808] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1390.108786][T15808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1390.108795][T15808] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x92000}}) 14:06:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x0) sendto$rose(r1, &(0x7f0000000100)="af8366998612d1b0feab66345238799270c89b7088bc4b29bce2f9eecad659346e5a9f378863580ed5efb33324bdd9d4248d3cfeb68b507f62a706ec56f765335859773636116c488f1dcd16230ca35b7fc9a624ff94c8573c93a919b10a079e525b8c0c13b17ff3ee64c429fd80c636a63f4ee32ea8813e5b03cdc21ff5de1c1689797dfd544ff9b18a8af7f86fabf8ef2f79f6352f84854d4741420038429c226c44db1ebe40cd83b9", 0xaa, 0x4000000, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:06:53 executing program 0 (fault-call:1 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1509980000000000]}) 14:06:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x93000}}) 14:06:53 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:53 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) 14:06:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x17f0f00000000000]}) [ 1390.549857][T15943] FAULT_INJECTION: forcing a failure. [ 1390.549857][T15943] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.599084][T15943] CPU: 0 PID: 15943 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1390.608258][T15943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.608275][T15943] Call Trace: [ 1390.621821][T15943] dump_stack+0x172/0x1f0 [ 1390.626172][T15943] should_fail.cold+0xa/0x15 [ 1390.626192][T15943] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1390.626216][T15943] ? ___might_sleep+0x163/0x280 [ 1390.626239][T15943] __should_failslab+0x121/0x190 [ 1390.646543][T15943] should_failslab+0x9/0x14 [ 1390.651063][T15943] kmem_cache_alloc_node_trace+0x270/0x720 [ 1390.656928][T15943] ? kasan_unpoison_shadow+0x35/0x50 [ 1390.662236][T15943] __kmalloc_node+0x3d/0x70 [ 1390.666758][T15943] kvmalloc_node+0x68/0x100 [ 1390.671269][T15943] alloc_netdev_mqs+0x821/0xd30 [ 1390.676152][T15943] slip_open+0x38e/0x1138 [ 1390.680492][T15943] ? sl_uninit+0x20/0x20 [ 1390.684740][T15943] ? lock_downgrade+0x880/0x880 [ 1390.689616][T15943] ? sl_uninit+0x20/0x20 [ 1390.693979][T15943] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1390.699127][T15943] tty_set_ldisc+0x2d7/0x690 [ 1390.703759][T15943] tty_ioctl+0x5dc/0x15c0 [ 1390.708120][T15943] ? tty_register_device+0x40/0x40 [ 1390.713422][T15943] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1390.719678][T15943] ? tomoyo_init_request_info+0x105/0x1d0 [ 1390.725449][T15943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1390.731891][T15943] ? tomoyo_path_number_perm+0x263/0x520 [ 1390.737559][T15943] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1390.743473][T15943] ? __fget+0x35a/0x550 [ 1390.747734][T15943] ? tty_register_device+0x40/0x40 [ 1390.752959][T15943] do_vfs_ioctl+0xd6e/0x1390 [ 1390.757580][T15943] ? ioctl_preallocate+0x210/0x210 [ 1390.762709][T15943] ? __fget+0x381/0x550 [ 1390.766889][T15943] ? ksys_dup3+0x3e0/0x3e0 [ 1390.771329][T15943] ? tomoyo_file_ioctl+0x23/0x30 [ 1390.776289][T15943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1390.782557][T15943] ? security_file_ioctl+0x93/0xc0 [ 1390.787705][T15943] ksys_ioctl+0xab/0xd0 [ 1390.791884][T15943] __x64_sys_ioctl+0x73/0xb0 [ 1390.796490][T15943] do_syscall_64+0x103/0x610 [ 1390.801112][T15943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1390.807015][T15943] RIP: 0033:0x458c29 [ 1390.810914][T15943] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1390.830537][T15943] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.839398][T15943] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 14:06:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000040)={0x26a8, 0x71f, [0x10000, 0x6, 0x2, 0x4, 0x9], 0x8}) [ 1390.847748][T15943] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1390.855759][T15943] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1390.863773][T15943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1390.872155][T15943] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1ef0f00000000000]}) 14:06:54 executing program 0 (fault-call:1 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x94000}}) [ 1391.109050][T16064] FAULT_INJECTION: forcing a failure. [ 1391.109050][T16064] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.130393][T16064] CPU: 0 PID: 16064 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1391.139542][T16064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.149608][T16064] Call Trace: [ 1391.152920][T16064] dump_stack+0x172/0x1f0 [ 1391.157329][T16064] should_fail.cold+0xa/0x15 [ 1391.161942][T16064] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1391.167761][T16064] ? ___might_sleep+0x163/0x280 [ 1391.172622][T16064] __should_failslab+0x121/0x190 [ 1391.177575][T16064] should_failslab+0x9/0x14 [ 1391.182131][T16064] kmem_cache_alloc_node_trace+0x270/0x720 [ 1391.187955][T16064] ? kasan_unpoison_shadow+0x35/0x50 [ 1391.193262][T16064] __kmalloc_node+0x3d/0x70 [ 1391.197785][T16064] kvmalloc_node+0x68/0x100 [ 1391.202300][T16064] alloc_netdev_mqs+0x821/0xd30 [ 1391.207169][T16064] slip_open+0x38e/0x1138 [ 1391.211549][T16064] ? sl_uninit+0x20/0x20 [ 1391.215804][T16064] ? lock_downgrade+0x880/0x880 [ 1391.220848][T16064] ? sl_uninit+0x20/0x20 [ 1391.225115][T16064] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1391.230245][T16064] tty_set_ldisc+0x2d7/0x690 [ 1391.234848][T16064] tty_ioctl+0x5dc/0x15c0 [ 1391.239188][T16064] ? tty_register_device+0x40/0x40 [ 1391.244308][T16064] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1391.250561][T16064] ? tomoyo_init_request_info+0x105/0x1d0 [ 1391.256296][T16064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1391.262558][T16064] ? tomoyo_path_number_perm+0x263/0x520 [ 1391.268251][T16064] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1391.274082][T16064] ? __fget+0x35a/0x550 [ 1391.278327][T16064] ? tty_register_device+0x40/0x40 [ 1391.283616][T16064] do_vfs_ioctl+0xd6e/0x1390 [ 1391.288259][T16064] ? ioctl_preallocate+0x210/0x210 [ 1391.293378][T16064] ? __fget+0x381/0x550 [ 1391.297557][T16064] ? ksys_dup3+0x3e0/0x3e0 [ 1391.301996][T16064] ? tomoyo_file_ioctl+0x23/0x30 [ 1391.306942][T16064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1391.313197][T16064] ? security_file_ioctl+0x93/0xc0 [ 1391.318412][T16064] ksys_ioctl+0xab/0xd0 [ 1391.322586][T16064] __x64_sys_ioctl+0x73/0xb0 [ 1391.327187][T16064] do_syscall_64+0x103/0x610 [ 1391.331793][T16064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1391.337687][T16064] RIP: 0033:0x458c29 [ 1391.341588][T16064] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1391.361226][T16064] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.369834][T16064] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 [ 1391.377812][T16064] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1391.385798][T16064] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1391.393783][T16064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1391.401799][T16064] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@remote={[], 0x0}, 0x0, 'bpq0\x00'}) 14:06:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x25f0f00000000000]}) 14:06:54 executing program 1: r0 = socket(0xa, 0x1, 0xfff) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) 14:06:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x95000}}) 14:06:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2909980000000000]}) 14:06:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x41f0f00000000000]}) 14:06:54 executing program 0 (fault-call:1 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x480000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="5acc004d8e37bfe329bd7078aa7d"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 14:06:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x96000}}) 14:06:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4080, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) [ 1391.757377][T16189] FAULT_INJECTION: forcing a failure. [ 1391.757377][T16189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1391.770660][T16189] CPU: 1 PID: 16189 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1391.780132][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.790982][T16189] Call Trace: [ 1391.794295][T16189] dump_stack+0x172/0x1f0 [ 1391.798667][T16189] should_fail.cold+0xa/0x15 [ 1391.803285][T16189] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1391.809120][T16189] ? __lock_acquire+0x548/0x3fb0 [ 1391.814068][T16189] ? find_held_lock+0x35/0x130 [ 1391.818871][T16189] should_fail_alloc_page+0x50/0x60 [ 1391.824096][T16189] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1391.829487][T16189] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1391.835212][T16189] ? find_held_lock+0x35/0x130 [ 1391.839992][T16189] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1391.845813][T16189] cache_grow_begin+0x9c/0x860 [ 1391.850591][T16189] ? slip_open+0x8ed/0x1138 14:06:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48f0f00000000000]}) [ 1391.855125][T16189] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1391.861380][T16189] kmem_cache_alloc_trace+0x67f/0x760 [ 1391.866770][T16189] slip_open+0x8ed/0x1138 [ 1391.871134][T16189] ? sl_uninit+0x20/0x20 [ 1391.875383][T16189] ? lock_downgrade+0x880/0x880 [ 1391.880245][T16189] ? sl_uninit+0x20/0x20 [ 1391.884500][T16189] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1391.889627][T16189] tty_set_ldisc+0x2d7/0x690 [ 1391.894251][T16189] tty_ioctl+0x5dc/0x15c0 [ 1391.898616][T16189] ? tty_register_device+0x40/0x40 14:06:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) [ 1391.903747][T16189] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1391.910016][T16189] ? tomoyo_init_request_info+0x105/0x1d0 [ 1391.915756][T16189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1391.922011][T16189] ? tomoyo_path_number_perm+0x263/0x520 [ 1391.927687][T16189] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1391.934828][T16189] ? __fget+0x35a/0x550 [ 1391.939102][T16189] ? tty_register_device+0x40/0x40 [ 1391.944238][T16189] do_vfs_ioctl+0xd6e/0x1390 [ 1391.948845][T16189] ? ioctl_preallocate+0x210/0x210 [ 1391.953969][T16189] ? __fget+0x381/0x550 [ 1391.958146][T16189] ? ksys_dup3+0x3e0/0x3e0 [ 1391.962581][T16189] ? tomoyo_file_ioctl+0x23/0x30 [ 1391.967535][T16189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1391.973793][T16189] ? security_file_ioctl+0x93/0xc0 [ 1391.978923][T16189] ksys_ioctl+0xab/0xd0 [ 1391.983104][T16189] __x64_sys_ioctl+0x73/0xb0 [ 1391.987715][T16189] do_syscall_64+0x103/0x610 [ 1391.992337][T16189] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1391.998409][T16189] RIP: 0033:0x458c29 [ 1392.002319][T16189] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1392.022022][T16189] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.030449][T16189] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 [ 1392.038429][T16189] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1392.046405][T16189] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:06:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 14:06:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = getpid() kcmp(r1, r2, 0x7, r0, r0) [ 1392.054475][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1392.062453][T16189] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x97000}}) 14:06:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) 14:06:55 executing program 0 (fault-call:1 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x20000, 0x0) open_by_handle_at(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="f20000002f00000075fbc28b8b54c73435d52cf941057d9904f800fabafe228289970699991b14983b04a47f5b3ecbac7d8d59e6548ef599e8a198ed41540fbe47fa163c7f1301eae17ef173881feacb4e99671955057ce1fcff8c8b8aa443fc48f32558aee315e2fc8e2fbab77034e87b0c69af65af000000007f0dfff5fc85bfcf3c41b481c1318a2ed65c44c725503c0b9ef41a93a1a15312f3f4b896139853c58a76a9870d754383fa96cac9c87fdfdf9985d52a676a4359b4caf98522e4f5a3510bc0fcad8cca6de32b50428b11a71ed6480bdf0792827253fcb329cb38b3eb75d640565dc931d902966380e6d039ff85633d9e8bf4cd9c000000000000487184fe60396abc4541fc58c6aa5c1d45f9757d5abb5d76fe2aebcb92db72a68c7cfa1abd25762d603498f12564e8a8baa84d031c081af72cb3beb924c056d9a64aafc94a59b992a1ed9c7ee8383916fe13fb5677786908304aee0b5d68a2952e84328d64c67cde9097c9c7bc8fe2beb5ffce07a13b71a58d5dd2a4eac3de56756289b367c1b06ebf7a0f9225ef"], 0x800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) setns(r1, 0x2000000) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000300)=""/95, 0x5f}], 0x3) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x9, 0x8, 0x9, 0x4, 0x401}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000500)={r2, 0xffffffffffff7fff, 0x8}, &(0x7f0000000540)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000140)={0x599, 0xc6, 0x1ff, 'queue0\x00', 0xffff}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000580)={0xa, 0xa, 0x200, 0x4}, 0xa) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000003c0)={0x1000, 0xd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000840)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000880)={r3, 0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000400)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x14, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)='ip_vti0\x00', 0x7, 0x4275, 0x4}) 14:06:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x5, 0x8000, 0x1000000000000002}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 14:06:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) 14:06:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x98000}}) 14:06:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffe7]}) 14:06:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'team0\x00', {0x2, 0x4e20, @broadcast}}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 14:06:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x5, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000300)) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x0, 0x80, 0x6000000000000, 0x3, 0x46}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0x6, 0x0, 0x2, 0x8, 0x10}, &(0x7f0000000240)=0x98) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 14:06:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x2]}) 14:06:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x99000}}) [ 1392.902953][T16620] FAULT_INJECTION: forcing a failure. [ 1392.902953][T16620] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.922595][T16620] CPU: 1 PID: 16620 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1392.931871][T16620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.941956][T16620] Call Trace: [ 1392.945278][T16620] dump_stack+0x172/0x1f0 [ 1392.949654][T16620] should_fail.cold+0xa/0x15 [ 1392.954298][T16620] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1392.960141][T16620] ? ___might_sleep+0x163/0x280 [ 1392.965060][T16620] __should_failslab+0x121/0x190 [ 1392.970071][T16620] should_failslab+0x9/0x14 [ 1392.974655][T16620] kmem_cache_alloc_trace+0x2d1/0x760 [ 1392.980077][T16620] ? init_timer_key+0x122/0x370 [ 1392.985061][T16620] slip_open+0x976/0x1138 [ 1392.989425][T16620] ? sl_uninit+0x20/0x20 [ 1392.993700][T16620] ? lock_downgrade+0x880/0x880 [ 1392.998771][T16620] ? sl_uninit+0x20/0x20 [ 1393.003035][T16620] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1393.008165][T16620] tty_set_ldisc+0x2d7/0x690 [ 1393.012797][T16620] tty_ioctl+0x5dc/0x15c0 [ 1393.017163][T16620] ? tty_register_device+0x40/0x40 [ 1393.022302][T16620] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1393.028578][T16620] ? tomoyo_init_request_info+0x105/0x1d0 [ 1393.034328][T16620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1393.040620][T16620] ? tomoyo_path_number_perm+0x263/0x520 [ 1393.046769][T16620] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1393.052668][T16620] ? __fget+0x35a/0x550 [ 1393.056857][T16620] ? tty_register_device+0x40/0x40 [ 1393.061994][T16620] do_vfs_ioctl+0xd6e/0x1390 [ 1393.066629][T16620] ? ioctl_preallocate+0x210/0x210 [ 1393.071763][T16620] ? __fget+0x381/0x550 [ 1393.075982][T16620] ? ksys_dup3+0x3e0/0x3e0 [ 1393.080433][T16620] ? tomoyo_file_ioctl+0x23/0x30 [ 1393.085791][T16620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1393.092059][T16620] ? security_file_ioctl+0x93/0xc0 [ 1393.097304][T16620] ksys_ioctl+0xab/0xd0 [ 1393.101498][T16620] __x64_sys_ioctl+0x73/0xb0 [ 1393.106217][T16620] do_syscall_64+0x103/0x610 [ 1393.110914][T16620] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1393.116827][T16620] RIP: 0033:0x458c29 [ 1393.120733][T16620] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1393.140396][T16620] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:06:56 executing program 0 (fault-call:1 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) 14:06:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9a000}}) 14:06:56 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0xe7]}) 14:06:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x121040, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 1393.148823][T16620] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 [ 1393.156804][T16620] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1393.164890][T16620] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1393.172879][T16620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1393.180956][T16620] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:56 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0xe7ff]}) [ 1393.308574][T16661] FAULT_INJECTION: forcing a failure. [ 1393.308574][T16661] name failslab, interval 1, probability 0, space 0, times 0 14:06:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9b000}}) [ 1393.349106][T16661] CPU: 1 PID: 16661 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1393.358309][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1393.368379][T16661] Call Trace: [ 1393.371694][T16661] dump_stack+0x172/0x1f0 [ 1393.376158][T16661] should_fail.cold+0xa/0x15 [ 1393.380856][T16661] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1393.386707][T16661] ? ___might_sleep+0x163/0x280 [ 1393.391607][T16661] __should_failslab+0x121/0x190 [ 1393.391631][T16661] should_failslab+0x9/0x14 [ 1393.401111][T16661] kmem_cache_alloc_trace+0x2d1/0x760 [ 1393.406526][T16661] slip_open+0x933/0x1138 [ 1393.410873][T16661] ? sl_uninit+0x20/0x20 [ 1393.415128][T16661] ? lock_downgrade+0x880/0x880 [ 1393.415152][T16661] ? sl_uninit+0x20/0x20 [ 1393.415167][T16661] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1393.415181][T16661] tty_set_ldisc+0x2d7/0x690 [ 1393.415202][T16661] tty_ioctl+0x5dc/0x15c0 [ 1393.415219][T16661] ? tty_register_device+0x40/0x40 [ 1393.415233][T16661] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1393.415250][T16661] ? tomoyo_init_request_info+0x105/0x1d0 [ 1393.415266][T16661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1393.415281][T16661] ? tomoyo_path_number_perm+0x263/0x520 [ 1393.415301][T16661] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1393.474651][T16661] ? __fget+0x35a/0x550 [ 1393.478861][T16661] ? tty_register_device+0x40/0x40 [ 1393.484035][T16661] do_vfs_ioctl+0xd6e/0x1390 [ 1393.488689][T16661] ? ioctl_preallocate+0x210/0x210 [ 1393.493820][T16661] ? __fget+0x381/0x550 [ 1393.498001][T16661] ? ksys_dup3+0x3e0/0x3e0 [ 1393.502437][T16661] ? tomoyo_file_ioctl+0x23/0x30 [ 1393.507403][T16661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1393.513656][T16661] ? security_file_ioctl+0x93/0xc0 [ 1393.518774][T16661] ksys_ioctl+0xab/0xd0 [ 1393.522944][T16661] __x64_sys_ioctl+0x73/0xb0 [ 1393.527562][T16661] do_syscall_64+0x103/0x610 [ 1393.532197][T16661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1393.538121][T16661] RIP: 0033:0x458c29 [ 1393.542226][T16661] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1393.561952][T16661] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1393.570378][T16661] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 [ 1393.578364][T16661] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1393.586352][T16661] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:06:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0xfdfd]}) [ 1393.594331][T16661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1393.602309][T16661] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000040)={0x7, 0xe61}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000180)={r1, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x800, 0x1, 0x6], 0x40, 0x1, 0x7, &(0x7f0000000100)=[0x7], &(0x7f0000000140)=[0x8]}) 14:06:57 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:57 executing program 0 (fault-call:1 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9c000}}) 14:06:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffe7]}) 14:06:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x19a71d76}, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xfffffffffffffffc) [ 1393.881720][T16786] FAULT_INJECTION: forcing a failure. [ 1393.881720][T16786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1393.894972][T16786] CPU: 0 PID: 16786 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1393.904259][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1393.914331][T16786] Call Trace: [ 1393.917644][T16786] dump_stack+0x172/0x1f0 [ 1393.921997][T16786] should_fail.cold+0xa/0x15 [ 1393.926606][T16786] ? tty_ldisc_open.isra.0+0x8b/0xe0 [ 1393.931913][T16786] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1393.937747][T16786] ? __lock_acquire+0x548/0x3fb0 [ 1393.942697][T16786] ? find_held_lock+0x35/0x130 [ 1393.947483][T16786] should_fail_alloc_page+0x50/0x60 [ 1393.952702][T16786] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1393.958146][T16786] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1393.958161][T16786] ? find_held_lock+0x35/0x130 [ 1393.958189][T16786] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1393.958216][T16786] cache_grow_begin+0x9c/0x860 [ 1393.974613][T16786] ? slip_open+0x976/0x1138 [ 1393.983887][T16786] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1393.990152][T16786] kmem_cache_alloc_trace+0x67f/0x760 [ 1393.990182][T16786] slip_open+0x976/0x1138 [ 1393.990203][T16786] ? sl_uninit+0x20/0x20 [ 1393.999895][T16786] ? lock_downgrade+0x880/0x880 [ 1393.999921][T16786] ? sl_uninit+0x20/0x20 [ 1393.999939][T16786] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1393.999954][T16786] tty_set_ldisc+0x2d7/0x690 [ 1393.999976][T16786] tty_ioctl+0x5dc/0x15c0 [ 1393.999996][T16786] ? tty_register_device+0x40/0x40 [ 1394.032471][T16786] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1394.038746][T16786] ? tomoyo_init_request_info+0x105/0x1d0 [ 1394.044580][T16786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1394.050837][T16786] ? tomoyo_path_number_perm+0x263/0x520 [ 1394.056495][T16786] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1394.062324][T16786] ? __fget+0x35a/0x550 [ 1394.066500][T16786] ? tty_register_device+0x40/0x40 [ 1394.071624][T16786] do_vfs_ioctl+0xd6e/0x1390 [ 1394.076239][T16786] ? ioctl_preallocate+0x210/0x210 [ 1394.081371][T16786] ? __fget+0x381/0x550 [ 1394.085541][T16786] ? ksys_dup3+0x3e0/0x3e0 [ 1394.089980][T16786] ? tomoyo_file_ioctl+0x23/0x30 [ 1394.094934][T16786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1394.101181][T16786] ? security_file_ioctl+0x93/0xc0 [ 1394.106298][T16786] ksys_ioctl+0xab/0xd0 [ 1394.110477][T16786] __x64_sys_ioctl+0x73/0xb0 [ 1394.115112][T16786] do_syscall_64+0x103/0x610 [ 1394.119732][T16786] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1394.125633][T16786] RIP: 0033:0x458c29 [ 1394.129534][T16786] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1394.149149][T16786] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1394.157574][T16786] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 [ 1394.165552][T16786] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1394.173528][T16786] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 14:06:57 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9d000}}) 14:06:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x99800]}) 14:06:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x980001]}) [ 1394.181599][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1394.189578][T16786] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 14:06:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x2, 0x80000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0700990018884e4c9339f9a15d3b660ecf9ed8a700edba25b1ad1ef60a8e9eee2dd8c29b12f13847d6c24edff53eef92d019521cf51fdbfecb388976925b3f22cfd396499861ae677f8682ffe1b5528c389c88e9234926f2e7d484ac9d923779ce6e998759b2a89a6c21cb6e51194fbdfa99e8ab085475d84ece36b84ff56179a64043fb0348b7a35ae705c2d079d92aac5d4079e6a1cbe5c660f36f78e52b14414d8f5382efc01f3f78e51ff3e3401d303265e219a4d55a4f76a1"], 0xa1) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000001c0)=0x3, &(0x7f0000000240)=0x4) 14:06:57 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) 14:06:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9e000}}) 14:06:57 executing program 0 (fault-call:1 fault-nth:9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) 14:06:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x40000000, 0x0, "8dc8fb6a1fbeaafb0d33dee27c1d26d9c3a0d622466248ff0b0f6b644783dc51", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], [0x980900]}) 14:06:57 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x7ffffffff000, [], @value64}}) [ 1394.414338][T16907] FAULT_INJECTION: forcing a failure. [ 1394.414338][T16907] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.479500][T16907] CPU: 0 PID: 16907 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1394.488670][T16907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.498732][T16907] Call Trace: [ 1394.502042][T16907] dump_stack+0x172/0x1f0 [ 1394.506410][T16907] should_fail.cold+0xa/0x15 [ 1394.511019][T16907] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1394.516840][T16907] ? ___might_sleep+0x163/0x280 [ 1394.521699][T16907] __should_failslab+0x121/0x190 [ 1394.526646][T16907] should_failslab+0x9/0x14 [ 1394.531154][T16907] __kmalloc+0x2dc/0x740 [ 1394.535403][T16907] ? kmem_cache_alloc_trace+0x354/0x760 [ 1394.540958][T16907] ? slip_open+0x976/0x1138 [ 1394.545477][T16907] ? rcu_read_lock_sched_held+0x110/0x130 [ 1394.551221][T16907] ? slhc_init+0x1cc/0x52a [ 1394.555664][T16907] slhc_init+0x1cc/0x52a [ 1394.559956][T16907] slip_open+0x99a/0x1138 [ 1394.564307][T16907] ? sl_uninit+0x20/0x20 [ 1394.568580][T16907] ? lock_downgrade+0x880/0x880 [ 1394.573544][T16907] ? sl_uninit+0x20/0x20 [ 1394.577806][T16907] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1394.582931][T16907] tty_set_ldisc+0x2d7/0x690 [ 1394.587635][T16907] tty_ioctl+0x5dc/0x15c0 [ 1394.592267][T16907] ? tty_register_device+0x40/0x40 [ 1394.597390][T16907] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1394.603676][T16907] ? tomoyo_init_request_info+0x105/0x1d0 [ 1394.609415][T16907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1394.616033][T16907] ? tomoyo_path_number_perm+0x263/0x520 [ 1394.621677][T16907] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1394.627503][T16907] ? __fget+0x35a/0x550 [ 1394.631689][T16907] ? tty_register_device+0x40/0x40 [ 1394.636812][T16907] do_vfs_ioctl+0xd6e/0x1390 [ 1394.641442][T16907] ? ioctl_preallocate+0x210/0x210 [ 1394.647238][T16907] ? __fget+0x381/0x550 [ 1394.651409][T16907] ? ksys_dup3+0x3e0/0x3e0 [ 1394.655846][T16907] ? tomoyo_file_ioctl+0x23/0x30 [ 1394.660809][T16907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1394.667081][T16907] ? security_file_ioctl+0x93/0xc0 [ 1394.672222][T16907] ksys_ioctl+0xab/0xd0 [ 1394.676398][T16907] __x64_sys_ioctl+0x73/0xb0 [ 1394.681001][T16907] do_syscall_64+0x103/0x610 [ 1394.685606][T16907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1394.691500][T16907] RIP: 0033:0x458c29 [ 1394.695401][T16907] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1394.715190][T16907] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1394.723619][T16907] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 [ 1394.731608][T16907] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1394.739630][T16907] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1394.747645][T16907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1394.755739][T16907] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 [ 1394.773773][T16907] BUG: unable to handle kernel paging request at fffffffffffffff4 [ 1394.781620][T16907] #PF error: [normal kernel read fault] [ 1394.787292][T16907] PGD 8870067 P4D 8870067 PUD 8872067 PMD 0 [ 1394.793312][T16907] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1394.798512][T16907] CPU: 1 PID: 16907 Comm: syz-executor.0 Not tainted 5.1.0-rc4-next-20190412 #24 [ 1394.807617][T16907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.817716][T16907] RIP: 0010:slhc_free+0x31/0xb0 14:06:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9f000}}) [ 1394.822588][T16907] Code: 54 49 89 fc e8 10 76 17 fd 4d 85 e4 74 77 e8 06 76 17 fd 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 6d <4d> 8b 2c 24 4d 85 ed 74 0d e8 e1 75 17 fd 4c 89 ef e8 e9 44 50 fd [ 1394.842207][T16907] RSP: 0018:ffff88805dbf79f0 EFLAGS: 00010246 [ 1394.848287][T16907] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90012bad000 [ 1394.848546][ T3879] kobject: 'loop3' (00000000ab4c6c43): kobject_uevent_env [ 1394.856279][T16907] RDX: 1ffffffffffffffe RSI: ffffffff845912ea RDI: fffffffffffffff4 [ 1394.856288][T16907] RBP: ffff88805dbf7a00 R08: ffff88808fc98080 R09: ffff88808fc98970 [ 1394.856296][T16907] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffff4 [ 1394.856303][T16907] R13: ffff88805ee23080 R14: 00000000ffffff97 R15: ffff88808e593700 [ 1394.856315][T16907] FS: 00007f84e4468700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1394.856322][T16907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1394.856330][T16907] CR2: fffffffffffffff4 CR3: 0000000097975000 CR4: 00000000001406e0 [ 1394.856341][T16907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1394.856348][T16907] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1394.856354][T16907] Call Trace: [ 1394.856378][T16907] slip_open+0xe16/0x1138 [ 1394.856394][T16907] ? sl_uninit+0x20/0x20 [ 1394.856408][T16907] ? lock_downgrade+0x880/0x880 [ 1394.856422][T16907] ? sl_uninit+0x20/0x20 [ 1394.856436][T16907] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1394.856448][T16907] tty_set_ldisc+0x2d7/0x690 [ 1394.856464][T16907] tty_ioctl+0x5dc/0x15c0 [ 1394.856479][T16907] ? tty_register_device+0x40/0x40 [ 1394.856492][T16907] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1394.856523][T16907] ? tomoyo_init_request_info+0x105/0x1d0 [ 1394.868541][ T3879] kobject: 'loop3' (00000000ab4c6c43): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1394.872232][T16907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1394.872248][T16907] ? tomoyo_path_number_perm+0x263/0x520 [ 1394.872263][T16907] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1394.872283][T16907] ? __fget+0x35a/0x550 [ 1394.872303][T16907] ? tty_register_device+0x40/0x40 [ 1394.872328][T16907] do_vfs_ioctl+0xd6e/0x1390 [ 1394.885775][ T3879] kobject: 'loop4' (000000002bca21ec): kobject_uevent_env [ 1394.888350][T16907] ? ioctl_preallocate+0x210/0x210 [ 1394.888366][T16907] ? __fget+0x381/0x550 [ 1394.888382][T16907] ? ksys_dup3+0x3e0/0x3e0 [ 1394.888404][T16907] ? tomoyo_file_ioctl+0x23/0x30 [ 1394.897064][ T3879] kobject: 'loop4' (000000002bca21ec): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1394.905311][T16907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1394.905327][T16907] ? security_file_ioctl+0x93/0xc0 [ 1394.905344][T16907] ksys_ioctl+0xab/0xd0 [ 1394.905359][T16907] __x64_sys_ioctl+0x73/0xb0 [ 1394.905374][T16907] do_syscall_64+0x103/0x610 [ 1394.905391][T16907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1394.905402][T16907] RIP: 0033:0x458c29 [ 1394.905415][T16907] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1394.905422][T16907] RSP: 002b:00007f84e4467c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1394.905435][T16907] RAX: ffffffffffffffda RBX: 00007f84e4467c90 RCX: 0000000000458c29 [ 1394.905442][T16907] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 1394.905449][T16907] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1394.905456][T16907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f84e44686d4 [ 1394.905462][T16907] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 [ 1394.905472][T16907] Modules linked in: [ 1395.173227][T16907] CR2: fffffffffffffff4 [ 1395.177472][T16907] ---[ end trace 5a9a86b8537bbe88 ]--- [ 1395.182949][T16907] RIP: 0010:slhc_free+0x31/0xb0 [ 1395.187804][T16907] Code: 54 49 89 fc e8 10 76 17 fd 4d 85 e4 74 77 e8 06 76 17 fd 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 6d <4d> 8b 2c 24 4d 85 ed 74 0d e8 e1 75 17 fd 4c 89 ef e8 e9 44 50 fd [ 1395.207417][T16907] RSP: 0018:ffff88805dbf79f0 EFLAGS: 00010246 [ 1395.213494][T16907] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90012bad000 [ 1395.221473][T16907] RDX: 1ffffffffffffffe RSI: ffffffff845912ea RDI: fffffffffffffff4 [ 1395.229459][T16907] RBP: ffff88805dbf7a00 R08: ffff88808fc98080 R09: ffff88808fc98970 [ 1395.237438][T16907] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffff4 [ 1395.245426][T16907] R13: ffff88805ee23080 R14: 00000000ffffff97 R15: ffff88808e593700 [ 1395.253421][T16907] FS: 00007f84e4468700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1395.262372][T16907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1395.268966][T16907] CR2: fffffffffffffff4 CR3: 0000000097975000 CR4: 00000000001406e0 [ 1395.276951][T16907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1395.284931][T16907] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1395.292907][T16907] Kernel panic - not syncing: Fatal exception [ 1395.300044][T16907] Kernel Offset: disabled [ 1395.304369][T16907] Rebooting in 86400 seconds..