fffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 6) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="00c77a9f956064f5893a61430940d596a5c73273c88cb523ab800b9412d8d121d7c966c6de3a8f9fb99985ab086b3764602efbf5ebea4e09d884e0252b08f47b623602913a672aebd804a092552639a87f6fb2338b043818d8630923548957b0bf97a65377276201126ec640642caf0ee97b98a4ba12518b9686076296e8d0745400ff48b32ffc343b39f9a18d47b44aad24f5af909e98b527f1a5e00167ebcea31530f1ee0f3a387cef", 0xaa, 0x67cf93f0e7935c8e, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0x24) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)=0x80000001) 16:31:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000}) 16:31:43 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x408c5333, 0x0) 16:31:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="00c77a9f956064f5893a61430940d596a5c73273c88cb523ab800b9412d8d121d7c966c6de3a8f9fb99985ab086b3764602efbf5ebea4e09d884e0252b08f47b623602913a672aebd804a092552639a87f6fb2338b043818d8630923548957b0bf97a65377276201126ec640642caf0ee97b98a4ba12518b9686076296e8d0745400ff48b32ffc343b39f9a18d47b44aad24f5af909e98b527f1a5e00167ebcea31530f1ee0f3a387cef", 0xaa, 0x67cf93f0e7935c8e, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0x24) 16:31:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xffffffffffffff0c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0xc94, 0x8000, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x8, 0x1}, 'port1\x00', 0x47, 0x12dad2df46c3c527, 0x21, 0x80000000, 0x5, 0xffffffff, 0x51, 0x0, 0x0, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000040)=""/36, 0x24, 0x2000, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x10001, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 16:31:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0xfdfdffff}) 16:31:43 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40a85321, 0x0) 16:31:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xffffffffffffff0c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0xc94, 0x8000, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x8, 0x1}, 'port1\x00', 0x47, 0x12dad2df46c3c527, 0x21, 0x80000000, 0x5, 0xffffffff, 0x51, 0x0, 0x0, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xffffffffffffff0c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0xc94, 0x8000, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x8, 0x1}, 'port1\x00', 0x47, 0x12dad2df46c3c527, 0x21, 0x80000000, 0x5, 0xffffffff, 0x51, 0x0, 0x0, 0x8}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 16:31:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="00c77a9f956064f5893a61430940d596a5c73273c88cb523ab800b9412d8d121d7c966c6de3a8f9fb99985ab086b3764602efbf5ebea4e09d884e0252b08f47b623602913a672aebd804a092552639a87f6fb2338b043818d8630923548957b0bf97a65377276201126ec640642caf0ee97b98a4ba12518b9686076296e8d0745400ff48b32ffc343b39f9a18d47b44aad24f5af909e98b527f1a5e00167ebcea31530f1ee0f3a387cef", 0xaa, 0x67cf93f0e7935c8e, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0x24) (async) sendto$rxrpc(r0, &(0x7f0000000000)="00c77a9f956064f5893a61430940d596a5c73273c88cb523ab800b9412d8d121d7c966c6de3a8f9fb99985ab086b3764602efbf5ebea4e09d884e0252b08f47b623602913a672aebd804a092552639a87f6fb2338b043818d8630923548957b0bf97a65377276201126ec640642caf0ee97b98a4ba12518b9686076296e8d0745400ff48b32ffc343b39f9a18d47b44aad24f5af909e98b527f1a5e00167ebcea31530f1ee0f3a387cef", 0xaa, 0x67cf93f0e7935c8e, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0x24) 16:31:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffdfd}) 16:31:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xffffffffffffff0c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0xc94, 0x8000, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x8, 0x1}, 'port1\x00', 0x47, 0x12dad2df46c3c527, 0x21, 0x80000000, 0x5, 0xffffffff, 0x51, 0x0, 0x0, 0x8}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82) (async, rerun: 64) r1 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 64) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000040)=""/36, 0x24, 0x2000, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x10001, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async, rerun: 32) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) (rerun: 32) 16:31:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x3100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x6, 0x7, 0x7ff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:43 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40a85323, 0x0) 16:31:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_VENDOR_DATA={0xe9d, 0x1f, "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"}]}, 0xec4}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x602, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x40800) [ 1198.668085][ T27] audit: type=1400 audit(1705595503.174:183): avc: denied { read } for pid=23139 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 16:31:43 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x8000, 0xffff0a37, 0x1, 0x1, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xe}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @generic={0x3f, 0xd, 0x0, 0x1f, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0x40, 0x3e, &(0x7f0000000280)=""/62, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[r1], &(0x7f0000000400)=[{0x5, 0x3, 0x0, 0x9}, {0x0, 0x2, 0x1, 0xa}, {0x5, 0x5, 0x8, 0xa}, {0x5, 0x5, 0xb, 0x17}, {0x3, 0x3, 0x2, 0x4}, {0x5, 0x1, 0x1, 0xa}, {0x2, 0x2, 0x4, 0x8}, {0x5, 0x5, 0x2, 0x5}], 0x10, 0x99}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f0000000140)='%pi6 \x00'}, 0x20) 16:31:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x3100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x6, 0x7, 0x7ff}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_VENDOR_DATA={0xe9d, 0x1f, "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"}]}, 0xec4}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x602, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x40800) 16:31:43 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40bc5311, 0x0) 16:31:43 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x8000, 0xffff0a37, 0x1, 0x1, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xe}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @generic={0x3f, 0xd, 0x0, 0x1f, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0x40, 0x3e, &(0x7f0000000280)=""/62, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[r1], &(0x7f0000000400)=[{0x5, 0x3, 0x0, 0x9}, {0x0, 0x2, 0x1, 0xa}, {0x5, 0x5, 0x8, 0xa}, {0x5, 0x5, 0xb, 0x17}, {0x3, 0x3, 0x2, 0x4}, {0x5, 0x1, 0x1, 0xa}, {0x2, 0x2, 0x4, 0x8}, {0x5, 0x5, 0x2, 0x5}], 0x10, 0x99}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f0000000140)='%pi6 \x00'}, 0x20) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000040)=""/36, 0x24, 0x2000, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x10001, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rxrpc(r1, &(0x7f0000000040)=""/36, 0x24, 0x2000, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x10001, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}}, 0x24) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) (async) 16:31:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x3100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x6, 0x7, 0x7ff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_VENDOR_DATA={0xe9d, 0x1f, "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"}]}, 0xec4}}, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x602, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x40800) (rerun: 32) 16:31:43 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045300, 0x0) 16:31:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 16:31:43 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x8000, 0xffff0a37, 0x1, 0x1, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xe}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @generic={0x3f, 0xd, 0x0, 0x1f, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0x40, 0x3e, &(0x7f0000000280)=""/62, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[r1], &(0x7f0000000400)=[{0x5, 0x3, 0x0, 0x9}, {0x0, 0x2, 0x1, 0xa}, {0x5, 0x5, 0x8, 0xa}, {0x5, 0x5, 0xb, 0x17}, {0x3, 0x3, 0x2, 0x4}, {0x5, 0x1, 0x1, 0xa}, {0x2, 0x2, 0x4, 0x8}, {0x5, 0x5, 0x2, 0x5}], 0x10, 0x99}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f0000000140)='%pi6 \x00'}, 0x20) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000200)={r1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='9p_protocol_dump\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x202000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000080)={{0x41, 0xff}, 'port1\x00', 0x4d, 0x10c00, 0x7, 0x9, 0xaae, 0x672c, 0x10000, 0x0, 0x3, 0x4}) 16:31:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c090}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) [ 1198.856358][T23198] FAULT_INJECTION: forcing a failure. [ 1198.856358][T23198] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.869187][T23198] CPU: 1 PID: 23198 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1198.879320][T23198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1198.889377][T23198] Call Trace: [ 1198.892649][T23198] [ 1198.895666][T23198] dump_stack_lvl+0xda/0x130 [ 1198.900270][T23198] dump_stack+0x15/0x20 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000200)={r1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='9p_protocol_dump\x00', r1}, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x202000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000080)={{0x41, 0xff}, 'port1\x00', 0x4d, 0x10c00, 0x7, 0x9, 0xaae, 0x672c, 0x10000, 0x0, 0x3, 0x4}) [ 1198.904436][T23198] should_fail_ex+0x21f/0x230 [ 1198.909118][T23198] ? __register_sysctl_table+0x46/0xcb0 [ 1198.914755][T23198] __should_failslab+0x92/0xa0 [ 1198.919521][T23198] should_failslab+0x9/0x20 [ 1198.924025][T23198] __kmalloc+0xb6/0x3b0 [ 1198.928180][T23198] __register_sysctl_table+0x46/0xcb0 [ 1198.933617][T23198] setup_userns_sysctls+0x169/0x1d0 [ 1198.938831][T23198] create_user_ns+0xc09/0xea0 [ 1198.943573][T23198] copy_creds+0xf5/0x3e0 [ 1198.947824][T23198] copy_process+0x617/0x20a0 [ 1198.952414][T23198] ? 0xffffffff81000000 [ 1198.956697][T23198] kernel_clone+0x169/0x560 [ 1198.961191][T23198] ? proc_fail_nth_read+0x140/0x140 [ 1198.966397][T23198] ? vfs_write+0x655/0x790 [ 1198.970828][T23198] __x64_sys_clone+0xe8/0x120 [ 1198.975506][T23198] do_syscall_64+0x59/0x120 [ 1198.980064][T23198] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1198.986102][T23198] RIP: 0033:0x7f960fea4da9 [ 1198.990518][T23198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1199.010179][T23198] RSP: 002b:00007f960f206078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1199.018593][T23198] RAX: ffffffffffffffda RBX: 00007f960ffd4050 RCX: 00007f960fea4da9 [ 1199.026561][T23198] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1199.034613][T23198] RBP: 00007f960f206120 R08: 0000000020000280 R09: 0000000020000280 [ 1199.042619][T23198] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 16:31:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c090}, 0x20) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202400) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000200)={r1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='9p_protocol_dump\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x202000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000080)={{0x41, 0xff}, 'port1\x00', 0x4d, 0x10c00, 0x7, 0x9, 0xaae, 0x672c, 0x10000, 0x0, 0x3, 0x4}) 16:31:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async, rerun: 64) r1 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 64) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) [ 1199.050581][T23198] R13: 000000000000006e R14: 00007f960ffd4050 R15: 00007ffda36bc748 [ 1199.058551][T23198] 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x20, 0x81}, 0x0, 0x3ed, 0xe9ab, {0x7, 0xff}, 0x0, 0x8}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x441c0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffc, '\x00', 0x0, r2, 0x3, 0x3, 0x1}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x4, 0x2}, 0x0, 0x3, 0x101, {0x3f, 0x4}, 0x1, 0x400}) 16:31:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c090}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c090}, 0x20) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) (async) 16:31:43 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) (async) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x20, 0x81}, 0x0, 0x3ed, 0xe9ab, {0x7, 0xff}, 0x0, 0x8}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x441c0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffc, '\x00', 0x0, r2, 0x3, 0x3, 0x1}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x4, 0x2}, 0x0, 0x3, 0x101, {0x3f, 0x4}, 0x1, 0x400}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x20, 0x81}, 0x0, 0x3ed, 0xe9ab, {0x7, 0xff}, 0x0, 0x8}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x441c0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffc, '\x00', 0x0, r2, 0x3, 0x3, 0x1}, 0x48) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x4, 0x2}, 0x0, 0x3, 0x101, {0x3f, 0x4}, 0x1, 0x400}) (async) 16:31:43 executing program 2: io_uring_setup(0x1349, &(0x7f0000000000)={0x0, 0x74f1, 0x1, 0x1, 0x210}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, r1, 0x5, 0x0, 0x5}, 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x40049409, 0x0) 16:31:43 executing program 5: r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcrdma_decode_rqst\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x8, &(0x7f00000000c0)='!{@^^.)\x00'}, 0x30) r2 = getpid() r3 = epoll_create1(0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000140)={0x6, 0x5e, 0xfc00}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f00000009c0)) r4 = epoll_create(0x20) r5 = socket$l2tp(0x2, 0x2, 0x73) kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, r3, &(0x7f0000000000)={r4, r5, 0x9}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:31:43 executing program 2: io_uring_setup(0x1349, &(0x7f0000000000)={0x0, 0x74f1, 0x1, 0x1, 0x210}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, r1, 0x5, 0x0, 0x5}, 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x40049409, 0x0) 16:31:43 executing program 5: getpid() (async) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcrdma_decode_rqst\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x8, &(0x7f00000000c0)='!{@^^.)\x00'}, 0x30) r2 = getpid() r3 = epoll_create1(0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000140)={0x6, 0x5e, 0xfc00}) (async) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000140)={0x6, 0x5e, 0xfc00}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f00000009c0)) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f00000009c0)) r4 = epoll_create(0x20) r5 = socket$l2tp(0x2, 0x2, 0x73) kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, r3, &(0x7f0000000000)={r4, r5, 0x9}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x20, 0x81}, 0x0, 0x3ed, 0xe9ab, {0x7, 0xff}, 0x0, 0x8}) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x441c0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffc, '\x00', 0x0, r2, 0x3, 0x3, 0x1}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x4, 0x2}, 0x0, 0x3, 0x101, {0x3f, 0x4}, 0x1, 0x400}) 16:31:43 executing program 5: r0 = getpid() (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcrdma_decode_rqst\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x8, &(0x7f00000000c0)='!{@^^.)\x00'}, 0x30) r2 = getpid() r3 = epoll_create1(0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000140)={0x6, 0x5e, 0xfc00}) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f00000009c0)) (async, rerun: 64) r4 = epoll_create(0x20) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, r3, &(0x7f0000000000)={r4, r5, 0x9}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:31:43 executing program 2: io_uring_setup(0x1349, &(0x7f0000000000)={0x0, 0x74f1, 0x1, 0x1, 0x210}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, r1, 0x5, 0x0, 0x5}, 0x48) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x40049409, 0x0) 16:31:43 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1], 0x1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24044000) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x100) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x5}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, &(0x7f0000000080)="dbaccec59d", 0x5, 0x4000000, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) 16:31:43 executing program 5: syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x4041) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x16) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x1], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x4) 16:31:43 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1], 0x1) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24044000) 16:31:43 executing program 5: syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x4041) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x16) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x1], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x4041) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x16) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x1], 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x4) (async) 16:31:43 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1], 0x1) (async, rerun: 32) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24044000) (rerun: 32) 16:31:43 executing program 5: syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x4041) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0x16) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x1], 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x4) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x100) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x5}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, &(0x7f0000000080)="dbaccec59d", 0x5, 0x4000000, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) 16:31:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x100) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x5}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, &(0x7f0000000080)="dbaccec59d", 0x5, 0x4000000, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x100) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x5}, 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) sendto$rxrpc(r1, &(0x7f0000000080)="dbaccec59d", 0x5, 0x4000000, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) (async) 16:31:43 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100326bd7000fcdbdf25080000000600030007000000000000000000060002000000000008001800ac1e0101"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x10, 0xfe}, 'port0\x00', 0x1c, 0x80008, 0x6, 0xfffffffb, 0x6, 0x2, 0x7fff, 0x0, 0x1, 0x60}) 16:31:46 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x89}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x200800c1) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x2, &(0x7f0000000400)) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) 16:31:46 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7ff, @mcast1, 0x5}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100326bd7000fcdbdf25080000000600030007000000000000000000060002000000000008001800ac1e0101"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x10, 0xfe}, 'port0\x00', 0x1c, 0x80008, 0x6, 0xfffffffb, 0x6, 0x2, 0x7fff, 0x0, 0x1, 0x60}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100326bd7000fcdbdf25080000000600030007000000000000000000060002000000000008001800ac1e0101"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x10, 0xfe}, 'port0\x00', 0x1c, 0x80008, 0x6, 0xfffffffb, 0x6, 0x2, 0x7fff, 0x0, 0x1, 0x60}) (async) 16:31:46 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x9c, 0x7, 0xfa}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:46 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045301, 0x0) 16:31:46 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80086601, 0x0) 16:31:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (rerun: 64) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100326bd7000fcdbdf25080000000600030007000000000000000000060002000000000008001800ac1e0101"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async, rerun: 64) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x10, 0xfe}, 'port0\x00', 0x1c, 0x80008, 0x6, 0xfffffffb, 0x6, 0x2, 0x7fff, 0x0, 0x1, 0x60}) 16:31:46 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7ff, @mcast1, 0x5}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:46 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x89}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x200800c1) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x2, &(0x7f0000000400)) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x48}}, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x89}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x200800c1) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x2, &(0x7f0000000400)) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) (async) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80087601, 0x0) [ 1202.423675][ T27] audit: type=1400 audit(1705595506.914:184): avc: denied { bind } for pid=23302 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 16:31:47 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7ff, @mcast1, 0x5}}, 0x24) (async, rerun: 64) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (rerun: 64) 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x9c, 0x7, 0xfa}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x9c, 0x7, 0xfa}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) [ 1202.498202][T23318] FAULT_INJECTION: forcing a failure. [ 1202.498202][T23318] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.510956][T23318] CPU: 1 PID: 23318 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1202.521115][T23318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1202.531171][T23318] Call Trace: [ 1202.534515][T23318] [ 1202.537443][T23318] dump_stack_lvl+0xda/0x130 [ 1202.542037][T23318] dump_stack+0x15/0x20 [ 1202.546221][T23318] should_fail_ex+0x21f/0x230 [ 1202.550950][T23318] ? security_prepare_creds+0x4c/0x100 [ 1202.556507][T23318] __should_failslab+0x92/0xa0 [ 1202.561272][T23318] should_failslab+0x9/0x20 [ 1202.565774][T23318] __kmalloc+0xb6/0x3b0 [ 1202.570033][T23318] security_prepare_creds+0x4c/0x100 [ 1202.575408][T23318] prepare_creds+0x345/0x480 [ 1202.580003][T23318] copy_creds+0x90/0x3e0 [ 1202.584325][T23318] copy_process+0x617/0x20a0 [ 1202.588916][T23318] ? 0xffffffff81000000 [ 1202.593070][T23318] kernel_clone+0x169/0x560 [ 1202.597654][T23318] ? proc_fail_nth_read+0x140/0x140 [ 1202.602881][T23318] ? vfs_write+0x655/0x790 [ 1202.607391][T23318] __x64_sys_clone+0xe8/0x120 [ 1202.612077][T23318] do_syscall_64+0x59/0x120 [ 1202.616643][T23318] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1202.622558][T23318] RIP: 0033:0x7f960fea4da9 [ 1202.626971][T23318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1202.646615][T23318] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1202.655029][T23318] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1202.662999][T23318] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1202.670971][T23318] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1202.679047][T23318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1202.687018][T23318] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1202.694990][T23318] 16:31:47 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x209402}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4811) 16:31:47 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x48}}, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x89}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x200800c1) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x2, &(0x7f0000000400)) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x9c, 0x7, 0xfa}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:47 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x602700, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x801c581f, 0x0) 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0xcd, 0xff}, 'port1\x00', 0x2, 0x2105c, 0xffff, 0x3f, 0xffffffff, 0xff7a, 0xdc0, 0x0, 0x4, 0x1f}) 16:31:47 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x37e, 0x3ff}, 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x2, 0x2}, 0x1, 0x0, 0x2, {0x7, 0x5}, 0x7, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x1, 0x0, 0x0, {0x20, 0xb7}}) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0045878, 0x0) 16:31:47 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x602700, 0x40) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (rerun: 64) 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0xcd, 0xff}, 'port1\x00', 0x2, 0x2105c, 0xffff, 0x3f, 0xffffffff, 0xff7a, 0xdc0, 0x0, 0x4, 0x1f}) 16:31:47 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x602700, 0x40) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:47 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x209402}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4811) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0045878, 0x0) 16:31:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x37e, 0x3ff}, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x2, 0x2}, 0x1, 0x0, 0x2, {0x7, 0x5}, 0x7, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x1, 0x0, 0x0, {0x20, 0xb7}}) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0105303, 0x0) 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0xcd, 0xff}, 'port1\x00', 0x2, 0x2105c, 0xffff, 0x3f, 0xffffffff, 0xff7a, 0xdc0, 0x0, 0x4, 0x1f}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0xcd, 0xff}, 'port1\x00', 0x2, 0x2105c, 0xffff, 0x3f, 0xffffffff, 0xff7a, 0xdc0, 0x0, 0x4, 0x1f}) (async) 16:31:47 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x35f303) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40305829, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbc44}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5065}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7dcaeac9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe64}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 16:31:47 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x209402}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4811) 16:31:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x37e, 0x3ff}, 0x48) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x2, 0x2}, 0x1, 0x0, 0x2, {0x7, 0x5}, 0x7, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x1, 0x0, 0x0, {0x20, 0xb7}}) 16:31:47 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r3, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200490c4}, 0x34000084) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)={0xbc, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008050}, 0x8010) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0189436, 0x0) 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:47 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x35f303) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40305829, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40305829, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbc44}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5065}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7dcaeac9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe64}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 16:31:47 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0x7, 0x9, 0x3, 0x18, 0x9a4bb48de3f6573a}], &(0x7f00000000c0)='syzkaller\x00', 0x1400000, 0xfe, &(0x7f0000000100)=""/254, 0x41000, 0x2, '\x00', 0x0, 0x17, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x33f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) 16:31:47 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x35f303) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40305829, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbc44}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5065}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7dcaeac9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe64}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x35f303) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40305829, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbc44}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5065}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7dcaeac9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe64}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) (async) ioctl$VT_RELDISP(r1, 0x5605) (async) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc020660b, 0x0) 16:31:47 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0x7, 0x9, 0x3, 0x18, 0x9a4bb48de3f6573a}], &(0x7f00000000c0)='syzkaller\x00', 0x1400000, 0xfe, &(0x7f0000000100)=""/254, 0x41000, 0x2, '\x00', 0x0, 0x17, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x33f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0x7, 0x9, 0x3, 0x18, 0x9a4bb48de3f6573a}], &(0x7f00000000c0)='syzkaller\x00', 0x1400000, 0xfe, &(0x7f0000000100)=""/254, 0x41000, 0x2, '\x00', 0x0, 0x17, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x33f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) 16:31:47 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r3, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200490c4}, 0x34000084) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)={0xbc, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008050}, 0x8010) (async, rerun: 64) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (rerun: 64) socket$rxrpc(0x21, 0x2, 0x2) [ 1202.974902][T23397] FAULT_INJECTION: forcing a failure. [ 1202.974902][T23397] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.987580][T23397] CPU: 1 PID: 23397 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1202.997745][T23397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1203.007800][T23397] Call Trace: [ 1203.011152][T23397] [ 1203.014101][T23397] dump_stack_lvl+0xda/0x130 [ 1203.018752][T23397] dump_stack+0x15/0x20 16:31:47 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000480), 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x30342) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:31:47 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000480), 0x4) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x30342) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) [ 1203.022985][T23397] should_fail_ex+0x21f/0x230 [ 1203.027725][T23397] ? alloc_ucounts+0xe9/0x300 [ 1203.032532][T23397] __should_failslab+0x92/0xa0 [ 1203.037298][T23397] should_failslab+0x9/0x20 [ 1203.041885][T23397] kmalloc_trace+0x55/0x2d0 [ 1203.046475][T23397] ? create_user_ns+0xcaa/0xea0 [ 1203.051340][T23397] alloc_ucounts+0xe9/0x300 [ 1203.055923][T23397] copy_creds+0x1a9/0x3e0 [ 1203.060286][T23397] copy_process+0x617/0x20a0 [ 1203.064880][T23397] ? 0xffffffff81000000 [ 1203.069027][T23397] kernel_clone+0x169/0x560 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) ioctl$VT_RELDISP(r1, 0x5605) (async) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:47 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000480), 0x4) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x30342) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) [ 1203.073536][T23397] ? proc_fail_nth_read+0x140/0x140 [ 1203.078746][T23397] ? vfs_write+0x655/0x790 [ 1203.083177][T23397] __x64_sys_clone+0xe8/0x120 [ 1203.087945][T23397] do_syscall_64+0x59/0x120 [ 1203.092449][T23397] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1203.098403][T23397] RIP: 0033:0x7f960fea4da9 [ 1203.102822][T23397] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:31:47 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00003423541946b6690b0000", @ANYRES16=r2, @ANYBLOB="00012bbd7000fbdbdf25050000000c001000ffffffffffffff7f0500130009000000050012003e000000050006007f000000"], 0x38}}, 0x1004) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:47 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00003423541946b6690b0000", @ANYRES16=r2, @ANYBLOB="00012bbd7000fbdbdf25050000000c001000ffffffffffffff7f0500130009000000050012003e000000050006007f000000"], 0x38}}, 0x1004) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) [ 1203.122437][T23397] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1203.130868][T23397] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1203.138852][T23397] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1203.146834][T23397] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1203.154840][T23397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1203.162843][T23397] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1203.170901][T23397] 16:31:47 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0x7, 0x9, 0x3, 0x18, 0x9a4bb48de3f6573a}], &(0x7f00000000c0)='syzkaller\x00', 0x1400000, 0xfe, &(0x7f0000000100)=""/254, 0x41000, 0x2, '\x00', 0x0, 0x17, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x33f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) 16:31:47 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00003423541946b6690b0000", @ANYRES16=r2, @ANYBLOB="00012bbd7000fbdbdf25050000000c001000ffffffffffffff7f0500130009000000050012003e000000050006007f000000"], 0x38}}, 0x1004) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc02c5341, 0x0) 16:31:47 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x20841) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x4b49, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0xf4, 0x0, &(0x7f0000000480)=[@register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x4, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}, 0x40}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x7, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @register_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x4, 0x0, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/104, 0x68, 0x1, 0x1f}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x40}, @decrefs={0x40046307, 0x3}], 0x5, 0x0, &(0x7f0000000580)="2ff9e5db9e"}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x270, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) 16:31:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) 16:31:47 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (rerun: 32) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r3, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200490c4}, 0x34000084) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)={0xbc, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008050}, 0x8010) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) 16:31:47 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 9) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) 16:31:47 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x20841) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x4b49, 0x0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0) (async, rerun: 64) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0xf4, 0x0, &(0x7f0000000480)=[@register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x4, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}, 0x40}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x7, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @register_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x4, 0x0, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/104, 0x68, 0x1, 0x1f}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x40}, @decrefs={0x40046307, 0x3}], 0x5, 0x0, &(0x7f0000000580)="2ff9e5db9e"}) (async, rerun: 32) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x270, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0305302, 0x0) 16:31:47 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400643) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000326bd7000fddbdf25020000000800080001000000080005000000000008000700", @ANYRES32=r2, @ANYBLOB="060006000100000008000700", @ANYRES32=r3, @ANYBLOB="413b33e44076ce30472381fcc43795c01d8f55d58b4a329fbee4df30c6487fd7d74ea90b011cd5c17dd83087fe5b201d2bf9319b9ee5e39490c7a8929b244366c0fe2fb5d0b5f57e3807ab4c9be46943efd3fe556553ba9bf83514b2423d4739bc52225615df50ab63b40dbb8dc467e13dd00d9d57d334012ae00d08b680f3fde433c16f9004731cc98385bfb14abc1f2969306132b13b2e7a6663722c580675f5ddfa11b7038965840823688df865fb384c19c3784d7dc3c7c9af926e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, 0x0, 0x0) 16:31:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000326bd7000fddbdf25020000000800080001000000080005000000000008000700", @ANYRES32=r2, @ANYBLOB="060006000100000008000700", @ANYRES32=r3, @ANYBLOB="413b33e44076ce30472381fcc43795c01d8f55d58b4a329fbee4df30c6487fd7d74ea90b011cd5c17dd83087fe5b201d2bf9319b9ee5e39490c7a8929b244366c0fe2fb5d0b5f57e3807ab4c9be46943efd3fe556553ba9bf83514b2423d4739bc52225615df50ab63b40dbb8dc467e13dd00d9d57d334012ae00d08b680f3fde433c16f9004731cc98385bfb14abc1f2969306132b13b2e7a6663722c580675f5ddfa11b7038965840823688df865fb384c19c3784d7dc3c7c9af926e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$rxrpc(0x21, 0x2, 0x2) (async) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, 0x0, 0x0) 16:31:47 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) 16:31:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400643) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc04c5349, 0x0) 16:31:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, 0x0) [ 1203.433071][T23457] FAULT_INJECTION: forcing a failure. [ 1203.433071][T23457] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.445802][T23457] CPU: 0 PID: 23457 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1203.455872][T23457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1203.465935][T23457] Call Trace: [ 1203.469207][T23457] [ 1203.472133][T23457] dump_stack_lvl+0xda/0x130 [ 1203.476730][T23457] dump_stack+0x15/0x20 [ 1203.480899][T23457] should_fail_ex+0x21f/0x230 [ 1203.485577][T23457] ? dup_fd+0x4c/0x600 [ 1203.489698][T23457] __should_failslab+0x92/0xa0 [ 1203.494467][T23457] should_failslab+0x9/0x20 [ 1203.498974][T23457] kmem_cache_alloc+0x56/0x2d0 [ 1203.503784][T23457] dup_fd+0x4c/0x600 [ 1203.507697][T23457] ? avc_has_perm+0xd4/0x150 [ 1203.511172][T23466] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1203.512291][T23457] copy_files+0xc0/0x130 [ 1203.525620][T23457] copy_process+0xf66/0x20a0 16:31:48 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) (rerun: 64) 16:31:48 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x7, 0x20}, 0x0, 0x3ff, 0x20, {0x3}, 0x5, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900020}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf250d00000008003b000100000008002c000200000008000b0003000000050030000000000005002d000100000005002e0001000000080039008000000005002e000100000005002e0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) [ 1203.530267][T23457] kernel_clone+0x169/0x560 [ 1203.534857][T23457] ? proc_fail_nth_read+0x140/0x140 [ 1203.540080][T23457] ? vfs_write+0x655/0x790 [ 1203.544520][T23457] __x64_sys_clone+0xe8/0x120 [ 1203.549208][T23457] do_syscall_64+0x59/0x120 [ 1203.553719][T23457] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1203.559633][T23457] RIP: 0033:0x7f960fea4da9 [ 1203.564074][T23457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:31:48 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x20841) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x20841) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x4b49, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0xf4, 0x0, &(0x7f0000000480)=[@register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x4, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}, 0x40}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x7, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @register_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x4, 0x0, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/104, 0x68, 0x1, 0x1f}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x40}, @decrefs={0x40046307, 0x3}], 0x5, 0x0, &(0x7f0000000580)="2ff9e5db9e"}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x270, 0x4) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x270, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) 16:31:48 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x7, 0x20}, 0x0, 0x3ff, 0x20, {0x3}, 0x5, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900020}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf250d00000008003b000100000008002c000200000008000b0003000000050030000000000005002d000100000005002e0001000000080039008000000005002e000100000005002e0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') (rerun: 64) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000326bd7000fddbdf25020000000800080001000000080005000000000008000700", @ANYRES32=r2, @ANYBLOB="060006000100000008000700", @ANYRES32=r3, @ANYBLOB="413b33e44076ce30472381fcc43795c01d8f55d58b4a329fbee4df30c6487fd7d74ea90b011cd5c17dd83087fe5b201d2bf9319b9ee5e39490c7a8929b244366c0fe2fb5d0b5f57e3807ab4c9be46943efd3fe556553ba9bf83514b2423d4739bc52225615df50ab63b40dbb8dc467e13dd00d9d57d334012ae00d08b680f3fde433c16f9004731cc98385bfb14abc1f2969306132b13b2e7a6663722c580675f5ddfa11b7038965840823688df865fb384c19c3784d7dc3c7c9af926e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, 0x0, 0x0) [ 1203.583708][T23457] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1203.592227][T23457] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1203.600234][T23457] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1203.608214][T23457] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1203.616194][T23457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1203.624230][T23457] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 16:31:48 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400643) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:48 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534b, 0x0) 16:31:48 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x7, 0x20}, 0x0, 0x3ff, 0x20, {0x3}, 0x5, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900020}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf250d00000008003b000100000008002c000200000008000b0003000000050030000000000005002d000100000005002e0001000000080039008000000005002e000100000005002e0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x7, 0x20}, 0x0, 0x3ff, 0x20, {0x3}, 0x5, 0x8}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900020}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf250d00000008003b000100000008002c000200000008000b0003000000050030000000000005002d000100000005002e0001000000080039008000000005002e000100000005002e0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) [ 1203.632206][T23457] 16:31:48 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xa0141) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:48 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) 16:31:48 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2880c0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) socketpair(0x18, 0x7, 0x3f, &(0x7f0000000040)) 16:31:48 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) 16:31:48 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xa0141) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:48 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc05c5340, 0x0) 16:31:48 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x8400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/29, 0x1000000, 0x0, 0xffff, 0x2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x2}, 0x0, 0x0, 0x0, {0x0, 0x20}, 0xfe}) 16:31:48 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:48 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2880c0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) socketpair(0x18, 0x7, 0x3f, &(0x7f0000000040)) 16:31:48 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xa0141) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xa0141) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) 16:31:48 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) 16:31:48 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x8400) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/29, 0x1000000, 0x0, 0xffff, 0x2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x2}, 0x0, 0x0, 0x0, {0x0, 0x20}, 0xfe}) 16:31:48 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0605345, 0x0) [ 1203.737137][ T27] audit: type=1400 audit(1705595508.244:185): avc: denied { connect } for pid=23524 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 16:31:50 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) 16:31:50 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, 0x0) 16:31:50 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x8400) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/29, 0x1000000, 0x0, 0xffff, 0x2}, 0x20) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x2}, 0x0, 0x0, 0x0, {0x0, 0x20}, 0xfe}) 16:31:50 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x283101) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:50 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) r1 = socket$rxrpc(0x21, 0x2, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) 16:31:50 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2880c0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) socketpair(0x18, 0x7, 0x3f, &(0x7f0000000040)) 16:31:50 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x283101) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x283101) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) 16:31:50 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x610000) r2 = socket$rxrpc(0x21, 0x2, 0x16) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0x9, 0x4}, 'port0\x00', 0x10, 0x431, 0xfffffffe, 0x80000001, 0x3, 0x4, 0x3, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x9, 0x1}, 0x0, 0x5, 0x1ff, {0xf7}, 0x8b, 0x40}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000300)={0x3, 0x0, 0x1c, 0xf, 0x1eb, &(0x7f0000000400)}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x5452, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) ioctl$TIOCEXCL(r3, 0x540c) socket$inet_udp(0x2, 0x2, 0x0) sendto$rxrpc(r3, &(0x7f0000000800)="955e47e49893a9303b894b70d5bbd4f8f9e4bbe87b73dc10060f21e209505be8a7c963072efe0a4e23bad6a930565dffc8d4914040468bb4d6662743cb6034171d06c17f408f89a3454e65aad19ba1679169b9fe4416889a1ca70a87d92d048d82b3dded77c1e95603588e69b210b8b543d34ed839f4d8d1b3cfcd21dbae359c612ec83b7dc1ad39ad8b278ff0dcab2ff2d18062", 0x94, 0x40045, &(0x7f0000000340)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xffffc5ea, @dev={0xfe, 0x80, '\x00', 0x33}, 0xd8}}, 0x24) 16:31:50 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) r1 = socket$rxrpc(0x21, 0x2, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) 16:31:50 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5334, 0x0) 16:31:50 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x283101) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x283101) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) 16:31:51 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) r1 = socket$rxrpc(0x21, 0x2, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) (async) socket$rxrpc(0x21, 0x2, 0x4) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) (async) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5335, 0x0) 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6b, 0x0, 0x12, 0x20, 0x0, "c26a68dd73a96a44a14377fa4af1307f21ea9a3bfe2523d9fcdd07a12d640a059ce5cb30cc45a11380e7c87cbad1e6de4ac556476232fc2c385796b219ecbffe", "b82b4f44f74affb243b996a5aed3fd2c7805497b267c88ba9d0a35e5627f82a688dd7a9c37f55c63bed29294897f1d5d4bcedd7baf9b7a3790b2d2fa807f44bb", "222c31dfa30fe8dbbb0c9b2e8ab95d0d2a51e10698b94e61fb7c06417f4752e8", [0x4]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:31:51 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) syz_io_uring_setup(0x49e, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x71}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r3, 0x611, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x70}}, 0x10004) socketpair(0xa, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r5, &(0x7f0000000000), 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5336, 0x0) [ 1206.588573][T23581] FAULT_INJECTION: forcing a failure. [ 1206.588573][T23581] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.601294][T23581] CPU: 1 PID: 23581 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1206.611369][T23581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1206.621428][T23581] Call Trace: [ 1206.624705][T23581] [ 1206.627634][T23581] dump_stack_lvl+0xda/0x130 [ 1206.632300][T23581] dump_stack+0x15/0x20 [ 1206.636452][T23581] should_fail_ex+0x21f/0x230 [ 1206.641158][T23581] ? alloc_fdtable+0x78/0x190 [ 1206.645952][T23581] __should_failslab+0x92/0xa0 [ 1206.650759][T23581] should_failslab+0x9/0x20 [ 1206.655275][T23581] kmalloc_trace+0x55/0x2d0 [ 1206.659787][T23581] alloc_fdtable+0x78/0x190 [ 1206.664368][T23581] dup_fd+0x4b9/0x600 [ 1206.668355][T23581] copy_files+0xc0/0x130 [ 1206.672600][T23581] copy_process+0xf66/0x20a0 [ 1206.677219][T23581] kernel_clone+0x169/0x560 [ 1206.681729][T23581] ? proc_fail_nth_read+0x140/0x140 [ 1206.687091][T23581] ? vfs_write+0x655/0x790 [ 1206.691605][T23581] __x64_sys_clone+0xe8/0x120 [ 1206.696286][T23581] do_syscall_64+0x59/0x120 [ 1206.700794][T23581] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1206.706735][T23581] RIP: 0033:0x7f960fea4da9 [ 1206.711152][T23581] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1206.730758][T23581] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6b, 0x0, 0x12, 0x20, 0x0, "c26a68dd73a96a44a14377fa4af1307f21ea9a3bfe2523d9fcdd07a12d640a059ce5cb30cc45a11380e7c87cbad1e6de4ac556476232fc2c385796b219ecbffe", "b82b4f44f74affb243b996a5aed3fd2c7805497b267c88ba9d0a35e5627f82a688dd7a9c37f55c63bed29294897f1d5d4bcedd7baf9b7a3790b2d2fa807f44bb", "222c31dfa30fe8dbbb0c9b2e8ab95d0d2a51e10698b94e61fb7c06417f4752e8", [0x4]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6b, 0x0, 0x12, 0x20, 0x0, "c26a68dd73a96a44a14377fa4af1307f21ea9a3bfe2523d9fcdd07a12d640a059ce5cb30cc45a11380e7c87cbad1e6de4ac556476232fc2c385796b219ecbffe", "b82b4f44f74affb243b996a5aed3fd2c7805497b267c88ba9d0a35e5627f82a688dd7a9c37f55c63bed29294897f1d5d4bcedd7baf9b7a3790b2d2fa807f44bb", "222c31dfa30fe8dbbb0c9b2e8ab95d0d2a51e10698b94e61fb7c06417f4752e8", [0x4]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) (async) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6b, 0x0, 0x12, 0x20, 0x0, "c26a68dd73a96a44a14377fa4af1307f21ea9a3bfe2523d9fcdd07a12d640a059ce5cb30cc45a11380e7c87cbad1e6de4ac556476232fc2c385796b219ecbffe", "b82b4f44f74affb243b996a5aed3fd2c7805497b267c88ba9d0a35e5627f82a688dd7a9c37f55c63bed29294897f1d5d4bcedd7baf9b7a3790b2d2fa807f44bb", "222c31dfa30fe8dbbb0c9b2e8ab95d0d2a51e10698b94e61fb7c06417f4752e8", [0x4]}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85320, 0x0) 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) r2 = getpid() ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x210}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4008001) 16:31:51 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x610000) (async) r2 = socket$rxrpc(0x21, 0x2, 0x16) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0x9, 0x4}, 'port0\x00', 0x10, 0x431, 0xfffffffe, 0x80000001, 0x3, 0x4, 0x3, 0x0, 0x6, 0x80}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x9, 0x1}, 0x0, 0x5, 0x1ff, {0xf7}, 0x8b, 0x40}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000300)={0x3, 0x0, 0x1c, 0xf, 0x1eb, &(0x7f0000000400)}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x5452, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) ioctl$TIOCEXCL(r3, 0x540c) (async) socket$inet_udp(0x2, 0x2, 0x0) sendto$rxrpc(r3, &(0x7f0000000800)="955e47e49893a9303b894b70d5bbd4f8f9e4bbe87b73dc10060f21e209505be8a7c963072efe0a4e23bad6a930565dffc8d4914040468bb4d6662743cb6034171d06c17f408f89a3454e65aad19ba1679169b9fe4416889a1ca70a87d92d048d82b3dded77c1e95603588e69b210b8b543d34ed839f4d8d1b3cfcd21dbae359c612ec83b7dc1ad39ad8b278ff0dcab2ff2d18062", 0x94, 0x40045, &(0x7f0000000340)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xffffc5ea, @dev={0xfe, 0x80, '\x00', 0x33}, 0xd8}}, 0x24) 16:31:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r3, 0x611, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x70}}, 0x10004) socketpair(0xa, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r5, &(0x7f0000000000), 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x800) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r3, 0x611, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x70}}, 0x10004) (async) socketpair(0xa, 0x0, 0x0, &(0x7f0000000040)) (async) bind$bt_sco(r5, &(0x7f0000000000), 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85322, 0x0) 16:31:51 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) syz_io_uring_setup(0x49e, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x71}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) [ 1206.739225][T23581] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1206.747208][T23581] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1206.755182][T23581] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1206.763161][T23581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1206.771133][T23581] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1206.779138][T23581] 16:31:51 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) (async, rerun: 32) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x610000) (rerun: 32) r2 = socket$rxrpc(0x21, 0x2, 0x16) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0x9, 0x4}, 'port0\x00', 0x10, 0x431, 0xfffffffe, 0x80000001, 0x3, 0x4, 0x3, 0x0, 0x6, 0x80}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x9, 0x1}, 0x0, 0x5, 0x1ff, {0xf7}, 0x8b, 0x40}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000300)={0x3, 0x0, 0x1c, 0xf, 0x1eb, &(0x7f0000000400)}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x5452, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) ioctl$TIOCEXCL(r3, 0x540c) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$rxrpc(r3, &(0x7f0000000800)="955e47e49893a9303b894b70d5bbd4f8f9e4bbe87b73dc10060f21e209505be8a7c963072efe0a4e23bad6a930565dffc8d4914040468bb4d6662743cb6034171d06c17f408f89a3454e65aad19ba1679169b9fe4416889a1ca70a87d92d048d82b3dded77c1e95603588e69b210b8b543d34ed839f4d8d1b3cfcd21dbae359c612ec83b7dc1ad39ad8b278ff0dcab2ff2d18062", 0x94, 0x40045, &(0x7f0000000340)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xffffc5ea, @dev={0xfe, 0x80, '\x00', 0x33}, 0xd8}}, 0x24) 16:31:51 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 11) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x800) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r3, 0x611, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x70}}, 0x10004) (async) socketpair(0xa, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r5, &(0x7f0000000000), 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (rerun: 32) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) (async) r2 = getpid() ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x210}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4008001) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, 0x0) 16:31:51 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) syz_io_uring_setup(0x49e, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x71}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) (async) syz_io_uring_setup(0x49e, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x71}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) 16:31:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCEXCL(r1, 0x540c) [ 1206.905217][ T27] audit: type=1400 audit(1705595511.404:186): avc: denied { ioctl } for pid=23614 comm="syz-executor.5" path="socket:[281427]" dev="sockfs" ino=281427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5310, 0x0) 16:31:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCEXCL(r1, 0x540c) 16:31:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xa9, 0x8}, 0x0, 0x0, 0x800, {0x8, 0x7}, 0x1, 0x4}) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5351, 0x0) 16:31:51 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x401, 0x8001, 0x510, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x48) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) r2 = getpid() ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x210}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4008001) 16:31:51 executing program 5: socket$rxrpc(0x21, 0x2, 0x2) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x401, 0x8001, 0x510, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x48) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xa9, 0x8}, 0x0, 0x0, 0x800, {0x8, 0x7}, 0x1, 0x4}) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x0, 0xfc}, 'port1\x00', 0x0, 0x81c50, 0x1, 0x9, 0x1, 0x101, 0x3, 0x0, 0x6, 0x3f}) 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xfffffff8, 0x34c0f2ce, 0x8, {0x100, 0x3}, 0x100}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:31:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCEXCL(r1, 0x540c) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x8000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x0, 0xfc}, 'port1\x00', 0x0, 0x81c50, 0x1, 0x9, 0x1, 0x101, 0x3, 0x0, 0x6, 0x3f}) 16:31:51 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x401, 0x8001, 0x510, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x48) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x7, 0x4}, 'port0\x00', 0x2, 0x0, 0x101, 0x80, 0x56a, 0xffffff52, 0x8, 0x0, 0x0, 0xc3}) 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xfffffff8, 0x34c0f2ce, 0x8, {0x100, 0x3}, 0x100}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xfffffff8, 0x34c0f2ce, 0x8, {0x100, 0x3}, 0x100}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) 16:31:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xa9, 0x8}, 0x0, 0x0, 0x800, {0x8, 0x7}, 0x1, 0x4}) 16:31:51 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x80000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x7, 0x4}, 'port0\x00', 0x2, 0x0, 0x101, 0x80, 0x56a, 0xffffff52, 0x8, 0x0, 0x0, 0xc3}) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x0, 0xfc}, 'port1\x00', 0x0, 0x81c50, 0x1, 0x9, 0x1, 0x101, 0x3, 0x0, 0x6, 0x3f}) (rerun: 64) 16:31:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r6, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200490c4}, 0x34000084) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10010}, 0x8104) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08022bbf7000fcdb05002800000005002e0000000000fe0269e9f376a5b67c0000000c002d000202aaaaaaaa00000000000000000200"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e4dd2fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7761fdee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17cfcb86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1003dff7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2649329a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74ce23f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x292432e6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16f7e94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a869ec9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000300)="c45897d6070ee1cf407d806bf4f83904ea6cd0eff2ed0cd1441ec2a1185c833abf11f2346a61cdc7eac3effdc57291f319112bda67905b189967d780", 0x3c, 0x0, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r11, 0x110, 0x5, 0x0, 0x0) [ 1207.155351][T23684] FAULT_INJECTION: forcing a failure. [ 1207.155351][T23684] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.168006][T23684] CPU: 1 PID: 23684 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1207.178085][T23684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1207.188142][T23684] Call Trace: [ 1207.191493][T23684] [ 1207.194428][T23684] dump_stack_lvl+0xda/0x130 [ 1207.199104][T23684] dump_stack+0x15/0x20 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xfffffff8, 0x34c0f2ce, 0x8, {0x100, 0x3}, 0x100}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:31:51 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x7, 0x4}, 'port0\x00', 0x2, 0x0, 0x101, 0x80, 0x56a, 0xffffff52, 0x8, 0x0, 0x0, 0xc3}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x7, 0x4}, 'port0\x00', 0x2, 0x0, 0x101, 0x80, 0x56a, 0xffffff52, 0x8, 0x0, 0x0, 0xc3}) (async) [ 1207.203313][T23684] should_fail_ex+0x21f/0x230 [ 1207.207993][T23684] ? __register_sysctl_table+0x733/0xcb0 [ 1207.213664][T23684] __should_failslab+0x92/0xa0 [ 1207.218439][T23684] should_failslab+0x9/0x20 [ 1207.222979][T23684] __kmalloc+0xb6/0x3b0 [ 1207.227145][T23684] __register_sysctl_table+0x733/0xcb0 [ 1207.232648][T23684] setup_userns_sysctls+0x169/0x1d0 [ 1207.237865][T23684] create_user_ns+0xc09/0xea0 [ 1207.242570][T23684] copy_creds+0xf5/0x3e0 [ 1207.246885][T23684] copy_process+0x617/0x20a0 [ 1207.251483][T23684] ? 0xffffffff81000000 16:31:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x800) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xfff}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004040) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x103080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0x5460, 0x0) 16:31:51 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x80000000}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (rerun: 32) [ 1207.255695][T23684] kernel_clone+0x169/0x560 [ 1207.260201][T23684] ? proc_fail_nth_read+0x140/0x140 [ 1207.265452][T23684] ? vfs_write+0x655/0x790 [ 1207.269922][T23684] __x64_sys_clone+0xe8/0x120 [ 1207.274624][T23684] do_syscall_64+0x59/0x120 [ 1207.279168][T23684] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1207.285074][T23684] RIP: 0033:0x7f960fea4da9 [ 1207.289499][T23684] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1207.309183][T23684] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1207.317968][T23684] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1207.325946][T23684] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1207.333993][T23684] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1207.341991][T23684] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 16:31:51 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x80000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x80000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = timerfd_create(0xe, 0x800) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) [ 1207.349972][T23684] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1207.357954][T23684] [ 1207.361250][T23684] sysctl could not get directory: /user -12 16:31:51 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 12) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = io_uring_setup(0xe35, &(0x7f0000000000)={0x0, 0xc3a4, 0x2000, 0x2, 0xfb}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[r0], 0x1) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = timerfd_create(0xe, 0x800) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) 16:31:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x618801) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x581) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r6, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200490c4}, 0x34000084) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b00)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10010}, 0x8104) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08022bbf7000fcdb05002800000005002e0000000000fe0269e9f376a5b67c0000000c002d000202aaaaaaaa00000000000000000200"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08022bbf7000fcdb05002800000005002e0000000000fe0269e9f376a5b67c0000000c002d000202aaaaaaaa00000000000000000200"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e4dd2fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7761fdee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17cfcb86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1003dff7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2649329a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74ce23f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x292432e6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16f7e94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a869ec9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000300)="c45897d6070ee1cf407d806bf4f83904ea6cd0eff2ed0cd1441ec2a1185c833abf11f2346a61cdc7eac3effdc57291f319112bda67905b189967d780", 0x3c, 0x0, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r11, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r11, 0x110, 0x5, 0x0, 0x0) 16:31:51 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x800) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xfff}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004040) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x103080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0x5460, 0x0) 16:31:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = timerfd_create(0xe, 0x800) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) timerfd_create(0xe, 0x800) (async) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) (async) 16:31:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) r1 = io_uring_setup(0xe35, &(0x7f0000000000)={0x0, 0xc3a4, 0x2000, 0x2, 0xfb}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[r0], 0x1) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x618801) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x581) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) [ 1207.494620][T23740] FAULT_INJECTION: forcing a failure. [ 1207.494620][T23740] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.507346][T23740] CPU: 0 PID: 23740 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1207.517415][T23740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1207.527592][T23740] Call Trace: [ 1207.530869][T23740] [ 1207.533810][T23740] dump_stack_lvl+0xda/0x130 [ 1207.538434][T23740] dump_stack+0x15/0x20 [ 1207.542586][T23740] should_fail_ex+0x21f/0x230 [ 1207.547293][T23740] __should_failslab+0x92/0xa0 [ 1207.552062][T23740] should_failslab+0x9/0x20 [ 1207.556604][T23740] __kmalloc_node+0xbb/0x3e0 [ 1207.561253][T23740] ? kvmalloc_node+0x72/0x160 [ 1207.565966][T23740] kvmalloc_node+0x72/0x160 [ 1207.570475][T23740] alloc_fdtable+0xfe/0x190 [ 1207.575054][T23740] dup_fd+0x4b9/0x600 [ 1207.579125][T23740] copy_files+0xc0/0x130 [ 1207.583489][T23740] copy_process+0xf66/0x20a0 [ 1207.588127][T23740] kernel_clone+0x169/0x560 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) r1 = io_uring_setup(0xe35, &(0x7f0000000000)={0x0, 0xc3a4, 0x2000, 0x2, 0xfb}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[r0], 0x1) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x1, 0x0, 0x0, {}, 0x0, 0x80000000}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x5, 0x52}, 'port0\x00', 0x0, 0x40810, 0x0, 0x8001, 0x400, 0x800, 0x40, 0x0, 0x5, 0xd4}) 16:31:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x800) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xfff}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004040) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x103080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0x5460, 0x0) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x1, 0x0, 0x0, {}, 0x0, 0x80000000}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x5, 0x52}, 'port0\x00', 0x0, 0x40810, 0x0, 0x8001, 0x400, 0x800, 0x40, 0x0, 0x5, 0xd4}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x5, 0x52}, 'port0\x00', 0x0, 0x40810, 0x0, 0x8001, 0x400, 0x800, 0x40, 0x0, 0x5, 0xd4}) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x1, 0x0, 0x0, {}, 0x0, 0x80000000}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x5, 0x52}, 'port0\x00', 0x0, 0x40810, 0x0, 0x8001, 0x400, 0x800, 0x40, 0x0, 0x5, 0xd4}) 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x640}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040014) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x618801) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x581) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) (async) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) [ 1207.592639][T23740] ? proc_fail_nth_read+0x140/0x140 [ 1207.597866][T23740] ? vfs_write+0x655/0x790 [ 1207.602295][T23740] __x64_sys_clone+0xe8/0x120 [ 1207.606978][T23740] do_syscall_64+0x59/0x120 [ 1207.611504][T23740] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1207.617424][T23740] RIP: 0033:0x7f960fea4da9 [ 1207.621921][T23740] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1207.641562][T23740] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1207.650017][T23740] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1207.657989][T23740] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1207.666015][T23740] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1207.673981][T23740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1207.681943][T23740] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1207.689909][T23740] 16:31:52 executing program 2: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000040)) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x14101) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0xb}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000380)) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffe7) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x3ff, 0x43, "c94477bc1c64d8436f9f1d15c0ec291d4d074d", 0x80000000, 0x5}) syz_io_uring_setup(0x6aa1, &(0x7f0000000200)={0x0, 0x4286, 0x0, 0x0, 0x1ef, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x16, 0x4004, @fd_index=0x1, 0x10000, 0x0, 0x0, 0xa, 0x1, {0x0, r6}}) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000000c0)="ecb28c052fe8977232da978d24ef29d33915077de60544839a2d2f6098faa5339c888047730bf168c6860dae9df934cae6c49c9d876b95e94ca74097d9c873b3015955ec71d5487a42d5ec7de6e8aef4f73a060b507ca95e89cc2208dad129b6119c8054b66f17746c557d5aba8f48761e6b586e41e10a76dd88dda5c3505710e1b5730d7a9b1ca6e0e33702cb7546407f534f452bb177188651e7dde6d99a02783f275cb1dc167b2ec21cf5") ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000440)) ioctl$TIOCEXCL(r3, 0x540c) epoll_pwait(r2, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000001c0)={[0x3]}, 0x8) 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x640}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040014) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc020660b, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0x200, 0xbef, 0xc04, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pK \x00'}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r4) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3ff}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x2c}}, 0x20000800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00'}) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x90d00, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @generic={0x9, 0x5, 0x3, 0x5, 0x3f}, @alu={0xaef3cde8919b6fb, 0x1, 0x2, 0x4, 0x7, 0x2, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0x69, &(0x7f00000000c0)=""/105, 0x41000, 0xc, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x8, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[r3, r4, r5, r6, r7, r10, r11, r12], &(0x7f0000000580)=[{0x2, 0x1, 0x0, 0x3}, {0x0, 0x1, 0xd, 0x6}, {0x2, 0x5, 0xa, 0x8}, {0x0, 0x3, 0xd, 0x6}, {0x1, 0x3, 0x1, 0x9}, {0x0, 0x3, 0x0, 0x3}, {0x2, 0x2, 0xb, 0x7}, {0x0, 0x2, 0x9}], 0x10, 0x2}, 0x90) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc020660b, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:31:52 executing program 2: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) (rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) ioctl$TIOCEXCL(r0, 0x540c) (async, rerun: 32) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x14101) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0xb}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000380)) (async) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffe7) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x3ff, 0x43, "c94477bc1c64d8436f9f1d15c0ec291d4d074d", 0x80000000, 0x5}) (async) syz_io_uring_setup(0x6aa1, &(0x7f0000000200)={0x0, 0x4286, 0x0, 0x0, 0x1ef, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0)=0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x16, 0x4004, @fd_index=0x1, 0x10000, 0x0, 0x0, 0xa, 0x1, {0x0, r6}}) (async) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000000c0)="ecb28c052fe8977232da978d24ef29d33915077de60544839a2d2f6098faa5339c888047730bf168c6860dae9df934cae6c49c9d876b95e94ca74097d9c873b3015955ec71d5487a42d5ec7de6e8aef4f73a060b507ca95e89cc2208dad129b6119c8054b66f17746c557d5aba8f48761e6b586e41e10a76dd88dda5c3505710e1b5730d7a9b1ca6e0e33702cb7546407f534f452bb177188651e7dde6d99a02783f275cb1dc167b2ec21cf5") (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000440)) (async, rerun: 64) ioctl$TIOCEXCL(r3, 0x540c) (rerun: 64) epoll_pwait(r2, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000001c0)={[0x3]}, 0x8) 16:31:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r6, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200490c4}, 0x34000084) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10010}, 0x8104) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08022bbf7000fcdb05002800000005002e0000000000fe0269e9f376a5b67c0000000c002d000202aaaaaaaa00000000000000000200"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r11 = socket$rxrpc(0x21, 0x2, 0x2) (async, rerun: 64) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e4dd2fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7761fdee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17cfcb86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1003dff7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2649329a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74ce23f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x292432e6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16f7e94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a869ec9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000300)="c45897d6070ee1cf407d806bf4f83904ea6cd0eff2ed0cd1441ec2a1185c833abf11f2346a61cdc7eac3effdc57291f319112bda67905b189967d780", 0x3c, 0x0, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r11, 0x110, 0x5, 0x0, 0x0) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc020660b, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc020660b, 0x0) (async) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x401, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x24) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) 16:31:52 executing program 2: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000040)) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x14101) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0xb}) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000380)) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffe7) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x3ff, 0x43, "c94477bc1c64d8436f9f1d15c0ec291d4d074d", 0x80000000, 0x5}) (async) syz_io_uring_setup(0x6aa1, &(0x7f0000000200)={0x0, 0x4286, 0x0, 0x0, 0x1ef, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0)=0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x16, 0x4004, @fd_index=0x1, 0x10000, 0x0, 0x0, 0xa, 0x1, {0x0, r6}}) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000000c0)="ecb28c052fe8977232da978d24ef29d33915077de60544839a2d2f6098faa5339c888047730bf168c6860dae9df934cae6c49c9d876b95e94ca74097d9c873b3015955ec71d5487a42d5ec7de6e8aef4f73a060b507ca95e89cc2208dad129b6119c8054b66f17746c557d5aba8f48761e6b586e41e10a76dd88dda5c3505710e1b5730d7a9b1ca6e0e33702cb7546407f534f452bb177188651e7dde6d99a02783f275cb1dc167b2ec21cf5") (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000440)) (async) ioctl$TIOCEXCL(r3, 0x540c) (async) epoll_pwait(r2, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000001c0)={[0x3]}, 0x8) 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x640}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xff}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040014) 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0x200, 0xbef, 0xc04, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x7}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pK \x00'}, 0x20) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r4) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3ff}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x2c}}, 0x20000800) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00'}) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x90d00, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @generic={0x9, 0x5, 0x3, 0x5, 0x3f}, @alu={0xaef3cde8919b6fb, 0x1, 0x2, 0x4, 0x7, 0x2, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0x69, &(0x7f00000000c0)=""/105, 0x41000, 0xc, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x8, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[r3, r4, r5, r6, r7, r10, r11, r12], &(0x7f0000000580)=[{0x2, 0x1, 0x0, 0x3}, {0x0, 0x1, 0xd, 0x6}, {0x2, 0x5, 0xa, 0x8}, {0x0, 0x3, 0xd, 0x6}, {0x1, 0x3, 0x1, 0x9}, {0x0, 0x3, 0x0, 0x3}, {0x2, 0x2, 0xb, 0x7}, {0x0, 0x2, 0x9}], 0x10, 0x2}, 0x90) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)={0xfffffff7, 0x0, 0x5, {0xfffffff8, 0x32d}, 0x3b5, 0x1}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) connect$bt_sco(r1, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r2 = syz_io_uring_setup(0x7c09, &(0x7f0000000000)={0x0, 0x2e7, 0x80, 0x0, 0x244}, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) 16:31:52 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 13) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) [ 1207.891202][T23819] FAULT_INJECTION: forcing a failure. [ 1207.891202][T23819] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.904004][T23819] CPU: 1 PID: 23819 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1207.914114][T23819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1207.924229][T23819] Call Trace: [ 1207.927521][T23819] [ 1207.930450][T23819] dump_stack_lvl+0xda/0x130 [ 1207.935053][T23819] dump_stack+0x15/0x20 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x0, 0x4], 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:31:52 executing program 5: setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x8, 0x3f}, 'port0\x00', 0x4, 0x40, 0x81, 0x10001, 0x80000000, 0x7, 0x1bd, 0x0, 0x4, 0x3}) 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0x200, 0xbef, 0xc04, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x7}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pK \x00'}, 0x20) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r4) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3ff}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x2c}}, 0x20000800) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00'}) (async) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x90d00, 0x0) (async, rerun: 32) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @generic={0x9, 0x5, 0x3, 0x5, 0x3f}, @alu={0xaef3cde8919b6fb, 0x1, 0x2, 0x4, 0x7, 0x2, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0x69, &(0x7f00000000c0)=""/105, 0x41000, 0xc, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x8, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[r3, r4, r5, r6, r7, r10, r11, r12], &(0x7f0000000580)=[{0x2, 0x1, 0x0, 0x3}, {0x0, 0x1, 0xd, 0x6}, {0x2, 0x5, 0xa, 0x8}, {0x0, 0x3, 0xd, 0x6}, {0x1, 0x3, 0x1, 0x9}, {0x0, 0x3, 0x0, 0x3}, {0x2, 0x2, 0xb, 0x7}, {0x0, 0x2, 0x9}], 0x10, 0x2}, 0x90) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)={0xfffffff7, 0x0, 0x5, {0xfffffff8, 0x32d}, 0x3b5, 0x1}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) connect$bt_sco(r1, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r2 = syz_io_uring_setup(0x7c09, &(0x7f0000000000)={0x0, 0x2e7, 0x80, 0x0, 0x244}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) 16:31:52 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x0, 0x4], 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) [ 1207.939288][T23819] should_fail_ex+0x21f/0x230 [ 1207.944016][T23819] ? copy_fs_struct+0x31/0x100 [ 1207.948840][T23819] __should_failslab+0x92/0xa0 [ 1207.953614][T23819] should_failslab+0x9/0x20 [ 1207.958182][T23819] kmem_cache_alloc+0x56/0x2d0 [ 1207.963010][T23819] copy_fs_struct+0x31/0x100 [ 1207.967686][T23819] copy_fs+0x59/0xf0 [ 1207.971594][T23819] copy_process+0xf8d/0x20a0 [ 1207.976193][T23819] kernel_clone+0x169/0x560 [ 1207.980702][T23819] ? proc_fail_nth_read+0x140/0x140 [ 1207.985981][T23819] ? vfs_write+0x655/0x790 16:31:52 executing program 5: setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x8, 0x3f}, 'port0\x00', 0x4, 0x40, 0x81, 0x10001, 0x80000000, 0x7, 0x1bd, 0x0, 0x4, 0x3}) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)={0xfffffff7, 0x0, 0x5, {0xfffffff8, 0x32d}, 0x3b5, 0x1}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) connect$bt_sco(r1, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r2 = syz_io_uring_setup(0x7c09, &(0x7f0000000000)={0x0, 0x2e7, 0x80, 0x0, 0x244}, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)={0xfffffff7, 0x0, 0x5, {0xfffffff8, 0x32d}, 0x3b5, 0x1}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) connect$bt_sco(r1, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) syz_io_uring_setup(0x7c09, &(0x7f0000000000)={0x0, 0x2e7, 0x80, 0x0, 0x244}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) (async) [ 1207.990421][T23819] __x64_sys_clone+0xe8/0x120 [ 1207.995119][T23819] do_syscall_64+0x59/0x120 [ 1207.999644][T23819] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1208.005692][T23819] RIP: 0033:0x7f960fea4da9 [ 1208.010160][T23819] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1208.029851][T23819] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x6, 0xf8, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x0, 0x4], 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:31:52 executing program 5: setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x6, 0xf8, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x8, 0x3f}, 'port0\x00', 0x4, 0x40, 0x81, 0x10001, 0x80000000, 0x7, 0x1bd, 0x0, 0x4, 0x3}) 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x5, 0x1, 0x4965}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0x0, 0x4}, 'port0\x00', 0x84, 0x6393f8ab92763a06, 0x80, 0x1, 0x4, 0x10001, 0x52f0, 0x0, 0x2, 0x8}) 16:31:52 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0x80000000, 0x80000000, 0x90, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x4}, 0x48) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) [ 1208.038323][T23819] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1208.046380][T23819] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1208.054360][T23819] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1208.062342][T23819] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1208.070321][T23819] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1208.078309][T23819] 16:31:52 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 14) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:52 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0x80000000, 0x80000000, 0x90, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x4}, 0x48) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x4141) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="6ff952fd4380025359308627315c8a41cc348b242637eae5c947b3eb8d1cd62c20a81c61bc268f3c606a8a7ebf6d21c301d8e42af7c184dfd4ac2f0c7da4bb3d1e9bcb71c18ef64fb1aac065a935b5db48e31eaab007afa332366eb2d9711ba7be3955") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) 16:31:52 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x6, 0xf8, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:52 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0x80000000, 0x80000000, 0x90, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x4}, 0x48) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) socket$rxrpc(0x21, 0x2, 0x2) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0x80000000, 0x80000000, 0x90, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x4}, 0x48) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x5, 0x1, 0x4965}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) ioctl$VT_RELDISP(r2, 0x5605) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0x0, 0x4}, 'port0\x00', 0x84, 0x6393f8ab92763a06, 0x80, 0x1, 0x4, 0x10001, 0x52f0, 0x0, 0x2, 0x8}) 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x642800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:52 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x642800) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x642800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x642800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) [ 1208.166195][T23883] FAULT_INJECTION: forcing a failure. [ 1208.166195][T23883] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.178876][T23883] CPU: 1 PID: 23883 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1208.189116][T23883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1208.199237][T23883] Call Trace: [ 1208.202519][T23883] [ 1208.205450][T23883] dump_stack_lvl+0xda/0x130 [ 1208.210104][T23883] dump_stack+0x15/0x20 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x4141) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="6ff952fd4380025359308627315c8a41cc348b242637eae5c947b3eb8d1cd62c20a81c61bc268f3c606a8a7ebf6d21c301d8e42af7c184dfd4ac2f0c7da4bb3d1e9bcb71c18ef64fb1aac065a935b5db48e31eaab007afa332366eb2d9711ba7be3955") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="6ff952fd4380025359308627315c8a41cc348b242637eae5c947b3eb8d1cd62c20a81c61bc268f3c606a8a7ebf6d21c301d8e42af7c184dfd4ac2f0c7da4bb3d1e9bcb71c18ef64fb1aac065a935b5db48e31eaab007afa332366eb2d9711ba7be3955") (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) (async) [ 1208.214334][T23883] should_fail_ex+0x21f/0x230 [ 1208.219064][T23883] ? copy_sighand+0x52/0x1a0 [ 1208.223716][T23883] __should_failslab+0x92/0xa0 [ 1208.228488][T23883] should_failslab+0x9/0x20 [ 1208.233013][T23883] kmem_cache_alloc+0x56/0x2d0 [ 1208.237900][T23883] copy_sighand+0x52/0x1a0 [ 1208.242398][T23883] copy_process+0xfb4/0x20a0 [ 1208.247026][T23883] kernel_clone+0x169/0x560 [ 1208.251572][T23883] ? proc_fail_nth_read+0x140/0x140 [ 1208.256804][T23883] ? vfs_write+0x655/0x790 [ 1208.261298][T23883] __x64_sys_clone+0xe8/0x120 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x5, 0x1, 0x4965}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) (async) ioctl$VT_RELDISP(r2, 0x5605) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0x0, 0x4}, 'port0\x00', 0x84, 0x6393f8ab92763a06, 0x80, 0x1, 0x4, 0x10001, 0x52f0, 0x0, 0x2, 0x8}) (rerun: 32) 16:31:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000041) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x4141) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x4141) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) timerfd_settime(r1, 0x3, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x40) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x200, 0xffff, 0x83}) 16:31:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="6ff952fd4380025359308627315c8a41cc348b242637eae5c947b3eb8d1cd62c20a81c61bc268f3c606a8a7ebf6d21c301d8e42af7c184dfd4ac2f0c7da4bb3d1e9bcb71c18ef64fb1aac065a935b5db48e31eaab007afa332366eb2d9711ba7be3955") (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="6ff952fd4380025359308627315c8a41cc348b242637eae5c947b3eb8d1cd62c20a81c61bc268f3c606a8a7ebf6d21c301d8e42af7c184dfd4ac2f0c7da4bb3d1e9bcb71c18ef64fb1aac065a935b5db48e31eaab007afa332366eb2d9711ba7be3955") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) [ 1208.265996][T23883] do_syscall_64+0x59/0x120 [ 1208.270541][T23883] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1208.276515][T23883] RIP: 0033:0x7f960fea4da9 [ 1208.281021][T23883] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1208.300650][T23883] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1208.309079][T23883] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x9778565d3dfe106c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000041) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0) 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) timerfd_settime(r1, 0x3, &(0x7f00000001c0), &(0x7f0000000200)) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x40) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x200, 0xffff, 0x83}) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x9778565d3dfe106c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, {}, 0x4}) [ 1208.317061][T23883] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1208.325071][T23883] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1208.333050][T23883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1208.341029][T23883] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1208.349079][T23883] 16:31:52 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x9778565d3dfe106c) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x9778565d3dfe106c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) 16:31:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000041) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000041) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0) (async) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x800, 0x8, 0x10001}) 16:31:52 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x800, 0x8, 0x10001}) 16:31:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, {}, 0x4}) 16:31:52 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) timerfd_settime(r1, 0x3, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x40) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x200, 0xffff, 0x83}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) (async) timerfd_settime(r1, 0x3, &(0x7f00000001c0), &(0x7f0000000200)) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x40) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x200, 0xffff, 0x83}) (async) 16:31:52 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 15) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x800, 0x8, 0x10001}) [ 1208.474019][T23966] FAULT_INJECTION: forcing a failure. [ 1208.474019][T23966] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.486726][T23966] CPU: 0 PID: 23966 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1208.496836][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1208.506894][T23966] Call Trace: [ 1208.510178][T23966] [ 1208.513107][T23966] dump_stack_lvl+0xda/0x130 [ 1208.517797][T23966] dump_stack+0x15/0x20 [ 1208.521979][T23966] should_fail_ex+0x21f/0x230 [ 1208.526731][T23966] ? copy_signal+0x54/0x360 [ 1208.531240][T23966] __should_failslab+0x92/0xa0 [ 1208.536012][T23966] should_failslab+0x9/0x20 [ 1208.540535][T23966] kmem_cache_alloc+0x56/0x2d0 [ 1208.545358][T23966] copy_signal+0x54/0x360 [ 1208.549717][T23966] copy_process+0xfdb/0x20a0 [ 1208.554338][T23966] kernel_clone+0x169/0x560 [ 1208.558884][T23966] ? proc_fail_nth_read+0x140/0x140 [ 1208.564082][T23966] ? vfs_write+0x655/0x790 [ 1208.568513][T23966] __x64_sys_clone+0xe8/0x120 [ 1208.573189][T23966] do_syscall_64+0x59/0x120 [ 1208.577761][T23966] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1208.584210][T23966] RIP: 0033:0x7f960fea4da9 [ 1208.588621][T23966] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1208.608302][T23966] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1208.616708][T23966] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 16:31:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, {}, 0x4}) 16:31:53 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x349002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44841}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r5, 0x2dcba3c6f9962537}, 0x14}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r9, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r9, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x174, r9, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_SDP={0x158, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0xa, 0x1, 'wpan3\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '::'}, {0xa, 0x1, '&^-\')$'}, {0x8, 0x1, ')-/#'}, {0x5, 0x1, '^'}, {0x4}, {0x9, 0x1, ':#$.\x14'}]}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\'#/*%+'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x44, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, ')*&\\&'}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000000200)={0x1038, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1038}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r13 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r13, 0x110, 0x5, 0x0, 0x0) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001400), r7) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x94, r14, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x4841}, 0x10040004) 16:31:53 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 16) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x840) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x5460, 0x0) [ 1208.624672][T23966] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1208.632671][T23966] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1208.640699][T23966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1208.648744][T23966] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1208.656712][T23966] 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xf68bfb70cecc0709) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x9, 0x1, 0x3, 0x4, 0x7, "b885a0b8824a9d23eb3142a8882c18bf46ef50", 0x2, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x8, 0x800, 0x8}) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4048910, r2, 0x80000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x1f, 0x2}, 0x1, 0x3418, 0x7, {0x1, 0x7a}, 0x7, 0x1}) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x40, 0x8}, 'port0\x00', 0xa, 0x10008, 0xff, 0xfffffffa, 0x4, 0x4, 0x3, 0x0, 0x2, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) syz_io_uring_setup(0x119f, &(0x7f0000000000)={0x0, 0xd31c, 0x200, 0x3, 0xe0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x6b59, &(0x7f0000000100)={0x0, 0xc4b3, 0x40, 0x0, 0x14e}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x46, 0x2000, @fd_index=0x3f, 0x7, &(0x7f0000000200)="c312a93c169c1a6d54ac535151d0f0722c2eddcbdbcf238dd3a1047ce70a8d00f8", 0x21, 0x9, 0x3}) 16:31:53 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x349002, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44841}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r5, 0x2dcba3c6f9962537}, 0x14}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r9, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) (rerun: 32) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r9, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) (async) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x174, r9, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_SDP={0x158, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0xa, 0x1, 'wpan3\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '::'}, {0xa, 0x1, '&^-\')$'}, {0x8, 0x1, ')-/#'}, {0x5, 0x1, '^'}, {0x4}, {0x9, 0x1, ':#$.\x14'}]}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\'#/*%+'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x44, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, ')*&\\&'}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000000200)={0x1038, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "fd2ec7452264af8d39a1643916946b717ff0fae6f3e6f0289a3c30debc7e7315017b28c6c44ccd790836daf054897034445b3bae542433823d447e6ce226d100f930828b444dc71570819372acaa53728945910761ad6038f27eeecd23b43a32862e1cde3db455818ff657cfcd4a01087bc283a6931d9f39e9874a346611064098314177f33714e15b44c5d8d90d343141e42b5dc945a78ab23db0a54960bf4b675671c3807e8bb9a85acf901a89b3c8523513ea2710d0ba0779030629b736c1210ec5702dcb9b5bc18a99470ca8dbb7ffd6e69f4af85f98b83ab34b25ef46cfe939e472889a246ccbc0867f4f572c09203c8004b9e2d09d89bf5b3c3e7d88e5424460c78aed2b3937706027f6bf8d8ccce37d324d67a7b2cbb8597efed2bdf758bca6a9abfaf7c21463c85a1b0dd348678fc586144603290f17308eeb2359dbdae74efa3bc98c983b815082b3a704c39e346781311f31593c3c75f4b441cc81ebf0249323f80c9e5e984a3ddcc6b8d185d746c9f20ba8effa710ad187aee5f7bfe4738dfc67f92221473f43451360ca1d66f7e6c410f3295d735ef10d70be4d3e5e771de5eb327719be5bfa012a558a716b3397b34e2f077587473fd321fa03344e56464aef40069a4ba7f20aa4e1e7fbc1bed8736399bf94b104d8b0a2483241a104e381b3336f63e9c458ea4ca6ce2280e464e46097952f83a84204df686dcc06e4664a4e612917c5f0bd7c41e344bfa79419af0693179c7e8d7a920825e9068f15c8511b7bfd4a619576af5cbda5d4e95a761e466d299cee91ec0f70ab495002608531cffe877813b56ef1aeefbce440de6e104df9fdea754c0644861502f2657989e5e1ad6bfba1758b8820b24c71e6d6187a1321a6da8f7706bc4fdcba4dae9d0a16bf84b026d4615f5bf7e22952fb93c8b22fe937669fb4216a171459faa0f13c338c2663abf0e60b9c61e34792cf65d8ca452425f6088b7fae3b5ddbb98e49714b09d0bffecd561589d52975c5b8f4e963e9282a8de47f0e0410e57a193d39b10f8844f5045989dde6e5d389176dffcd28293ee6ad148f0db8a9970d25934465e2701940f0ff14c3ccb8a8baa2e0f10c771b0968a21acc1a75b20204538517c1e54a6254a236c69a226ebf25bfec2f60c1b1b43438feadbb65f52ca6dfb95ce21043b239e9226ee0443b79cc85d0071967016d8747d34ff4eb7a9332014408685c3b87316d4a9d42c5d113e2e56f98c7f18c947923551f745e46170b081790811271d5350aa3e992138f98434a1235b2511ae994c857624d83b4d2bd11a1f5ce913ec725b8b62267c96fdbb28e6121225b65e5639f21e59b4d69e2ce37b76288d1d6e483bd41456846670de3b3ff573c7df4f9ca30099fdec36fcce9593845f1505d0b4972cd28c52164da02e01024fec203b2a269624a974ea43212e88e8ae4b95ba157a4080e90380d340979592bf8b411788fc7373ee8e4c6bbdd09f8263bfbb821a3b44a0dd6be579afec6115d8b257f0af606a70e763c6aa001c6c3d0b114f520181efc5697070bc44f27c31d4042a8d8e2bc916572c0aca845d369375168c92b844d3791cb36cebf53d9955eb76ff05323b0fbc42f4aebba1972fb38e9e36c8adfdbb8cbced11bebecf4628eaec8809a72249b90f802bfd8e845aa9866824fa261a77dc554fb7371b7fdef10051b8b3bb29a04bc66eedf71cd1808eb070409d0e00415ad6ebbffb554b50ecfdc9cf27dbf12354701b822215a9250096efb02a51f9e9168fad5a6981fe5ec01f7203a9472e926ee92dc35bed5a2d24c588ae8665e934f6ee7f832ecc5e14d67542add8197603087bccc95e9ed97c2cb770184d1765d1d4dc7be0e3b8095fee28a2523e2af88335812e7a4d1b33bffc36d1469740f4f8f85f45b10f4b86ec591f9da52dbcd2cad090f419f19e9e26c28ffb15ce8c8e2d154312b69674a26c476af6d7231cd9f1951077d38d312d8f1574402d144f55a7695e69d0a107a06a15bf99b97a0c2dd887331c4fec2caa551459ff27bb98494927cd4347c8b5eb94dc30068efd7e935f672b1cf8fa572fc05586c40a3bda9fc3747823801c1563db0d0dc949882f436238a0bb4d30abd6c4590e24e72288762fcc75b9151656c6dc7035a88e4966d7701dfecafa863aac0dabb9236e85f4d290c8db802b8e84d37c4f5a8bd704b067f78eabb50da00247c44d6392b0e603ed8a599cd24d9789ceceffe486bfb4e0180fcfb10368bf894b9daef33e7316d547cb1f97a77c2a6b2c45ffe8570c60cdd719a27d4998e22dc46f8aa4a557ba980d63a3d421c76a892420e65dd1129ecb00020b939f7e64670434c0071678e16e518adf0105e17369923367c7cc30dc74a9d68ecd2513e0bd63dd75270eebbb0bebe34207b3d884dea8ec2918847cb5e7616fa053d80dcc25ec8f19f2cc993742521c7c1a8808ee37e085abdc75c93c66da4c166916df21b3351759ab3491e775ead01f25b269fbfff20faf45862e9e44c23f2f5ca1a6a3aab16052d86aa2a453deb3d56da5f2060619ad1e0d71e729af951e6727c977385005523cbf9b28e514f1c2ce7a6bb052fb5324b21722ca8cd727420a751f046340aedf65dfa4b111aed93e9f7d1b7cfaadd81bad1106d7ca4567b6b44d5b03597498410b7886ed7249f2de0811f068653042aad4dd427d61309b15df70ad706633f550d856761e2a049ce4ee877473267db6f26d725954a3e9e1970bfd7b42fcb7299e7a490e6381c16da225d48e245f77a9ccfd02dc2ca89dc6bc843611a56712f57b7c143e4309340476b2b31a6e727e8233ea00c9efb60143f72ce3fe153a0bb6f5f9fc098a18921e33aa8049c7e6c22d5ad6e354be9e155e72132b659e96a65506699e6d41c6e79df9fc62947a5c8f3f9da05957582137b335dee256a04935c67f23d217adc1b97319968aa7d58cac2b12500609235828773a6389b79c5c39bfbc32d70e55430306f3b7b39a355b2a1d1f151e5dee17e92ef72d5a67a1b7a6bb73c4d08f8cdc9cd630823468d9883cf0d7ab975f8b9dea418179bd2fa07aacf4900e679e38815ecaf4a2b1ce350a3502e5456f162b0e42046ca5e1f023fc721b65f59bf57029ebb5012ea36995be28fd1976c1557f2168eb002f6f7d605223d72461a26a96c4b5f17a90a60d7c2e8b43ebc94d36cd1e1946101a42317ed586b3523b0089bb4e079c12f832c5718edc4f2ecdc62cd60ec278ad00cf943a855aaf9281d5df1fba89f89079c703ea7d3f827e2eee1b132928473e5dc4706090491e59806cf28eaa73442f5066eb34d829bb625b99ab54149c059982ad69d988c1b374bd9497e09932f8865025f3b39c5e495ef1c905ac9a15323650695a3dd01c8a7ff77fc10241f69cf454d34c6da7c143c98146c7a93c71bb4d584bbb91399d9f2d9736b034909fad1ffbd56d729bcdd1a6a731222b1fb890c579c1b62185b91478c4ea1027d9e77093e9c16efad1c49db886fc73bfb591a2694e89a6c31a467a08920dbec7c92436e3221fd7d29094cebc01b41fdbc76fcbd0fb3e2663b023dc1c324f6b50c1bafe24979ec567fc9c7910d494552da53fae98007385c228a87ab967dc39be976c749e718ef3f3a22f17aca56df287bd81468cd69b6c6b0d62aafe925d2124572daef9f16832e2df228d086a5a4ca89fee6a71034e8c25409f2fb55e5523b3f622dfb019dc7550abb62c9a68124335f5f7a51bb1b5c48a59e164a2fd5f0acc84281f3e98e4e3b6cd1faa3ad94ed7e24a052c7bd6ab7395936e4067ab98e48962bf8b41d80021483d64afff23905a086d17da1099a371c9bc4b8a048db586752e16ac588913f7114b92d8298712d82800f8deadfe416316918d4862990689404c9bc234ada7633ef00b2e159ff1995cb21ab5b0a041c0428f9524dd13afeca12a92646e92b97330a8c319118b586a6992d617941687c2b1ea17f26eacca147f195a30cd4b7a0933fb15b1e18abd4b6b17827c940dfeff46178953894f0ff4c73dbf0be722d4179af6415e744bc92a3f3dad4db94c22e718799284b808e4058ab02c0152b3d8b00b018fbded8b8b2b22866ecfd08fbe06faab5b48be6047320dcffe982ed2b5a031c9ec6f9381187223f4cb666d031955840fdb692a97cbdd72558e247cd2c1e05bcf5ed09c0146ecf92578490dff31e9ba09f0e95d83bb80f34b659e3a469d670e2805aa7bdd8352208a604cfcc1e341c72dd612cf9948251a1eadfd33714abf0ae7d556c9a950afb5c1f7d92a8059489ccc8f28b55c502629fc6f2aa1960dc45c10513bdc1e45cafc59cb67ee2058db08e9bd3bde0b9b7044411379f1558572948677c0796b2079ca10bbb37f56f23d138a651e53ff4985148f5e65aeb3d5d18feae635653d6edbcc26f99ff7255947d7bec26d80b3a729fbea3bd1d558019ad3a4f2a3595c5e11baca5ec401c6399ad8a37c4915b9b549c29efafd416f73a1b929b2f7ee1c62ceef8f067b6eca4f20bda464eaf1f0b24cc951a3c567c5460c24a68cd3c384d4647d60b00f37bb5ef720eaef043ee1250ad32bf52852da64829560368b417fd6f186faf0715fe00b17b0ef8ca897cad85fd65899aee5e1a5aa1ed6c800ec1e712a6f2f4b19d3eef4d04279283cf2628dda12654d39a13aa19186016c7e5c55a6689331c67fc45507d780a79a65c991a4baf902f623e0f2176a269bc1d6b2f0d3c3813d2fb16842c89c0421deda697fe460c665d2e06126ba213d2ea87abe458896372f450f15f0742851251fb349051a00065e8b6822b09899e09ac7e3e8e91e10ccc201dff86d1ac374eb9761501360dd3b04fb2c0f8bdf7d85fe656dd3c3051051551b9f0b405ec9c9327d4c36fe1139fc9e8afdae32d1da170ef2e926cb1af17a669f6d119aac5e75b73b44ecb79a6f24a96212b3107b69f8b098dc8fca1c578131ebd5a810e16f3de0a8f4fb98a1d4b175831f5415903cd1ad4f2039b04d0c54a1cf06b1ff3739a9ea3ff2a8a7fbf38ffd43c7fca5cf409fa159b44e395f76ff8aae5b28e3246bab76eaca0207d6a9a408dff0b651bc05ff864206335cf3c545695ff2e5d443ee980cbe81700b15fde22f3a5332a2f1d373e978a873ba2f9a22be3f0d70ba6f56fdbc476dd71e7bb2829659f69513b4d038a250fbd19ec00659d1b679887b9ba1839dc695ff84696261d03c03257defbf59ecbc10cc709d3aedf6b87a82f1b8f2f7fb1cc95d1d4819afbfcaba42e111eeb4af67d27995d9dd50f62e8213077aa998e96c839ccdf516ebb64874b523258ff3686a84a14ad94529736d73e8fcab440d7509be964503eee68c3f3d352bb2aa88f0d897016e578163c7f0e1d993464de146884110fbfd066df87726cbf7fb6be036ce03777d1c69543ffc8b835b9cf03b8ea588a573443292f4a301359d75b9cbe2023c49d9095d94948a3fe0c1797cf58c3ee9d10bacda1def0845d49b7e52b5601d9aafe135751d2d490e422783444c9c266b0af194420f7ff7e038125bf5586a3a93b38d771ef459161e4baceb4587c3182a9d7649b9195ff5976bafe5b23d45648996c347eaaf8181a455fe19f3d128b71580a0e153a0c0e719913d22e621a075cb0ed5b38f38e4bed0aac7096303c462b0e78395d02bec5e5132bb916b3450dd556cbaeeb1d8fd8630d1dfe69a7b9ad9baa81218044a24af6cffc86a314272d2dd719b556533f22b4a7d93f58bdd063d1f851298542ffeb5af24bb6d5d4cd43faf0c3bed777cfd6588b1685671131b8ba"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1038}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r13 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r13, 0x110, 0x5, 0x0, 0x0) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001400), r7) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x94, r14, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x4841}, 0x10040004) 16:31:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x840) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x5460, 0x0) 16:31:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = syz_clone(0x16000, &(0x7f0000000000)="e5bf7ff505272a4781bdcc5e99113889f2d687782eb4e44772ffa71ca40229a9800cd4aa1b419c3b5a39a58501c4831fc20f61e9be2e33d44033b3f32bb89dc0c22fb9e4bd04c305258e65d12366f0f1a211daa2cd65a70d700dba29e022c757feb316152fbaf2c3f44dd05983ee60b6f20218b91f76fd4d397c9935e03acd6b810404675e368cf0f60d55d6eea2757d48793bb17e86cef41399ec185a5719df2478c76f0b9ea8d1c3e7e3a14445", 0xae, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000400)="77ff5a80a12ed32f4854511c46cebefc32e7721e410f6aeb17e8ec9a88b315b07791f147b0cd40110b214263c7944307ee88c8f4d5131392aa5d3d8f33973fd93391b3643e967c5ddd792972528fb7df634401d93e65c435c1adc36f691e8d71f252d49af973ced648cc90bf1667cdb184c35080ffdf6dd0c9caf31acf4f9e7785c7c46deb93ff9cc072ee247c77f6df177eabcd485a8405a9060174f46760ea4d5df6dcc9acec2a242a4d65e86ae3d945bab24b76d1405b3ceae89a18d37d44e2f3dc2cfc66fca4a127e0b987049602d6834def418e2e7b8a67dd43694f2437b08db73777250da5954af4225dfb5a53da86a76f20ff157e88a730f0b6a504afb5ac90256dbc08f563bdd97c641e75140772f884808631ce35786058922e7e4f4bcc4271ea9e989fc2002d0345e36c488ea7f7f421c5d7ab8601b3db142c11d979c767994104fc985036fba290f9b6ad31842bcf120a41a7165bc8c137f45ed8b210714614953208f495e3fc47b38679afa1beb97156d60f5326bd13bd7470e99ca47e7d55088e1535d2b5833bdfe4e15fa6ae73a3566cf27f8e6de125167e480ba67f8d7448a644bc379067aa691545aacc53fb03f4f36de7f188e77621f4d5afcd32e0005b18b35be4068c9c427cfe51b79df86d99a157dd47ade27d0a235812376d0c1e75636faf3e5a09fb0710e7676a72743b3a2a3234fa1b18884eecfc64b52974d4c70c858b42d111137dfc0263ccc1bfdf607ffc4333175c6ac5d46716202b18fb7dd36b4bceae40935f9900534f34a1a8768f8eac18d61ba5ba60b4c1ca58767aefbaeb4572190e332d0b355140367337e9d5c08033d83fe89ca32dad8b05cdfee63a89fc68780f90f6f190bf242fb3567e8149f0e02f6baf5d64fd0ba1e86e87b167e230968a85a8017b5f7164985391689b39727361e91b7bb91773120aed091fb44a6ca900bf70ddf6e28c0d7fbef3397d67f17fa6f98538db08987f674c6fd2ca3c3978b09e4f44d37898004e32c06d2be27d4efed5db3bb902c61624898c6d3562c9cc6b295973ea3ad7bd05b666a27a0c76b1b24e705bf15d455e463b2028644f5d815f04826b2732b716009f461423496f73ddeae491c2dff640f8be26dc04212423ec9e6100c7abeb64106ca62af95ed329121790b7974a8d0a86acc6b51c24d9a13a3416000d3b3b683979758f6e42927662d0b337ddc1e1e265a32f40df387d5ab03d5d5db1aba0a610865330b46f025dc10a3e0f453c5d02961a52ee1e444a1ee4744f1ba5f3a5029509335f5dede4e3729eb1b9daf426d9feda578e01eb706d15f2e3d229eb9c9ee11df74bc7caa6356a38b4ceb5a8f2fe539454264171fcd47beead0bb28aa95638d8a246e11e63f78b6d13c02d6f1c177da33b4e8260b433d239b5c01c19a87589c7e0f860b5f037ae9040d7bcf5e1564b7afe0ce7364306185db885a19b2a98594a2f14964c40e569d6267741d7ffeaf700fa5fc87e2d76007a2c608f139693396657c734e168d1056aa88459d9e359712ee20a99a89c2d320d1fa09efeb4007fc2e6f1e8501ef5b9c38203fd72f064dd0d418215f9856387754eaf3a418ea3a14503af3c236b94b71a0232c5c8cccbbe0c04279c003eb19e546ad80f998c92a33e90e17dca5c21398a2fafd067bdfd7910f9ed4aa360fef2a5ccbdee2c355d4c36c32c4e811f48adfd8e8700d677a26be00432d5c3331e45fb2ea55f74cd22b1a913d67032522c402a4c1109bd2c91c5c08a092811b5ed7d336e8f1f9fd4b56a0f0bd687f4d3161ceeb56ed78f2bb36293e79443cc5ef1f71f6e36b9480360143eb47b74d8b6eaff9e95938d3a1b91e4c91cfa50d0c4f184b91af9efdad74d1cb76e254245cc2b4cdcb5e662562aba1dc5d48d2afeaed3fb5fde92bf3197e80fd7d15c160f5a4f7ca26910fee45dfb3ca0eb4b4045d27efa3c2fa936b489f104242264cb856d634e6b07118e30828762c72208d160475832181bc9deb12ddc386536fd866f2950c92e0c01229da4123e69f4ad06576c9755508a3deb0bcff677efa06830dd19c2cfa5dda97fd00e9a007c76a365cbdbcf860b5b4032a07d8728bf10b8a1d721f529830a74e2bd76643c0498311aba5036a18f46f205aec0c29bf91fe8f70df5278b2fed49844678d28fc29d0dc2f862e908ffc0de59742e0dd059dfae5fe901c929abee23dfac4657f56964f5ed71ad31d8adaa481e3791536a870ffd19b3c8505f987948690cf155f15806f086f7789e65019cd2ff0bcbb382fdbe34421b355c643b369a88a088e3630de4b892591573ad35280bac287cb6456cb48197812b3b5520b37080369e80f2ff83eae2f9fb6edd7acc972524c4bbedba8f56ea3a324dc2db9c75a3c10a9e0a1a6fcfa6239d5b5ee8cfab00d79d23d5255addfe254c255ad75387b0db70ad04b871b561b641a0381d5517eb0d74afe0042cb2c6d16092e9883e2108fe6c3b942ce6acb9e088bf49935b190d6e5019a3cde616fb77dc8ac0d03f1659c2ac39d295e66a8b570be7cd57eddc75b9a3c50953eeeb8fe14110e79787c1b5d11699edd48bb472930846c458514d98accef801083fd528409dee5c25beb3054bc85613f591380fcea14584ce2798e73ec15c64fd2e8ee55a0d958c1a7074622bbe2e4769910100a10c2c7bd272f0e28b019d21178958904843151142c9b645c7ba6180626705525c73aff56f1aa34b5884bb386024c630ae25474a93612fed4fdfe180c147b954980e2daca06d5ba63baa1a75db7785df007219fec8f8ce8f5dd3d9c3c0709b22d0a446618a818a3c39cc75d2271c3d3acf198f0c3f2fe3476d94d677020dfd130d2992aa05521cd335dba5a0ca2a6d1be23151ee56957eb7b1818e83977aec6d670e31da4b0e2a2229b9232972fd1747a41adb8daa016cac8354a4417ff653b66ab0c71c43d7b96132593f58fd8d2d8c938831c9cfcc340b0e110bfd9a39598f78773e7da317c361c50e644f33dd884504f62c747117abde6011511e010af086484316954df9cae890388f882618f0eb026b36d769f6529d29e3f606860d77c93e7a1cc3bb8be8edd61b24e98f5f80b81aacd2476eb884af3dad75133e51aabda84d8a49e665603ab90261de3ef68ad489f57269e23af6fc2f1e0d275a9409def5731f4f26d3a4f60c1418457842081d4d0cf96714fb02c0dbbabe745612fe36363df60ad9d754080c2982910658f738465aec6e477af5deddd3e5c00f9ad090b83e903abe01955654d556b3de747812b98d69092ed3be0693d7bddb9a285fcd884553f9e2c2ed79213334a96e32bc2517fd9a4f5b64e0b8ce6ded6c3faa470d1552d2c525e9daa25b28b4d8e3b035d16b02380fbdb970860effe0fa369d69e051ecc384614d8c6482251aa40dec99d2c7592bad1c0eae9bfe29266414da8a83f348308e29b78eff6c22e4fe455b35b7662cd741816e9034b52d2f1a7ac86e4f5a5f31a16e069fc27199117242cd3704ca3edaa4b95bc78cf9e74acb7040f62ce1b57045dcd31d82fdcc4024b1b22552220b856219dc196cb06d947bac7d946490fd016881b7465a4496f31f981c42ad5b7e888a6b08c4a3e7eda944d9c0ac8f4674068ddba3213188f849c137947ad103d23d58328c90f3292e9817247a9749b600eef48ab80ff8d308a9e4f8d8622ee618529328c60a5b0ef8aa36b66c46ca4ea9a8a0a177371593730eb796adc5293f6641285aa3a08b24eaac4b53d01e9de09ddd831de7dc9a3f312853f74de40dfa2c7a6e86cefa10b92667999b61a304828e756e85d670e1f43e8224f241661e0c2412ff5b5dc39d10771f7e379febae2ea5aa7a5845d056421a7d62f7030d734586d4a3b81ae500d3c2b7137c32538048e1d3279d834358c4886f70e4602bf897178dda3b2e704765f3d2c631287c63cd3ece40ed01c9ef87d55624da2d36af1162446f2106678308b9a9327043d9eafae6c76fefcc427ea549cbe83a64953585b9dee9c8d29f504f961fa35641736f452322632cd7829c074274105a2c97e455af6703ef8d78ebb2927cfff6f70f986cdd222b6a7ccf16849089b08fada48c243b18f01a975615e979341d52673e7e68cfa1ff29f0f9f5617b9e8ac0cbe2d72a4aa60b57dced6f71fd0dc37b571b6d534e255c3074481b43edcfd5cc5786ba011dddd1d3658f3e4fe1aac2ce394f7b70deea37e835001ec6c450022f6d7057b166b46734c9ccde562314b3ff60e45f60090b36f0457f6725ee67c50015051ad9738ef0354c1e4282ebed834b6ee41e41c7a6b692ca2ddc6949f2182267dfe290a47f50af7e357f1db7efd1ed497c900e4303b376c1c8d81d1a2bebffa848a429d48a80cab7583b65f0153c28309076ebf5febabce5549c1d8fbbd1567b93967bca863b404543330a9cbd208eef9027e15718e9bb35e8bc81a5b1151b39a46a16f4678d342e1fb6032ed562713b3dea002bc8f3933cc8df0e333b6bb2cc384150a528d38bbae32323f992c204581498d8193e31c367d5c1771ae2069bde860285a6e14d233bcf5614ed2485411221d564aabd7f480b7b23b25d99417093638ee2b20744db89c124097210a3d24d0a51f48eead24e10630b107e770b01e46edf8bda779204eb55388e8d870226a41a87a94fe213c6a52e1380040fdfc5b28cf04353c7021355673e5388c82ab70e150e873a1fd89680d5789a9a19e7d5fbbdc217e3e6bcce5cc19c9bd52da81e52289185fcfb28040d0f1dc4d460f99c5429288e78d03ae92c2cb990ef56edf9d2df60d4490a743c0a35cb0961c1984ec49ea28a26c639ef23b9f0762bd72258f5239e50de63575976adc500cf170fc60671c2a3de1490c5328d17752ed792ad263c7d65720954ab0e56eb65970aedee9b3c6a483f1d2dbe3c528753f31ad8fdaa77f2dfa8d14bc9f25154e79d9eb332e69e46107c9ad8169f21649de67beba8ae11cb5e83b13034d57e229fa7fdd16fb525359b9b9941af3c80d5081e42f2631d52c22db137a8064d0798265d63535aac5e1ba58720b67955e47df42bc7dd18142efdcf2d8bb03813742d02a48bf7972865c6753ca153a2625e2b9bae4e1948b95a1dcc2219d7014dc4e78a039a2ebd236c010414ec317523509108b158ac6881726af0352e62051709960282077854d8b56f055499baf3728a5282f832aee1ca54ade58dda3dfbb8fcd60ba117d7caa1994c73db5f2e0fb2b212b5150b4040577d5db8a299d07619ceaaa631ff2d0d40bcb747ebae4999ee41608723b898dd7fc31ec16029d963a6f8d32d04093512a1158de74635057ae9a95582bc000fef70d09f71d9702d15de7e2f98d8522eb8e0ef627186573cea18f8a11c326a0229834efd4ed9cd5da884fdf7f0ea24ded1e91fd7680efe5ae4d6a41b864ae3a4667b81c3c6620669c1f47896db8d6c37707ba311b0d6726739f9387da012475e44a2795a545f0ef064066d6faa12ba50feb698e6f744b51ec2578652741205c0d2d7ab1650e728b2d7a336d19617901d5ef572b6beb73742b76c555d1ecbadbf8669e73ca9242d303ac8ea24ec9cdf07a99e8d6b90cb4aa899bc5597ac38493629f2321f496f04633c1fcf77e7160ea894697f0bd588dd83fda3d35e9afd1ef8ffeca191005260eb54ceba4ac249bb065c7b214d45889a18fc1c976ffe0526612b3540666b4b9e8f7c27aea9249accc7166032747e86693660a2f6f45d6f6bff55f45e55d57ada024a41035e39271f589e66ee963d6b078b99fa0c51eb") r2 = getpid() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={r3, r0, 0x3f}) [ 1208.708092][T23977] FAULT_INJECTION: forcing a failure. [ 1208.708092][T23977] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.720777][T23977] CPU: 1 PID: 23977 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1208.730847][T23977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1208.740909][T23977] Call Trace: [ 1208.744191][T23977] [ 1208.747120][T23977] dump_stack_lvl+0xda/0x130 [ 1208.751746][T23977] dump_stack+0x15/0x20 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xf68bfb70cecc0709) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x9, 0x1, 0x3, 0x4, 0x7, "b885a0b8824a9d23eb3142a8882c18bf46ef50", 0x2, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x8, 0x800, 0x8}) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4048910, r2, 0x80000000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x1f, 0x2}, 0x1, 0x3418, 0x7, {0x1, 0x7a}, 0x7, 0x1}) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x40, 0x8}, 'port0\x00', 0xa, 0x10008, 0xff, 0xfffffffa, 0x4, 0x4, 0x3, 0x0, 0x2, 0x9}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async, rerun: 32) syz_io_uring_setup(0x119f, &(0x7f0000000000)={0x0, 0xd31c, 0x200, 0x3, 0xe0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) (async, rerun: 32) syz_io_uring_setup(0x6b59, &(0x7f0000000100)={0x0, 0xc4b3, 0x40, 0x0, 0x14e}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x46, 0x2000, @fd_index=0x3f, 0x7, &(0x7f0000000200)="c312a93c169c1a6d54ac535151d0f0722c2eddcbdbcf238dd3a1047ce70a8d00f8", 0x21, 0x9, 0x3}) [ 1208.756039][T23977] should_fail_ex+0x21f/0x230 [ 1208.760788][T23977] ? copy_mm+0xe1/0x1060 [ 1208.765037][T23977] __should_failslab+0x92/0xa0 [ 1208.769811][T23977] should_failslab+0x9/0x20 [ 1208.774329][T23977] kmem_cache_alloc+0x56/0x2d0 [ 1208.779160][T23977] copy_mm+0xe1/0x1060 [ 1208.783314][T23977] ? copy_signal+0x54/0x360 [ 1208.787825][T23977] ? hrtimer_init+0x104/0x1f0 [ 1208.792591][T23977] ? __init_rwsem+0x5d/0x70 [ 1208.797108][T23977] ? copy_signal+0x338/0x360 [ 1208.801718][T23977] copy_process+0x1002/0x20a0 [ 1208.806411][T23977] kernel_clone+0x169/0x560 [ 1208.810985][T23977] ? proc_fail_nth_read+0x140/0x140 [ 1208.816366][T23977] ? vfs_write+0x655/0x790 [ 1208.820841][T23977] __x64_sys_clone+0xe8/0x120 [ 1208.825592][T23977] do_syscall_64+0x59/0x120 [ 1208.830168][T23977] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1208.836146][T23977] RIP: 0033:0x7f960fea4da9 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x40, 0x8}, 'port0\x00', 0xa, 0x10008, 0xff, 0xfffffffa, 0x4, 0x4, 0x3, 0x0, 0x2, 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) syz_io_uring_setup(0x119f, &(0x7f0000000000)={0x0, 0xd31c, 0x200, 0x3, 0xe0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x6b59, &(0x7f0000000100)={0x0, 0xc4b3, 0x40, 0x0, 0x14e}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x46, 0x2000, @fd_index=0x3f, 0x7, &(0x7f0000000200)="c312a93c169c1a6d54ac535151d0f0722c2eddcbdbcf238dd3a1047ce70a8d00f8", 0x21, 0x9, 0x3}) 16:31:53 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x5}, 0x0, 0x4, 0x6, {}, 0x20, 0x1f}) [ 1208.840580][T23977] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1208.860285][T23977] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1208.868776][T23977] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1208.876756][T23977] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1208.884736][T23977] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1208.892768][T23977] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1208.900744][T23977] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 16:31:53 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x5}, 0x0, 0x4, 0x6, {}, 0x20, 0x1f}) 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xf68bfb70cecc0709) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x9, 0x1, 0x3, 0x4, 0x7, "b885a0b8824a9d23eb3142a8882c18bf46ef50", 0x2, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x8, 0x800, 0x8}) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4048910, r2, 0x80000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x1f, 0x2}, 0x1, 0x3418, 0x7, {0x1, 0x7a}, 0x7, 0x1}) 16:31:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x840) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x5460, 0x0) 16:31:53 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = syz_clone(0x16000, &(0x7f0000000000)="e5bf7ff505272a4781bdcc5e99113889f2d687782eb4e44772ffa71ca40229a9800cd4aa1b419c3b5a39a58501c4831fc20f61e9be2e33d44033b3f32bb89dc0c22fb9e4bd04c305258e65d12366f0f1a211daa2cd65a70d700dba29e022c757feb316152fbaf2c3f44dd05983ee60b6f20218b91f76fd4d397c9935e03acd6b810404675e368cf0f60d55d6eea2757d48793bb17e86cef41399ec185a5719df2478c76f0b9ea8d1c3e7e3a14445", 0xae, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000400)="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") r2 = getpid() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={r3, r0, 0x3f}) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={r3, r0, 0x3f}) 16:31:53 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x349002, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44841}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r5, 0x2dcba3c6f9962537}, 0x14}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r9, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r9, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) (async) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x174, r9, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_SDP={0x158, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0xa, 0x1, 'wpan3\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '::'}, {0xa, 0x1, '&^-\')$'}, {0x8, 0x1, ')-/#'}, {0x5, 0x1, '^'}, {0x4}, {0x9, 0x1, ':#$.\x14'}]}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\'#/*%+'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x44, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, ')*&\\&'}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000000200)={0x1038, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "fd2ec7452264af8d39a1643916946b717ff0fae6f3e6f0289a3c30debc7e7315017b28c6c44ccd790836daf054897034445b3bae542433823d447e6ce226d100f930828b444dc71570819372acaa53728945910761ad6038f27eeecd23b43a32862e1cde3db455818ff657cfcd4a01087bc283a6931d9f39e9874a346611064098314177f33714e15b44c5d8d90d343141e42b5dc945a78ab23db0a54960bf4b675671c3807e8bb9a85acf901a89b3c8523513ea2710d0ba0779030629b736c1210ec5702dcb9b5bc18a99470ca8dbb7ffd6e69f4af85f98b83ab34b25ef46cfe939e472889a246ccbc0867f4f572c09203c8004b9e2d09d89bf5b3c3e7d88e5424460c78aed2b3937706027f6bf8d8ccce37d324d67a7b2cbb8597efed2bdf758bca6a9abfaf7c21463c85a1b0dd348678fc586144603290f17308eeb2359dbdae74efa3bc98c983b815082b3a704c39e346781311f31593c3c75f4b441cc81ebf0249323f80c9e5e984a3ddcc6b8d185d746c9f20ba8effa710ad187aee5f7bfe4738dfc67f92221473f43451360ca1d66f7e6c410f3295d735ef10d70be4d3e5e771de5eb327719be5bfa012a558a716b3397b34e2f077587473fd321fa03344e56464aef40069a4ba7f20aa4e1e7fbc1bed8736399bf94b104d8b0a2483241a104e381b3336f63e9c458ea4ca6ce2280e464e46097952f83a84204df686dcc06e4664a4e612917c5f0bd7c41e344bfa79419af0693179c7e8d7a920825e9068f15c8511b7bfd4a619576af5cbda5d4e95a761e466d299cee91ec0f70ab495002608531cffe877813b56ef1aeefbce440de6e104df9fdea754c0644861502f2657989e5e1ad6bfba1758b8820b24c71e6d6187a1321a6da8f7706bc4fdcba4dae9d0a16bf84b026d4615f5bf7e22952fb93c8b22fe937669fb4216a171459faa0f13c338c2663abf0e60b9c61e34792cf65d8ca452425f6088b7fae3b5ddbb98e49714b09d0bffecd561589d52975c5b8f4e963e9282a8de47f0e0410e57a193d39b10f8844f5045989dde6e5d389176dffcd28293ee6ad148f0db8a9970d25934465e2701940f0ff14c3ccb8a8baa2e0f10c771b0968a21acc1a75b20204538517c1e54a6254a236c69a226ebf25bfec2f60c1b1b43438feadbb65f52ca6dfb95ce21043b239e9226ee0443b79cc85d0071967016d8747d34ff4eb7a9332014408685c3b87316d4a9d42c5d113e2e56f98c7f18c947923551f745e46170b081790811271d5350aa3e992138f98434a1235b2511ae994c857624d83b4d2bd11a1f5ce913ec725b8b62267c96fdbb28e6121225b65e5639f21e59b4d69e2ce37b76288d1d6e483bd41456846670de3b3ff573c7df4f9ca30099fdec36fcce9593845f1505d0b4972cd28c52164da02e01024fec203b2a269624a974ea43212e88e8ae4b95ba157a4080e90380d340979592bf8b411788fc7373ee8e4c6bbdd09f8263bfbb821a3b44a0dd6be579afec6115d8b257f0af606a70e763c6aa001c6c3d0b114f520181efc5697070bc44f27c31d4042a8d8e2bc916572c0aca845d369375168c92b844d3791cb36cebf53d9955eb76ff05323b0fbc42f4aebba1972fb38e9e36c8adfdbb8cbced11bebecf4628eaec8809a72249b90f802bfd8e845aa9866824fa261a77dc554fb7371b7fdef10051b8b3bb29a04bc66eedf71cd1808eb070409d0e00415ad6ebbffb554b50ecfdc9cf27dbf12354701b822215a9250096efb02a51f9e9168fad5a6981fe5ec01f7203a9472e926ee92dc35bed5a2d24c588ae8665e934f6ee7f832ecc5e14d67542add8197603087bccc95e9ed97c2cb770184d1765d1d4dc7be0e3b8095fee28a2523e2af88335812e7a4d1b33bffc36d1469740f4f8f85f45b10f4b86ec591f9da52dbcd2cad090f419f19e9e26c28ffb15ce8c8e2d154312b69674a26c476af6d7231cd9f1951077d38d312d8f1574402d144f55a7695e69d0a107a06a15bf99b97a0c2dd887331c4fec2caa551459ff27bb98494927cd4347c8b5eb94dc30068efd7e935f672b1cf8fa572fc05586c40a3bda9fc3747823801c1563db0d0dc949882f436238a0bb4d30abd6c4590e24e72288762fcc75b9151656c6dc7035a88e4966d7701dfecafa863aac0dabb9236e85f4d290c8db802b8e84d37c4f5a8bd704b067f78eabb50da00247c44d6392b0e603ed8a599cd24d9789ceceffe486bfb4e0180fcfb10368bf894b9daef33e7316d547cb1f97a77c2a6b2c45ffe8570c60cdd719a27d4998e22dc46f8aa4a557ba980d63a3d421c76a892420e65dd1129ecb00020b939f7e64670434c0071678e16e518adf0105e17369923367c7cc30dc74a9d68ecd2513e0bd63dd75270eebbb0bebe34207b3d884dea8ec2918847cb5e7616fa053d80dcc25ec8f19f2cc993742521c7c1a8808ee37e085abdc75c93c66da4c166916df21b3351759ab3491e775ead01f25b269fbfff20faf45862e9e44c23f2f5ca1a6a3aab16052d86aa2a453deb3d56da5f2060619ad1e0d71e729af951e6727c977385005523cbf9b28e514f1c2ce7a6bb052fb5324b21722ca8cd727420a751f046340aedf65dfa4b111aed93e9f7d1b7cfaadd81bad1106d7ca4567b6b44d5b03597498410b7886ed7249f2de0811f068653042aad4dd427d61309b15df70ad706633f550d856761e2a049ce4ee877473267db6f26d725954a3e9e1970bfd7b42fcb7299e7a490e6381c16da225d48e245f77a9ccfd02dc2ca89dc6bc843611a56712f57b7c143e4309340476b2b31a6e727e8233ea00c9efb60143f72ce3fe153a0bb6f5f9fc098a18921e33aa8049c7e6c22d5ad6e354be9e155e72132b659e96a65506699e6d41c6e79df9fc62947a5c8f3f9da05957582137b335dee256a04935c67f23d217adc1b97319968aa7d58cac2b12500609235828773a6389b79c5c39bfbc32d70e55430306f3b7b39a355b2a1d1f151e5dee17e92ef72d5a67a1b7a6bb73c4d08f8cdc9cd630823468d9883cf0d7ab975f8b9dea418179bd2fa07aacf4900e679e38815ecaf4a2b1ce350a3502e5456f162b0e42046ca5e1f023fc721b65f59bf57029ebb5012ea36995be28fd1976c1557f2168eb002f6f7d605223d72461a26a96c4b5f17a90a60d7c2e8b43ebc94d36cd1e1946101a42317ed586b3523b0089bb4e079c12f832c5718edc4f2ecdc62cd60ec278ad00cf943a855aaf9281d5df1fba89f89079c703ea7d3f827e2eee1b132928473e5dc4706090491e59806cf28eaa73442f5066eb34d829bb625b99ab54149c059982ad69d988c1b374bd9497e09932f8865025f3b39c5e495ef1c905ac9a15323650695a3dd01c8a7ff77fc10241f69cf454d34c6da7c143c98146c7a93c71bb4d584bbb91399d9f2d9736b034909fad1ffbd56d729bcdd1a6a731222b1fb890c579c1b62185b91478c4ea1027d9e77093e9c16efad1c49db886fc73bfb591a2694e89a6c31a467a08920dbec7c92436e3221fd7d29094cebc01b41fdbc76fcbd0fb3e2663b023dc1c324f6b50c1bafe24979ec567fc9c7910d494552da53fae98007385c228a87ab967dc39be976c749e718ef3f3a22f17aca56df287bd81468cd69b6c6b0d62aafe925d2124572daef9f16832e2df228d086a5a4ca89fee6a71034e8c25409f2fb55e5523b3f622dfb019dc7550abb62c9a68124335f5f7a51bb1b5c48a59e164a2fd5f0acc84281f3e98e4e3b6cd1faa3ad94ed7e24a052c7bd6ab7395936e4067ab98e48962bf8b41d80021483d64afff23905a086d17da1099a371c9bc4b8a048db586752e16ac588913f7114b92d8298712d82800f8deadfe416316918d4862990689404c9bc234ada7633ef00b2e159ff1995cb21ab5b0a041c0428f9524dd13afeca12a92646e92b97330a8c319118b586a6992d617941687c2b1ea17f26eacca147f195a30cd4b7a0933fb15b1e18abd4b6b17827c940dfeff46178953894f0ff4c73dbf0be722d4179af6415e744bc92a3f3dad4db94c22e718799284b808e4058ab02c0152b3d8b00b018fbded8b8b2b22866ecfd08fbe06faab5b48be6047320dcffe982ed2b5a031c9ec6f9381187223f4cb666d031955840fdb692a97cbdd72558e247cd2c1e05bcf5ed09c0146ecf92578490dff31e9ba09f0e95d83bb80f34b659e3a469d670e2805aa7bdd8352208a604cfcc1e341c72dd612cf9948251a1eadfd33714abf0ae7d556c9a950afb5c1f7d92a8059489ccc8f28b55c502629fc6f2aa1960dc45c10513bdc1e45cafc59cb67ee2058db08e9bd3bde0b9b7044411379f1558572948677c0796b2079ca10bbb37f56f23d138a651e53ff4985148f5e65aeb3d5d18feae635653d6edbcc26f99ff7255947d7bec26d80b3a729fbea3bd1d558019ad3a4f2a3595c5e11baca5ec401c6399ad8a37c4915b9b549c29efafd416f73a1b929b2f7ee1c62ceef8f067b6eca4f20bda464eaf1f0b24cc951a3c567c5460c24a68cd3c384d4647d60b00f37bb5ef720eaef043ee1250ad32bf52852da64829560368b417fd6f186faf0715fe00b17b0ef8ca897cad85fd65899aee5e1a5aa1ed6c800ec1e712a6f2f4b19d3eef4d04279283cf2628dda12654d39a13aa19186016c7e5c55a6689331c67fc45507d780a79a65c991a4baf902f623e0f2176a269bc1d6b2f0d3c3813d2fb16842c89c0421deda697fe460c665d2e06126ba213d2ea87abe458896372f450f15f0742851251fb349051a00065e8b6822b09899e09ac7e3e8e91e10ccc201dff86d1ac374eb9761501360dd3b04fb2c0f8bdf7d85fe656dd3c3051051551b9f0b405ec9c9327d4c36fe1139fc9e8afdae32d1da170ef2e926cb1af17a669f6d119aac5e75b73b44ecb79a6f24a96212b3107b69f8b098dc8fca1c578131ebd5a810e16f3de0a8f4fb98a1d4b175831f5415903cd1ad4f2039b04d0c54a1cf06b1ff3739a9ea3ff2a8a7fbf38ffd43c7fca5cf409fa159b44e395f76ff8aae5b28e3246bab76eaca0207d6a9a408dff0b651bc05ff864206335cf3c545695ff2e5d443ee980cbe81700b15fde22f3a5332a2f1d373e978a873ba2f9a22be3f0d70ba6f56fdbc476dd71e7bb2829659f69513b4d038a250fbd19ec00659d1b679887b9ba1839dc695ff84696261d03c03257defbf59ecbc10cc709d3aedf6b87a82f1b8f2f7fb1cc95d1d4819afbfcaba42e111eeb4af67d27995d9dd50f62e8213077aa998e96c839ccdf516ebb64874b523258ff3686a84a14ad94529736d73e8fcab440d7509be964503eee68c3f3d352bb2aa88f0d897016e578163c7f0e1d993464de146884110fbfd066df87726cbf7fb6be036ce03777d1c69543ffc8b835b9cf03b8ea588a573443292f4a301359d75b9cbe2023c49d9095d94948a3fe0c1797cf58c3ee9d10bacda1def0845d49b7e52b5601d9aafe135751d2d490e422783444c9c266b0af194420f7ff7e038125bf5586a3a93b38d771ef459161e4baceb4587c3182a9d7649b9195ff5976bafe5b23d45648996c347eaaf8181a455fe19f3d128b71580a0e153a0c0e719913d22e621a075cb0ed5b38f38e4bed0aac7096303c462b0e78395d02bec5e5132bb916b3450dd556cbaeeb1d8fd8630d1dfe69a7b9ad9baa81218044a24af6cffc86a314272d2dd719b556533f22b4a7d93f58bdd063d1f851298542ffeb5af24bb6d5d4cd43faf0c3bed777cfd6588b1685671131b8ba"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1038}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async) r13 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r13, 0x110, 0x5, 0x0, 0x0) (async, rerun: 64) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001400), r7) (rerun: 64) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x94, r14, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x4841}, 0x10040004) [ 1208.908724][T23977] 16:31:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = syz_clone(0x16000, &(0x7f0000000000)="e5bf7ff505272a4781bdcc5e99113889f2d687782eb4e44772ffa71ca40229a9800cd4aa1b419c3b5a39a58501c4831fc20f61e9be2e33d44033b3f32bb89dc0c22fb9e4bd04c305258e65d12366f0f1a211daa2cd65a70d700dba29e022c757feb316152fbaf2c3f44dd05983ee60b6f20218b91f76fd4d397c9935e03acd6b810404675e368cf0f60d55d6eea2757d48793bb17e86cef41399ec185a5719df2478c76f0b9ea8d1c3e7e3a14445", 0xae, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000400)="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") (async, rerun: 64) r2 = getpid() (async, rerun: 64) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={r3, r0, 0x3f}) 16:31:53 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 17) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:53 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x22400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x5}, 0x0, 0x4, 0x6, {}, 0x20, 0x1f}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x5}, 0x0, 0x4, 0x6, {}, 0x20, 0x1f}) 16:31:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:31:53 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40305829, 0x0) io_uring_setup(0xa8a, &(0x7f0000000080)={0x0, 0xf90e, 0x40, 0x3, 0x106, 0x0, r0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x668000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x18000008}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x2000}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) socket$rxrpc(0x21, 0x2, 0xa) 16:31:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:31:53 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40305829, 0x0) (async, rerun: 64) io_uring_setup(0xa8a, &(0x7f0000000080)={0x0, 0xf90e, 0x40, 0x3, 0x106, 0x0, r0}) (rerun: 64) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x668000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x18000008}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x2000}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x2000}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) socket$rxrpc(0x21, 0x2, 0xa) 16:31:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x2000}) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) (async, rerun: 32) socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) 16:31:53 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40305829, 0x0) (async) io_uring_setup(0xa8a, &(0x7f0000000080)={0x0, 0xf90e, 0x40, 0x3, 0x106, 0x0, r0}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x668000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x18000008}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:31:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe1d005eafec5aa0f) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x2}) r2 = epoll_create(0x20002000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x9}) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x45140}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x78}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) clock_gettime(0x3, &(0x7f0000000180)) 16:31:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe1d005eafec5aa0f) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x2}) (async, rerun: 32) r2 = epoll_create(0x20002000) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x9}) 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x45140}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x78}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) clock_gettime(0x3, &(0x7f0000000180)) (async) clock_gettime(0x3, &(0x7f0000000180)) 16:31:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe1d005eafec5aa0f) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x2}) (async) r2 = epoll_create(0x20002000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x9}) 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x45140}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x78}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x80) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) clock_gettime(0x3, &(0x7f0000000180)) 16:31:53 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xe660}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = epoll_create(0x3) epoll_pwait2(r3, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0x248a2e95d138990f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xec4e, 0x9, 0x11, 0x2, "89421e3d841d05d914b1b24219186a89a177a6eff505bf7bb1351e74a1ae47cd68100c5e1560162ef3b5e73ccc3bdadd9aa0628ec2337ee70f333d4def462e4e", "1bddcd3c9da0eafe21500a6318c4f15e7fdf9fe635f252f9aa3e4324184c8508", [0x6, 0x401]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x50200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x4, 0x2, 0xffffffff, {0x0, 0x80000000}, 0x7, 0x9}) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000) socketpair(0x9, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x3f, 0xfe}, 'port1\x00', 0x40, 0x20, 0x4, 0x1e5, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="c40e0080", @ANYRES16=0x0, @ANYBLOB="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"], 0xec4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xec4e, 0x9, 0x11, 0x2, "89421e3d841d05d914b1b24219186a89a177a6eff505bf7bb1351e74a1ae47cd68100c5e1560162ef3b5e73ccc3bdadd9aa0628ec2337ee70f333d4def462e4e", "1bddcd3c9da0eafe21500a6318c4f15e7fdf9fe635f252f9aa3e4324184c8508", [0x6, 0x401]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x50200) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x50200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x4, 0x2, 0xffffffff, {0x0, 0x80000000}, 0x7, 0x9}) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000) socketpair(0x9, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x3f, 0xfe}, 'port1\x00', 0x40, 0x20, 0x4, 0x1e5, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="c40e0080", @ANYRES16=0x0, @ANYBLOB="000000000000fbdbdf251d00000008001e007700000008001e00000000009e0e1f00d58eb1297d7bc54db70afec6551ec788234293ca374712400583680d1ce84c4aa5d8193517947d287ca6263e9c21682a3c6438934ed041eaedbb93bad8a241a10c3ac788b2ff86cbf08fb099e1805f92acf280d273a8702f83548fce407c12f6f2c0c87f6e39c5f4bdd2e7feb6f770dc387a2e0b5911351a585047e92188e9685e7be06ee6e583b6ee44e26b9d72e757d92a25cf96c089509cbd82d65c0f1636684c87c874cc69656fd6190e7e05d2320aa966abf72f85c56c31c18fad2a757d54289875e34cabbbaba21272833786044e6bbe5a1242808d4dc5794c97bc24183e417f1b1697e33242a633cf6182282c9b1a08e7da7a4d67e85859cc4201216645cebb93dcfc73dfadc34002b2edd0f8bb3fa040757d2b16f6f4fdfe1c63ca3690d68c04d0c3462b0f2e3d43833ef785c2264fd8334b56ff293ade58d3f1b74d11759d2b5c4bfae670497d08359469d939331bd1fd5d3e8b0415ace264404ecaefa73fce75f99a0ecf6d3851566352563e655e0596cee1329587e982cf4c5f4c8086ac5441367e29216ed9dbd929cdf35ec3a76c3678a158637d93128b7267b8445f78baa49e218c8a7468f883b83d65b175e4b8a05ed479916dcc4d6c61af5d23ec1c1b41027b9c2b428352637e621848b225f670bc8918539607551775f51a0e84cd656dec77c8aa5b8b3504a46a5ea4a13b623f8a3ebd0603de267f824d7029c06e4048d25a98cb31fba2722702733554dbeac54495e4f8b06d26f937e182ae7902949a350ca6ac8c233d54fab8806c3a9cf987a0cea20f897c560508f08b09a4669af4cae1995b89e61ab9fa100c7b497da5f14e39a9137a6dad386f6b3f67ea5d984cc3abf59503db01012bc9710d827176168739a091387a5539a3adf72f589b769914f75ed9bcc586a337769cb0b819fb2482216be4b529b17d1bcbd92d264c5a6cbd4492e714167492ea0514aac531eb6214cea4e01943a97496af2f2679f552f26653924b786b8345dc3ee8d851f8752d761dd4ed722ca5da4de6c09428200cdcf472785c3501a5c8ffcccf4533536426f73c13862c31e7441bdad3aa2c6ab02ea9f0ad9420125c2b51b4581a906b6670ce98c6ca8dc0a9cde8a4569ccdc9bf3770ff40870a22f05e7f3c30ee6cd415d71ac3596b26d9baf97812f6c2eb56b3906ad311484259ded92e358ca5128b40144132c9f2b555291bdb6156da37dc5aa2652ee76d547c209b0968267f082bd31577d9a1ea9301f764cb615948998642395db348cece7cfe933028701e7e30cec1f0132098b71498775b8588114de476461e6991b462bd5f46e7f4040d49f749b7aa4848a793f67bb5e1b5f4bbea94a6e4fd229d11196a990dc7ecee95847f8c21d398e81935fa3bcfa528be6e84a639acaba03f42c64d05cea74045843b9457857d4dd6f5f0488d172fb7112ebdeef7034783c688ef25b5a081808c488fe40b0f0323821a606e7ebedaafd84536acac69eb6bc3094ddf24272f00ed08c2c33a7bc18853d68e603a66549a4ab4bbd242014ee36db5f75bdd5e63d7b798fe4d963ecf28da142668d861269e5f4c1452d4126edafdfbed58c8501d4f96aab622a19e37492797da7b76577d8b16a0829dc508221e862e0dd055f21c4ccd94e4920ee20800c2d24b25820783bb311484182499a28a6fa97fd2ce93886701d18ff3d5c580c87c0b2210f6ceb2275cef6ae2430c629fdd4c8294f7a67f53c2772c60aa2e1d9db3d68c6ea33dbbbf1b4630fb19a1183272a4debb9e734641d9778880cbbccd1685f46c78cb219a816e6cd0950014c90f34ea0c65db771c4362d660a8510bd1eb64dfcc98994b4fb1a6053ee1d67162956ffb86e3b35bfcc2872a3dabd92287c0583536f3ba710ef0941529cfa02fee39e589d83328393323e07e0720f93a3e626a9ae7dfa0f8393682e302ae7c3f2e7cbcfa2683942a167eb9efb77bc2a2ab35a48bbb9625b1f574eb64747559129e78d032bacbd9f594ad7a83759774e0cb7b8aac08c7c9ce04130eb9ea982378b51949052b2afeb03d106143a0c52d66cb6c7c24ffa8eea9f4de4238ade9953bf46835d18842abff37d9a6641b3df7bbe6048a704d7af9c308d99b5cfe6e9a08e1666c82528b02d3652bdd9a77ffbc0ab438cb2ab87733f9f9ce53265bfec7ea255ecbe8b2cbbfb3159e8eb8631a4daa5c12b6c8e1871bbc2d11ff4c6a078d4e2e6ffd7d4a65a661383e462b85cb03aa0a4bafa5f5c2b35884bb310cd1775884c2c6031f833cc262b25475d0a981551d7cc52ed6d1654b57f044529d6cff2340bd04eb59bf9d7f2279c57f11c70dbe7f63b1971d68a5416fdaeec3f09b63e4ae0d6e3ff26be0be55b2e27dae28aef11b9af14f5f92f4312d90de613556b899c3c339318108e5262da5bbab0c0680d6f2a0902e706e038b254f9c5c769674d89c40c967697cc7f90cf88b89f95a4f88cd841b00104cfe9a288b4d792802e14619d96c339740a26c150fd66d80ee0c51a308a439b7a8d493858f964062b39c995f9423e24afc870abb61faa0e21a31c447b2a26aeef8a89a71da718ef89aa727b04a3a5e395dd82d9a0ff0882cad1536abece24589ebeea26120548477279e6c1bdd7cef8e619435f9995d32ba8c9c34259b47ba6f984f5d5ce321c04565aa951f2db0af3a3baddd689b531bb346bd0bf52c22e4b7f159e8cfd320cbbef39e7e2014d2ac1e011c013e326119019c75866b6e66a475e52651cc4546f8a67dc8dde054807b2793ba2d6451705d69564ff2d7262dd31860a8de5f64279fadbb83c0056f5d8a55f3022ea1a3088c13f1581683d1e55523ffa278ee80e4effd6eb4612645554ebadb26f42ed605d1efc077c1129564193b5f0a7170281d8f5818128507bd51a964e2a685d096f1dae027c00265cc1148e1f2ea30ff9aa4324dccaf6cb8afe873f330a4a8d14a81d6a93691630db4d4aaacb3569b3673ab4c869b471e171259649815edc1088cfeeefc76e3a82154a8a6a805948e2fc8ec848eb954865984662f6d3b570372fb71d92460b255f231e47990c157690b799b9f86bad30c3964299f2e1d98ba210d1a4c508af648896bc377a2e0b47485f9636eea78f4f94831718627b1a7880421ba17a127d2e65aa583574d8dde121ea9a40eca697a90afdc128793b5e0ca5825e43866bb790223b6077af3fb3471089067f82877d50624f110d7c003bef72ad1fe9217ac60cffc1794b5e0ae0d53850d383b28a75a3a854bc7e521218637172cd42a96d8ee052697ebc117686dccd46df2677054007c432e347bc5a8ebf6298b239d8d9d547cf1d4aff8c0f2cbcd341fc4aad88a7cab3c7ae86ceb4e1f6bab0ce12b3b93eceb26bc4b110c6da873519fcc61a19810433d4536f2a32f1050f02968cf9ebf7d9b39fcee542816d6c9dee4896a73cb87629f2c901ed669eff179fb02c74d9cf17ff91baab38b1cc0f9db75929173eef61126055b52d83716ae0ee22c1dfb86ac199490ece11e770e046c25e2007c4bbdf1130b54be92fa6b46ae71c5575487746fbdd1c0c979ec9eaf9e78f0a22b05399a17f663257b0ffc72a36aa968949dfd41758b9586bde6558a3d71c9a510e08a40247c92bc489bdc72a5f56aa19277993261b31fe046caffe69c3fcb81e51999f374832140b51a960f6fddf90559c96b834e2883577b6721da770d7b210c42fe7ac247226ad4e6e7faa43af1b36b504c8f41a19324cbf6c09094c99b39444d18f3a87865b0f3b3f378094379ad88829b750f4e8d17e58d600feb945cb69c4e2c354b2270e285cdbfa8145fbb33a1052e941774d73cd12c0525652447896294ba0891528043c879dec885d9638e0857971766ceac04576dc54677fb67bad64f0d069dfbc0591c767a81ffddfe06602fa0af23f884e580ea6376c049114b122894aed4e671efe711a7bfbdb8c5402d224ec305db6e06063083816c07d894e088974573e611bd37656f5aacf8886bcde3c6e4e5a7d3e04a26aefa1b4904340b0c08490e733ab2952694580b8078323d5e1bbdaa7cfe143bea8c9f9fd6d5217c2ecf8f755e00445b395f4cab75a093cd6c11fa9256fc0318e13a6c07dc76195ac58ad1da0886b545522dd7bd68f3321233533f8b933a7d18617fc7e5fcabea0189fedea343ca53c0d084899b0e31ea54f1cb1d09fb1b30d4509bf3c8d80a94be1eb16b0f00e0c28bf198b0324650831d4e7fe0c5dc638db170ec3068523a0527189ad45d9cc04f3367bdb66fe0ca067a54eb46038c4fe96ff33f5865894871d2e89240dcb4165b4e6fdbdd72c3115ee703a88dca7f9afc0ca80a83355049382f233374c8612d463d1ddf92649825d31b8da22cd660c730354669db7f8ff905b78ad5d9ef396566dab56d5d6ce0a158bc807cc51bcf3db39f34d632d0fb23a43877f933b40da17924385d3009493f6abf7970441b0be4bd2ab1c49cbd751bb17357ac35772512449ef453df62727e0991f3f8ec85fae9cd7f4538ca1789ead84bab26c8c2add4ef98af70efa4df0104b36d0c4c07279b45bae1aafc9716303e2c526c8d652c66ef16bb4a3f2eb98c75e40aadf20ca324acb84b822c79ce7f95d1354228592b8c5641a4e8f674e2ffc387c28da923eab4a6dc9477a84acc976754a6893768736fd5b72f9b53b821bde977017da9b5b3f1e88753954002ba4c73f3a20c39df4bc26275eb70905c99de518fc73b9a42746584b30363568dcb52fb2328943f2797b9e4a6b0c769b97e955934583af9d2731ee5503d2c2ea77e2cb381512e51ac8cbf24c447f493eb953c50c6863aff0e2213a8aaa7b9c937e1dd1ff356bfe32b2cc81c239a0b709446e1e894393b91dd4b055d6b4def6f2966a78916993d065fbfad7ef3149d434a8fbb27376769d144c0c110d9244f10c67a017e3383fc81ab086bf67e1a2d567237a9fdaa3d4dffe4612f7ed05128521ba5d2e63b6fdc87fb935869ffe6233f956c0091c82474cdbb93a8a5b7c16bcef21fcc014c86a131edee3d7476611d13b77cb6eb581fc4933384a343255222632cc2b57b07286d8caa96767cda2003c787523d69c27382d11643d874d2621cd9e2979e056a2a9c993603c399ec71b9d33758d1cc500e6f97cc778029d7e6082df301f06842c69816ade9ce6d552c1a9ef1b8dd14b729dff9d04689ccccceca29e334ce6c74fafa02603b6851c6893a1d615cb5f9ad95829643f25dfe628c758bff8d4b98736a132acb42b2df12d9aa5b50cabf6409935f58d69c724db3c90000"], 0xec4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000) (async) socketpair(0x9, 0x80000, 0x6, &(0x7f0000000000)) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x3f, 0xfe}, 'port1\x00', 0x40, 0x20, 0x4, 0x1e5, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="c40e0080", @ANYRES16=0x0, @ANYBLOB="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"], 0xec4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xec4e, 0x9, 0x11, 0x2, "89421e3d841d05d914b1b24219186a89a177a6eff505bf7bb1351e74a1ae47cd68100c5e1560162ef3b5e73ccc3bdadd9aa0628ec2337ee70f333d4def462e4e", "1bddcd3c9da0eafe21500a6318c4f15e7fdf9fe635f252f9aa3e4324184c8508", [0x6, 0x401]}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x50200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x4, 0x2, 0xffffffff, {0x0, 0x80000000}, 0x7, 0x9}) 16:31:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000) socketpair(0x9, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x3f, 0xfe}, 'port1\x00', 0x40, 0x20, 0x4, 0x1e5, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="c40e0080", @ANYRES16=0x0, @ANYBLOB="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"], 0xec4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 16:31:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x543881) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x4030582b, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:56 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$msr(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0x1000, 0x0, &(0x7f0000000400)="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"}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) 16:31:56 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x1, 0xff}, 0x1, 0x8000, 0xff7ffffe, {0xfc, 0x3c}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x8, 0x9, 0x33, {0x7, 0x666a00}, 0x2, 0x9}) 16:31:56 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x543881) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x4030582b, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (rerun: 32) 16:31:56 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xe660}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = epoll_create(0x3) epoll_pwait2(r3, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0x248a2e95d138990f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xe660}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) epoll_create(0x3) (async) epoll_pwait2(r3, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0x248a2e95d138990f}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) (async) [ 1212.350163][T24146] FAULT_INJECTION: forcing a failure. [ 1212.350163][T24146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1212.363610][T24146] CPU: 1 PID: 24146 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1212.373678][T24146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1212.383741][T24146] Call Trace: [ 1212.387015][T24146] [ 1212.389981][T24146] dump_stack_lvl+0xda/0x130 [ 1212.394583][T24146] dump_stack+0x15/0x20 [ 1212.398788][T24146] should_fail_ex+0x21f/0x230 [ 1212.403541][T24146] __should_fail_alloc_page+0xfd/0x110 [ 1212.409072][T24146] __alloc_pages+0x108/0x340 [ 1212.413662][T24146] alloc_pages_mpol+0xb1/0x1d0 [ 1212.418481][T24146] alloc_pages+0xe0/0x100 [ 1212.422970][T24146] __get_free_pages+0xc/0x30 [ 1212.427560][T24146] pgd_alloc+0x1d/0x120 [ 1212.431735][T24146] mm_init+0x355/0x6d0 [ 1212.435863][T24146] ? kmem_cache_alloc+0x1f7/0x2d0 [ 1212.440963][T24146] copy_mm+0x11f/0x1060 [ 1212.445130][T24146] ? copy_signal+0x54/0x360 [ 1212.449637][T24146] ? hrtimer_init+0x104/0x1f0 [ 1212.454313][T24146] ? __init_rwsem+0x5d/0x70 [ 1212.458800][T24146] ? copy_signal+0x338/0x360 [ 1212.463483][T24146] copy_process+0x1002/0x20a0 [ 1212.468157][T24146] kernel_clone+0x169/0x560 [ 1212.472655][T24146] ? proc_fail_nth_read+0x140/0x140 [ 1212.477871][T24146] ? vfs_write+0x655/0x790 [ 1212.482332][T24146] __x64_sys_clone+0xe8/0x120 [ 1212.487029][T24146] do_syscall_64+0x59/0x120 [ 1212.491525][T24146] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1212.497427][T24146] RIP: 0033:0x7f960fea4da9 [ 1212.501832][T24146] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1212.521431][T24146] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1212.529838][T24146] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1212.537875][T24146] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 16:31:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x543881) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x4030582b, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, &(0x7f0000000000)="a8be64172e0c7f4ecd53fba3a15a744baf1714a420ac63817c374f33bb529bd3a078f1ce3803061d3c0903eb76fe8dc6931f0e0af3d4f7d63bd2b535503b61ab36c216bbc78c02b2a3fb6bdebca09cf6378fe2c0cb7f7d", 0x57, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) 16:31:57 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$msr(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0x1000, 0x0, &(0x7f0000000400)="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"}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) read$msr(r0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0x1000, 0x0, &(0x7f0000000400)="09d13617e12cde8f8f2c4e5f7f9ef92cace2d8c4198707438916c0d1bb8e5093ae6a24e82eb9ac715e29272b0e0415850df89222e68ff9334dc13ba048923f185e8979cc7939c643d690a6717518529af72460e365ea7058c552dedd78df1702288967770bcb1ce8ad3038f992a2c1cf038650642393a31b50cc50b54a8428ae5da968ad7f98f5ad7c4b40fd51a49cb5e8874ce04aa7bc8d6f2058cf84e515dfaafe6d22358dfb5a5d902bed6f4e815402488b8954b9d7c29215edf951ed50913010e200f144e974f3f7b3af6356907a72f504b001de2d4fc96263df8027d230b66343bd50491d40d97c40aea454892d5958673e7b31977adecf22f0fe4585be60ae6c5e6a9c4bd77ad8d29906ebb720ddefd6046775ce8d4a78408e7e6634704fcb6c5b72571787667f6e6183df887b0cca40b0a1a9d095952c119d8e62458b0f19fbb819128f7fda52e6fe5a451d190e72d0a8df84ad9ab7a9ce66a3343ca3f44e79d6b9a207f732056ae2674b618767046ad7f67a393b66b5bb91ace37199c0077b71b8d98c917290a3f779cc0a1c5a1d7e6dcd9b665abf35bb66685b41979fbee16b0de9f290c4484f3588f939e700fd289525db9d528c73bbe8864f97f382a4d6548b0852e3fc8b2d58398da06036fef449f5b966d1280a113b11debc1ffd6a35e07ecf1da66fcccd33d8d418e2b3d11b35c3973fb5180739af4a471bf6450d7a26ab598449db9225adef97606fef0aa2b9e60fcb97a762c68a227adbf4bb125194904b1edde0de06e494dfcbd130bfbd7b91be8d5c97335923915b7d0f798d3f5169439b33123c6ccd9b1f03b1030115cdbac2cf901856e2891a3c4c27ea448ab2d5bd143cc705084d049d60e986cd12935ec1e5900df2d62571b7de0ff18bec9890a2eb97658ee0ca95c2697e92522a6101b20dda52ad31ec89b9e469a5d4eaf8a793de3dea65a7307ebaf538bc00a146557e42b8e3a326c7149ffb61706875336142c44b83c46d4d8b481e9b7ad309fae82f23a3b04d4077dd623bfe099eab73e1ea67e21d690862e0ad93a5a7494b7f883b5c8cc7c79b5118eeb4c3e020f450c3bef29d4643f4a9fdcc9b1d3fd096cee0831b165fc88b779b3f299080d20a93fdd084be8e5a122ae0b2f44de9c0c35273be9be84043be870c67108235737c0ec4aeff66d9d8e1fd781b88d768e1cbbb8300be7a02352c6a1320de63606f60806a069a4a68eaefe975d25c2916c149f127a34b5eb4089387b4390dafb4f22985ea75484c107b545a04f933eada323c8e42613780c4772b6f2dda4d78988e0a43749032e72c39ab8b32a6d2f3db767dc97c542e95e6b8cc4b65bb5eea8735d65be95d7575be4d858d1276276265da3f6bae9a7e2a003f551931fce2dea2f545c1d475c096335444ba43e77e961c880c780e48442618d8cf70be2145336388b558687bcb21d516fc244a51d5b4c109b51a2c61117e11012c7bf894bf1ec2162522d7326618a28c20c5053c9f5f8f741b004d64a1acc99f9623089dd2f1b71ea1412190640ab40d76975b2549c35450a93fa60463176e13872b459311cee4e2087714074a9a0c28e21c027490ce6e0228468f359d41ac2e74126350c6183c6856d93d46802b3dbaec2867800b3d6f726dba4478d2e07f6a9fe5b58209ad771983a5d2dd944abd3145c68f308c507aad5bc40643214a3e0fc3c6c87ecebd37662852869090f69bee06d0e8c6a4e4b89ac8341cceee83679472f645f18618ee5273d00e9932e3b8e10aebdb9a7b7430cc574673e25013436540ce732851246a0680b30ced852f8cbf094e2ab45a013304cf0bd7ab33aec4fbde11c346b2461c363c165cf1ac94437e4eb8c3162f3af2cb100e51fbd61765e304fd27413aa9fe3ae8fceab446bf16d10277d19b43793b029d297c7e1d2bd2505f8e850fe82ae349a16dfd98a1aa5b62bc84f7e1b1519e7bb1e8fa301da96397a07e5b2c0411a07896261613f42c9cbf5855c4579db0d8ffbbc997d92ec16efb41f88f770240b1eb80326943deabb9606717003d59718e43d407a69157977fea9b58e76d93edc0da2dc5cba18e89342ef9389825a8e47e815850f5d2ee45fe2f76ba0af67558d7e120b2a9641affffbbee76f079db604b2ae1b531451af65be45137c5291313023b10cbd7a6c97c4ceff17374461b2c9be8d0fc083a836be8590b6e09899ee136095fb8684d20f1fb4a89f188eaa918205ca2ebb1da1badd3999880b5a6f5d230378de58311910a6ba99d48e5a6d756310ab3f7452fda5f97e541c09916cea602f15b06a5489ff242cf74a9df5ac4aa339963cece0e17b2ab88deb519b7ff7367c49d891b6148c036845ca5bafa8b9485bc79e38ab8c0bdcb33e261f3974954ce7a41dd5afce4e2cee4929d1dd93a57915b2b2636cd5b4dbe408cadab120b3e5397bae90ef02b64c062069ecc783c02efe921bdfb68e23bb8a8405c885f3de44dd55a959676fd2cffea57de3a1534e4ca459c642a7c459a699ea1a4f8fa26527aced0b393c590d827a0aae06752798dc05eff170ff8f0088c0fb5b9f143035393c33a578c98301e5aee29f334ae6e577cff3e7c8657d088866e41cee20e03986b942cb085e3bed48fdd84741b301b259e877d01c7d325d46fac77117036cb425db1bec0e4ca5f671fa0346c74f31802abd1fc33b2d8f663ee20e037f092a1e1e170b0bfbf7ba35b30fa40a2cc49f1f13f78d2ef84f279aea33b8284e6f4a38ace6eb96397d177d68ecdaab4fc361185576ca3be5b7727b6322d7318ad06031ea032c829bfd877b7b07bc5848e5d64aab90580b5192c9a8efb61e161cad189dc7b850f38d0ef947ffa11fe05b4260f16e4089ef26fc5376c2741e2e7553d55e5d04b7705a80927fefad1b6a2e2526bb5964fd57644eb5d10c3c3f8924efb3f3a68ee24cbb89e82243685484ede992882d4eb1430297bdd2e4ed0a834eaaa0745389cb2e8e1a156cf4375e43248bd6e4ec34c495df69fda19b8e014499d2e431e60af5354a7905072c3601fec578c63662a2daec6fa683647c02a0f3ef513d54f0b0b896580d3caf2ad771168229aaac13d835b6199da2976f4c97af648c11b2129cc5d550115fce5574183672bbe4bd5948265fe9372300fbccf8e43cacbdc1376b2734806fa6a6a85a7d7537371b036b703009738d78a223f8e31df3b8dd0cb6f578e9c1762ecd01358079b5c56650f98f4699af090ad60b2dd72f19cfd7ade9025e5f8ee53a80651badfffc09094e640fb72aed20357e63f877e62b5ed90bf4d5038e467704f1d73c962c50a8afd2e2389ab1f349bd93bcd76e2d0ad1c7e75572f80aba627a7dd19a5afe2491e8fd28ad400dd64263bc06ee519dd2c6f10e81d93ffdd23877802b963c07c9c16bc047c60c6634d9799dd827919112f5be0f62a64843a5e2b879035ea1e44ec646a514e4a8710bc515b5160ef46f377263215556934e04557aeb854783d952663e6b9a9a6ce242926ea6b92cf52f49ef600a88652424ac8f2da4faff03c0237e2cd88e473e62621fd5e588a66dfc8e5145291a667c3c013db32bb1c8031fd282d7f10444146128e9010900c95dded9000e0347d5157006b68673c2e5d916f27ad83d24b34e440701609db34c4d38c06c4ae34190824328649ba0762040b0cbf19984ac4cd06521001ff4b7e542b2d96946778b433c17c0fc81ad44ccc7b96f6bc32627df621ef70de93cf1ffb8d04209f035f1d02d9a8e68b2536912587fb309725a638f30a44c980973bc5b2f50f78db5124f3a12b7f01cfbccf62cac7f8ab57deb4e13e95adb63c5ad561dd1e08eef4aaa2ed003268b213219fc645218eb0e575f6629fc72a801f71679868c2dac46a824769fdfb75b57998aecbb2bcaa81025d2ad534183db2fe399a79bf2e32150c31d9936ed866f9ecf00ccf9ccf016290d6901501c95c9a3c51278497767abe434fa8dda19748288a7668d190fd08acdbd575b6e350eb739c77230cbca15c3a04c1f985be7dea3bda808f820b1846feb6fa66381aa05c09116cfa9593e4479a90e508a153691eb5fdd212a485f08883fca3ff6d1dcdb20cbd29cdb1bfbd1894719ac38863ef0f4318e5e58afffb4e95b486445a90b1acac3d7264bd0f873de9c05672f770d871b4189d0b0428770099760a74ad9ec15f1ada0a8a46459b751429cd35e462e93bd45e1a737b10c067267dc63576eddd968feed39084df234dfdc1ce938a627deab2f8222aca59e55ef1806efea82f60480d4e561b28e5c3ec0661f9878f596f77683a8f6f8598031b967f5d80231a7e94b8543d51fb158f462895a62cfa49e20eb449f4a59fc22d9cdea5fdf84fabc6c16f13f5083824859bffac845cc7f92d18de4deb271348bed83f088ca56c6be59fe89a320af561d4fd5a5148a1cefbdab3373ccc897ac7900c741aa0294ae866f8afc58edea78173808964302151c51e391b73f9572a432ee4c61744e5f76ca45f264df319aa5d8c011243e89f4d7fc237f66745d469c81c4656820a1b3ffdc3e873b3641c5f30550d9401efbea76f1ad02835af5756c2dc9231468c4b2c0652591a682e396e0815e0072adde4375096c422b42464b50cdb53e42267068694a6466a4933e8dcc0685d3942a4619fd3af6118c91eb9e5efdd6e44e416dbc6240726b4c20ff04ca4a0f20f40224a80558331a7d9f404971ca3402c9d8c08cbc174622e25b18d0e619cf10660ec66f64a207b3a07c2c1baf5cf069e5cd75991e036e01717e865e7427ad4e470e11f1444d2de8bd9a701a6c463378d31e25da3975874f089635120f1414e4fc3c37dcae2318f82252e5f6ea48a1f5c5ed9e704a1b091d593970513cc9f68e88711c9a47557df3aa6dc7525c2a48ab80daa20b9eddccc496261db674d0fb6d63b8aac6ea91c78e645c608a24fb8d90938005cdc7522278d5202601613da7003cc0a14ae1b159572ff4db8396a56aa948d6e3875e9fd43029419e2743d49c5143b945e775e065b5f0855381053c002d443b752006033c93c235464fe8165f198111afb3daf60db84ce368a010d0bc76fd67599385eec121f7a6a79e4bb69a101fa31166a49ab265a50507be6f4c08e72755e949656932dca9123eaa77de1d66897e467b301589f1ba7866dfdeb5d105442f1053a93d98a33c92aa217360b8bcd335ddca785a60cbee42f03134e8d1ff34cbc122991a3a0a2782d6684f34089cce0bba1e032ba8edec1bbab4dd2a4de71752d7e3489143f7a6cb0d2d6f9bfffdc00af781c93a1140816ebdba2f75a84d17764d495d4a1cb3e74236d8a15d0413d3a5a5221fbae3d9b87a92da444f8a18848b20180527b3ce26518f716c56c69ed7d2cbcb73720f3aa476883aa90839f471f56d45c3a477a0fc425b46966615504c3025ec11b315cffeb7aaa26db139638245c460190097a44b208a59316ed13f14dbbadeacf220ec744df1f85bf0e4ec36801b7ab118f16708e382c3b4f51f9d017d7fe6845b8abf7e84a08da85ec26ba7f72aa8cba270c622a98d3119edd6d51768c715bbdc4816427cdc1bfbb763729593c289d1be8d5326f723e65b040947fe0b3b25d490cdea8653ae75c54fadee6a43a4c821713d2a6c627a2edc7a6894f529441c306689f19216e57963a314d30be5d52107408919e6c670ccce346a94894f52fb7c66324f06cd4921114352ca017215ff4d18d84d1328cbdf944ade1289a115777d832b5e2bfdb3db9ba502476989ee6a993046a560b22cfd0ba475adbd2cbc5"}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) (async) 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x1, 0xff}, 0x1, 0x8000, 0xff7ffffe, {0xfc, 0x3c}}) (async, rerun: 32) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x8, 0x9, 0x33, {0x7, 0x666a00}, 0x2, 0x9}) 16:31:57 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xe660}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = epoll_create(0x3) epoll_pwait2(r3, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) (async) epoll_pwait2(r3, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0x248a2e95d138990f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) [ 1212.545927][T24146] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1212.553891][T24146] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1212.561854][T24146] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1212.569828][T24146] 16:31:57 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 18) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) socketpair(0x1a, 0x800, 0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, &(0x7f0000000000)="a8be64172e0c7f4ecd53fba3a15a744baf1714a420ac63817c374f33bb529bd3a078f1ce3803061d3c0903eb76fe8dc6931f0e0af3d4f7d63bd2b535503b61ab36c216bbc78c02b2a3fb6bdebca09cf6378fe2c0cb7f7d", 0x57, 0x0, 0x0, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) 16:31:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) socketpair(0x1a, 0x800, 0x0, &(0x7f0000000000)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x1, 0xff}, 0x1, 0x8000, 0xff7ffffe, {0xfc, 0x3c}}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x8, 0x9, 0x33, {0x7, 0x666a00}, 0x2, 0x9}) [ 1212.631561][T24177] FAULT_INJECTION: forcing a failure. [ 1212.631561][T24177] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.644225][T24177] CPU: 1 PID: 24177 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1212.654445][T24177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1212.664549][T24177] Call Trace: 16:31:57 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$msr(r0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0x1000, 0x0, &(0x7f0000000400)="09d13617e12cde8f8f2c4e5f7f9ef92cace2d8c4198707438916c0d1bb8e5093ae6a24e82eb9ac715e29272b0e0415850df89222e68ff9334dc13ba048923f185e8979cc7939c643d690a6717518529af72460e365ea7058c552dedd78df1702288967770bcb1ce8ad3038f992a2c1cf038650642393a31b50cc50b54a8428ae5da968ad7f98f5ad7c4b40fd51a49cb5e8874ce04aa7bc8d6f2058cf84e515dfaafe6d22358dfb5a5d902bed6f4e815402488b8954b9d7c29215edf951ed50913010e200f144e974f3f7b3af6356907a72f504b001de2d4fc96263df8027d230b66343bd50491d40d97c40aea454892d5958673e7b31977adecf22f0fe4585be60ae6c5e6a9c4bd77ad8d29906ebb720ddefd6046775ce8d4a78408e7e6634704fcb6c5b72571787667f6e6183df887b0cca40b0a1a9d095952c119d8e62458b0f19fbb819128f7fda52e6fe5a451d190e72d0a8df84ad9ab7a9ce66a3343ca3f44e79d6b9a207f732056ae2674b618767046ad7f67a393b66b5bb91ace37199c0077b71b8d98c917290a3f779cc0a1c5a1d7e6dcd9b665abf35bb66685b41979fbee16b0de9f290c4484f3588f939e700fd289525db9d528c73bbe8864f97f382a4d6548b0852e3fc8b2d58398da06036fef449f5b966d1280a113b11debc1ffd6a35e07ecf1da66fcccd33d8d418e2b3d11b35c3973fb5180739af4a471bf6450d7a26ab598449db9225adef97606fef0aa2b9e60fcb97a762c68a227adbf4bb125194904b1edde0de06e494dfcbd130bfbd7b91be8d5c97335923915b7d0f798d3f5169439b33123c6ccd9b1f03b1030115cdbac2cf901856e2891a3c4c27ea448ab2d5bd143cc705084d049d60e986cd12935ec1e5900df2d62571b7de0ff18bec9890a2eb97658ee0ca95c2697e92522a6101b20dda52ad31ec89b9e469a5d4eaf8a793de3dea65a7307ebaf538bc00a146557e42b8e3a326c7149ffb61706875336142c44b83c46d4d8b481e9b7ad309fae82f23a3b04d4077dd623bfe099eab73e1ea67e21d690862e0ad93a5a7494b7f883b5c8cc7c79b5118eeb4c3e020f450c3bef29d4643f4a9fdcc9b1d3fd096cee0831b165fc88b779b3f299080d20a93fdd084be8e5a122ae0b2f44de9c0c35273be9be84043be870c67108235737c0ec4aeff66d9d8e1fd781b88d768e1cbbb8300be7a02352c6a1320de63606f60806a069a4a68eaefe975d25c2916c149f127a34b5eb4089387b4390dafb4f22985ea75484c107b545a04f933eada323c8e42613780c4772b6f2dda4d78988e0a43749032e72c39ab8b32a6d2f3db767dc97c542e95e6b8cc4b65bb5eea8735d65be95d7575be4d858d1276276265da3f6bae9a7e2a003f551931fce2dea2f545c1d475c096335444ba43e77e961c880c780e48442618d8cf70be2145336388b558687bcb21d516fc244a51d5b4c109b51a2c61117e11012c7bf894bf1ec2162522d7326618a28c20c5053c9f5f8f741b004d64a1acc99f9623089dd2f1b71ea1412190640ab40d76975b2549c35450a93fa60463176e13872b459311cee4e2087714074a9a0c28e21c027490ce6e0228468f359d41ac2e74126350c6183c6856d93d46802b3dbaec2867800b3d6f726dba4478d2e07f6a9fe5b58209ad771983a5d2dd944abd3145c68f308c507aad5bc40643214a3e0fc3c6c87ecebd37662852869090f69bee06d0e8c6a4e4b89ac8341cceee83679472f645f18618ee5273d00e9932e3b8e10aebdb9a7b7430cc574673e25013436540ce732851246a0680b30ced852f8cbf094e2ab45a013304cf0bd7ab33aec4fbde11c346b2461c363c165cf1ac94437e4eb8c3162f3af2cb100e51fbd61765e304fd27413aa9fe3ae8fceab446bf16d10277d19b43793b029d297c7e1d2bd2505f8e850fe82ae349a16dfd98a1aa5b62bc84f7e1b1519e7bb1e8fa301da96397a07e5b2c0411a07896261613f42c9cbf5855c4579db0d8ffbbc997d92ec16efb41f88f770240b1eb80326943deabb9606717003d59718e43d407a69157977fea9b58e76d93edc0da2dc5cba18e89342ef9389825a8e47e815850f5d2ee45fe2f76ba0af67558d7e120b2a9641affffbbee76f079db604b2ae1b531451af65be45137c5291313023b10cbd7a6c97c4ceff17374461b2c9be8d0fc083a836be8590b6e09899ee136095fb8684d20f1fb4a89f188eaa918205ca2ebb1da1badd3999880b5a6f5d230378de58311910a6ba99d48e5a6d756310ab3f7452fda5f97e541c09916cea602f15b06a5489ff242cf74a9df5ac4aa339963cece0e17b2ab88deb519b7ff7367c49d891b6148c036845ca5bafa8b9485bc79e38ab8c0bdcb33e261f3974954ce7a41dd5afce4e2cee4929d1dd93a57915b2b2636cd5b4dbe408cadab120b3e5397bae90ef02b64c062069ecc783c02efe921bdfb68e23bb8a8405c885f3de44dd55a959676fd2cffea57de3a1534e4ca459c642a7c459a699ea1a4f8fa26527aced0b393c590d827a0aae06752798dc05eff170ff8f0088c0fb5b9f143035393c33a578c98301e5aee29f334ae6e577cff3e7c8657d088866e41cee20e03986b942cb085e3bed48fdd84741b301b259e877d01c7d325d46fac77117036cb425db1bec0e4ca5f671fa0346c74f31802abd1fc33b2d8f663ee20e037f092a1e1e170b0bfbf7ba35b30fa40a2cc49f1f13f78d2ef84f279aea33b8284e6f4a38ace6eb96397d177d68ecdaab4fc361185576ca3be5b7727b6322d7318ad06031ea032c829bfd877b7b07bc5848e5d64aab90580b5192c9a8efb61e161cad189dc7b850f38d0ef947ffa11fe05b4260f16e4089ef26fc5376c2741e2e7553d55e5d04b7705a80927fefad1b6a2e2526bb5964fd57644eb5d10c3c3f8924efb3f3a68ee24cbb89e82243685484ede992882d4eb1430297bdd2e4ed0a834eaaa0745389cb2e8e1a156cf4375e43248bd6e4ec34c495df69fda19b8e014499d2e431e60af5354a7905072c3601fec578c63662a2daec6fa683647c02a0f3ef513d54f0b0b896580d3caf2ad771168229aaac13d835b6199da2976f4c97af648c11b2129cc5d550115fce5574183672bbe4bd5948265fe9372300fbccf8e43cacbdc1376b2734806fa6a6a85a7d7537371b036b703009738d78a223f8e31df3b8dd0cb6f578e9c1762ecd01358079b5c56650f98f4699af090ad60b2dd72f19cfd7ade9025e5f8ee53a80651badfffc09094e640fb72aed20357e63f877e62b5ed90bf4d5038e467704f1d73c962c50a8afd2e2389ab1f349bd93bcd76e2d0ad1c7e75572f80aba627a7dd19a5afe2491e8fd28ad400dd64263bc06ee519dd2c6f10e81d93ffdd23877802b963c07c9c16bc047c60c6634d9799dd827919112f5be0f62a64843a5e2b879035ea1e44ec646a514e4a8710bc515b5160ef46f377263215556934e04557aeb854783d952663e6b9a9a6ce242926ea6b92cf52f49ef600a88652424ac8f2da4faff03c0237e2cd88e473e62621fd5e588a66dfc8e5145291a667c3c013db32bb1c8031fd282d7f10444146128e9010900c95dded9000e0347d5157006b68673c2e5d916f27ad83d24b34e440701609db34c4d38c06c4ae34190824328649ba0762040b0cbf19984ac4cd06521001ff4b7e542b2d96946778b433c17c0fc81ad44ccc7b96f6bc32627df621ef70de93cf1ffb8d04209f035f1d02d9a8e68b2536912587fb309725a638f30a44c980973bc5b2f50f78db5124f3a12b7f01cfbccf62cac7f8ab57deb4e13e95adb63c5ad561dd1e08eef4aaa2ed003268b213219fc645218eb0e575f6629fc72a801f71679868c2dac46a824769fdfb75b57998aecbb2bcaa81025d2ad534183db2fe399a79bf2e32150c31d9936ed866f9ecf00ccf9ccf016290d6901501c95c9a3c51278497767abe434fa8dda19748288a7668d190fd08acdbd575b6e350eb739c77230cbca15c3a04c1f985be7dea3bda808f820b1846feb6fa66381aa05c09116cfa9593e4479a90e508a153691eb5fdd212a485f08883fca3ff6d1dcdb20cbd29cdb1bfbd1894719ac38863ef0f4318e5e58afffb4e95b486445a90b1acac3d7264bd0f873de9c05672f770d871b4189d0b0428770099760a74ad9ec15f1ada0a8a46459b751429cd35e462e93bd45e1a737b10c067267dc63576eddd968feed39084df234dfdc1ce938a627deab2f8222aca59e55ef1806efea82f60480d4e561b28e5c3ec0661f9878f596f77683a8f6f8598031b967f5d80231a7e94b8543d51fb158f462895a62cfa49e20eb449f4a59fc22d9cdea5fdf84fabc6c16f13f5083824859bffac845cc7f92d18de4deb271348bed83f088ca56c6be59fe89a320af561d4fd5a5148a1cefbdab3373ccc897ac7900c741aa0294ae866f8afc58edea78173808964302151c51e391b73f9572a432ee4c61744e5f76ca45f264df319aa5d8c011243e89f4d7fc237f66745d469c81c4656820a1b3ffdc3e873b3641c5f30550d9401efbea76f1ad02835af5756c2dc9231468c4b2c0652591a682e396e0815e0072adde4375096c422b42464b50cdb53e42267068694a6466a4933e8dcc0685d3942a4619fd3af6118c91eb9e5efdd6e44e416dbc6240726b4c20ff04ca4a0f20f40224a80558331a7d9f404971ca3402c9d8c08cbc174622e25b18d0e619cf10660ec66f64a207b3a07c2c1baf5cf069e5cd75991e036e01717e865e7427ad4e470e11f1444d2de8bd9a701a6c463378d31e25da3975874f089635120f1414e4fc3c37dcae2318f82252e5f6ea48a1f5c5ed9e704a1b091d593970513cc9f68e88711c9a47557df3aa6dc7525c2a48ab80daa20b9eddccc496261db674d0fb6d63b8aac6ea91c78e645c608a24fb8d90938005cdc7522278d5202601613da7003cc0a14ae1b159572ff4db8396a56aa948d6e3875e9fd43029419e2743d49c5143b945e775e065b5f0855381053c002d443b752006033c93c235464fe8165f198111afb3daf60db84ce368a010d0bc76fd67599385eec121f7a6a79e4bb69a101fa31166a49ab265a50507be6f4c08e72755e949656932dca9123eaa77de1d66897e467b301589f1ba7866dfdeb5d105442f1053a93d98a33c92aa217360b8bcd335ddca785a60cbee42f03134e8d1ff34cbc122991a3a0a2782d6684f34089cce0bba1e032ba8edec1bbab4dd2a4de71752d7e3489143f7a6cb0d2d6f9bfffdc00af781c93a1140816ebdba2f75a84d17764d495d4a1cb3e74236d8a15d0413d3a5a5221fbae3d9b87a92da444f8a18848b20180527b3ce26518f716c56c69ed7d2cbcb73720f3aa476883aa90839f471f56d45c3a477a0fc425b46966615504c3025ec11b315cffeb7aaa26db139638245c460190097a44b208a59316ed13f14dbbadeacf220ec744df1f85bf0e4ec36801b7ab118f16708e382c3b4f51f9d017d7fe6845b8abf7e84a08da85ec26ba7f72aa8cba270c622a98d3119edd6d51768c715bbdc4816427cdc1bfbb763729593c289d1be8d5326f723e65b040947fe0b3b25d490cdea8653ae75c54fadee6a43a4c821713d2a6c627a2edc7a6894f529441c306689f19216e57963a314d30be5d52107408919e6c670ccce346a94894f52fb7c66324f06cd4921114352ca017215ff4d18d84d1328cbdf944ade1289a115777d832b5e2bfdb3db9ba502476989ee6a993046a560b22cfd0ba475adbd2cbc5"}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) [ 1212.667391][ T27] audit: type=1400 audit(1705595517.154:187): avc: denied { create } for pid=24179 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1212.667819][T24177] [ 1212.667828][T24177] dump_stack_lvl+0xda/0x130 [ 1212.667853][T24177] dump_stack+0x15/0x20 [ 1212.667872][T24177] should_fail_ex+0x21f/0x230 [ 1212.667891][T24177] ? mas_dup_build+0x1e8/0xd10 [ 1212.708727][T24177] __should_failslab+0x92/0xa0 [ 1212.713503][T24177] should_failslab+0x9/0x20 [ 1212.718018][T24177] kmem_cache_alloc+0x56/0x2d0 [ 1212.722783][T24177] mas_dup_build+0x1e8/0xd10 [ 1212.727408][T24177] __mt_dup+0xa4/0x150 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x58c316efb0c89de2}) 16:31:57 executing program 0: syz_io_uring_setup(0x7a10, &(0x7f0000000040)={0x0, 0x9269, 0x80, 0x3, 0x24c}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x120d, &(0x7f0000000140)={0x0, 0x8c7d, 0x1000, 0x3, 0x32b}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000440)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, r5, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r10, 0x0, 0x0, 0x4, 0x1, 0x0, {0x0, r7}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r11) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r12, 0x541b, 0x0) [ 1212.731514][T24177] copy_mm+0x3e4/0x1060 [ 1212.735668][T24177] ? copy_signal+0x54/0x360 [ 1212.740177][T24177] copy_process+0x1002/0x20a0 [ 1212.744953][T24177] kernel_clone+0x169/0x560 [ 1212.749535][T24177] ? proc_fail_nth_read+0x140/0x140 [ 1212.754763][T24177] ? vfs_write+0x655/0x790 [ 1212.759259][T24177] __x64_sys_clone+0xe8/0x120 [ 1212.763943][T24177] do_syscall_64+0x59/0x120 [ 1212.768450][T24177] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1212.774401][T24177] RIP: 0033:0x7f960fea4da9 16:31:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r3, &(0x7f0000000000)="6342380b6117267c7a916b410fe9c082a060853096e712", 0x17, 0x1, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x101, @mcast1, 0x1000}}, 0x24) 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, &(0x7f0000000000)="a8be64172e0c7f4ecd53fba3a15a744baf1714a420ac63817c374f33bb529bd3a078f1ce3803061d3c0903eb76fe8dc6931f0e0af3d4f7d63bd2b535503b61ab36c216bbc78c02b2a3fb6bdebca09cf6378fe2c0cb7f7d", 0x57, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) 16:31:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) socketpair(0x1a, 0x800, 0x0, &(0x7f0000000000)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:31:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r3, &(0x7f0000000000)="6342380b6117267c7a916b410fe9c082a060853096e712", 0x17, 0x1, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x101, @mcast1, 0x1000}}, 0x24) 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="04d3e5302b9445f1a73aa31ec38935c1b6c257a9c7cfec8778a8857fd261f126bc75118eb612a5b516e690a1e095dcaea4c36d8cc80800679da85b009e5ed819cab56febd2331074fbec4b2c7204e9b9c9519f914a2833ef6c3837b348561d8273c43e3f0251a4697e1d04d3974b", 0x6e, 0x80, 0x0, 0x0) [ 1212.778816][T24177] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1212.798429][T24177] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1212.806850][T24177] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1212.814844][T24177] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1212.822817][T24177] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="04d3e5302b9445f1a73aa31ec38935c1b6c257a9c7cfec8778a8857fd261f126bc75118eb612a5b516e690a1e095dcaea4c36d8cc80800679da85b009e5ed819cab56febd2331074fbec4b2c7204e9b9c9519f914a2833ef6c3837b348561d8273c43e3f0251a4697e1d04d3974b", 0x6e, 0x80, 0x0, 0x0) (async) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="04d3e5302b9445f1a73aa31ec38935c1b6c257a9c7cfec8778a8857fd261f126bc75118eb612a5b516e690a1e095dcaea4c36d8cc80800679da85b009e5ed819cab56febd2331074fbec4b2c7204e9b9c9519f914a2833ef6c3837b348561d8273c43e3f0251a4697e1d04d3974b", 0x6e, 0x80, 0x0, 0x0) 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="04d3e5302b9445f1a73aa31ec38935c1b6c257a9c7cfec8778a8857fd261f126bc75118eb612a5b516e690a1e095dcaea4c36d8cc80800679da85b009e5ed819cab56febd2331074fbec4b2c7204e9b9c9519f914a2833ef6c3837b348561d8273c43e3f0251a4697e1d04d3974b", 0x6e, 0x80, 0x0, 0x0) (async) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="04d3e5302b9445f1a73aa31ec38935c1b6c257a9c7cfec8778a8857fd261f126bc75118eb612a5b516e690a1e095dcaea4c36d8cc80800679da85b009e5ed819cab56febd2331074fbec4b2c7204e9b9c9519f914a2833ef6c3837b348561d8273c43e3f0251a4697e1d04d3974b", 0x6e, 0x80, 0x0, 0x0) 16:31:57 executing program 0: syz_io_uring_setup(0x7a10, &(0x7f0000000040)={0x0, 0x9269, 0x80, 0x3, 0x24c}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x120d, &(0x7f0000000140)={0x0, 0x8c7d, 0x1000, 0x3, 0x32b}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r3, r1, &(0x7f0000000440)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, r5, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}) (async, rerun: 32) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r10 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r10, 0x0, 0x0, 0x4, 0x1, 0x0, {0x0, r7}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r11) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r12, 0x541b, 0x0) 16:31:57 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x58c316efb0c89de2}) 16:31:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r3, &(0x7f0000000000)="6342380b6117267c7a916b410fe9c082a060853096e712", 0x17, 0x1, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x101, @mcast1, 0x1000}}, 0x24) (async) sendto$rxrpc(r3, &(0x7f0000000000)="6342380b6117267c7a916b410fe9c082a060853096e712", 0x17, 0x1, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x101, @mcast1, 0x1000}}, 0x24) [ 1212.830856][T24177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1212.838823][T24177] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1212.846798][T24177] 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) 16:31:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x100) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8883, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008094}, 0x20004040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) 16:31:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a1600) r1 = getpid() r2 = getpid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r4 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r4, r4, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:57 executing program 0: syz_io_uring_setup(0x7a10, &(0x7f0000000040)={0x0, 0x9269, 0x80, 0x3, 0x24c}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x120d, &(0x7f0000000140)={0x0, 0x8c7d, 0x1000, 0x3, 0x32b}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) (async, rerun: 64) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000440)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, r5, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r10 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r10, 0x0, 0x0, 0x4, 0x1, 0x0, {0x0, r7}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r11) (async, rerun: 64) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r12, 0x541b, 0x0) 16:31:57 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 19) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x58c316efb0c89de2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x58c316efb0c89de2}) (async) 16:31:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x100) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8883, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008094}, 0x20004040) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008094}, 0x20004040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) [ 1212.978819][T24241] FAULT_INJECTION: forcing a failure. [ 1212.978819][T24241] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.991503][T24241] CPU: 0 PID: 24241 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1213.001576][T24241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1213.011689][T24241] Call Trace: [ 1213.014967][T24241] [ 1213.017949][T24241] dump_stack_lvl+0xda/0x130 [ 1213.022639][T24241] dump_stack+0x15/0x20 [ 1213.026793][T24241] should_fail_ex+0x21f/0x230 [ 1213.031474][T24241] ? copy_sighand+0x52/0x1a0 [ 1213.036067][T24241] __should_failslab+0x92/0xa0 [ 1213.040902][T24241] should_failslab+0x9/0x20 [ 1213.045426][T24241] kmem_cache_alloc+0x56/0x2d0 [ 1213.050232][T24241] copy_sighand+0x52/0x1a0 [ 1213.054718][T24241] copy_process+0xfb4/0x20a0 [ 1213.059314][T24241] kernel_clone+0x169/0x560 [ 1213.063823][T24241] ? proc_fail_nth_read+0x140/0x140 [ 1213.069102][T24241] ? vfs_write+0x655/0x790 [ 1213.073566][T24241] __x64_sys_clone+0xe8/0x120 [ 1213.078265][T24241] do_syscall_64+0x59/0x120 [ 1213.082785][T24241] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1213.088756][T24241] RIP: 0033:0x7f960fea4da9 [ 1213.093175][T24241] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1213.112879][T24241] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1213.121348][T24241] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 16:31:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a1600) r1 = getpid() r2 = getpid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r4 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r4, r4, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a1600) (async) getpid() (async) getpid() (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) (async) epoll_create1(0x80000) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r4, r4, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) 16:31:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x100) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8883, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008094}, 0x20004040) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x81, 0x1}, 'port0\x00', 0x3, 0x10000, 0xff, 0x2, 0x80, 0x3, 0x0, 0x0, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0x83}, 0x1}) 16:31:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a1600) (async, rerun: 32) r1 = getpid() (rerun: 32) r2 = getpid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r4 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r4, r4, 0x1}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (rerun: 64) 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x81, 0x1}, 'port0\x00', 0x3, 0x10000, 0xff, 0x2, 0x80, 0x3, 0x0, 0x0, 0x4, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0x83}, 0x1}) [ 1213.129338][T24241] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1213.137381][T24241] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1213.145373][T24241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1213.153368][T24241] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1213.161441][T24241] 16:31:57 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x3], 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, 0x24) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x4], 0x2) recvfrom$rxrpc(r1, &(0x7f00000000c0)=""/220, 0xdc, 0x1, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x81, 0x1}, 'port0\x00', 0x3, 0x10000, 0xff, 0x2, 0x80, 0x3, 0x0, 0x0, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0x83}, 0x1}) 16:31:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = syz_io_uring_setup(0xa17, &(0x7f0000000000)={0x0, 0x419, 0x4, 0x1, 0x2d7}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x497b, &(0x7f0000000100)={0x0, 0x92d9, 0x200, 0x3, 0x27c}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x401c5820, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000480)=0x10050a4, 0x4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r5, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f00000000c0)={[0x80000001]}, 0x8) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f0000000200)=@isdn={0x22, 0x9, 0xe0, 0x5}}) syz_io_uring_setup(0x4720, &(0x7f0000000340)={0x0, 0x28f2, 0x400, 0x0, 0xd0, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000004c0)="9565345f2207f82eb806945720869a5e0e7d36e76770c73b8ce6d1b0617888baa766fc3a") read$nci(r5, &(0x7f00000002c0)=""/105, 0x69) 16:31:57 executing program 3: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) 16:31:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x761d42) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:57 executing program 3: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) 16:31:57 executing program 3: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) (async) [ 1213.257257][T24276] FAULT_INJECTION: forcing a failure. [ 1213.257257][T24276] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.269922][T24276] CPU: 1 PID: 24276 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1213.279998][T24276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1213.290207][T24276] Call Trace: [ 1213.293488][T24276] [ 1213.296439][T24276] dump_stack_lvl+0xda/0x130 [ 1213.301043][T24276] dump_stack+0x15/0x20 16:31:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x3], 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) (async, rerun: 64) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, 0x24) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x4], 0x2) recvfrom$rxrpc(r1, &(0x7f00000000c0)=""/220, 0xdc, 0x1, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 16:31:57 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = syz_io_uring_setup(0xa17, &(0x7f0000000000)={0x0, 0x419, 0x4, 0x1, 0x2d7}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x497b, &(0x7f0000000100)={0x0, 0x92d9, 0x200, 0x3, 0x27c}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x401c5820, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000480)=0x10050a4, 0x4) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r5, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f00000000c0)={[0x80000001]}, 0x8) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f0000000200)=@isdn={0x22, 0x9, 0xe0, 0x5}}) syz_io_uring_setup(0x4720, &(0x7f0000000340)={0x0, 0x28f2, 0x400, 0x0, 0xd0, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000004c0)="9565345f2207f82eb806945720869a5e0e7d36e76770c73b8ce6d1b0617888baa766fc3a") read$nci(r5, &(0x7f00000002c0)=""/105, 0x69) 16:31:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x761d42) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x24) 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x24) [ 1213.305257][T24276] should_fail_ex+0x21f/0x230 [ 1213.309977][T24276] ? copy_mm+0xe1/0x1060 [ 1213.314231][T24276] __should_failslab+0x92/0xa0 [ 1213.319005][T24276] should_failslab+0x9/0x20 [ 1213.323539][T24276] kmem_cache_alloc+0x56/0x2d0 [ 1213.328323][T24276] copy_mm+0xe1/0x1060 [ 1213.332475][T24276] ? copy_signal+0x54/0x360 [ 1213.337018][T24276] ? hrtimer_init+0x104/0x1f0 [ 1213.341742][T24276] ? __init_rwsem+0x5d/0x70 [ 1213.346251][T24276] ? copy_signal+0x338/0x360 [ 1213.350844][T24276] copy_process+0x1002/0x20a0 [ 1213.355599][T24276] kernel_clone+0x169/0x560 [ 1213.360119][T24276] ? proc_fail_nth_read+0x140/0x140 [ 1213.365402][T24276] ? vfs_write+0x655/0x790 [ 1213.369905][T24276] __x64_sys_clone+0xe8/0x120 [ 1213.374639][T24276] do_syscall_64+0x59/0x120 [ 1213.379199][T24276] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1213.385096][T24276] RIP: 0033:0x7f960fea4da9 [ 1213.389504][T24276] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1213.409107][T24276] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1213.417536][T24276] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1213.425502][T24276] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1213.433492][T24276] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1213.441504][T24276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1213.449477][T24276] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 16:31:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) (rerun: 32) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x24) 16:31:57 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x761d42) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x761d42) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) 16:31:58 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x3], 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, 0x24) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x4], 0x2) (async) recvfrom$rxrpc(r1, &(0x7f00000000c0)=""/220, 0xdc, 0x1, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 16:31:58 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = syz_io_uring_setup(0xa17, &(0x7f0000000000)={0x0, 0x419, 0x4, 0x1, 0x2d7}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x497b, &(0x7f0000000100)={0x0, 0x92d9, 0x200, 0x3, 0x27c}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x401c5820, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000480)=0x10050a4, 0x4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r5, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f00000000c0)={[0x80000001]}, 0x8) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f0000000200)=@isdn={0x22, 0x9, 0xe0, 0x5}}) syz_io_uring_setup(0x4720, &(0x7f0000000340)={0x0, 0x28f2, 0x400, 0x0, 0xd0, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000004c0)="9565345f2207f82eb806945720869a5e0e7d36e76770c73b8ce6d1b0617888baa766fc3a") read$nci(r5, &(0x7f00000002c0)=""/105, 0x69) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) syz_io_uring_setup(0xa17, &(0x7f0000000000)={0x0, 0x419, 0x4, 0x1, 0x2d7}, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x497b, &(0x7f0000000100)={0x0, 0x92d9, 0x200, 0x3, 0x27c}, &(0x7f0000000180), &(0x7f00000001c0)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x401c5820, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000480)=0x10050a4, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) epoll_pwait(r5, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f00000000c0)={[0x80000001]}, 0x8) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f0000000200)=@isdn={0x22, 0x9, 0xe0, 0x5}}) (async) syz_io_uring_setup(0x4720, &(0x7f0000000340)={0x0, 0x28f2, 0x400, 0x0, 0xd0, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000004c0)="9565345f2207f82eb806945720869a5e0e7d36e76770c73b8ce6d1b0617888baa766fc3a") (async) read$nci(r5, &(0x7f00000002c0)=""/105, 0x69) (async) [ 1213.457506][T24276] 16:31:58 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x2, 0x3f}, 'port1\x00', 0x24, 0x868, 0x7, 0x0, 0x0, 0xfffff2b9, 0x6, 0x0, 0x4, 0x8}) 16:31:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x401c5820, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c045}, 0x10010) socket$l2tp(0x2, 0x2, 0x73) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) 16:31:58 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:31:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x401c5820, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c045}, 0x10010) (async) socket$l2tp(0x2, 0x2, 0x73) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) 16:32:00 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x401c5820, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c045}, 0x10010) socket$l2tp(0x2, 0x2, 0x73) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x401c5820, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c045}, 0x10010) (async) socket$l2tp(0x2, 0x2, 0x73) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) 16:32:00 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:00 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 21) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:00 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x2, 0x3f}, 'port1\x00', 0x24, 0x868, 0x7, 0x0, 0x0, 0xfffff2b9, 0x6, 0x0, 0x4, 0x8}) 16:32:00 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40086602, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2200) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x12000) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @GTPA_FLOW={0x0, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x88c1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:00 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40086602, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:00 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:00 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1000000c}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:00 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40086602, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:00 executing program 5: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x23) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r3, @ANYBLOB="01"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc5e7ec29d49d2d1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x20044000) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x200, @local, 0xffff0001}}, 0x24) 16:32:00 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:00 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1000000c}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:00 executing program 5: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x23) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r3, @ANYBLOB="01"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc5e7ec29d49d2d1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x20044000) (async) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x200, @local, 0xffff0001}}, 0x24) 16:32:00 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:00 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:00 executing program 5: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x23) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r3, @ANYBLOB="01"], 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc5e7ec29d49d2d1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x20044000) (async, rerun: 64) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x200, @local, 0xffff0001}}, 0x24) (rerun: 64) 16:32:00 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = syz_clone(0x2a0000, &(0x7f0000000000)="26b504053a14d89faedd3493b7105184afa008a4695c169f1718120979b2133382aee4faff53b4b5413a4a473a78d7", 0x2f, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a0ea33db851b1fb2b87c3898be9526f83df7102ad8dd0b8cbe5d61fc5b7548cc04d2239175e1737d4603a055c1b0a1acf6cdd36033543e806ea0719bc748062a21866c8918f81eb4dbacc5fa750f81d963e290dff874fb") r2 = getpid() r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x40049409, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r0], 0x1) r4 = epoll_create(0x7) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r4, r0, 0x2}) 16:32:00 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1000000c}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:00 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x2, 0x3f}, 'port1\x00', 0x24, 0x868, 0x7, 0x0, 0x0, 0xfffff2b9, 0x6, 0x0, 0x4, 0x8}) 16:32:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r4, 0x20, 0x3, 0x0, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x890) r6 = socket$rxrpc(0x21, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x1e4, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b0e1e7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x161a14b9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c8e78e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d13b995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d397aa1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7774230d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e2c5f33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x673d4034}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd3165eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13723ee4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d1470a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c4490f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36aa362a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a59201b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2339e325}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c0f656}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a014c4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45307aa5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48bafad4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f77f923}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56853de4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71d81e5b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1095}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10170b59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfba8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc75}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4aa7f13b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd266}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b4009da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x159d4854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x315d390f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ae280d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x589c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb318}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f6f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18c9}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0xc0}, 0x8805) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0x3], 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, 0x0, 0x0) 16:32:00 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r1 = syz_clone(0x2a0000, &(0x7f0000000000)="26b504053a14d89faedd3493b7105184afa008a4695c169f1718120979b2133382aee4faff53b4b5413a4a473a78d7", 0x2f, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a0ea33db851b1fb2b87c3898be9526f83df7102ad8dd0b8cbe5d61fc5b7548cc04d2239175e1737d4603a055c1b0a1acf6cdd36033543e806ea0719bc748062a21866c8918f81eb4dbacc5fa750f81d963e290dff874fb") (async) r2 = getpid() (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x40049409, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r0], 0x1) (async) r4 = epoll_create(0x7) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r4, r0, 0x2}) [ 1216.349800][T24379] FAULT_INJECTION: forcing a failure. [ 1216.349800][T24379] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.362442][T24379] CPU: 1 PID: 24379 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1216.372512][T24379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1216.382633][T24379] Call Trace: [ 1216.386007][T24379] [ 1216.388940][T24379] dump_stack_lvl+0xda/0x130 [ 1216.393618][T24379] dump_stack+0x15/0x20 [ 1216.397809][T24379] should_fail_ex+0x21f/0x230 [ 1216.402495][T24379] ? vm_area_dup+0x98/0x130 [ 1216.407045][T24379] __should_failslab+0x92/0xa0 [ 1216.411870][T24379] should_failslab+0x9/0x20 [ 1216.416377][T24379] kmem_cache_alloc+0x56/0x2d0 [ 1216.421143][T24379] vm_area_dup+0x98/0x130 [ 1216.425565][T24379] copy_mm+0x67b/0x1060 [ 1216.429802][T24379] copy_process+0x1002/0x20a0 [ 1216.434511][T24379] kernel_clone+0x169/0x560 [ 1216.439018][T24379] ? proc_fail_nth_read+0x140/0x140 [ 1216.444268][T24379] ? vfs_write+0x655/0x790 [ 1216.448752][T24379] __x64_sys_clone+0xe8/0x120 [ 1216.453434][T24379] do_syscall_64+0x59/0x120 [ 1216.457949][T24379] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1216.463897][T24379] RIP: 0033:0x7f960fea4da9 [ 1216.468425][T24379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1216.488046][T24379] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x26288800, &(0x7f0000000080)="73af6ce7049d684bf19e3b5e95e73d54dd8497cc6a3649197afb2f3e96f35ad987a7505d0f2ad120aed7da26e7692ad41a5e76830e5d2a17f8adcd2bbb77f1d893d7a2d4364959b48d5b90093397d2c82750ac3f5c5c6875e5879fe8b9e08c4913a2b00d4dc388b2044507e4fa22a15b6fa9bf7c98e5f780e570b5f0731e35ba7c11fca8d0e10cbef6e48e2b16b0ed16fe733d88eeb001bc8a3b1caa8428d80bf043ad64eb8c981a83ab9bf742210e058d23d71918fef995d2cf2e769fc47f3e74f65800ba28278623bd92103f11fe3fb842a261ae0baaa225e5041f1613ae8790bf403305043d59", 0xe8, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="56adb00523a93319c5b7f1ce71e72e1938ce3c4245e7281aefe945eea87b4fb653b4cac8ee150ba97df36ed478ba5cf1e5600bd87a2f28fef12f66262870fd9c26e090f8d65ce921e36f55") ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x4b47, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f0000000040)={r3, r0, 0xdda1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x200}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x840) 16:32:01 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x8, 0x7, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:01 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 22) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x26288800, &(0x7f0000000080)="73af6ce7049d684bf19e3b5e95e73d54dd8497cc6a3649197afb2f3e96f35ad987a7505d0f2ad120aed7da26e7692ad41a5e76830e5d2a17f8adcd2bbb77f1d893d7a2d4364959b48d5b90093397d2c82750ac3f5c5c6875e5879fe8b9e08c4913a2b00d4dc388b2044507e4fa22a15b6fa9bf7c98e5f780e570b5f0731e35ba7c11fca8d0e10cbef6e48e2b16b0ed16fe733d88eeb001bc8a3b1caa8428d80bf043ad64eb8c981a83ab9bf742210e058d23d71918fef995d2cf2e769fc47f3e74f65800ba28278623bd92103f11fe3fb842a261ae0baaa225e5041f1613ae8790bf403305043d59", 0xe8, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="56adb00523a93319c5b7f1ce71e72e1938ce3c4245e7281aefe945eea87b4fb653b4cac8ee150ba97df36ed478ba5cf1e5600bd87a2f28fef12f66262870fd9c26e090f8d65ce921e36f55") (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x4b47, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f0000000040)={r3, r0, 0xdda1}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r4) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x200}) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x840) 16:32:01 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x8, 0x7, 0x3}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r4, 0x20, 0x3, 0x0, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x890) r6 = socket$rxrpc(0x21, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x1e4, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b0e1e7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x161a14b9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c8e78e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d13b995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d397aa1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7774230d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e2c5f33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x673d4034}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd3165eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13723ee4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d1470a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c4490f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36aa362a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a59201b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2339e325}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c0f656}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a014c4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45307aa5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48bafad4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f77f923}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56853de4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71d81e5b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1095}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10170b59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfba8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc75}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4aa7f13b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd266}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b4009da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x159d4854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x315d390f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ae280d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x589c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb318}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f6f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18c9}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0xc0}, 0x8805) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0x3], 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, 0x0, 0x0) [ 1216.496479][T24379] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1216.504531][T24379] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1216.512591][T24379] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1216.520646][T24379] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1216.528616][T24379] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1216.536612][T24379] 16:32:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x840) (async) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r4, 0x20, 0x3, 0x0, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x890) r6 = socket$rxrpc(0x21, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x1e4, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b0e1e7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x161a14b9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c8e78e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d13b995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d397aa1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7774230d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e2c5f33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x673d4034}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd3165eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13723ee4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d1470a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c4490f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36aa362a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a59201b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2339e325}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c0f656}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a014c4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45307aa5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48bafad4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f77f923}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56853de4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71d81e5b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1095}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10170b59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfba8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc75}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4aa7f13b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd266}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b4009da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x159d4854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x315d390f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ae280d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x589c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb318}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f6f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18c9}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0xc0}, 0x8805) (async, rerun: 32) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0x3], 0x2) (rerun: 32) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, 0x0, 0x0) 16:32:01 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x8, 0x7, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x8, 0x7, 0x3}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) 16:32:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0) (async) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x26288800, &(0x7f0000000080)="73af6ce7049d684bf19e3b5e95e73d54dd8497cc6a3649197afb2f3e96f35ad987a7505d0f2ad120aed7da26e7692ad41a5e76830e5d2a17f8adcd2bbb77f1d893d7a2d4364959b48d5b90093397d2c82750ac3f5c5c6875e5879fe8b9e08c4913a2b00d4dc388b2044507e4fa22a15b6fa9bf7c98e5f780e570b5f0731e35ba7c11fca8d0e10cbef6e48e2b16b0ed16fe733d88eeb001bc8a3b1caa8428d80bf043ad64eb8c981a83ab9bf742210e058d23d71918fef995d2cf2e769fc47f3e74f65800ba28278623bd92103f11fe3fb842a261ae0baaa225e5041f1613ae8790bf403305043d59", 0xe8, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="56adb00523a93319c5b7f1ce71e72e1938ce3c4245e7281aefe945eea87b4fb653b4cac8ee150ba97df36ed478ba5cf1e5600bd87a2f28fef12f66262870fd9c26e090f8d65ce921e36f55") (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x4b47, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f0000000040)={r3, r0, 0xdda1}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r4) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x200}) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x840) 16:32:01 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x8c}, 'port1\x00', 0x12, 0x40000, 0x9, 0x3, 0x6, 0x229, 0x20, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) [ 1216.634970][T24418] FAULT_INJECTION: forcing a failure. [ 1216.634970][T24418] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.647815][T24418] CPU: 1 PID: 24418 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1216.657948][T24418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1216.668011][T24418] Call Trace: [ 1216.671330][T24418] [ 1216.674354][T24418] dump_stack_lvl+0xda/0x130 [ 1216.678959][T24418] dump_stack+0x15/0x20 [ 1216.683116][T24418] should_fail_ex+0x21f/0x230 [ 1216.687854][T24418] ? vm_area_dup+0x2c/0x130 [ 1216.692374][T24418] __should_failslab+0x92/0xa0 [ 1216.697234][T24418] should_failslab+0x9/0x20 [ 1216.701788][T24418] kmem_cache_alloc+0x56/0x2d0 [ 1216.706564][T24418] vm_area_dup+0x2c/0x130 [ 1216.710989][T24418] copy_mm+0x67b/0x1060 [ 1216.715165][T24418] copy_process+0x1002/0x20a0 [ 1216.719979][T24418] kernel_clone+0x169/0x560 [ 1216.724478][T24418] ? proc_fail_nth_read+0x140/0x140 [ 1216.729704][T24418] ? vfs_write+0x655/0x790 16:32:01 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = syz_clone(0x2a0000, &(0x7f0000000000)="26b504053a14d89faedd3493b7105184afa008a4695c169f1718120979b2133382aee4faff53b4b5413a4a473a78d7", 0x2f, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a0ea33db851b1fb2b87c3898be9526f83df7102ad8dd0b8cbe5d61fc5b7548cc04d2239175e1737d4603a055c1b0a1acf6cdd36033543e806ea0719bc748062a21866c8918f81eb4dbacc5fa750f81d963e290dff874fb") r2 = getpid() openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x40049409, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r0], 0x1) r4 = epoll_create(0x7) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r4, r0, 0x2}) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r4, r0, 0x2}) 16:32:01 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x8c}, 'port1\x00', 0x12, 0x40000, 0x9, 0x3, 0x6, 0x229, 0x20, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x8c}, 'port1\x00', 0x12, 0x40000, 0x9, 0x3, 0x6, 0x229, 0x20, 0x0, 0x0, 0x3}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) 16:32:01 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0), 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x33, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x50fa99c0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x2, 0x0, 0x6, 0x1, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x3, 0x0, 0x6, 0x6, 0x1, 0xfffffffffffffff4}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6857}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x44}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x0, 0x3, 0x1, 0x0, 0x8, 0x6, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x98, &(0x7f00000003c0)=""/152, 0x41000, 0x1, '\x00', r4, 0x1a, r1, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0xfffffffb, 0x6}, 0x10, 0xc2b4, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0x6, 0xa}, {0x1, 0x2, 0xf, 0xc}, {0x5, 0x5, 0x0, 0xb}, {0x1, 0x3, 0xf, 0x1f9ee8dd0e98616e}, {0x3, 0x2, 0x1, 0x5}], 0x10, 0x7}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000041) 16:32:01 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x410000) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x100, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) [ 1216.734271][T24418] __x64_sys_clone+0xe8/0x120 [ 1216.738950][T24418] do_syscall_64+0x59/0x120 [ 1216.743459][T24418] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1216.749515][T24418] RIP: 0033:0x7f960fea4da9 [ 1216.753970][T24418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1216.773585][T24418] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:01 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0), 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x33, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x50fa99c0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x2, 0x0, 0x6, 0x1, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x3, 0x0, 0x6, 0x6, 0x1, 0xfffffffffffffff4}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6857}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x44}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x0, 0x3, 0x1, 0x0, 0x8, 0x6, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x98, &(0x7f00000003c0)=""/152, 0x41000, 0x1, '\x00', r4, 0x1a, r1, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0xfffffffb, 0x6}, 0x10, 0xc2b4, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0x6, 0xa}, {0x1, 0x2, 0xf, 0xc}, {0x5, 0x5, 0x0, 0xb}, {0x1, 0x3, 0xf, 0x1f9ee8dd0e98616e}, {0x3, 0x2, 0x1, 0x5}], 0x10, 0x7}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000041) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000041) [ 1216.782002][T24418] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1216.789985][T24418] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1216.797981][T24418] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1216.805956][T24418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1216.814012][T24418] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1216.822021][T24418] 16:32:09 executing program 5: socket$rxrpc(0x21, 0x2, 0x2) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1], 0x2) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0), 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0), 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x33, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x50fa99c0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x2, 0x0, 0x6, 0x1, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x3, 0x0, 0x6, 0x6, 0x1, 0xfffffffffffffff4}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6857}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x44}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x0, 0x3, 0x1, 0x0, 0x8, 0x6, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x98, &(0x7f00000003c0)=""/152, 0x41000, 0x1, '\x00', r4, 0x1a, r1, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0xfffffffb, 0x6}, 0x10, 0xc2b4, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0x6, 0xa}, {0x1, 0x2, 0xf, 0xc}, {0x5, 0x5, 0x0, 0xb}, {0x1, 0x3, 0xf, 0x1f9ee8dd0e98616e}, {0x3, 0x2, 0x1, 0x5}], 0x10, 0x7}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000041) 16:32:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2200) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x12000) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @GTPA_FLOW={0x0, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x88c1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:09 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x410000) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x100, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:09 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x8c}, 'port1\x00', 0x12, 0x40000, 0x9, 0x3, 0x6, 0x229, 0x20, 0x0, 0x0, 0x3}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:09 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 23) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x80000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x81}, 0x0, 0x0, 0xfffffffc, {}, 0xfa}) write$nci(0xffffffffffffffff, &(0x7f0000000100)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x80, {0xf2, 0x81, "c27830038f3a3528bb6f0240d5c54f4529bfce0f64c60b760197b1e6430727b17f307f83e7b894fa7c4a635f7839cac81d1828d8f28f19ee609b357f8346a0ea26ea598dcc2176a419d9a14fd887b8766d8bf5fc2583ea8089bc82796f736a3233"}}, 0x66) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x1, 0xb0}, 'port1\x00', 0x80, 0x450, 0x10000, 0x4, 0x1, 0x8, 0x6, 0x0, 0x7}) 16:32:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (rerun: 32) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x80000000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x81}, 0x0, 0x0, 0xfffffffc, {}, 0xfa}) (async) write$nci(0xffffffffffffffff, &(0x7f0000000100)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x80, {0xf2, 0x81, "c27830038f3a3528bb6f0240d5c54f4529bfce0f64c60b760197b1e6430727b17f307f83e7b894fa7c4a635f7839cac81d1828d8f28f19ee609b357f8346a0ea26ea598dcc2176a419d9a14fd887b8766d8bf5fc2583ea8089bc82796f736a3233"}}, 0x66) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x1, 0xb0}, 'port1\x00', 0x80, 0x450, 0x10000, 0x4, 0x1, 0x8, 0x6, 0x0, 0x7}) 16:32:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2200) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x12000) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @GTPA_FLOW={0x0, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x88c1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:09 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x410000) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x100, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:09 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', r0) socketpair(0x29, 0x80000, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x10000000}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) r3 = socket$rxrpc(0x21, 0x2, 0x2) socketpair(0x1e, 0x800, 0xfff, &(0x7f0000000180)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0) [ 1225.030922][ T27] audit: type=1400 audit(1705595529.524:188): avc: denied { map } for pid=24454 comm="syz-executor.3" path="/dev/hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1225.055535][T24458] FAULT_INJECTION: forcing a failure. [ 1225.055535][T24458] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.068269][T24458] CPU: 1 PID: 24458 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 16:32:09 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', r0) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', r0) socketpair(0x29, 0x80000, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x10000000}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) r3 = socket$rxrpc(0x21, 0x2, 0x2) socketpair(0x1e, 0x800, 0xfff, &(0x7f0000000180)) (async) socketpair(0x1e, 0x800, 0xfff, &(0x7f0000000180)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0) 16:32:09 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4102) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:09 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='@+\x001\xf9\x86\xad\x94\x83\x9b\x1bq\xf4\xb5\xe78\xad\x01\xeai\xdc\x9a{2\x87U\xaf\xa6j\"\xac\xdc\xcdN\x0f\xf0\x94I2_\xd32\xb4\xafy\xc1\x8cr\xe0j\xf4/\x19\xc2\x9e\x14\x02\xab\'\xdb\xb9\xb7T\xc8=\x06\xb8eM\xb2\xb2\xf9\xf9hQ?\v', &(0x7f0000000080)='./file0\x00', r0) socketpair(0x29, 0x80000, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x40000000}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x10000000}) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) (rerun: 32) r3 = socket$rxrpc(0x21, 0x2, 0x2) socketpair(0x1e, 0x800, 0xfff, &(0x7f0000000180)) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0) [ 1225.078349][T24458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1225.088415][T24458] Call Trace: [ 1225.091706][T24458] [ 1225.094638][T24458] dump_stack_lvl+0xda/0x130 [ 1225.099348][T24458] dump_stack+0x15/0x20 [ 1225.103628][T24458] should_fail_ex+0x21f/0x230 [ 1225.108380][T24458] ? vm_area_dup+0x98/0x130 [ 1225.112897][T24458] __should_failslab+0x92/0xa0 [ 1225.117741][T24458] should_failslab+0x9/0x20 [ 1225.122329][T24458] kmem_cache_alloc+0x56/0x2d0 [ 1225.127119][T24458] vm_area_dup+0x98/0x130 16:32:09 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4102) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) [ 1225.131477][T24458] copy_mm+0x67b/0x1060 [ 1225.135674][T24458] copy_process+0x1002/0x20a0 [ 1225.140373][T24458] kernel_clone+0x169/0x560 [ 1225.141365][ T27] audit: type=1400 audit(1705595529.584:189): avc: denied { create } for pid=24467 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1225.144865][T24458] ? proc_fail_nth_read+0x140/0x140 [ 1225.144894][T24458] ? vfs_write+0x655/0x790 16:32:09 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4102) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:09 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4000) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, ']^-/)$$(/(.'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004040) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xffffffff, 0x6, 0x1, 0x12af, 0x0, "aa87a48ce242ad02b0d87c26e497bc97f5afdd", 0x101, 0xdfe}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:32:09 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x3f, 0x1}, 'port0\x00', 0x20, 0x30, 0x9eb, 0x3843, 0x8, 0x8, 0x4, 0x0, 0x4, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x80000000, 0xffff}) [ 1225.164644][ T27] audit: type=1400 audit(1705595529.584:190): avc: denied { create } for pid=24467 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1225.169743][T24458] __x64_sys_clone+0xe8/0x120 [ 1225.198671][T24458] do_syscall_64+0x59/0x120 [ 1225.203195][T24458] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1225.209107][T24458] RIP: 0033:0x7f960fea4da9 16:32:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)={{0xbf}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x8, 0xff}, 0x1, 0x5347, 0x5, {0x1, 0xff}, 0x20, 0x10001}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x5, 0x7}, 'port1\x00', 0x0, 0x84a, 0xfffffff9, 0x401, 0x0, 0xc44}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) 16:32:09 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe4400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x10800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x4, 0x8001, 0x0, {0xe02, 0x800}, 0x9, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x183) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x1, 0x8}) 16:32:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)={{0xbf}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x8, 0xff}, 0x1, 0x5347, 0x5, {0x1, 0xff}, 0x20, 0x10001}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x5, 0x7}, 'port1\x00', 0x0, 0x84a, 0xfffffff9, 0x401, 0x0, 0xc44}) (async, rerun: 64) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) [ 1225.213538][T24458] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1225.233167][T24458] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1225.241603][T24458] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1225.249660][T24458] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1225.257640][T24458] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1225.265627][T24458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1225.273627][T24458] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 16:32:09 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 24) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x80000000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x81}, 0x0, 0x0, 0xfffffffc, {}, 0xfa}) write$nci(0xffffffffffffffff, &(0x7f0000000100)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x80, {0xf2, 0x81, "c27830038f3a3528bb6f0240d5c54f4529bfce0f64c60b760197b1e6430727b17f307f83e7b894fa7c4a635f7839cac81d1828d8f28f19ee609b357f8346a0ea26ea598dcc2176a419d9a14fd887b8766d8bf5fc2583ea8089bc82796f736a3233"}}, 0x66) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x1, 0xb0}, 'port1\x00', 0x80, 0x450, 0x10000, 0x4, 0x1, 0x8, 0x6, 0x0, 0x7}) [ 1225.281598][T24458] 16:32:09 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x3f, 0x1}, 'port0\x00', 0x20, 0x30, 0x9eb, 0x3843, 0x8, 0x8, 0x4, 0x0, 0x4, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x80000000, 0xffff}) 16:32:09 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4000) (async) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, ']^-/)$$(/(.'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004040) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xffffffff, 0x6, 0x1, 0x12af, 0x0, "aa87a48ce242ad02b0d87c26e497bc97f5afdd", 0x101, 0xdfe}) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:32:09 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe4400) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x10800) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x4, 0x8001, 0x0, {0xe02, 0x800}, 0x9, 0x1}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async, rerun: 32) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x183) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x1, 0x8}) 16:32:09 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)={{0xbf}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x8, 0xff}, 0x1, 0x5347, 0x5, {0x1, 0xff}, 0x20, 0x10001}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x5, 0x7}, 'port1\x00', 0x0, 0x84a, 0xfffffff9, 0x401, 0x0, 0xc44}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x5, 0x7}, 'port1\x00', 0x0, 0x84a, 0xfffffff9, 0x401, 0x0, 0xc44}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) 16:32:09 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe4400) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x10800) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x4, 0x8001, 0x0, {0xe02, 0x800}, 0x9, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x183) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x1, 0x8}) 16:32:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x28, 0x10}, 0x1, 0x0, 0x4, {0x0, 0xe1}, 0x0, 0x7}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x301000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x1}, @register_looper, @exit_looper], 0x7, 0x0, &(0x7f0000000100)="5970bfbe1b160e"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x4, 0x0, 0x7ff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0xffffff80, 0x1000, 0x4}) 16:32:09 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x3f, 0x1}, 'port0\x00', 0x20, 0x30, 0x9eb, 0x3843, 0x8, 0x8, 0x4, 0x0, 0x4, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x80000000, 0xffff}) 16:32:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20500) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:09 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="04002bbd7000fcdbdf25050000001c0003800600040007000000060004007f000000080005007f0000010800050001000000080006000300000008000400070000000c0001800800090004000000"], 0x54}}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x8b83) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 16:32:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20500) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) [ 1225.435103][T24521] FAULT_INJECTION: forcing a failure. [ 1225.435103][T24521] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.447767][T24521] CPU: 0 PID: 24521 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1225.457846][T24521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1225.467973][T24521] Call Trace: [ 1225.471253][T24521] [ 1225.474188][T24521] dump_stack_lvl+0xda/0x130 [ 1225.478792][T24521] dump_stack+0x15/0x20 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20500) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xe6442) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYBLOB="ba62aece870254989b69c1c6903e5cdc331fc9c1e389ebc33b59eb8187c9310529a9afbbdb3619656bfff96fa78f4a41d8a634b4f1d58a820bad6f"], 0x14}}, 0x24008055) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000fddbdf250a0000000800320002000000080031000000000008003900cb09ffff183fe8f3ddb602"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c085}, 0x20044040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x40}, 'port1\x00', 0xc0, 0x412, 0x3ff, 0x2, 0x7, 0x7e, 0x0, 0x0, 0x2, 0x58}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x149}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) 16:32:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x28, 0x10}, 0x1, 0x0, 0x4, {0x0, 0xe1}, 0x0, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x301000) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x301000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x1}, @register_looper, @exit_looper], 0x7, 0x0, &(0x7f0000000100)="5970bfbe1b160e"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x1}, @register_looper, @exit_looper], 0x7, 0x0, &(0x7f0000000100)="5970bfbe1b160e"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x4, 0x0, 0x7ff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0xffffff80, 0x1000, 0x4}) [ 1225.482986][T24521] should_fail_ex+0x21f/0x230 [ 1225.487689][T24521] ? vm_area_dup+0x2c/0x130 [ 1225.492204][T24521] __should_failslab+0x92/0xa0 [ 1225.497066][T24521] should_failslab+0x9/0x20 [ 1225.501724][T24521] kmem_cache_alloc+0x56/0x2d0 [ 1225.506568][T24521] vm_area_dup+0x2c/0x130 [ 1225.510974][T24521] copy_mm+0x67b/0x1060 [ 1225.515133][T24521] copy_process+0x1002/0x20a0 [ 1225.519865][T24521] kernel_clone+0x169/0x560 [ 1225.524375][T24521] ? proc_fail_nth_read+0x140/0x140 [ 1225.529621][T24521] ? vfs_write+0x655/0x790 16:32:10 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x28, 0x10}, 0x1, 0x0, 0x4, {0x0, 0xe1}, 0x0, 0x7}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x28, 0x10}, 0x1, 0x0, 0x4, {0x0, 0xe1}, 0x0, 0x7}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x301000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x1}, @register_looper, @exit_looper], 0x7, 0x0, &(0x7f0000000100)="5970bfbe1b160e"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x4, 0x0, 0x7ff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0xffffff80, 0x1000, 0x4}) 16:32:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7fffffff}, @NFC_ATTR_VENDOR_DATA={0x1c, 0x1f, "3df1e12a5312d22919e324d84ab1cbc1c0b757988a0ad6fd"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8000}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x4}, @NFC_ATTR_VENDOR_DATA={0x35, 0x1f, "e57a7e049b0d54343b8e28f7cf1ef023e41e63e4ddc00657269389e1bea3090b32cffcf493626d20e16e94cc0b68c82a95"}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) [ 1225.534056][T24521] __x64_sys_clone+0xe8/0x120 [ 1225.538740][T24521] do_syscall_64+0x59/0x120 [ 1225.543274][T24521] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1225.549208][T24521] RIP: 0033:0x7f960fea4da9 [ 1225.553633][T24521] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1225.573254][T24521] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xe6442) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYBLOB="ba62aece870254989b69c1c6903e5cdc331fc9c1e389ebc33b59eb8187c9310529a9afbbdb3619656bfff96fa78f4a41d8a634b4f1d58a820bad6f"], 0x14}}, 0x24008055) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000fddbdf250a0000000800320002000000080031000000000008003900cb09ffff183fe8f3ddb602"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c085}, 0x20044040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x40}, 'port1\x00', 0xc0, 0x412, 0x3ff, 0x2, 0x7, 0x7e, 0x0, 0x0, 0x2, 0x58}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x149}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xe6442) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYBLOB="ba62aece870254989b69c1c6903e5cdc331fc9c1e389ebc33b59eb8187c9310529a9afbbdb3619656bfff96fa78f4a41d8a634b4f1d58a820bad6f"], 0x14}}, 0x24008055) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000fddbdf250a0000000800320002000000080031000000000008003900cb09ffff183fe8f3ddb602"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c085}, 0x20044040) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x40}, 'port1\x00', 0xc0, 0x412, 0x3ff, 0x2, 0x7, 0x7e, 0x0, 0x0, 0x2, 0x58}) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x149}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async) 16:32:10 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="04002bbd7000fcdbdf25050000001c0003800600040007000000060004007f000000080005007f0000010800050001000000080006000300000008000400070000000c0001800800090004000000"], 0x54}}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x8b83) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="04002bbd7000fcdbdf25050000001c0003800600040007000000060004007f000000080005007f0000010800050001000000080006000300000008000400070000000c0001800800090004000000"], 0x54}}, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x8b83) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 16:32:10 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4000) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, ']^-/)$$(/(.'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004040) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xffffffff, 0x6, 0x1, 0x12af, 0x0, "aa87a48ce242ad02b0d87c26e497bc97f5afdd", 0x101, 0xdfe}) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:32:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7fffffff}, @NFC_ATTR_VENDOR_DATA={0x1c, 0x1f, "3df1e12a5312d22919e324d84ab1cbc1c0b757988a0ad6fd"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8000}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x4}, @NFC_ATTR_VENDOR_DATA={0x35, 0x1f, "e57a7e049b0d54343b8e28f7cf1ef023e41e63e4ddc00657269389e1bea3090b32cffcf493626d20e16e94cc0b68c82a95"}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xe6442) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYBLOB="ba62aece870254989b69c1c6903e5cdc331fc9c1e389ebc33b59eb8187c9310529a9afbbdb3619656bfff96fa78f4a41d8a634b4f1d58a820bad6f"], 0x14}}, 0x24008055) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000fddbdf250a0000000800320002000000080031000000000008003900cb09ffff183fe8f3ddb602"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c085}, 0x20044040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x40}, 'port1\x00', 0xc0, 0x412, 0x3ff, 0x2, 0x7, 0x7e, 0x0, 0x0, 0x2, 0x58}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x149}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xe6442) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYBLOB="ba62aece870254989b69c1c6903e5cdc331fc9c1e389ebc33b59eb8187c9310529a9afbbdb3619656bfff96fa78f4a41d8a634b4f1d58a820bad6f"], 0x14}}, 0x24008055) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000fddbdf250a0000000800320002000000080031000000000008003900cb09ffff183fe8f3ddb602"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c085}, 0x20044040) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x40}, 'port1\x00', 0xc0, 0x412, 0x3ff, 0x2, 0x7, 0x7e, 0x0, 0x0, 0x2, 0x58}) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x149}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async) 16:32:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x1, 0x7}, 'port1\x00', 0x51, 0x40, 0x9, 0x7, 0x2, 0xfffffffb, 0x4, 0x0, 0x7, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0xfe}, 0x0, 0x0, 0x0, {}, 0x0, 0x6d5e}) 16:32:10 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:10 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="04002bbd7000fcdbdf25050000001c0003800600040007000000060004007f000000080005007f0000010800050001000000080006000300000008000400070000000c0001800800090004000000"], 0x54}}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x8b83) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5460, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 1225.581679][T24521] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1225.589672][T24521] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1225.597698][T24521] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1225.605668][T24521] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1225.613640][T24521] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1225.621687][T24521] 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'custom1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0x5f, 0x6, 0x4, 0x6, 0x2, "989623a1152e852e590caef1c08b605338fa14", 0x8000, 0x100}) ioctl$VT_RELDISP(r2, 0x5605) 16:32:10 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 25) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:10 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:10 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa000) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x1, 0x7}, 'port1\x00', 0x51, 0x40, 0x9, 0x7, 0x2, 0xfffffffb, 0x4, 0x0, 0x7, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0xfe}, 0x0, 0x0, 0x0, {}, 0x0, 0x6d5e}) 16:32:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7fffffff}, @NFC_ATTR_VENDOR_DATA={0x1c, 0x1f, "3df1e12a5312d22919e324d84ab1cbc1c0b757988a0ad6fd"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8000}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x4}, @NFC_ATTR_VENDOR_DATA={0x35, 0x1f, "e57a7e049b0d54343b8e28f7cf1ef023e41e63e4ddc00657269389e1bea3090b32cffcf493626d20e16e94cc0b68c82a95"}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'custom1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0x5f, 0x6, 0x4, 0x6, 0x2, "989623a1152e852e590caef1c08b605338fa14", 0x8000, 0x100}) (async) ioctl$VT_RELDISP(r2, 0x5605) 16:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x3c}}, 0x4000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) 16:32:10 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) [ 1225.698486][T24601] FAULT_INJECTION: forcing a failure. [ 1225.698486][T24601] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.711145][T24601] CPU: 0 PID: 24601 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1225.721283][T24601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1225.731409][T24601] Call Trace: [ 1225.734689][T24601] [ 1225.737621][T24601] dump_stack_lvl+0xda/0x130 [ 1225.742248][T24601] dump_stack+0x15/0x20 16:32:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x1, 0x7}, 'port1\x00', 0x51, 0x40, 0x9, 0x7, 0x2, 0xfffffffb, 0x4, 0x0, 0x7, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0xfe}, 0x0, 0x0, 0x0, {}, 0x0, 0x6d5e}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0xfe}, 0x0, 0x0, 0x0, {}, 0x0, 0x6d5e}) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'custom1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0x5f, 0x6, 0x4, 0x6, 0x2, "989623a1152e852e590caef1c08b605338fa14", 0x8000, 0x100}) ioctl$VT_RELDISP(r2, 0x5605) (async) ioctl$VT_RELDISP(r2, 0x5605) 16:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x3c}}, 0x4000) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) 16:32:10 executing program 5: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xfffffff1, @mcast2, 0x2}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) [ 1225.746430][T24601] should_fail_ex+0x21f/0x230 [ 1225.751125][T24601] ? vm_area_dup+0x98/0x130 [ 1225.755657][T24601] __should_failslab+0x92/0xa0 [ 1225.760500][T24601] should_failslab+0x9/0x20 [ 1225.765076][T24601] kmem_cache_alloc+0x56/0x2d0 [ 1225.769851][T24601] vm_area_dup+0x98/0x130 [ 1225.774251][T24601] copy_mm+0x67b/0x1060 [ 1225.778440][T24601] copy_process+0x1002/0x20a0 [ 1225.783142][T24601] kernel_clone+0x169/0x560 [ 1225.787646][T24601] ? proc_fail_nth_read+0x140/0x140 [ 1225.792853][T24601] ? vfs_write+0x655/0x790 16:32:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x401, 0x5, 0x1}) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x51ea01) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x3c}}, 0x4000) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) 16:32:10 executing program 5: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xfffffff1, @mcast2, 0x2}}, 0x24) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) [ 1225.797282][T24601] __x64_sys_clone+0xe8/0x120 [ 1225.801971][T24601] do_syscall_64+0x59/0x120 [ 1225.806526][T24601] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1225.812499][T24601] RIP: 0033:0x7f960fea4da9 [ 1225.816910][T24601] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1225.836591][T24601] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:10 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:10 executing program 5: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xfffffff1, @mcast2, 0x2}}, 0x24) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) 16:32:10 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x401, 0x5, 0x1}) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x51ea01) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:10 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:10 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x24) 16:32:10 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 26) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x401, 0x5, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x401, 0x5, 0x1}) [ 1225.845010][T24601] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1225.852984][T24601] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1225.861017][T24601] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1225.869120][T24601] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1225.877099][T24601] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1225.885079][T24601] 16:32:10 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x51ea01) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:10 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300), 0x8}, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0xa1, 0x0, &(0x7f0000000080)="a50ff4a64e541e144b120de0c252823eed77923bbaf8f2414844da29d5ce16159a1a571bc78cfa541842b6532f2e7d9adc22a74efdfe9ce3ee5446b47769a9f9eb295fb96a67acd47526ce4407b61ac2e6f317a71d5b61084fa17eacbaad7cdca82c635fbe6dab00d7dd3ee25c83a77f983e99da6a4ef15892c4267159472499b338e42935f7304714d16a8eef992f7024751367f945fa31f5575898ec2753e610"}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x113400) 16:32:10 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x24) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x7, 0x6}, 'port0\x00', 0x8, 0x80000, 0x2, 0x1, 0x1, 0x6, 0xffffff3b, 0x0, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000002c0)={0x401, 0xfff, 0x7, {0x81, 0x1}, 0x8, 0x8001}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x3, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{0x0, 0xff}, 'port0\x00', 0x48, 0x120420, 0x9, 0x1f, 0x1f, 0xfffffffd, 0x6, 0x0, 0x0, 0x6e}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x7, 0x5}, 0x1, 0x80, 0x800, {0x1, 0x3f}, 0x56, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0xfffffffa, 0xfff, 0x5}) 16:32:10 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="60fc0301"], 0x4) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x810, 0xffffffffffffffff, 0x180000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x10000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0x8}, 0x1, 0x56, 0x9, {0x3, 0x2}, 0x6, 0x6}) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x7, 0x6}, 'port0\x00', 0x8, 0x80000, 0x2, 0x1, 0x1, 0x6, 0xffffff3b, 0x0, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000002c0)={0x401, 0xfff, 0x7, {0x81, 0x1}, 0x8, 0x8001}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x3, 0x3, 0x9}) (async) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x3, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{0x0, 0xff}, 'port0\x00', 0x48, 0x120420, 0x9, 0x1f, 0x1f, 0xfffffffd, 0x6, 0x0, 0x0, 0x6e}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x7, 0x5}, 0x1, 0x80, 0x800, {0x1, 0x3f}, 0x56, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0xfffffffa, 0xfff, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0xfffffffa, 0xfff, 0x5}) [ 1225.957166][T24664] FAULT_INJECTION: forcing a failure. [ 1225.957166][T24664] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.969847][T24664] CPU: 0 PID: 24664 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1225.979946][T24664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1225.990028][T24664] Call Trace: [ 1225.993303][T24664] [ 1225.996234][T24664] dump_stack_lvl+0xda/0x130 [ 1226.000896][T24664] dump_stack+0x15/0x20 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300), 0x8}, 0x90) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0xa1, 0x0, &(0x7f0000000080)="a50ff4a64e541e144b120de0c252823eed77923bbaf8f2414844da29d5ce16159a1a571bc78cfa541842b6532f2e7d9adc22a74efdfe9ce3ee5446b47769a9f9eb295fb96a67acd47526ce4407b61ac2e6f317a71d5b61084fa17eacbaad7cdca82c635fbe6dab00d7dd3ee25c83a77f983e99da6a4ef15892c4267159472499b338e42935f7304714d16a8eef992f7024751367f945fa31f5575898ec2753e610"}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x113400) 16:32:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0x3f}, 0x0, 0x0, 0x0, {}, 0x0, 0x4}) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000400)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x7, 0x6}, 'port0\x00', 0x8, 0x80000, 0x2, 0x1, 0x1, 0x6, 0xffffff3b, 0x0, 0x2, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x7, 0x6}, 'port0\x00', 0x8, 0x80000, 0x2, 0x1, 0x1, 0x6, 0xffffff3b, 0x0, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000002c0)={0x401, 0xfff, 0x7, {0x81, 0x1}, 0x8, 0x8001}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x3, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{0x0, 0xff}, 'port0\x00', 0x48, 0x120420, 0x9, 0x1f, 0x1f, 0xfffffffd, 0x6, 0x0, 0x0, 0x6e}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x7, 0x5}, 0x1, 0x80, 0x800, {0x1, 0x3f}, 0x56, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0xfffffffa, 0xfff, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0xfffffffa, 0xfff, 0x5}) 16:32:10 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x24) [ 1226.005101][T24664] should_fail_ex+0x21f/0x230 [ 1226.009793][T24664] ? vm_area_dup+0x2c/0x130 [ 1226.014387][T24664] __should_failslab+0x92/0xa0 [ 1226.019152][T24664] should_failslab+0x9/0x20 [ 1226.023726][T24664] kmem_cache_alloc+0x56/0x2d0 [ 1226.028498][T24664] vm_area_dup+0x2c/0x130 [ 1226.032896][T24664] copy_mm+0x67b/0x1060 [ 1226.037062][T24664] copy_process+0x1002/0x20a0 [ 1226.041852][T24664] kernel_clone+0x169/0x560 [ 1226.046353][T24664] ? proc_fail_nth_read+0x140/0x140 [ 1226.051561][T24664] ? vfs_write+0x655/0x790 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000300), 0x8}, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0xa1, 0x0, &(0x7f0000000080)="a50ff4a64e541e144b120de0c252823eed77923bbaf8f2414844da29d5ce16159a1a571bc78cfa541842b6532f2e7d9adc22a74efdfe9ce3ee5446b47769a9f9eb295fb96a67acd47526ce4407b61ac2e6f317a71d5b61084fa17eacbaad7cdca82c635fbe6dab00d7dd3ee25c83a77f983e99da6a4ef15892c4267159472499b338e42935f7304714d16a8eef992f7024751367f945fa31f5575898ec2753e610"}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x113400) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x480) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x401c5820, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0xc9, 0x5}, 0x0, 0x3f, 0x2, {0x4, 0x1f}, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x9, 0x3}) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$VT_RELDISP(r3, 0x5605) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000000c0), 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x16, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x2, 0x6, 0x1, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x7}], &(0x7f0000000240)='GPL\x00', 0x1f0, 0xca, &(0x7f0000000280)=""/202, 0x41100, 0x54, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x5, 0x2, 0x10}, {0x2, 0x3, 0xb, 0x2}, {0x3, 0x5, 0xe, 0xd}, {0x2, 0x5, 0x8, 0x8}, {0x3, 0x2, 0xa, 0x2}, {0x1, 0x3, 0xb, 0xa}, {0x3, 0x1, 0x1, 0x4}], 0x10, 0x7fff}, 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:10 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x480) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x480) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x401c5820, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0xc9, 0x5}, 0x0, 0x3f, 0x2, {0x4, 0x1f}, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x9, 0x3}) r2 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) (async) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$VT_RELDISP(r3, 0x5605) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000000c0), 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x16, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x2, 0x6, 0x1, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x7}], &(0x7f0000000240)='GPL\x00', 0x1f0, 0xca, &(0x7f0000000280)=""/202, 0x41100, 0x54, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x5, 0x2, 0x10}, {0x2, 0x3, 0xb, 0x2}, {0x3, 0x5, 0xe, 0xd}, {0x2, 0x5, 0x8, 0x8}, {0x3, 0x2, 0xa, 0x2}, {0x1, 0x3, 0xb, 0xa}, {0x3, 0x1, 0x1, 0x4}], 0x10, 0x7fff}, 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) [ 1226.056010][T24664] __x64_sys_clone+0xe8/0x120 [ 1226.060699][T24664] do_syscall_64+0x59/0x120 [ 1226.065215][T24664] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1226.071172][T24664] RIP: 0033:0x7f960fea4da9 [ 1226.075608][T24664] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1226.095223][T24664] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x20000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:10 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="60fc0301"], 0x4) (async) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="60fc0301"], 0x4) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x810, 0xffffffffffffffff, 0x180000000) (async) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x810, 0xffffffffffffffff, 0x180000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x10000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0x8}, 0x1, 0x56, 0x9, {0x3, 0x2}, 0x6, 0x6}) 16:32:10 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = epoll_create(0xaba5) epoll_wait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x10001) 16:32:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0x3f}, 0x0, 0x0, 0x0, {}, 0x0, 0x4}) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x480) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x401c5820, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0xc9, 0x5}, 0x0, 0x3f, 0x2, {0x4, 0x1f}, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x9, 0x3}) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$VT_RELDISP(r3, 0x5605) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000000c0), 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x16, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x2, 0x6, 0x1, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x7}], &(0x7f0000000240)='GPL\x00', 0x1f0, 0xca, &(0x7f0000000280)=""/202, 0x41100, 0x54, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x5, 0x2, 0x10}, {0x2, 0x3, 0xb, 0x2}, {0x3, 0x5, 0xe, 0xd}, {0x2, 0x5, 0x8, 0x8}, {0x3, 0x2, 0xa, 0x2}, {0x1, 0x3, 0xb, 0xa}, {0x3, 0x1, 0x1, 0x4}], 0x10, 0x7fff}, 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x480) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x401c5820, &(0x7f0000000400)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0xc9, 0x5}, 0x0, 0x3f, 0x2, {0x4, 0x1f}, 0x1, 0x6}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x9, 0x3}) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) (async) ioctl$VT_RELDISP(r3, 0x5605) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000000c0), 0x4) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x16, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x2, 0x6, 0x1, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x7}], &(0x7f0000000240)='GPL\x00', 0x1f0, 0xca, &(0x7f0000000280)=""/202, 0x41100, 0x54, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x5, 0x2, 0x10}, {0x2, 0x3, 0xb, 0x2}, {0x3, 0x5, 0xe, 0xd}, {0x2, 0x5, 0x8, 0x8}, {0x3, 0x2, 0xa, 0x2}, {0x1, 0x3, 0xb, 0xa}, {0x3, 0x1, 0x1, 0x4}], 0x10, 0x7fff}, 0x90) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) 16:32:10 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x20000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) syz_io_uring_setup(0x24d3, &(0x7f0000000040)={0x0, 0x7db4, 0x1, 0x1, 0xff}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x6d, &(0x7f0000000140)={0x0, 0x6ee, 0x4, 0x2, 0x27f}, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x30, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x100}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x20000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x20000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0x3f}, 0x0, 0x0, 0x0, {}, 0x0, 0x4}) [ 1226.103633][T24664] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1226.111787][T24664] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1226.119766][T24664] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1226.127774][T24664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1226.135822][T24664] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1226.143813][T24664] 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) syz_io_uring_setup(0x24d3, &(0x7f0000000040)={0x0, 0x7db4, 0x1, 0x1, 0xff}, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_io_uring_setup(0x24d3, &(0x7f0000000040)={0x0, 0x7db4, 0x1, 0x1, 0xff}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x6d, &(0x7f0000000140)={0x0, 0x6ee, 0x4, 0x2, 0x27f}, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x30, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x100}}) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:32:10 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 27) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:10 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="60fc0301"], 0x4) (async) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x810, 0xffffffffffffffff, 0x180000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x10000) (rerun: 64) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0x8}, 0x1, 0x56, 0x9, {0x3, 0x2}, 0x6, 0x6}) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) syz_io_uring_setup(0x24d3, &(0x7f0000000040)={0x0, 0x7db4, 0x1, 0x1, 0xff}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x6d, &(0x7f0000000140)={0x0, 0x6ee, 0x4, 0x2, 0x27f}, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x30, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x100}}) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x127a00) r1 = io_uring_setup(0x12fc, &(0x7f0000000000)={0x0, 0x521b, 0x2, 0x0, 0x27b}) r2 = syz_io_uring_setup(0x5212, &(0x7f0000000080)={0x0, 0x17e, 0x10, 0x2, 0xb2}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r2, r0], 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x880) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5451, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:10 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x880) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x880) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5451, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4080054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r4, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x174, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0x158, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0xa, 0x1, 'wpan3\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '::'}, {0xa, 0x1, '&^-\')$'}, {0x8, 0x1, ')-/#'}, {0x5, 0x1, '^'}, {0x4}, {0x9, 0x1, ':#$.\x14'}]}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\'#/*%+'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x44, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, ')*&\\&'}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf0, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x70, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '$'}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0x11, 0x1, '/dev/snd/seq\x00'}, {0x11, 0x1, '/dev/snd/seq\x00'}, {0x5, 0x1, '\x00'}, {0x11, 0x1, '/dev/snd/seq\x00'}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0x64, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x12, 0x1, ').\'}+@}$\',) #$'}, {0x5, 0x1, '\x00'}, {0xb, 0x1, '-]\xf0}-\xa5^'}, {0xb, 0x1, '*\xf4\\}^.#'}, {0x4}, {0xc, 0x1, '!}&{%,!!'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\\'}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x64048805) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x109001) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x14, &(0x7f0000000080)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3d00}}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x6, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, r9, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x2, 0x3, 0x1, 0xa}, {0x4, 0x3, 0xf, 0x2}, {0x1, 0x3, 0x9, 0x2}], 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='cachefiles_mark_inactive\x00', r10}, 0x10) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCEXCL(r11, 0x540c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0x2, &(0x7f0000000400)={{}, 0x0, 0x838b, 0x0, {0xe0}, 0xfb}) ioctl$VT_RESIZE(r11, 0x5609, &(0x7f0000000380)={0x20, 0x81, 0x8001}) [ 1226.251813][T24748] FAULT_INJECTION: forcing a failure. [ 1226.251813][T24748] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1226.265105][T24748] CPU: 1 PID: 24748 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1226.275168][T24748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1226.285227][T24748] Call Trace: [ 1226.288506][T24748] [ 1226.291435][T24748] dump_stack_lvl+0xda/0x130 [ 1226.296035][T24748] dump_stack+0x15/0x20 16:32:10 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xb830e581a3d45879) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:10 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xb830e581a3d45879) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xb830e581a3d45879) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) 16:32:10 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xb830e581a3d45879) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x880) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x5451, 0x0) (async) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0189436, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x127a00) r1 = io_uring_setup(0x12fc, &(0x7f0000000000)={0x0, 0x521b, 0x2, 0x0, 0x27b}) (async) r2 = syz_io_uring_setup(0x5212, &(0x7f0000000080)={0x0, 0x17e, 0x10, 0x2, 0xb2}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r2, r0], 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0189436, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:10 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0), r2) (async) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4080054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r4, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) (async) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r4, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x174, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0x158, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0xa, 0x1, 'wpan3\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '::'}, {0xa, 0x1, '&^-\')$'}, {0x8, 0x1, ')-/#'}, {0x5, 0x1, '^'}, {0x4}, {0x9, 0x1, ':#$.\x14'}]}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\'#/*%+'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x44, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, ')*&\\&'}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf0, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x70, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '$'}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0x11, 0x1, '/dev/snd/seq\x00'}, {0x11, 0x1, '/dev/snd/seq\x00'}, {0x5, 0x1, '\x00'}, {0x11, 0x1, '/dev/snd/seq\x00'}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0x64, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x12, 0x1, ').\'}+@}$\',) #$'}, {0x5, 0x1, '\x00'}, {0xb, 0x1, '-]\xf0}-\xa5^'}, {0xb, 0x1, '*\xf4\\}^.#'}, {0x4}, {0xc, 0x1, '!}&{%,!!'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\\'}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x64048805) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x109001) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x14, &(0x7f0000000080)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3d00}}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x6, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, r9, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x2, 0x3, 0x1, 0xa}, {0x4, 0x3, 0xf, 0x2}, {0x1, 0x3, 0x9, 0x2}], 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='cachefiles_mark_inactive\x00', r10}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCEXCL(r11, 0x540c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0x2, &(0x7f0000000400)={{}, 0x0, 0x838b, 0x0, {0xe0}, 0xfb}) ioctl$VT_RESIZE(r11, 0x5609, &(0x7f0000000380)={0x20, 0x81, 0x8001}) [ 1226.300192][T24748] should_fail_ex+0x21f/0x230 [ 1226.304875][T24748] __should_fail_alloc_page+0xfd/0x110 [ 1226.310346][T24748] __alloc_pages+0x108/0x340 [ 1226.314945][T24748] alloc_pages_mpol+0xb1/0x1d0 [ 1226.319732][T24748] alloc_pages+0xe0/0x100 [ 1226.324077][T24748] __pud_alloc+0x4c/0x3b0 [ 1226.328422][T24748] copy_page_range+0x1fad/0x2150 [ 1226.333374][T24748] ? mas_wr_walk_descend+0x359/0x410 [ 1226.338698][T24748] ? mas_wr_end_piv+0x15f/0x480 [ 1226.343570][T24748] copy_mm+0x938/0x1060 [ 1226.347733][T24748] copy_process+0x1002/0x20a0 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0189436, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0189436, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x32580) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x32580) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 1226.352415][T24748] kernel_clone+0x169/0x560 [ 1226.356922][T24748] ? proc_fail_nth_read+0x140/0x140 [ 1226.362126][T24748] ? vfs_write+0x655/0x790 [ 1226.366560][T24748] __x64_sys_clone+0xe8/0x120 [ 1226.371239][T24748] do_syscall_64+0x59/0x120 [ 1226.375748][T24748] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1226.381661][T24748] RIP: 0033:0x7f960fea4da9 16:32:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x127a00) (async) r1 = io_uring_setup(0x12fc, &(0x7f0000000000)={0x0, 0x521b, 0x2, 0x0, 0x27b}) (async, rerun: 32) r2 = syz_io_uring_setup(0x5212, &(0x7f0000000080)={0x0, 0x17e, 0x10, 0x2, 0xb2}, &(0x7f0000000100), &(0x7f0000000140)) (rerun: 32) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r2, r0], 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) [ 1226.386077][T24748] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1226.405704][T24748] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1226.414125][T24748] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1226.422104][T24748] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1226.430072][T24748] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1226.438045][T24748] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1226.446035][T24748] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1226.454022][T24748] 16:32:10 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x32580) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:32:10 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1, 0x3, 0xfffffff9}) 16:32:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) (async) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4080054) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r4, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) (async) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x174, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0x158, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0xa, 0x1, 'wpan3\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '::'}, {0xa, 0x1, '&^-\')$'}, {0x8, 0x1, ')-/#'}, {0x5, 0x1, '^'}, {0x4}, {0x9, 0x1, ':#$.\x14'}]}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\'#/*%+'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x44, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, ')*&\\&'}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf0, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x70, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '$'}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0x11, 0x1, '/dev/snd/seq\x00'}, {0x11, 0x1, '/dev/snd/seq\x00'}, {0x5, 0x1, '\x00'}, {0x11, 0x1, '/dev/snd/seq\x00'}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0x64, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x12, 0x1, ').\'}+@}$\',) #$'}, {0x5, 0x1, '\x00'}, {0xb, 0x1, '-]\xf0}-\xa5^'}, {0xb, 0x1, '*\xf4\\}^.#'}, {0x4}, {0xc, 0x1, '!}&{%,!!'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\\'}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x64048805) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x109001) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x14, &(0x7f0000000080)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3d00}}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x6, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, r9, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x2, 0x3, 0x1, 0xa}, {0x4, 0x3, 0xf, 0x2}, {0x1, 0x3, 0x9, 0x2}], 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='cachefiles_mark_inactive\x00', r10}, 0x10) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCEXCL(r11, 0x540c) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0x2, &(0x7f0000000400)={{}, 0x0, 0x838b, 0x0, {0xe0}, 0xfb}) (async) ioctl$VT_RESIZE(r11, 0x5609, &(0x7f0000000380)={0x20, 0x81, 0x8001}) 16:32:11 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 28) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:11 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) [ 1226.505977][T24861] FAULT_INJECTION: forcing a failure. [ 1226.505977][T24861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1226.519313][T24861] CPU: 0 PID: 24861 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1226.529394][T24861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1226.539464][T24861] Call Trace: [ 1226.542743][T24861] [ 1226.545676][T24861] dump_stack_lvl+0xda/0x130 [ 1226.550283][T24861] dump_stack+0x15/0x20 [ 1226.554449][T24861] should_fail_ex+0x21f/0x230 [ 1226.559135][T24861] __should_fail_alloc_page+0xfd/0x110 [ 1226.564616][T24861] __alloc_pages+0x108/0x340 [ 1226.569208][T24861] alloc_pages_mpol+0xb1/0x1d0 [ 1226.573977][T24861] alloc_pages+0xe0/0x100 [ 1226.578316][T24861] __pmd_alloc+0x4b/0x3c0 [ 1226.582650][T24861] copy_page_range+0x1f05/0x2150 [ 1226.587603][T24861] ? mas_wr_end_piv+0x15f/0x480 [ 1226.592471][T24861] copy_mm+0x938/0x1060 [ 1226.596638][T24861] copy_process+0x1002/0x20a0 [ 1226.601312][T24861] kernel_clone+0x169/0x560 [ 1226.605796][T24861] ? proc_fail_nth_read+0x140/0x140 [ 1226.610983][T24861] ? vfs_write+0x655/0x790 [ 1226.615391][T24861] __x64_sys_clone+0xe8/0x120 [ 1226.620052][T24861] do_syscall_64+0x59/0x120 [ 1226.624542][T24861] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1226.630441][T24861] RIP: 0033:0x7f960fea4da9 [ 1226.634836][T24861] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1226.654440][T24861] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1226.662853][T24861] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1226.670839][T24861] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1226.678797][T24861] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1226.686768][T24861] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1226.694719][T24861] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1226.702675][T24861] 16:32:11 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = epoll_create(0xaba5) epoll_wait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x10001) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) epoll_create(0xaba5) (async) epoll_wait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x10001) (async) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x14b83) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x100000001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x204, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200048d0}, 0x84) 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1, 0x3, 0xfffffff9}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1, 0x3, 0xfffffff9}) 16:32:11 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) 16:32:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) socketpair(0x0, 0x80000, 0x3f, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x210, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6c}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x54}}, 0x8081) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="600002800720f5d57b12d9a7976236706cbc4d4c14562f418b8acdd6d1d6c50004000000000000007566e401233dc25e91d90621c52a08a4c3a853f25c13fb7938b171ce4fe94e2d4d987e135e2358c1f274e40530e5f999810706ed4a8a93629945fcd7e48c324a3d1e09ce25cbab2e67b947000000"], 0xc) 16:32:11 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 29) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x14b83) (async) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x100000001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x204, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200048d0}, 0x84) 16:32:11 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1, 0x3, 0xfffffff9}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1, 0x3, 0xfffffff9}) (async) [ 1227.012636][T24970] FAULT_INJECTION: forcing a failure. [ 1227.012636][T24970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1227.025890][T24970] CPU: 0 PID: 24970 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1227.035957][T24970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1227.046020][T24970] Call Trace: [ 1227.049303][T24970] [ 1227.052319][T24970] dump_stack_lvl+0xda/0x130 [ 1227.056912][T24970] dump_stack+0x15/0x20 16:32:11 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000), 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[r3, r3], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x60e5389d, 0x22, 0x1, 0x3, '\x00', r2, r3, 0x2, 0x1, 0x0, 0xd}, 0x48) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0x1f, @mcast2, 0x1e}}, 0xffffff19) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x0, 0x2, 0x9}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x14b83) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x100000001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x204, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200048d0}, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x14b83) (async) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x100000001) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x204, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200048d0}, 0x84) (async) 16:32:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) socketpair(0x0, 0x80000, 0x3f, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x210, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6c}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x54}}, 0x8081) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="600002800720f5d57b12d9a7976236706cbc4d4c14562f418b8acdd6d1d6c50004000000000000007566e401233dc25e91d90621c52a08a4c3a853f25c13fb7938b171ce4fe94e2d4d987e135e2358c1f274e40530e5f999810706ed4a8a93629945fcd7e48c324a3d1e09ce25cbab2e67b947000000"], 0xc) 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x3c542) sendto$rxrpc(r0, &(0x7f0000000000)="8bed22a87048c58fb387cd62917d890171b3ff564f4fe9a2ae4455ed37f65f7ce8b7cdfc1e991fb7a86d", 0x2a, 0x4010, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}, 0xffff59a8}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) [ 1227.061069][T24970] should_fail_ex+0x21f/0x230 [ 1227.065756][T24970] __should_fail_alloc_page+0xfd/0x110 [ 1227.071229][T24970] __alloc_pages+0x108/0x340 [ 1227.075826][T24970] alloc_pages_mpol+0xb1/0x1d0 [ 1227.081212][T24970] alloc_pages+0xe0/0x100 [ 1227.085566][T24970] pte_alloc_one+0x32/0xe0 [ 1227.090007][T24970] __pte_alloc+0x33/0x270 [ 1227.094345][T24970] copy_page_range+0x1c5d/0x2150 [ 1227.099298][T24970] copy_mm+0x938/0x1060 [ 1227.103461][T24970] copy_process+0x1002/0x20a0 [ 1227.108141][T24970] kernel_clone+0x169/0x560 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_setup(0x5d9a, &(0x7f0000000000)={0x0, 0x7fd, 0x200, 0x3, 0x285}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4007, @fd_index=0x8, 0x0, 0x0, 0x0, 0xd, 0x1, {0x1}}) 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x3c542) sendto$rxrpc(r0, &(0x7f0000000000)="8bed22a87048c58fb387cd62917d890171b3ff564f4fe9a2ae4455ed37f65f7ce8b7cdfc1e991fb7a86d", 0x2a, 0x4010, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}, 0xffff59a8}}, 0x24) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_io_uring_setup(0x5d9a, &(0x7f0000000000)={0x0, 0x7fd, 0x200, 0x3, 0x285}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4007, @fd_index=0x8, 0x0, 0x0, 0x0, 0xd, 0x1, {0x1}}) [ 1227.112642][T24970] ? proc_fail_nth_read+0x140/0x140 [ 1227.117845][T24970] ? vfs_write+0x655/0x790 [ 1227.122272][T24970] __x64_sys_clone+0xe8/0x120 [ 1227.126953][T24970] do_syscall_64+0x59/0x120 [ 1227.131467][T24970] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1227.137369][T24970] RIP: 0033:0x7f960fea4da9 [ 1227.141783][T24970] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x3c542) sendto$rxrpc(r0, &(0x7f0000000000)="8bed22a87048c58fb387cd62917d890171b3ff564f4fe9a2ae4455ed37f65f7ce8b7cdfc1e991fb7a86d", 0x2a, 0x4010, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}, 0xffff59a8}}, 0x24) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x8000000000000000]}, 0x8) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_setup(0x5d9a, &(0x7f0000000000)={0x0, 0x7fd, 0x200, 0x3, 0x285}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4007, @fd_index=0x8, 0x0, 0x0, 0x0, 0xd, 0x1, {0x1}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_io_uring_setup(0x5d9a, &(0x7f0000000000)={0x0, 0x7fd, 0x200, 0x3, 0x285}, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4007, @fd_index=0x8, 0x0, 0x0, 0x0, 0xd, 0x1, {0x1}}) (async) 16:32:11 executing program 5: socket$rxrpc(0x21, 0x2, 0x2) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = epoll_create(0xaba5) epoll_wait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x10001) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80c00) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (rerun: 32) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x8000000000000000]}, 0x8) 16:32:11 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000), 0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[r3, r3], 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x60e5389d, 0x22, 0x1, 0x3, '\x00', r2, r3, 0x2, 0x1, 0x0, 0xd}, 0x48) (async) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0x1f, @mcast2, 0x1e}}, 0xffffff19) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x0, 0x2, 0x9}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 1227.161404][T24970] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1227.169822][T24970] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1227.177804][T24970] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1227.185779][T24970] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1227.193843][T24970] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1227.201817][T24970] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1227.209798][T24970] 16:32:11 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 30) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:11 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x8000000000000000]}, 0x8) 16:32:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) socketpair(0x0, 0x80000, 0x3f, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x210, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6c}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x54}}, 0x8081) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="600002800720f5d57b12d9a7976236706cbc4d4c14562f418b8acdd6d1d6c50004000000000000007566e401233dc25e91d90621c52a08a4c3a853f25c13fb7938b171ce4fe94e2d4d987e135e2358c1f274e40530e5f999810706ed4a8a93629945fcd7e48c324a3d1e09ce25cbab2e67b947000000"], 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) socketpair(0x0, 0x80000, 0x3f, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x210, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6c}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x54}}, 0x8081) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="600002800720f5d57b12d9a7976236706cbc4d4c14562f418b8acdd6d1d6c50004000000000000007566e401233dc25e91d90621c52a08a4c3a853f25c13fb7938b171ce4fe94e2d4d987e135e2358c1f274e40530e5f999810706ed4a8a93629945fcd7e48c324a3d1e09ce25cbab2e67b947000000"], 0xc) (async) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80c00) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) [ 1227.271244][T25053] FAULT_INJECTION: forcing a failure. [ 1227.271244][T25053] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.283921][T25053] CPU: 1 PID: 25053 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1227.294036][T25053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1227.304086][T25053] Call Trace: [ 1227.307369][T25053] [ 1227.310302][T25053] dump_stack_lvl+0xda/0x130 [ 1227.314905][T25053] dump_stack+0x15/0x20 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80c00) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x141001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0xffffffff, 0xff, 0x5, {0x4, 0x800}, 0x0, 0xd4d5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xfff, 0xfffffffb, 0x8, {0x1000, 0x5}, 0x6, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0x82}, 0x0, 0x0, 0xf1d, {}, 0xc, 0xfffffffc}) 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x141001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) [ 1227.317513][T25047] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 1227.319127][T25053] should_fail_ex+0x21f/0x230 [ 1227.319152][T25053] ? anon_vma_fork+0xac/0x2c0 [ 1227.337571][T25053] __should_failslab+0x92/0xa0 [ 1227.342400][T25053] should_failslab+0x9/0x20 [ 1227.346910][T25053] kmem_cache_alloc+0x56/0x2d0 [ 1227.351741][T25053] anon_vma_fork+0xac/0x2c0 [ 1227.356256][T25053] copy_mm+0x6f0/0x1060 [ 1227.360461][T25053] copy_process+0x1002/0x20a0 [ 1227.365140][T25053] kernel_clone+0x169/0x560 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0xffffffff, 0xff, 0x5, {0x4, 0x800}, 0x0, 0xd4d5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xfff, 0xfffffffb, 0x8, {0x1000, 0x5}, 0x6, 0xffff}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xfff, 0xfffffffb, 0x8, {0x1000, 0x5}, 0x6, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0x82}, 0x0, 0x0, 0xf1d, {}, 0xc, 0xfffffffc}) 16:32:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x20, 0x7}, 'port1\x00', 0x1, 0x4, 0x0, 0xfffffffb, 0x6, 0x8, 0x9, 0x0, 0x6, 0x7}) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0xffffffff, 0xff, 0x5, {0x4, 0x800}, 0x0, 0xd4d5}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0xffffffff, 0xff, 0x5, {0x4, 0x800}, 0x0, 0xd4d5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xfff, 0xfffffffb, 0x8, {0x1000, 0x5}, 0x6, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{0x0, 0x82}, 0x0, 0x0, 0xf1d, {}, 0xc, 0xfffffffc}) 16:32:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x20, 0x7}, 'port1\x00', 0x1, 0x4, 0x0, 0xfffffffb, 0x6, 0x8, 0x9, 0x0, 0x6, 0x7}) [ 1227.369726][T25053] ? proc_fail_nth_read+0x140/0x140 [ 1227.374941][T25053] ? vfs_write+0x655/0x790 [ 1227.379364][T25053] __x64_sys_clone+0xe8/0x120 [ 1227.384055][T25053] do_syscall_64+0x59/0x120 [ 1227.388571][T25053] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1227.394485][T25053] RIP: 0033:0x7f960fea4da9 [ 1227.398892][T25053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:32:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x141001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x1, 0x0, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x4d, 0xee}, 0x1, 0x8, 0x4, {0x4, 0xa}, 0xe0, 0x5bb0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x6, 0x5, 0xfffffffe, {0x3ff, 0x4}, 0x20000000, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000001c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) 16:32:11 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x20, 0x7}, 'port1\x00', 0x1, 0x4, 0x0, 0xfffffffb, 0x6, 0x8, 0x9, 0x0, 0x6, 0x7}) 16:32:11 executing program 2: r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r1, 0x0, 0x116, &(0x7f0000000600)='\x01\xd8\xd2\x8fG\xfb&\xcfg\xfa6k\\\xd7\xcd\xb7wqPrgq\x95\x9d\xfb#\x80\xdb\xdb \xc0d\x9d\xa0\xa2A`,?L#\bq\xe8}\xcb{E\xf2TX\x19\x9b+\xd5HP\x0e-\xb1\x9aa\xb0\x8b\x17\x00\x05qg\xc2\x82\xa9[\x1bkG:\xbb\x89\xc0\a\xc5|\xde\t_\x0e\"_\x02Z\x14\xeb7\xef\x05\xed#q_(\xf9\x949s\xc7?\xe8(\xad~\xf1T|3Q\xa6V\x8d\r\x10\xa5\f]\xf4H6\x9b\xf0\x12\x1b\x059\x05[\xfc\xffpK\xb2\xcb|q\x9a6\xa9\x96\x83@s\xa7\xce\xa1\xc5|\xd4\xbf\x8e\x1f \xfa\xec\x10\xfa\xdcN\x12\xe9p\x94\x11\x04\a\xb7slv\xe3\xe9\xdc\xfc\x84`\xaf\xf5\x9bu\xee\x93]\x89k\xaaC\bY~FR\xb1\x90\xedp\xb0\xdf\x17sl,\xa2&\x9fV\xd2\x82\xf8oB\xe8|\xf0\xb3\xd8\xf9\x19\x03H4\xf8\x8a:\x1d 8S\xcc\b+\x1ak@zBX\xfe\x0121lej\xad\xad\xadD\x1fi>\xc8/\xe4\xeej_*R\xc5q\xa4\xf1\x8e\xb6\x11\xd0G\xb4\xf8\"'}, 0x30) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000400)={{0x0, 0xe2}, 'port0\x00', 0x2, 0x1008, 0x6, 0x3, 0x100, 0xa1, 0x8001, 0x0, 0x0, 0x26}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x541b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0xa0, 0x3}, 'port0\x00', 0x40, 0x600, 0x7ff, 0x20, 0x2, 0x101, 0x38dd, 0x0, 0x7, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000280)={{0x5, 0x1b}, 0x1, 0x3, 0x0, {0xfc, 0x7}, 0x40, 0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2}, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0xf6, 0x9}, 'port1\x00', 0x78, 0x10000, 0x2, 0x80000001, 0x6, 0x0, 0x5, 0x0, 0x4, 0x3f}) r4 = syz_io_uring_setup(0x6a7b, &(0x7f00000000c0)={0x0, 0x529, 0x800, 0x1, 0x51}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_setup(0x776, &(0x7f0000000300)={0x0, 0x18f4, 0x8, 0x3, 0x8, 0x0, r4}) 16:32:11 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async, rerun: 32) r1 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000), 0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[r3, r3], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x60e5389d, 0x22, 0x1, 0x3, '\x00', r2, r3, 0x2, 0x1, 0x0, 0xd}, 0x48) (async) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0x1f, @mcast2, 0x1e}}, 0xffffff19) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x0, 0x2, 0x9}) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) 16:32:12 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 31) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x48ac02) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) r2 = syz_io_uring_setup(0x76ac, &(0x7f0000000040)={0x0, 0x52a6, 0x2, 0x1, 0x94}, &(0x7f00000000c0), &(0x7f0000000100)) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x2, 0x0) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x41, 0x41) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r3, r0, r1, r0, r1, r4, r1, r5, r6], 0x9) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 16:32:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x1, 0x0, 0x3}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x4d, 0xee}, 0x1, 0x8, 0x4, {0x4, 0xa}, 0xe0, 0x5bb0}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x6, 0x5, 0xfffffffe, {0x3ff, 0x4}, 0x20000000, 0x9}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000001c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) [ 1227.418508][T25053] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1227.426923][T25053] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1227.434900][T25053] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1227.442878][T25053] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1227.450855][T25053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1227.458888][T25053] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1227.466872][T25053] 16:32:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)={{}, 0x1, 0x0, 0x3}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x4d, 0xee}, 0x1, 0x8, 0x4, {0x4, 0xa}, 0xe0, 0x5bb0}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x6, 0x5, 0xfffffffe, {0x3ff, 0x4}, 0x20000000, 0x9}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000001c0)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) 16:32:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r1, 0x0, 0x7, &(0x7f0000000140)='batadv\x00'}, 0x30) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x801c581f, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000a1}, 0x14) [ 1227.507025][T25102] FAULT_INJECTION: forcing a failure. [ 1227.507025][T25102] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.519721][T25102] CPU: 1 PID: 25102 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1227.529796][T25102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1227.539858][T25102] Call Trace: [ 1227.543143][T25102] [ 1227.546130][T25102] dump_stack_lvl+0xda/0x130 [ 1227.550772][T25102] dump_stack+0x15/0x20 16:32:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r1, 0x0, 0x7, &(0x7f0000000140)='batadv\x00'}, 0x30) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x801c581f, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000a1}, 0x14) 16:32:12 executing program 2: r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r1, 0x0, 0x116, &(0x7f0000000600)='\x01\xd8\xd2\x8fG\xfb&\xcfg\xfa6k\\\xd7\xcd\xb7wqPrgq\x95\x9d\xfb#\x80\xdb\xdb \xc0d\x9d\xa0\xa2A`,?L#\bq\xe8}\xcb{E\xf2TX\x19\x9b+\xd5HP\x0e-\xb1\x9aa\xb0\x8b\x17\x00\x05qg\xc2\x82\xa9[\x1bkG:\xbb\x89\xc0\a\xc5|\xde\t_\x0e\"_\x02Z\x14\xeb7\xef\x05\xed#q_(\xf9\x949s\xc7?\xe8(\xad~\xf1T|3Q\xa6V\x8d\r\x10\xa5\f]\xf4H6\x9b\xf0\x12\x1b\x059\x05[\xfc\xffpK\xb2\xcb|q\x9a6\xa9\x96\x83@s\xa7\xce\xa1\xc5|\xd4\xbf\x8e\x1f \xfa\xec\x10\xfa\xdcN\x12\xe9p\x94\x11\x04\a\xb7slv\xe3\xe9\xdc\xfc\x84`\xaf\xf5\x9bu\xee\x93]\x89k\xaaC\bY~FR\xb1\x90\xedp\xb0\xdf\x17sl,\xa2&\x9fV\xd2\x82\xf8oB\xe8|\xf0\xb3\xd8\xf9\x19\x03H4\xf8\x8a:\x1d 8S\xcc\b+\x1ak@zBX\xfe\x0121lej\xad\xad\xadD\x1fi>\xc8/\xe4\xeej_*R\xc5q\xa4\xf1\x8e\xb6\x11\xd0G\xb4\xf8\"'}, 0x30) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000400)={{0x0, 0xe2}, 'port0\x00', 0x2, 0x1008, 0x6, 0x3, 0x100, 0xa1, 0x8001, 0x0, 0x0, 0x26}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x541b, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0xa0, 0x3}, 'port0\x00', 0x40, 0x600, 0x7ff, 0x20, 0x2, 0x101, 0x38dd, 0x0, 0x7, 0x6}) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000280)={{0x5, 0x1b}, 0x1, 0x3, 0x0, {0xfc, 0x7}, 0x40, 0x5}) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2}, 0x4) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0xf6, 0x9}, 'port1\x00', 0x78, 0x10000, 0x2, 0x80000001, 0x6, 0x0, 0x5, 0x0, 0x4, 0x3f}) (async) r4 = syz_io_uring_setup(0x6a7b, &(0x7f00000000c0)={0x0, 0x529, 0x800, 0x1, 0x51}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_setup(0x776, &(0x7f0000000300)={0x0, 0x18f4, 0x8, 0x3, 0x8, 0x0, r4}) 16:32:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x48ac02) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) r2 = syz_io_uring_setup(0x76ac, &(0x7f0000000040)={0x0, 0x52a6, 0x2, 0x1, 0x94}, &(0x7f00000000c0), &(0x7f0000000100)) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) (async) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x2, 0x0) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x41, 0x41) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r3, r0, r1, r0, r1, r4, r1, r5, r6], 0x9) (async) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) [ 1227.554986][T25102] should_fail_ex+0x21f/0x230 [ 1227.559669][T25102] ? vm_area_dup+0x98/0x130 [ 1227.564203][T25102] __should_failslab+0x92/0xa0 [ 1227.569002][T25102] should_failslab+0x9/0x20 [ 1227.573618][T25102] kmem_cache_alloc+0x56/0x2d0 [ 1227.578473][T25102] vm_area_dup+0x98/0x130 [ 1227.582812][T25102] copy_mm+0x67b/0x1060 [ 1227.586974][T25102] copy_process+0x1002/0x20a0 [ 1227.591659][T25102] kernel_clone+0x169/0x560 [ 1227.596171][T25102] ? proc_fail_nth_read+0x140/0x140 [ 1227.601385][T25102] ? vfs_write+0x655/0x790 16:32:12 executing program 2: r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r1, 0x0, 0x116, &(0x7f0000000600)='\x01\xd8\xd2\x8fG\xfb&\xcfg\xfa6k\\\xd7\xcd\xb7wqPrgq\x95\x9d\xfb#\x80\xdb\xdb \xc0d\x9d\xa0\xa2A`,?L#\bq\xe8}\xcb{E\xf2TX\x19\x9b+\xd5HP\x0e-\xb1\x9aa\xb0\x8b\x17\x00\x05qg\xc2\x82\xa9[\x1bkG:\xbb\x89\xc0\a\xc5|\xde\t_\x0e\"_\x02Z\x14\xeb7\xef\x05\xed#q_(\xf9\x949s\xc7?\xe8(\xad~\xf1T|3Q\xa6V\x8d\r\x10\xa5\f]\xf4H6\x9b\xf0\x12\x1b\x059\x05[\xfc\xffpK\xb2\xcb|q\x9a6\xa9\x96\x83@s\xa7\xce\xa1\xc5|\xd4\xbf\x8e\x1f \xfa\xec\x10\xfa\xdcN\x12\xe9p\x94\x11\x04\a\xb7slv\xe3\xe9\xdc\xfc\x84`\xaf\xf5\x9bu\xee\x93]\x89k\xaaC\bY~FR\xb1\x90\xedp\xb0\xdf\x17sl,\xa2&\x9fV\xd2\x82\xf8oB\xe8|\xf0\xb3\xd8\xf9\x19\x03H4\xf8\x8a:\x1d 8S\xcc\b+\x1ak@zBX\xfe\x0121lej\xad\xad\xadD\x1fi>\xc8/\xe4\xeej_*R\xc5q\xa4\xf1\x8e\xb6\x11\xd0G\xb4\xf8\"'}, 0x30) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000400)={{0x0, 0xe2}, 'port0\x00', 0x2, 0x1008, 0x6, 0x3, 0x100, 0xa1, 0x8001, 0x0, 0x0, 0x26}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x541b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0xa0, 0x3}, 'port0\x00', 0x40, 0x600, 0x7ff, 0x20, 0x2, 0x101, 0x38dd, 0x0, 0x7, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000280)={{0x5, 0x1b}, 0x1, 0x3, 0x0, {0xfc, 0x7}, 0x40, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000280)={{0x5, 0x1b}, 0x1, 0x3, 0x0, {0xfc, 0x7}, 0x40, 0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2}, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0xf6, 0x9}, 'port1\x00', 0x78, 0x10000, 0x2, 0x80000001, 0x6, 0x0, 0x5, 0x0, 0x4, 0x3f}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000000)={{0xf6, 0x9}, 'port1\x00', 0x78, 0x10000, 0x2, 0x80000001, 0x6, 0x0, 0x5, 0x0, 0x4, 0x3f}) r4 = syz_io_uring_setup(0x6a7b, &(0x7f00000000c0)={0x0, 0x529, 0x800, 0x1, 0x51}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_setup(0x776, &(0x7f0000000300)={0x0, 0x18f4, 0x8, 0x3, 0x8, 0x0, r4}) [ 1227.605820][T25102] __x64_sys_clone+0xe8/0x120 [ 1227.610522][T25102] do_syscall_64+0x59/0x120 [ 1227.615038][T25102] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1227.620965][T25102] RIP: 0033:0x7f960fea4da9 [ 1227.625390][T25102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1227.645001][T25102] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:12 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x1e, 0x8010, 0x28, &(0x7f0000000400)}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:32:12 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x1e, 0x8010, 0x28, &(0x7f0000000400)}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x1e, 0x8010, 0x28, &(0x7f0000000400)}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) (async) [ 1227.653419][T25102] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1227.661430][T25102] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1227.669438][T25102] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1227.677419][T25102] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1227.685399][T25102] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1227.693437][T25102] 16:32:12 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), &(0x7f0000000240), 0x0) r3 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r5 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r4, r4], 0x2) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000300)={r1, r5, 0x3}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_dma_maperr\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r6, 0x0, 0xb, &(0x7f00000000c0)='/dev/loop#\x00'}, 0x30) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x9231, 0x10000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) 16:32:12 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 32) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:12 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x1e, 0x8010, 0x28, &(0x7f0000000400)}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x401c5820, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000004) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x401c5820, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000004) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) (async, rerun: 64) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x401c5820, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000004) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) (async, rerun: 32) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 16:32:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) 16:32:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = syz_clone(0x200000, &(0x7f0000000b00)="62d21dc9453e4f286d07d07fed74b70d102ce737be7c47c779e4c66d43ba18b78554a742d03cdf68579d4bd3d5fad747bd9cb33e45dbcac93cfd7798d076048ae3f9428ed76c829d47f44bda244073d17259db4b66b6ec835c2f19a5936c17252d9821e38366408a869b469b8900853cb7d3707fbb2c25d66ec0417076efb760bf5b80180eaed45abab3d6aa7e8b14e8b91592af835d7a9225ab7d05ea46c89c0a135d92399bcbdf7f05214b03dad4091d83c54360451c7339291522aa51d4e57512bc8546b28a76d947fd15e15313a0cc13f6338971c5ffb0bcd0ec1c28969455b8d6700a94c240fdcd19873858a2a34c5c0615ed62f77153d712ccfa0845404168623b3e335bd6eeb8939abf55ca3146321f7abe4d260e005009667732dbfec77faaa76cb1a92038b0232aad3752245a9e4118379d88fbf7b7d136f6506474af8b88ab38d9d00f3d03dd8593af33ba35d6ce889a1fc1bb743b7b1e2d340c8ce7aed38947e5129aad61c81d49e24ec97b095a6527aa45b0389e26e0f186f90605fd9dd44a9bc0ea43f0fb0d98dc542640c5d97a07b1b7120b487023f120aca702f3e8e8a17c0fe3bf53ca7914017e9bb59cb4a424bce51c1d65311e0aa8515ae1e389dd016f10652a6584dbb267ace6acae39b4c2597ff76f5791634cedfa94c60626a05fbf8389db2b451b4c27986001cf1f49650b67b0da4c5c28cb34826a1c877382808d401fb6b8adfac9c9032aa7ac91971024cf2b24201e1301e465df445de60da0fbfcc1636bdccbf3ae117198678daddbabc292ee2ff896d660056e435e6164c9e7dec47b060a89b87d90de5d4b8671a6502a09e9ab905e7ec7b1958d529f13c6e9482ec245bb6992e5411cb9cfe592068ead8c7e73cf0cd86299d31e234c2ba107139c4d8472fcdac8cdb7a3b93be3b01465fce8ba89cc839c67371f8254b1e78a4ffe075623956465f11f00dd3e4f9e8d006c13d9f95de62b26ac33d780370a64476cb86400bb1e8fe4082e5163440926467f266bd5fbcb6ac76b422cc6476396b439ab450110ee60d5b4a958b5a9fdda52a93458312f6114c3a2735f6258e530ebe7b5fc976002a03d9fede2cad3c89d017948ccda574b9eae793d6331d8499a9ba97222350067148532f33b916f7e65fbac7e3358f9f38a42672a6fd897429eebbf6008b630ee780451ca4a734fc6c158329b8dd20491febdd146c087c5a4012718c17d464fb448f8f8c8accd5e60ecf8487fcbab339c6ee3099b63765143afaee63ca29e7c432b87f3715f3b83c92a020a531ebb684c3f3d7c422b6473bd8023a2ffc63f1d7bb7579c0eed0beed1a845c33a837550c970f2d9cdd4678534b127adcedbf7433f34f5a2b68e3da7e24f157f0adf44f2421796ea05cc26addfc911897021796ed81f9008311ca7cef91aa9bf821b69f3309b07d7a7924156260dbd12fcfed24531e0b0793f27038615cb4d094ce71aa10854fa1f8276c0cb43d8022bdfcda88dbff7845b277717f331c8920a00048581ed61a94c3819dbf02f02eed7d8c34fa4208cea443749b83da3a94ec50bbd31826571e321d93eccf3dc07e00fea48879cce9529647dd85897ea742c4c39e090473419283d55afb96d595dae5cb35b969fe1aee07c71291151fd05429d15343875dd4999ca52d3c3046aa7ee7d115ea873e5dd1d9bc8c99d0ac3e78a0d4e9024bee42d4de4efae01d2d719d70708f5ec07360b8daca8b2666e14e23da6219de8d0a5d80813c502badfaff5ec62047cdb1ebb0fce3aa341b0d6c245c6f944f9edfd0b3f57af8b85cd8e584819b016a5b1cd5922ba08b5e6e1dfe32679d0ecf65bb871588de350bf5f0eeb5c37056d4da23831ed5d2971e5bbc9f189582896b5c973f78763c787eebe7b8ae6023e4f011574e2c31653a4eec3d9ca81ab223009f3b1b9e32f5da399a19d6d8f9004c1a31e3322a310d004a3119491dd8029dbc5a0d23a7d0e66c7afb0a132851d9f6e6ee0f85cba4c1c78e71f38d3540a2c900c548a2924150aec49c153efe8c5a2a6cb6527eee19b6415c5238ac6c3da890ae3623a71a2ae645c4f8f410beb004b8a94e0d907dd251591bc0c62bfd06256d2b42989761a14280f1f04aa1dc3c87a48c01a2cfb2dcc797300868309b1004081bfe5285df88c116508b46d57e5e7c5bf841668b462db659d96739e379d0c53338bf57a3d4bfb87dd1d6c16910bd447ace3399aed66fa44728d67415d00dc42e5b13fe550c8d863f598939b930313c84a1023a193888f95e32ebcb89533a68559b8f5460fea9abde5e645e9e68894a821024f2492695c6e85a720b768ba98ddebdc4526881dc29347c46e556d94095ff7835260cabfd836dddfa3e26ac58f1da4f4f0cd5a0606853554d74e3ac12be2f0dfb0751614684d54a48765fd3eaed15fd74ecb98d10374a2e1b9ff91a7d2c4d2927f31cf9b072c3db4e779b63837392c1bdb15f22f1b7bc54b2a65bf6d2c16b269530a3756968651217001b05f61ddaf8135f77595f81e4d3605f02bf72f119e2933ca057b9455db02127854e1f33556e442fb950246cb149e694bb80ea4154920932c86caf7a43a448b80f8cfb1f5e594b4df73f57abf472d6c16364a62e0bfc0cffbf41e027ca4a56e55e059fc57c2370d2ee0eb371b1ab1bd1401afe3bc2a0b854e68c9f250a3c6c628106059809e7dbbc07d204dad2de4b50b13a0c0052a8e147614e5473379038e60dfc5bca015c0f74ae72e8660249c5a2dc96d03df1fba68d3907059ab73f82da2d0e6e45cece491695845710be6f642f5f48e4270747d0b716ea9a20717b4754add12d0ae8a7364b9afde01cfdcee561afed3d8a5a80c1438d03f4b9362e483fdbaca99bc2207f47d2e4d6183d0137560ea760207a915a823d910f90de470c0cbb3058039f40164a56db3e0f0a56a441d64552d7ec937bd49d9bb17d7872001281b1b6577c972a909469bf307c33eefa844c049f9b6ffc0af0c406fedbfcdb076c7368ae4a0a5e82df4813068845913c63bc71fbcdcd9a0c190bc51d4b28e50f5b20d0317482085c39a6351d06d10dd5734e4a70564d817a8277765bf3a9425130befe3a5b66a73653eed483ccb0c9e2164f28e07b038628bd277c36a8fe155f0616ff25d97150078bd2b2d3e92b8e2132a648f065e3b0823d3b4b3f6b307adabb08c6b2e4cb9a4938f303deacc8609e3dee772c832dcd32f798714dfaf80d1c1e08ef17c9a99da6e3ed7c481e73a33bebfe6ac8a9cd37c0b91969ab5285778729e984762dff7e041f5dc849cee9d70527286ca52cc7432334075e01ea48ce3fa569b8e5999a54db079f436dc22b285c195473117e11d7de060dc21452834409f08a59ef87aebf73544045fbc23c5bedc6df647290dd46feda988d60c6b96d167a82efd75a11ed536c4d68765731bd9090357234c37dc4c0c8e91078b14f890d526e5da8d9a18b78b9da136aceca7aa5b5d6ecfa366866568834169ece23a627f7a604a503ebd6642760a93de1c4cf656a0452c1d681d636842b07cd10558e1f37384e52e8319fc85442062e1da6812c04b709196bd6130b979d664b6ed5ae7e8a89b8787882927bb5dffe8397c09ad9a2ee36d1136026c6bde9783387a14dc03a4a342986e2d3dd45002a280ab6a4d6c00e109bbdfea694eeb97e49c5164e74e64433454c5302ee2124244bc0cfaa7e2ce2e413666adde1df0c58799c1a5af408b2f03531fd59aab2dc160f1589e942a160bad470d230fd0463e11432de49072e1ed303c2a7279dda18a787b76b0b435bcd5acc7ad5f68aef1dbae0f857444f52469ceecbfe1e692a78299cbca03a1d5966fdf908d5ac7c3cc0d8ef67a9d1d7292e85270484eb359eab4a9ee46f5019d47991d262adf7ff7ffc7df456c6c41a864a35c753deee0fdcc9380e9e1e2af15d71b8a49069bc223fda9e09d75007b1eaf2f15470030c66ea6c1132fc38c7b4bdb37a237bfeab4fa32206a771ad1fa0f0921410426377b29970cd615f05d28076834a9a1d47751108904f955875916fdf86c0f5674847ef87e2881b1235a47c635d60b67319860a76a2621f33cddbb8770c0abdbcf411c1cf5b4466fd3f4646e2637baa0269be12b42c7768849d01033c35d6d8c3fee6504adcbda00e19d3603f8ac40fcb05da5ba5282a81d085aab0bd14b2f466dfa10e1a228b8d0c10b35da3c5581b00a3dc2466fc8c7c2ff0aa3aa7a34685a7c84900cc72cc9b2bb38798b68da126044b83c5de2c0c01585175da9cc440fbf45ff1543ce872c5361467545ff87f0945189fa6f8fd31f95e272b8d6fbb2a82462bd2660c53355cd44205cd98c7fd27bcd66994ab010aef56a250bf6ac2687e1f5262d2b05c5ff86c410289b54363eaa228a9fbdd913dedc6dd2509b8b4e622dbad0fd9530ebe6d4be9a19626d8902ccb7a53ef7cee2de6f0b0a43f061bc5d94915954bda7525f9efdea78ea6bddd1e2de3badfab478edc184aff8081269d028cd646f322ee54822f2963d1114cc184d76a83c509c92672b64c9eb9a462d01062ddf3fb8fc973fb418b03d7939138196f44c1800a72ac17a76714bc10a40a9a086a4e9ef08cfba20609435b9b5277b767d8c55d74bd970f6974cab5b7999163dd2bd95dde75b3c37c53a4d1a7f790cbc1eaead061f7c97b1c8a53b99afce74af76381ca1f1289fe99984474e46da43357f2980f36d542ad06a6292eec1dfef1aca81bf83ff5afff4eb6bc3528fca4db2c0741e2df2e40b6cf305b88d3eb1ab7c9802886b515afdc0bf1de728b6169768c87df4fa3e11885bd439b8c99183d102fd7e14e5b9e112a2fb87561f2704f41d7f465386de12ca7970f8fa820cade2f819596544078b8edd1eacb7603dbc0aa5a01e74f936283bd07c0893357d24228dd2f5a0bb781d438a86ac8f21715194329f8d87aade1e8a7b92d437ad39e4ef51d810690db5ed99946edadf72f9c4e0d03b67d02bb77e5704f170c8f81723b3bb64e29003a225d95194cd4fa307b996c79a7877e8608f78449270451f66afc079b72f90502fd84c59bdfe7f78ef307e7fec387f8b6ab9eb9ff43d2fc282ae34bfba1036481f3707e609e4eefbc8d34034d306dea244bf6f840c49158f979f8993b2d5b8ecb41e376cb2684bb7152e46fd069272173f70efe03277f3e3da5f3bfa25eeddba2e94decd7c3012454963ff9f6897c9c4f667d77dc7077d0245afe5e944ad71584cdd988e8998934eb84b570482b8173f58e567fbaf6e4843af9fe9c5769db4a5e51cfdf96a966b01be7ff1da3210ec6f9e578d4f95ca9cf1ddcfe6258bf34b2efc3ebc87660bbfa38b0bc7ce8d860b1d86a2af1e4366e3f2dbc9edae34ab99ff1100a14a9a2e81dcc42f702a63a1332c9609513d1b806895d108bfc4a6da30747f9f4491f4cfe97f33e745b4c5d02f377af052c3ca08bf89b998d10424d627875a24d94b3329f7e4e9fe25b24c0fe781228f2d9e32b43f6794de1012f268e4c6fd80f734bf5a649409a35ca74160dcd7684cd0ff11ee02fa8589debc3622346340de5988647ac539be1d95bb23a6e24a0f586549300e1fd424397eca20281ac81ef55cc3e98b590dcd9361a55e62da633d58498b944225d10064c7f0070b23689956a626199796ff594607b1426b97f3b66e", 0xfae, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tick_stop\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r1, r2, 0x0, 0xb, &(0x7f0000000480)='/dev/hwrng\x00'}, 0x30) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x280002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="08082abd7000fcd3df250900000061775934164261bae5a1016695fe3f0fa410e39801dc8a3130e47b0d2647b1887134bce034d4b5a61cbb1e13e30bf609e3642f06390ffffa9c17fdaa420e0f7a6859199f238edcc40d4ee8af7c0b5a95f6cf60d62497723aec1cb6739bfc6c51a0ee02b4f4fa1ea027ad83862ef86d48f7ea1fe8b13ec7bf0c5328fc1fb50802ee8d81d0b3e6d8535332176f90abfca2a4f67f2762659ff406d21deb3df8b08d407bef6870a8e450f180223bb321f79215cb7d688ccad52f4d6d12d1038ec6d1060779d3c6e121795aba"], 0x14}}, 0x80) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x800) 16:32:12 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), &(0x7f0000000240), 0x0) getpid() (async) r3 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) (async) r5 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r4, r4], 0x2) (async) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r4, r4], 0x2) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000300)={r1, r5, 0x3}) (async) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000300)={r1, r5, 0x3}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_dma_maperr\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r6, 0x0, 0xb, &(0x7f00000000c0)='/dev/loop#\x00'}, 0x30) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x9231, 0x10000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) 16:32:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = syz_clone(0x200000, &(0x7f0000000b00)="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", 0xfae, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r1, 0x0) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tick_stop\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r1, r2, 0x0, 0xb, &(0x7f0000000480)='/dev/hwrng\x00'}, 0x30) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x280002, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="08082abd7000fcd3df250900000061775934164261bae5a1016695fe3f0fa410e39801dc8a3130e47b0d2647b1887134bce034d4b5a61cbb1e13e30bf609e3642f06390ffffa9c17fdaa420e0f7a6859199f238edcc40d4ee8af7c0b5a95f6cf60d62497723aec1cb6739bfc6c51a0ee02b4f4fa1ea027ad83862ef86d48f7ea1fe8b13ec7bf0c5328fc1fb50802ee8d81d0b3e6d8535332176f90abfca2a4f67f2762659ff406d21deb3df8b08d407bef6870a8e450f180223bb321f79215cb7d688ccad52f4d6d12d1038ec6d1060779d3c6e121795aba"], 0x14}}, 0x80) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x800) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e00), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x98866ba4c245627e}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40480c5) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r1 = syz_clone(0x200000, &(0x7f0000000b00)="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", 0xfae, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r1, 0x0) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tick_stop\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r1, r2, 0x0, 0xb, &(0x7f0000000480)='/dev/hwrng\x00'}, 0x30) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x280002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="08082abd7000fcd3df250900000061775934164261bae5a1016695fe3f0fa410e39801dc8a3130e47b0d2647b1887134bce034d4b5a61cbb1e13e30bf609e3642f06390ffffa9c17fdaa420e0f7a6859199f238edcc40d4ee8af7c0b5a95f6cf60d62497723aec1cb6739bfc6c51a0ee02b4f4fa1ea027ad83862ef86d48f7ea1fe8b13ec7bf0c5328fc1fb50802ee8d81d0b3e6d8535332176f90abfca2a4f67f2762659ff406d21deb3df8b08d407bef6870a8e450f180223bb321f79215cb7d688ccad52f4d6d12d1038ec6d1060779d3c6e121795aba"], 0x14}}, 0x80) (async) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x800) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e00), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x98866ba4c245627e}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40480c5) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40086602, 0x0) r2 = syz_clone(0x200, &(0x7f00000002c0)="484858da212498e7c808fc21dbd04fafb7298edca90d5634193dd0d1f5d08cd22cc44bdecd121ab4aa8d0caefabb2576b4514cf5da9d0004bec5eb62b77677d845be1df9ece2535d828c68361c2895ad5986adc40f81c27487c194491276d105a43321600c03bb194bb09964783ed23c2302e6583d1798da1cf145f3d75b104e8cdf700482f9876cc50d1efc7c7aa5e67f410ed4bb782abf4a490a30d6e2ff0905c5b0af45632cf34533a3f140d96e9f3e4fcbf6c11f59ff650e6af13b3296263ee2ce81ff18b90bde43fe04232767c3e6c827b4", 0xd4, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000440)="674b2651a23a9cda830e80427068988e2730aeb58e9a295543df7ec724df7b8bb7b907026c02d492248b053d6c00915d78ffc367c6bb10302e52f4bad140c6f63937e55d5f660026048e6f8c5089575d6e607c9ac8bc6333f81bd0af66a41578cf5a1ad37083acacf1e33f1b3417af") r3 = syz_clone(0x80100000, &(0x7f00000004c0)="c8494e9ec1445f9b06f75272a4ffb446a8105529e7d540a19080cde898ee2ed71f4af58e5af6592cc3c6c95f87dc11295d433ad054c05ee0552ae91383ae3f94458589dd814d", 0x46, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="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") r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000015c0)={r4, r5, 0x9}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000000c0)=[@exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="85616466000000000a0000000000000001000000000000001000000000000000852a6277000000000000000000000000000000000000000085616466000000000900000000000000020000000000000040000000000000004fb85fa096d3e9b5bc237f8a5e91211c6d218642fd5d615d869b642a537c680fbf8fac5be8ef2aa0d85c021c0752b185736a5d65e6a228680f0e40a588e0e1c736b4ec7f5fc26490d36c884c7fb5a37c9a4e"], &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x5b, 0x0, &(0x7f0000000140)="5f503e6458e965dcf48731c4ee5f0548cead924e0ed57bcf1192038ee327e19811b5dc3e66565deb518d2f42b9ae35c7ada1b5df5d79426bfed45957411fc30ae70a7d92f7a9ef3a717a821bc72512e665ebdfe79bb1e8e9de3fb0"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e00), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x98866ba4c245627e}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40480c5) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:12 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40086602, 0x0) syz_clone(0x200, &(0x7f00000002c0)="484858da212498e7c808fc21dbd04fafb7298edca90d5634193dd0d1f5d08cd22cc44bdecd121ab4aa8d0caefabb2576b4514cf5da9d0004bec5eb62b77677d845be1df9ece2535d828c68361c2895ad5986adc40f81c27487c194491276d105a43321600c03bb194bb09964783ed23c2302e6583d1798da1cf145f3d75b104e8cdf700482f9876cc50d1efc7c7aa5e67f410ed4bb782abf4a490a30d6e2ff0905c5b0af45632cf34533a3f140d96e9f3e4fcbf6c11f59ff650e6af13b3296263ee2ce81ff18b90bde43fe04232767c3e6c827b4", 0xd4, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000440)="674b2651a23a9cda830e80427068988e2730aeb58e9a295543df7ec724df7b8bb7b907026c02d492248b053d6c00915d78ffc367c6bb10302e52f4bad140c6f63937e55d5f660026048e6f8c5089575d6e607c9ac8bc6333f81bd0af66a41578cf5a1ad37083acacf1e33f1b3417af") (async) r2 = syz_clone(0x200, &(0x7f00000002c0)="484858da212498e7c808fc21dbd04fafb7298edca90d5634193dd0d1f5d08cd22cc44bdecd121ab4aa8d0caefabb2576b4514cf5da9d0004bec5eb62b77677d845be1df9ece2535d828c68361c2895ad5986adc40f81c27487c194491276d105a43321600c03bb194bb09964783ed23c2302e6583d1798da1cf145f3d75b104e8cdf700482f9876cc50d1efc7c7aa5e67f410ed4bb782abf4a490a30d6e2ff0905c5b0af45632cf34533a3f140d96e9f3e4fcbf6c11f59ff650e6af13b3296263ee2ce81ff18b90bde43fe04232767c3e6c827b4", 0xd4, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000440)="674b2651a23a9cda830e80427068988e2730aeb58e9a295543df7ec724df7b8bb7b907026c02d492248b053d6c00915d78ffc367c6bb10302e52f4bad140c6f63937e55d5f660026048e6f8c5089575d6e607c9ac8bc6333f81bd0af66a41578cf5a1ad37083acacf1e33f1b3417af") r3 = syz_clone(0x80100000, &(0x7f00000004c0)="c8494e9ec1445f9b06f75272a4ffb446a8105529e7d540a19080cde898ee2ed71f4af58e5af6592cc3c6c95f87dc11295d433ad054c05ee0552ae91383ae3f94458589dd814d", 0x46, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="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") r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000015c0)={r4, r5, 0x9}) (async) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000015c0)={r4, r5, 0x9}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000000c0)=[@exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="85616466000000000a0000000000000001000000000000001000000000000000852a6277000000000000000000000000000000000000000085616466000000000900000000000000020000000000000040000000000000004fb85fa096d3e9b5bc237f8a5e91211c6d218642fd5d615d869b642a537c680fbf8fac5be8ef2aa0d85c021c0752b185736a5d65e6a228680f0e40a588e0e1c736b4ec7f5fc26490d36c884c7fb5a37c9a4e"], &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x5b, 0x0, &(0x7f0000000140)="5f503e6458e965dcf48731c4ee5f0548cead924e0ed57bcf1192038ee327e19811b5dc3e66565deb518d2f42b9ae35c7ada1b5df5d79426bfed45957411fc30ae70a7d92f7a9ef3a717a821bc72512e665ebdfe79bb1e8e9de3fb0"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:12 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r2 = syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), &(0x7f0000000240), 0x0) (async) r3 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r5 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r4, r4], 0x2) (async) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000300)={r1, r5, 0x3}) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_dma_maperr\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r6, 0x0, 0xb, &(0x7f00000000c0)='/dev/loop#\x00'}, 0x30) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x9231, 0x10000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:12 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001040), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) read$msr(r2, &(0x7f0000000040)=""/4096, 0x1000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x1], 0x2) syz_io_uring_setup(0x3471, &(0x7f0000001080)={0x0, 0xaca1, 0x8, 0x2, 0x2a}, &(0x7f0000001100), &(0x7f0000001140)=0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x80045301, &(0x7f0000000400)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x200}, 0x0, {0x0, r5}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) [ 1228.813510][T25416] FAULT_INJECTION: forcing a failure. [ 1228.813510][T25416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1228.826767][T25416] CPU: 0 PID: 25416 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1228.836835][T25416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1228.846890][T25416] Call Trace: [ 1228.850173][T25416] [ 1228.853103][T25416] dump_stack_lvl+0xda/0x130 [ 1228.857701][T25416] dump_stack+0x15/0x20 [ 1228.861856][T25416] should_fail_ex+0x21f/0x230 [ 1228.866528][T25416] __should_fail_alloc_page+0xfd/0x110 [ 1228.871989][T25416] __alloc_pages+0x108/0x340 [ 1228.876580][T25416] alloc_pages_mpol+0xb1/0x1d0 [ 1228.881354][T25416] alloc_pages+0xe0/0x100 [ 1228.885694][T25416] __pmd_alloc+0x4b/0x3c0 [ 1228.890024][T25416] copy_page_range+0x1f05/0x2150 [ 1228.894970][T25416] ? mas_wr_end_piv+0x15f/0x480 [ 1228.899826][T25416] copy_mm+0x938/0x1060 [ 1228.903982][T25416] copy_process+0x1002/0x20a0 [ 1228.908664][T25416] kernel_clone+0x169/0x560 [ 1228.913160][T25416] ? proc_fail_nth_read+0x140/0x140 [ 1228.918369][T25416] ? vfs_write+0x655/0x790 [ 1228.922797][T25416] __x64_sys_clone+0xe8/0x120 [ 1228.927484][T25416] do_syscall_64+0x59/0x120 [ 1228.931987][T25416] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1228.937889][T25416] RIP: 0033:0x7f960fea4da9 [ 1228.942296][T25416] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1228.961904][T25416] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1228.970317][T25416] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1228.978287][T25416] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1228.986256][T25416] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1228.994233][T25416] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1229.002198][T25416] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1229.010173][T25416] 16:32:13 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r1, 0x0, 0x7, &(0x7f0000000140)='batadv\x00'}, 0x30) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x801c581f, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000a1}, 0x14) 16:32:13 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$TIOCEXCL(r1, 0x540c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x48ac02) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) r2 = syz_io_uring_setup(0x76ac, &(0x7f0000000040)={0x0, 0x52a6, 0x2, 0x1, 0x94}, &(0x7f00000000c0), &(0x7f0000000100)) (async) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) (async) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x41, 0x41) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r3, r0, r1, r0, r1, r4, r1, r5, r6], 0x9) (async, rerun: 64) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (rerun: 64) 16:32:13 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001040), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) read$msr(r2, &(0x7f0000000040)=""/4096, 0x1000) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x1], 0x2) (async) syz_io_uring_setup(0x3471, &(0x7f0000001080)={0x0, 0xaca1, 0x8, 0x2, 0x2a}, &(0x7f0000001100), &(0x7f0000001140)=0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x80045301, &(0x7f0000000400)) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x200}, 0x0, {0x0, r5}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:13 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40086602, 0x0) r2 = syz_clone(0x200, &(0x7f00000002c0)="484858da212498e7c808fc21dbd04fafb7298edca90d5634193dd0d1f5d08cd22cc44bdecd121ab4aa8d0caefabb2576b4514cf5da9d0004bec5eb62b77677d845be1df9ece2535d828c68361c2895ad5986adc40f81c27487c194491276d105a43321600c03bb194bb09964783ed23c2302e6583d1798da1cf145f3d75b104e8cdf700482f9876cc50d1efc7c7aa5e67f410ed4bb782abf4a490a30d6e2ff0905c5b0af45632cf34533a3f140d96e9f3e4fcbf6c11f59ff650e6af13b3296263ee2ce81ff18b90bde43fe04232767c3e6c827b4", 0xd4, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000440)="674b2651a23a9cda830e80427068988e2730aeb58e9a295543df7ec724df7b8bb7b907026c02d492248b053d6c00915d78ffc367c6bb10302e52f4bad140c6f63937e55d5f660026048e6f8c5089575d6e607c9ac8bc6333f81bd0af66a41578cf5a1ad37083acacf1e33f1b3417af") (async) r3 = syz_clone(0x80100000, &(0x7f00000004c0)="c8494e9ec1445f9b06f75272a4ffb446a8105529e7d540a19080cde898ee2ed71f4af58e5af6592cc3c6c95f87dc11295d433ad054c05ee0552ae91383ae3f94458589dd814d", 0x46, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="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") (async) r4 = epoll_create1(0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f00000015c0)={r4, r5, 0x9}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000000c0)=[@exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="85616466000000000a0000000000000001000000000000001000000000000000852a6277000000000000000000000000000000000000000085616466000000000900000000000000020000000000000040000000000000004fb85fa096d3e9b5bc237f8a5e91211c6d218642fd5d615d869b642a537c680fbf8fac5be8ef2aa0d85c021c0752b185736a5d65e6a228680f0e40a588e0e1c736b4ec7f5fc26490d36c884c7fb5a37c9a4e"], &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x5b, 0x0, &(0x7f0000000140)="5f503e6458e965dcf48731c4ee5f0548cead924e0ed57bcf1192038ee327e19811b5dc3e66565deb518d2f42b9ae35c7ada1b5df5d79426bfed45957411fc30ae70a7d92f7a9ef3a717a821bc72512e665ebdfe79bb1e8e9de3fb0"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:13 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$TIOCEXCL(r1, 0x540c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) 16:32:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x82) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:13 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 33) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:13 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$TIOCEXCL(r1, 0x540c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) 16:32:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x82) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x82) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) 16:32:13 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = getpid() r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r2, r0, 0x81}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xd, 0x13, 0x30, &(0x7f0000000480)}) 16:32:13 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001040), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) read$msr(r2, &(0x7f0000000040)=""/4096, 0x1000) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x1], 0x2) (async) syz_io_uring_setup(0x3471, &(0x7f0000001080)={0x0, 0xaca1, 0x8, 0x2, 0x2a}, &(0x7f0000001100), &(0x7f0000001140)=0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x80045301, &(0x7f0000000400)) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x200}, 0x0, {0x0, r5}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:13 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x82) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x82) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) [ 1229.408744][T25481] FAULT_INJECTION: forcing a failure. [ 1229.408744][T25481] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.421474][T25481] CPU: 0 PID: 25481 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1229.431553][T25481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1229.441630][T25481] Call Trace: [ 1229.444962][T25481] [ 1229.447923][T25481] dump_stack_lvl+0xda/0x130 [ 1229.452573][T25481] dump_stack+0x15/0x20 16:32:14 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = socket$rxrpc(0x21, 0x2, 0x2) timerfd_gettime(r0, &(0x7f0000000080)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) 16:32:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$nci(r1, &(0x7f0000000040)=""/171, 0xab) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10000020}, 0x821) [ 1229.456736][T25481] should_fail_ex+0x21f/0x230 [ 1229.461507][T25481] ? vm_area_dup+0x98/0x130 [ 1229.466045][T25481] __should_failslab+0x92/0xa0 [ 1229.470817][T25481] should_failslab+0x9/0x20 [ 1229.475338][T25481] kmem_cache_alloc+0x56/0x2d0 [ 1229.480107][T25481] vm_area_dup+0x98/0x130 [ 1229.484510][T25481] copy_mm+0x67b/0x1060 [ 1229.488676][T25481] copy_process+0x1002/0x20a0 [ 1229.493406][T25481] kernel_clone+0x169/0x560 [ 1229.497930][T25481] ? proc_fail_nth_read+0x140/0x140 [ 1229.503184][T25481] ? vfs_write+0x655/0x790 [ 1229.507614][T25481] __x64_sys_clone+0xe8/0x120 [ 1229.512334][T25481] do_syscall_64+0x59/0x120 [ 1229.516847][T25481] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1229.522776][T25481] RIP: 0033:0x7f960fea4da9 [ 1229.527271][T25481] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1229.546929][T25481] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x2, 0x9}, 0x0, 0x101, 0x3f, {0x5}}) 16:32:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = getpid() r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r2, r0, 0x81}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xd, 0x13, 0x30, &(0x7f0000000480)}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) getpid() (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r2, r0, 0x81}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xd, 0x13, 0x30, &(0x7f0000000480)}) (async) 16:32:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x2, 0x9}, 0x0, 0x101, 0x3f, {0x5}}) [ 1229.555411][T25481] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1229.563447][T25481] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1229.571497][T25481] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1229.579479][T25481] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1229.587542][T25481] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1229.595531][T25481] 16:32:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$nci(r1, &(0x7f0000000040)=""/171, 0xab) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10000020}, 0x821) 16:32:14 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = socket$rxrpc(0x21, 0x2, 0x2) timerfd_gettime(r0, &(0x7f0000000080)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) 16:32:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x2, 0x9}, 0x0, 0x101, 0x3f, {0x5}}) 16:32:14 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:14 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 34) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) r1 = getpid() r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r2, r0, 0x81}) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0xd, 0x13, 0x30, &(0x7f0000000480)}) 16:32:14 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) (async) timerfd_gettime(r0, &(0x7f0000000080)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0x0) 16:32:14 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$nci(r1, &(0x7f0000000040)=""/171, 0xab) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10000020}, 0x821) 16:32:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1837000005000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b700008600000018270000", @ANYRES32=0x1, @ANYBLOB="0000000054ca0000"], &(0x7f0000000140)='syzkaller\x00', 0x1ff, 0x1000, &(0x7f0000000400)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000001c0)=[{0x4, 0x4, 0xa, 0x2}, {0x0, 0x1, 0x9, 0x1}, {0x2, 0x5, 0x10}, {0x0, 0x1, 0x1, 0x2}, {0x4, 0x1, 0x8, 0x8}, {0x2, 0x1, 0xc}, {0x3, 0x3, 0x10, 0x9}, {0x2, 0x2, 0x3}], 0x10, 0x80000001}, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000015c0)={0x7c, 0x0, &(0x7f0000001480)=[@exit_looper, @release={0x40046306, 0x2}, @enter_looper, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001400)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/100, 0x64, 0x2, 0x3f}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}, @clear_death], 0xb1, 0x0, &(0x7f0000001500)="028996cf8949143a60b8e8aedba63e5f46f61d4ad78c498584464b1e35eab9c8d85d7e371a9ad6eb168297bdaf76561e2ac8f96dbb7c091d26ee1f549da9e057de408ec27e4e3525b47d55f0ff457929701933b1c18f19b960821d4b5a2ae064f81d64dd79ba451fc93c1092df1165b532ee057ef63a00129faf09c08b0150cbd4bc902e0c54f971f6d8c8be445d3e7ab8d2a661b043d025c267a5f917623b9d2f24b109744e258426fb0af2de5af745fe"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xa0000, 0xfffffe01, 0x5, {0x7ff}, 0x4, 0xa7000000}) 16:32:14 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) [ 1229.724342][T25513] FAULT_INJECTION: forcing a failure. [ 1229.724342][T25513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1229.737622][T25513] CPU: 0 PID: 25513 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1229.747695][T25513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1229.757747][T25513] Call Trace: [ 1229.761024][T25513] [ 1229.763957][T25513] dump_stack_lvl+0xda/0x130 [ 1229.768554][T25513] dump_stack+0x15/0x20 16:32:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="14d15a4220b0d44aabd9e874eefc3bcab7f08a703f3d99fc1607f553cef33dcca6b56949d4c9b7e4d94819e98fb6cff70fc71d158a5be2deff04a3828fb34e27ea353aff88b0966f0420d1ee2b59b77e2ca3cbea9f79f90747db6cd1a2bb6c38798e095af235b74297d2e413e2b493ac9e1e19f5c4849141491a51c47fbb1d18f10a9901eef2e92f456d946f50a285539742bfcda4470aca7c53fc917503281a656febe11968a5b287ef2e45256cc8f858ece41be4946685840ce1e77d20900db205bb89f2aae94a26fb63788eecf2b2ddb7aaa1118a6befb62308038bd788414b4d22b3e2cf472517ae70cb2796d95a35026cc9696d2092", 0xf8, 0x20000044, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) 16:32:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1837000005000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b700008600000018270000", @ANYRES32=0x1, @ANYBLOB="0000000054ca0000"], &(0x7f0000000140)='syzkaller\x00', 0x1ff, 0x1000, &(0x7f0000000400)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000001c0)=[{0x4, 0x4, 0xa, 0x2}, {0x0, 0x1, 0x9, 0x1}, {0x2, 0x5, 0x10}, {0x0, 0x1, 0x1, 0x2}, {0x4, 0x1, 0x8, 0x8}, {0x2, 0x1, 0xc}, {0x3, 0x3, 0x10, 0x9}, {0x2, 0x2, 0x3}], 0x10, 0x80000001}, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000015c0)={0x7c, 0x0, &(0x7f0000001480)=[@exit_looper, @release={0x40046306, 0x2}, @enter_looper, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001400)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/100, 0x64, 0x2, 0x3f}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}, @clear_death], 0xb1, 0x0, &(0x7f0000001500)="028996cf8949143a60b8e8aedba63e5f46f61d4ad78c498584464b1e35eab9c8d85d7e371a9ad6eb168297bdaf76561e2ac8f96dbb7c091d26ee1f549da9e057de408ec27e4e3525b47d55f0ff457929701933b1c18f19b960821d4b5a2ae064f81d64dd79ba451fc93c1092df1165b532ee057ef63a00129faf09c08b0150cbd4bc902e0c54f971f6d8c8be445d3e7ab8d2a661b043d025c267a5f917623b9d2f24b109744e258426fb0af2de5af745fe"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000015c0)={0x7c, 0x0, &(0x7f0000001480)=[@exit_looper, @release={0x40046306, 0x2}, @enter_looper, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001400)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/100, 0x64, 0x2, 0x3f}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}, @clear_death], 0xb1, 0x0, &(0x7f0000001500)="028996cf8949143a60b8e8aedba63e5f46f61d4ad78c498584464b1e35eab9c8d85d7e371a9ad6eb168297bdaf76561e2ac8f96dbb7c091d26ee1f549da9e057de408ec27e4e3525b47d55f0ff457929701933b1c18f19b960821d4b5a2ae064f81d64dd79ba451fc93c1092df1165b532ee057ef63a00129faf09c08b0150cbd4bc902e0c54f971f6d8c8be445d3e7ab8d2a661b043d025c267a5f917623b9d2f24b109744e258426fb0af2de5af745fe"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xa0000, 0xfffffe01, 0x5, {0x7ff}, 0x4, 0xa7000000}) [ 1229.772725][T25513] should_fail_ex+0x21f/0x230 [ 1229.777424][T25513] __should_fail_alloc_page+0xfd/0x110 [ 1229.782894][T25513] __alloc_pages+0x108/0x340 [ 1229.787496][T25513] alloc_pages_mpol+0xb1/0x1d0 [ 1229.792284][T25513] alloc_pages+0xe0/0x100 [ 1229.796626][T25513] pte_alloc_one+0x32/0xe0 [ 1229.801054][T25513] __pte_alloc+0x33/0x270 [ 1229.805387][T25513] copy_page_range+0x1c5d/0x2150 [ 1229.810345][T25513] copy_mm+0x938/0x1060 [ 1229.814503][T25513] copy_process+0x1002/0x20a0 [ 1229.819182][T25513] kernel_clone+0x169/0x560 [ 1229.823686][T25513] ? proc_fail_nth_read+0x140/0x140 [ 1229.828889][T25513] ? vfs_write+0x655/0x790 [ 1229.833316][T25513] __x64_sys_clone+0xe8/0x120 [ 1229.837997][T25513] do_syscall_64+0x59/0x120 [ 1229.842510][T25513] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1229.848417][T25513] RIP: 0033:0x7f960fea4da9 [ 1229.852829][T25513] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:32:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1837000005000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b700008600000018270000", @ANYRES32=0x1, @ANYBLOB="0000000054ca0000"], &(0x7f0000000140)='syzkaller\x00', 0x1ff, 0x1000, &(0x7f0000000400)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000001c0)=[{0x4, 0x4, 0xa, 0x2}, {0x0, 0x1, 0x9, 0x1}, {0x2, 0x5, 0x10}, {0x0, 0x1, 0x1, 0x2}, {0x4, 0x1, 0x8, 0x8}, {0x2, 0x1, 0xc}, {0x3, 0x3, 0x10, 0x9}, {0x2, 0x2, 0x3}], 0x10, 0x80000001}, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000015c0)={0x7c, 0x0, &(0x7f0000001480)=[@exit_looper, @release={0x40046306, 0x2}, @enter_looper, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001400)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/100, 0x64, 0x2, 0x3f}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}, @clear_death], 0xb1, 0x0, &(0x7f0000001500)="028996cf8949143a60b8e8aedba63e5f46f61d4ad78c498584464b1e35eab9c8d85d7e371a9ad6eb168297bdaf76561e2ac8f96dbb7c091d26ee1f549da9e057de408ec27e4e3525b47d55f0ff457929701933b1c18f19b960821d4b5a2ae064f81d64dd79ba451fc93c1092df1165b532ee057ef63a00129faf09c08b0150cbd4bc902e0c54f971f6d8c8be445d3e7ab8d2a661b043d025c267a5f917623b9d2f24b109744e258426fb0af2de5af745fe"}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xa0000, 0xfffffe01, 0x5, {0x7ff}, 0x4, 0xa7000000}) 16:32:14 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501000) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40040) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xefd1, 0xffff, 0x1, {0x20000001, 0x80}, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0xb, 0x1f, 0x80000000, {0x4}, 0x7, 0xffffffeb}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7ff, 0x4, 0x7, 0x400, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x7}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x9f, 0x1}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x10842, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) timerfd_gettime(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x50}}, 0x4084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000001e7c0000000000006612000018230000", @ANYRES32=r1, @ANYBLOB="0000e444869519048c027a2dcc7953970080000000950000000000000018250000", @ANYRES32=r2, @ANYBLOB="0000000000000018181a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000184b0000010000000000000000000000d8b8feff100000001800000002000000000000000100010085100000fdffffff9500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xb, 0x2, 0x4}, 0x10, 0x2335f, r5, 0x0, &(0x7f0000000580)=[r8], &(0x7f00000005c0), 0x10, 0xa00}, 0x90) [ 1229.872619][T25513] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1229.881036][T25513] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1229.889004][T25513] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1229.896973][T25513] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1229.904937][T25513] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1229.912911][T25513] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1229.920893][T25513] 16:32:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="14d15a4220b0d44aabd9e874eefc3bcab7f08a703f3d99fc1607f553cef33dcca6b56949d4c9b7e4d94819e98fb6cff70fc71d158a5be2deff04a3828fb34e27ea353aff88b0966f0420d1ee2b59b77e2ca3cbea9f79f90747db6cd1a2bb6c38798e095af235b74297d2e413e2b493ac9e1e19f5c4849141491a51c47fbb1d18f10a9901eef2e92f456d946f50a285539742bfcda4470aca7c53fc917503281a656febe11968a5b287ef2e45256cc8f858ece41be4946685840ce1e77d20900db205bb89f2aae94a26fb63788eecf2b2ddb7aaa1118a6befb62308038bd788414b4d22b3e2cf472517ae70cb2796d95a35026cc9696d2092", 0xf8, 0x20000044, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) sendto$rxrpc(r0, &(0x7f0000000000)="14d15a4220b0d44aabd9e874eefc3bcab7f08a703f3d99fc1607f553cef33dcca6b56949d4c9b7e4d94819e98fb6cff70fc71d158a5be2deff04a3828fb34e27ea353aff88b0966f0420d1ee2b59b77e2ca3cbea9f79f90747db6cd1a2bb6c38798e095af235b74297d2e413e2b493ac9e1e19f5c4849141491a51c47fbb1d18f10a9901eef2e92f456d946f50a285539742bfcda4470aca7c53fc917503281a656febe11968a5b287ef2e45256cc8f858ece41be4946685840ce1e77d20900db205bb89f2aae94a26fb63788eecf2b2ddb7aaa1118a6befb62308038bd788414b4d22b3e2cf472517ae70cb2796d95a35026cc9696d2092", 0xf8, 0x20000044, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) (async) 16:32:14 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 35) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:14 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x541b, 0x0) 16:32:14 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) 16:32:14 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501000) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40040) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) [ 1230.000904][T25559] FAULT_INJECTION: forcing a failure. [ 1230.000904][T25559] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.013726][T25559] CPU: 1 PID: 25559 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1230.023800][T25559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1230.033921][T25559] Call Trace: [ 1230.037208][T25559] [ 1230.040137][T25559] dump_stack_lvl+0xda/0x130 [ 1230.044763][T25559] dump_stack+0x15/0x20 [ 1230.048939][T25559] should_fail_ex+0x21f/0x230 [ 1230.053625][T25559] ? vm_area_dup+0x98/0x130 [ 1230.058188][T25559] __should_failslab+0x92/0xa0 [ 1230.062968][T25559] should_failslab+0x9/0x20 [ 1230.067479][T25559] kmem_cache_alloc+0x56/0x2d0 [ 1230.072327][T25559] vm_area_dup+0x98/0x130 [ 1230.076682][T25559] copy_mm+0x67b/0x1060 [ 1230.080941][T25559] copy_process+0x1002/0x20a0 [ 1230.085708][T25559] kernel_clone+0x169/0x560 [ 1230.090229][T25559] ? proc_fail_nth_read+0x140/0x140 [ 1230.095474][T25559] ? vfs_write+0x655/0x790 16:32:14 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x541b, 0x0) 16:32:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="14d15a4220b0d44aabd9e874eefc3bcab7f08a703f3d99fc1607f553cef33dcca6b56949d4c9b7e4d94819e98fb6cff70fc71d158a5be2deff04a3828fb34e27ea353aff88b0966f0420d1ee2b59b77e2ca3cbea9f79f90747db6cd1a2bb6c38798e095af235b74297d2e413e2b493ac9e1e19f5c4849141491a51c47fbb1d18f10a9901eef2e92f456d946f50a285539742bfcda4470aca7c53fc917503281a656febe11968a5b287ef2e45256cc8f858ece41be4946685840ce1e77d20900db205bb89f2aae94a26fb63788eecf2b2ddb7aaa1118a6befb62308038bd788414b4d22b3e2cf472517ae70cb2796d95a35026cc9696d2092", 0xf8, 0x20000044, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) sendto$rxrpc(r0, &(0x7f0000000000)="14d15a4220b0d44aabd9e874eefc3bcab7f08a703f3d99fc1607f553cef33dcca6b56949d4c9b7e4d94819e98fb6cff70fc71d158a5be2deff04a3828fb34e27ea353aff88b0966f0420d1ee2b59b77e2ca3cbea9f79f90747db6cd1a2bb6c38798e095af235b74297d2e413e2b493ac9e1e19f5c4849141491a51c47fbb1d18f10a9901eef2e92f456d946f50a285539742bfcda4470aca7c53fc917503281a656febe11968a5b287ef2e45256cc8f858ece41be4946685840ce1e77d20900db205bb89f2aae94a26fb63788eecf2b2ddb7aaa1118a6befb62308038bd788414b4d22b3e2cf472517ae70cb2796d95a35026cc9696d2092", 0xf8, 0x20000044, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) (async) 16:32:14 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xcd, 0x3f}, 0x1, 0x1, 0x7fffffff, {0x40, 0x40}, 0x27}) 16:32:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xefd1, 0xffff, 0x1, {0x20000001, 0x80}, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0xb, 0x1f, 0x80000000, {0x4}, 0x7, 0xffffffeb}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7ff, 0x4, 0x7, 0x400, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x7}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x9f, 0x1}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x10842, 0x0) (async, rerun: 32) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 32) timerfd_gettime(r5, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x50}}, 0x4084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000001e7c0000000000006612000018230000", @ANYRES32=r1, @ANYBLOB="0000e444869519048c027a2dcc7953970080000000950000000000000018250000", @ANYRES32=r2, @ANYBLOB="0000000000000018181a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000184b0000010000000000000000000000d8b8feff100000001800000002000000000000000100010085100000fdffffff9500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xb, 0x2, 0x4}, 0x10, 0x2335f, r5, 0x0, &(0x7f0000000580)=[r8], &(0x7f00000005c0), 0x10, 0xa00}, 0x90) 16:32:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:32:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 16:32:14 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x541b, 0x0) [ 1230.099901][T25559] __x64_sys_clone+0xe8/0x120 [ 1230.104590][T25559] do_syscall_64+0x59/0x120 [ 1230.109102][T25559] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1230.115060][T25559] RIP: 0033:0x7f960fea4da9 [ 1230.119494][T25559] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1230.139150][T25559] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:32:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:32:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x7f, 0xc3}, 'port1\x00', 0x94, 0x40, 0x8, 0x100, 0x6d, 0x1, 0x8, 0x0, 0x2, 0x4}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="248b9c040000000000000081077539bf1ff5", @ANYRES16=r1, @ANYBLOB="00012abd7000fbdbdf250500000008000400810000000800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0xfe01, 0xbec9, 0x2, 0x9, 0x0, 0x2}) 16:32:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (rerun: 64) [ 1230.147571][T25559] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1230.155542][T25559] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1230.163540][T25559] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1230.171642][T25559] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1230.179620][T25559] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1230.187622][T25559] 16:32:14 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xcd, 0x3f}, 0x1, 0x1, 0x7fffffff, {0x40, 0x40}, 0x27}) (rerun: 64) 16:32:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa7) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x40}, 0x1, 0x9, 0x0, {0x1, 0x6}, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) 16:32:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0xefd1, 0xffff, 0x1, {0x20000001, 0x80}, 0x0, 0x3}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0xb, 0x1f, 0x80000000, {0x4}, 0x7, 0xffffffeb}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7ff, 0x4, 0x7, 0x400, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x7}, 0x48) (async, rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x9f, 0x1}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x10842, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) timerfd_gettime(r5, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x50}}, 0x4084) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000001e7c0000000000006612000018230000", @ANYRES32=r1, @ANYBLOB="0000e444869519048c027a2dcc7953970080000000950000000000000018250000", @ANYRES32=r2, @ANYBLOB="0000000000000018181a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000184b0000010000000000000000000000d8b8feff100000001800000002000000000000000100010085100000fdffffff9500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xb, 0x2, 0x4}, 0x10, 0x2335f, r5, 0x0, &(0x7f0000000580)=[r8], &(0x7f00000005c0), 0x10, 0xa00}, 0x90) 16:32:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) (rerun: 64) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (rerun: 32) 16:32:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa7) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x40}, 0x1, 0x9, 0x0, {0x1, 0x6}, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa7) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x40}, 0x1, 0x9, 0x0, {0x1, 0x6}, 0x0, 0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) (async) 16:32:14 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 36) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x7f, 0xc3}, 'port1\x00', 0x94, 0x40, 0x8, 0x100, 0x6d, 0x1, 0x8, 0x0, 0x2, 0x4}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="248b9c040000000000000081077539bf1ff5", @ANYRES16=r1, @ANYBLOB="00012abd7000fbdbdf250500000008000400810000000800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0xfe01, 0xbec9, 0x2, 0x9, 0x0, 0x2}) 16:32:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x0, 0x200, 0x6aee}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:14 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xcd, 0x3f}, 0x1, 0x1, 0x7fffffff, {0x40, 0x40}, 0x27}) 16:32:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x7f, 0xc3}, 'port1\x00', 0x94, 0x40, 0x8, 0x100, 0x6d, 0x1, 0x8, 0x0, 0x2, 0x4}) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="248b9c040000000000000081077539bf1ff5", @ANYRES16=r1, @ANYBLOB="00012abd7000fbdbdf250500000008000400810000000800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0xfe01, 0xbec9, 0x2, 0x9, 0x0, 0x2}) 16:32:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa7) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x40}, 0x1, 0x9, 0x0, {0x1, 0x6}, 0x0, 0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x541b, 0x0) 16:32:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x0, 0x200, 0x6aee}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:14 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) socketpair(0x28, 0x4, 0x800, &(0x7f0000000000)) 16:32:14 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x88400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x402) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400144) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:14 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 37) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x0, 0x200, 0x6aee}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (rerun: 32) 16:32:20 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x88400) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x402) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400144) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:20 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:20 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) sendto$rxrpc(r1, &(0x7f0000000000)="d33f48f000dc2c8964769f83c673f5eb211883a4381e1701d3ffecfc660113bbdf59254272966ea1823d5fe0cf2f07f42172c076293045ead3fb1b3a1f1221ae7ff0c858b4c33ff83dcab3c20c57ddd55f4476529253f95c19d8570ae281eeb7be82b544aa80b0b4e2", 0x69, 0x4000000, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:20 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:20 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) socketpair(0x28, 0x4, 0x800, &(0x7f0000000000)) 16:32:20 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x88400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x402) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400144) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x400144) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:20 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) (async) sendto$rxrpc(r1, &(0x7f0000000000)="d33f48f000dc2c8964769f83c673f5eb211883a4381e1701d3ffecfc660113bbdf59254272966ea1823d5fe0cf2f07f42172c076293045ead3fb1b3a1f1221ae7ff0c858b4c33ff83dcab3c20c57ddd55f4476529253f95c19d8570ae281eeb7be82b544aa80b0b4e2", 0x69, 0x4000000, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000200)={0x8000, 0x81, 0x2, 0xfffa, 0x1, 0x81}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xb8002) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x541b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0x40, 0x81}, 'port1\x00', 0x1, 0x20000, 0x0, 0x4, 0x9, 0x0, 0x7fff, 0x0, 0x1, 0x52}) 16:32:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:20 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) (async, rerun: 64) sendto$rxrpc(r1, &(0x7f0000000000)="d33f48f000dc2c8964769f83c673f5eb211883a4381e1701d3ffecfc660113bbdf59254272966ea1823d5fe0cf2f07f42172c076293045ead3fb1b3a1f1221ae7ff0c858b4c33ff83dcab3c20c57ddd55f4476529253f95c19d8570ae281eeb7be82b544aa80b0b4e2", 0x69, 0x4000000, 0x0, 0x0) (rerun: 64) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000200)={0x8000, 0x81, 0x2, 0xfffa, 0x1, 0x81}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xb8002) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0x40, 0x81}, 'port1\x00', 0x1, 0x20000, 0x0, 0x4, 0x9, 0x0, 0x7fff, 0x0, 0x1, 0x52}) 16:32:20 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) socketpair(0x28, 0x4, 0x800, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) socketpair(0x28, 0x4, 0x800, &(0x7f0000000000)) (async) 16:32:20 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10840, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0, r0, r0, r0, r0, r0, r2], 0x7) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) 16:32:20 executing program 5: socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000200)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0xfffffffffffffd05) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = epoll_create(0x43e5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) 16:32:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000200)={0x8000, 0x81, 0x2, 0xfffa, 0x1, 0x81}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xb8002) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x541b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0x40, 0x81}, 'port1\x00', 0x1, 0x20000, 0x0, 0x4, 0x9, 0x0, 0x7fff, 0x0, 0x1, 0x52}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000200)={0x8000, 0x81, 0x2, 0xfffa, 0x1, 0x81}) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xb8002) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000080)={{0x40, 0x81}, 'port1\x00', 0x1, 0x20000, 0x0, 0x4, 0x9, 0x0, 0x7fff, 0x0, 0x1, 0x52}) (async) 16:32:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:20 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10840, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10840, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0, r0, r0, r0, r0, r0, r2], 0x7) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) 16:32:20 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x4, 0x4, 0x9, {0x8f6, 0x9c}, 0x9db3, 0x7}) 16:32:20 executing program 5: socket$rxrpc(0x21, 0x2, 0x2) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000200)) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0xfffffffffffffd05) (async, rerun: 32) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) (async, rerun: 32) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = epoll_create(0x43e5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) 16:32:20 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10840, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0, r0, r0, r0, r0, r0, r2], 0x7) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) 16:32:20 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x84800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) syz_io_uring_setup(0x4863, &(0x7f0000000040)={0x0, 0xe13, 0x20, 0x3, 0x2d5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0xdaf, &(0x7f0000000140)={0x0, 0xf9b2, 0x8, 0x0, 0x85}, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="486f00ec5e9556b948588fd5f921a1aa3a2878591df2236cb7101116211af529cac7d1b8f7a249c696cc9f769805c62981af3062c479adf5813a955190c10f8770520e3a8547dc63a1bef50077515bfd62bd0f3d84635b928776f627112c1b46423630444cbda84ea09e2f7697f4fe1ff84e97f59cb3a1a965934b2e8b7a174fa5af7a835510fbf424db784e6662b23377cb9070b0e7c787ed355d4698f76b2a6cebeaaa5f90053de51a8dda651c85ae9a0344f93bff66", 0xb7, 0x0, 0x1, {0x0, r3}}) 16:32:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:20 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 38) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:20 executing program 5: socket$rxrpc(0x21, 0x2, 0x2) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000200)) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, 0x0, 0xfffffffffffffd05) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r4 = epoll_create(0x43e5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) 16:32:20 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x10001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x19, 0x4}, 'port1\x00', 0x1, 0x0, 0x3ff, 0x9, 0x1, 0x3, 0x3ff, 0x0, 0x0, 0x6}) 16:32:20 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x4, 0x4, 0x9, {0x8f6, 0x9c}, 0x9db3, 0x7}) 16:32:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4100) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:20 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x84800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) syz_io_uring_setup(0x4863, &(0x7f0000000040)={0x0, 0xe13, 0x20, 0x3, 0x2d5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0xdaf, &(0x7f0000000140)={0x0, 0xf9b2, 0x8, 0x0, 0x85}, &(0x7f00000001c0), &(0x7f0000000200)=0x0) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="486f00ec5e9556b948588fd5f921a1aa3a2878591df2236cb7101116211af529cac7d1b8f7a249c696cc9f769805c62981af3062c479adf5813a955190c10f8770520e3a8547dc63a1bef50077515bfd62bd0f3d84635b928776f627112c1b46423630444cbda84ea09e2f7697f4fe1ff84e97f59cb3a1a965934b2e8b7a174fa5af7a835510fbf424db784e6662b23377cb9070b0e7c787ed355d4698f76b2a6cebeaaa5f90053de51a8dda651c85ae9a0344f93bff66", 0xb7, 0x0, 0x1, {0x0, r3}}) 16:32:20 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x10001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x19, 0x4}, 'port1\x00', 0x1, 0x0, 0x3ff, 0x9, 0x1, 0x3, 0x3ff, 0x0, 0x0, 0x6}) 16:32:20 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x4, 0x4, 0x9, {0x8f6, 0x9c}, 0x9db3, 0x7}) 16:32:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4100) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:20 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) syz_io_uring_setup(0x36d3, &(0x7f0000000000)={0x0, 0x2495, 0x800, 0x1, 0x260}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = epoll_create(0x3) clock_gettime(0x0, &(0x7f0000000200)={0x0}) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000240)={r3, 0x0}, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffeff}, {}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x3, 0x0, 0x0, 0xa, 0x5, 0x100, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xff, 0x16, &(0x7f0000000280)=""/22, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x4, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000380)=[{0x0, 0x4, 0x0, 0xc}, {0x3, 0x2, 0x10, 0x9}, {0x5, 0x4, 0xf, 0x4}], 0x10, 0x400}, 0x90) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, r0, r0, r4, r0], 0x5, 0x0, 0x0, {0x0, r5}}) 16:32:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4100) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:20 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x5, 0x1f}, 'port1\x00', 0xe1d3f8188ef99c5b, 0x20802, 0xff, 0x3, 0x400, 0xe87, 0x14, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:21 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x84800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) syz_io_uring_setup(0x4863, &(0x7f0000000040)={0x0, 0xe13, 0x20, 0x3, 0x2d5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0xdaf, &(0x7f0000000140)={0x0, 0xf9b2, 0x8, 0x0, 0x85}, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="486f00ec5e9556b948588fd5f921a1aa3a2878591df2236cb7101116211af529cac7d1b8f7a249c696cc9f769805c62981af3062c479adf5813a955190c10f8770520e3a8547dc63a1bef50077515bfd62bd0f3d84635b928776f627112c1b46423630444cbda84ea09e2f7697f4fe1ff84e97f59cb3a1a965934b2e8b7a174fa5af7a835510fbf424db784e6662b23377cb9070b0e7c787ed355d4698f76b2a6cebeaaa5f90053de51a8dda651c85ae9a0344f93bff66", 0xb7, 0x0, 0x1, {0x0, r3}}) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7b74}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x20044000) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x10001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x19, 0x4}, 'port1\x00', 0x1, 0x0, 0x3ff, 0x9, 0x1, 0x3, 0x3ff, 0x0, 0x0, 0x6}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x10001) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x19, 0x4}, 'port1\x00', 0x1, 0x0, 0x3ff, 0x9, 0x1, 0x3, 0x3ff, 0x0, 0x0, 0x6}) (async) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x5, 0x1f}, 'port1\x00', 0xe1d3f8188ef99c5b, 0x20802, 0xff, 0x3, 0x400, 0xe87, 0x14, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7b74}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x20044000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7b74}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x20044000) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x1e, 0x5, 0x85}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0x7, 0x8, 0x40, r1, 0x0, '\x00', r2, r5, 0x1, 0x0, 0x2, 0xb}, 0x48) socket$l2tp(0x2, 0x2, 0x73) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x5, 0x1f}, 'port1\x00', 0xe1d3f8188ef99c5b, 0x20802, 0xff, 0x3, 0x400, 0xe87, 0x14, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x5, 0x1f}, 'port1\x00', 0xe1d3f8188ef99c5b, 0x20802, 0xff, 0x3, 0x400, 0xe87, 0x14, 0x0, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) 16:32:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7b74}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x20044000) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1000, 0x10001, 0x2}) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x1e, 0x5, 0x85}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0x7, 0x8, 0x40, r1, 0x0, '\x00', r2, r5, 0x1, 0x0, 0x2, 0xb}, 0x48) (async) socket$l2tp(0x2, 0x2, 0x73) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xaa, 0x1}, 0x1, 0x3, 0xffffffff, {0x8e, 0x7f}, 0xed, 0x7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x1e, 0x5, 0x85}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x1e, 0x5, 0x85}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0x7, 0x8, 0x40, r1, 0x0, '\x00', r2, r5, 0x1, 0x0, 0x2, 0xb}, 0x48) socket$l2tp(0x2, 0x2, 0x73) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1000, 0x10001, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1000, 0x10001, 0x2}) (async) 16:32:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x40, 0x6}, 0x0, 0x2, 0x5, {0xeb}, 0x1, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x2, 0x8e}, 'port0\x00', 0x1, 0x40014, 0x8000, 0x9, 0x5, 0x2, 0xffff8001, 0x0, 0x7, 0x4}) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x24a4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20040801) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xaa, 0x1}, 0x1, 0x3, 0xffffffff, {0x8e, 0x7f}, 0xed, 0x7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xaa, 0x1}, 0x1, 0x3, 0xffffffff, {0x8e, 0x7f}, 0xed, 0x7}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1000, 0x10001, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x1000, 0x10001, 0x2}) 16:32:21 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 39) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x24a4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20040801) 16:32:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x40, 0x6}, 0x0, 0x2, 0x5, {0xeb}, 0x1, 0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x2, 0x8e}, 'port0\x00', 0x1, 0x40014, 0x8000, 0x9, 0x5, 0x2, 0xffff8001, 0x0, 0x7, 0x4}) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xaa, 0x1}, 0x1, 0x3, 0xffffffff, {0x8e, 0x7f}, 0xed, 0x7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xaa, 0x1}, 0x1, 0x3, 0xffffffff, {0x8e, 0x7f}, 0xed, 0x7}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x2, 0x18000000, 0x4}) [ 1236.729005][T25818] FAULT_INJECTION: forcing a failure. [ 1236.729005][T25818] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.741702][T25818] CPU: 1 PID: 25818 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1236.751841][T25818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1236.761982][T25818] Call Trace: [ 1236.765258][T25818] [ 1236.768196][T25818] dump_stack_lvl+0xda/0x130 [ 1236.772809][T25818] dump_stack+0x15/0x20 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x2, 0x18000000, 0x4}) (rerun: 64) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x2, 0x18000000, 0x4}) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x54, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r2 = epoll_create(0xfffffffd) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x54, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r2 = epoll_create(0xfffffffd) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) [ 1236.777042][T25818] should_fail_ex+0x21f/0x230 [ 1236.781881][T25818] ? vm_area_dup+0x2c/0x130 [ 1236.786467][T25818] __should_failslab+0x92/0xa0 [ 1236.791306][T25818] should_failslab+0x9/0x20 [ 1236.795891][T25818] kmem_cache_alloc+0x56/0x2d0 [ 1236.800693][T25818] vm_area_dup+0x2c/0x130 [ 1236.805093][T25818] copy_mm+0x67b/0x1060 [ 1236.809255][T25818] copy_process+0x1002/0x20a0 [ 1236.813969][T25818] kernel_clone+0x169/0x560 [ 1236.818538][T25818] ? proc_fail_nth_read+0x140/0x140 [ 1236.823748][T25818] ? vfs_write+0x655/0x790 [ 1236.828239][T25818] __x64_sys_clone+0xe8/0x120 [ 1236.832963][T25818] do_syscall_64+0x59/0x120 [ 1236.837468][T25818] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1236.843423][T25818] RIP: 0033:0x7f960fea4da9 [ 1236.847838][T25818] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1236.867541][T25818] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1236.876020][T25818] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1236.884001][T25818] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1236.891979][T25818] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1236.899958][T25818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1236.907974][T25818] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1236.915957][T25818] 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x24a4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20040801) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x24a4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20040801) (async) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x54, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r2 = epoll_create(0xfffffffd) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 16:32:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x40, 0x6}, 0x0, 0x2, 0x5, {0xeb}, 0x1, 0x4}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x2, 0x8e}, 'port0\x00', 0x1, 0x40014, 0x8000, 0x9, 0x5, 0x2, 0xffff8001, 0x0, 0x7, 0x4}) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x30800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) 16:32:21 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 40) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:21 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) syz_io_uring_setup(0x36d3, &(0x7f0000000000)={0x0, 0x2495, 0x800, 0x1, 0x260}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = epoll_create(0x3) clock_gettime(0x0, &(0x7f0000000200)={0x0}) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000240)={r3, 0x0}, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffeff}, {}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x3, 0x0, 0x0, 0xa, 0x5, 0x100, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xff, 0x16, &(0x7f0000000280)=""/22, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x4, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000380)=[{0x0, 0x4, 0x0, 0xc}, {0x3, 0x2, 0x10, 0x9}, {0x5, 0x4, 0xf, 0x4}], 0x10, 0x400}, 0x90) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, r0, r0, r4, r0], 0x5, 0x0, 0x0, {0x0, r5}}) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x36d3, &(0x7f0000000000)={0x0, 0x2495, 0x800, 0x1, 0x260}, &(0x7f0000000080), &(0x7f00000000c0)) (async) epoll_create(0x3) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000240)={r3, 0x0}, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffeff}, {}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x3, 0x0, 0x0, 0xa, 0x5, 0x100, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xff, 0x16, &(0x7f0000000280)=""/22, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x4, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000380)=[{0x0, 0x4, 0x0, 0xc}, {0x3, 0x2, 0x10, 0x9}, {0x5, 0x4, 0xf, 0x4}], 0x10, 0x400}, 0x90) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, r0, r0, r4, r0], 0x5, 0x0, 0x0, {0x0, r5}}) (async) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x30800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x30800) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) (async) 16:32:21 executing program 0: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x10022, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010101}}, 0x24) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0x80087601, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @ldst={0x0, 0x2, 0x4, 0x4, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0x1, 0xb, 0x1, 0x30}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x49, &(0x7f0000000400)=""/73, 0x41000, 0x2, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc020660b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x401, 0xffffffff, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x30800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) (async) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%-010d \x00'}, 0x20) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0x80087601, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @ldst={0x0, 0x2, 0x4, 0x4, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0x1, 0xb, 0x1, 0x30}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x49, &(0x7f0000000400)=""/73, 0x41000, 0x2, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x90) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (rerun: 64) 16:32:21 executing program 0: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x10022, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010101}}, 0x24) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async, rerun: 64) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc020660b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc020660b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x401, 0xffffffff, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0x80087601, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @ldst={0x0, 0x2, 0x4, 0x4, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0x1, 0xb, 0x1, 0x30}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x49, &(0x7f0000000400)=""/73, 0x41000, 0x2, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:21 executing program 0: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x10022, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010101}}, 0x24) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x10022, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010101}}, 0x24) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) syz_io_uring_setup(0x539b, &(0x7f0000000000)={0x0, 0xc6fb, 0x800, 0x0, 0x1fd, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x436c, &(0x7f0000000100)={0x0, 0x8570, 0x100, 0x1, 0xec}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x10000, 0x114) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MKDIRAT={0x25, 0x40, 0x0, r3, 0x0, &(0x7f0000000240)='./file0\x00', 0x140, 0x0, 0x0, {0x0, r4}}) 16:32:21 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) syz_io_uring_setup(0x36d3, &(0x7f0000000000)={0x0, 0x2495, 0x800, 0x1, 0x260}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) (async) r2 = epoll_create(0x3) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0}) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000240)={r3, 0x0}, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffeff}, {}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x3, 0x0, 0x0, 0xa, 0x5, 0x100, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xff, 0x16, &(0x7f0000000280)=""/22, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x4, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000380)=[{0x0, 0x4, 0x0, 0xc}, {0x3, 0x2, 0x10, 0x9}, {0x5, 0x4, 0xf, 0x4}], 0x10, 0x400}, 0x90) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, r0, r0, r4, r0], 0x5, 0x0, 0x0, {0x0, r5}}) 16:32:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc020660b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x401, 0xffffffff, 0x80000000}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x2, 0x400, 0x3f, {0x66e, 0xfffffe01}, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) syz_io_uring_setup(0x539b, &(0x7f0000000000)={0x0, 0xc6fb, 0x800, 0x0, 0x1fd, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) (async) syz_io_uring_setup(0x436c, &(0x7f0000000100)={0x0, 0x8570, 0x100, 0x1, 0xec}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x10000, 0x114) (async, rerun: 32) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MKDIRAT={0x25, 0x40, 0x0, r3, 0x0, &(0x7f0000000240)='./file0\x00', 0x140, 0x0, 0x0, {0x0, r4}}) (rerun: 32) 16:32:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x4000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x27d, 0x6, 0x0, 0x5, 0x19, 0x7, "35fdb433130a85c0b02fd5ea4f781c4a56af27a765bbc15f0f55937f751109583f9c394070770051b810b20c44612ca4835a8211e1db2fb2f867d62e9ea1eb9c", "87becab458a42789720d50f98f863a2b84afdaa95c048629de0f8c1fcc1459a20c500f73ed21191c1294336f0be21822d8fb77ad5a9c07f6433555329ca801f8", "918b6f06dcf44f6c3c1f13656cf7428493c80fc4287d9c01ce9fb824aecccea0", [0x2, 0x3f]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:32:21 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) syz_io_uring_setup(0x539b, &(0x7f0000000000)={0x0, 0xc6fb, 0x800, 0x0, 0x1fd, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x436c, &(0x7f0000000100)={0x0, 0x8570, 0x100, 0x1, 0xec}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x10000, 0x114) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_MKDIRAT={0x25, 0x40, 0x0, r3, 0x0, &(0x7f0000000240)='./file0\x00', 0x140, 0x0, 0x0, {0x0, r4}}) 16:32:21 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 41) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0800010000000000"], 0x2c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e00), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000001400020020010000000000000000000000000002f20fd01c57871db93b67b8750a475e939f301c84a98607"], 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB='$@\x00\x00', @ANYRES16=r6, @ANYBLOB="20002dbd7000fcdbdf25040000000800020002000000080002000200000017a087ffd504a66a68f9eb8c72aed9e20ff2633082caa8805e95f73d55c75ea5b5866ae9cef114cd43c6123b46f51363aca457ebb0bea75e5932149465c677005c16709f0a98473365fe474ef68c0ef0054a4df5683aecf30b5bcc73cdefa5a09a9f71e3495e546c8b510f9f09a90f095671adf7aec6575e5f02a76394bf3c6d42906944f0f81ec003aa0749f9cb630d1d09546e4ef64ec4c5d65d7c7067855c8c528b4a0ee7d0eb098abff0e954337aba1fcb3f7c5dcf45512256c862077400656ff326168e8b131a8998ecc77b7adc597ee315b3a97e4abe1bdaa44b"], 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r7, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8009}, 0x1) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000a80)={0x64, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcca}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004041) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf25040000002d000700737973746f626a6563745f723a7075626c69635f636f6e74656e745f72775f743a73300000000014000200fe80000000000000000000001d14000200fe8800000000000000000000000001b571e76447b45271a415c18edfc3ca0129000700797374656d5f753a6f62006563745f723a706f6c6963795f636f6e666956785d8f73300000000014000200fe8800"/200], 0xc0}, 0x1, 0x0, 0x0, 0x8840}, 0x4081) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0x541b, 0x0) 16:32:22 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x2, 0x400, 0x3f, {0x66e, 0xfffffe01}, 0x0, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:22 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x4, 0xfffffffc}) 16:32:22 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x2040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x2, 0x400, 0x3f, {0x66e, 0xfffffe01}, 0x0, 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x4000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x27d, 0x6, 0x0, 0x5, 0x19, 0x7, "35fdb433130a85c0b02fd5ea4f781c4a56af27a765bbc15f0f55937f751109583f9c394070770051b810b20c44612ca4835a8211e1db2fb2f867d62e9ea1eb9c", "87becab458a42789720d50f98f863a2b84afdaa95c048629de0f8c1fcc1459a20c500f73ed21191c1294336f0be21822d8fb77ad5a9c07f6433555329ca801f8", "918b6f06dcf44f6c3c1f13656cf7428493c80fc4287d9c01ce9fb824aecccea0", [0x2, 0x3f]}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) [ 1237.507956][T25919] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1237.535007][T25922] FAULT_INJECTION: forcing a failure. [ 1237.535007][T25922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1237.548270][T25922] CPU: 0 PID: 25922 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1237.558338][T25922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1237.568393][T25922] Call Trace: [ 1237.571679][T25922] [ 1237.574614][T25922] dump_stack_lvl+0xda/0x130 [ 1237.579218][T25922] dump_stack+0x15/0x20 [ 1237.583379][T25922] should_fail_ex+0x21f/0x230 [ 1237.588061][T25922] __should_fail_alloc_page+0xfd/0x110 [ 1237.593520][T25922] __alloc_pages+0x108/0x340 [ 1237.598116][T25922] alloc_pages_mpol+0xb1/0x1d0 [ 1237.602890][T25922] alloc_pages+0xe0/0x100 [ 1237.607229][T25922] __pud_alloc+0x4c/0x3b0 [ 1237.611565][T25922] copy_page_range+0x1fad/0x2150 [ 1237.616510][T25922] ? mas_wr_walk_descend+0x359/0x410 [ 1237.621813][T25922] ? mas_wr_end_piv+0x15f/0x480 [ 1237.626684][T25922] copy_mm+0x938/0x1060 [ 1237.630842][T25922] copy_process+0x1002/0x20a0 [ 1237.635520][T25922] kernel_clone+0x169/0x560 [ 1237.640113][T25922] ? proc_fail_nth_read+0x140/0x140 [ 1237.645316][T25922] ? vfs_write+0x655/0x790 [ 1237.649740][T25922] __x64_sys_clone+0xe8/0x120 [ 1237.654418][T25922] do_syscall_64+0x59/0x120 [ 1237.659012][T25922] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1237.664911][T25922] RIP: 0033:0x7f960fea4da9 [ 1237.669331][T25922] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1237.688954][T25922] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1237.697366][T25922] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 16:32:22 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x4, 0xfffffffc}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x4, 0xfffffffc}) (async) 16:32:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0800010000000000"], 0x2c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e00), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000001400020020010000000000000000000000000002f20fd01c57871db93b67b8750a475e939f301c84a98607"], 0x28}}, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB='$@\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) (rerun: 64) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r7, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8009}, 0x1) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000a80)={0x64, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcca}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004041) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf25040000002d000700737973746f626a6563745f723a7075626c69635f636f6e74656e745f72775f743a73300000000014000200fe80000000000000000000001d14000200fe8800000000000000000000000001b571e76447b45271a415c18edfc3ca0129000700797374656d5f753a6f62006563745f723a706f6c6963795f636f6e666956785d8f73300000000014000200fe8800"/200], 0xc0}, 0x1, 0x0, 0x0, 0x8840}, 0x4081) (async, rerun: 32) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0x541b, 0x0) 16:32:22 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 42) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) [ 1237.705341][T25922] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1237.713317][T25922] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1237.721291][T25922] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1237.729268][T25922] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1237.737244][T25922] 16:32:22 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0x24) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7f) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) read$msr(r1, &(0x7f0000000040)=""/234, 0xea) 16:32:23 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x4, 0xfffffffc}) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0x24) (async) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7f) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x4000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x27d, 0x6, 0x0, 0x5, 0x19, 0x7, "35fdb433130a85c0b02fd5ea4f781c4a56af27a765bbc15f0f55937f751109583f9c394070770051b810b20c44612ca4835a8211e1db2fb2f867d62e9ea1eb9c", "87becab458a42789720d50f98f863a2b84afdaa95c048629de0f8c1fcc1459a20c500f73ed21191c1294336f0be21822d8fb77ad5a9c07f6433555329ca801f8", "918b6f06dcf44f6c3c1f13656cf7428493c80fc4287d9c01ce9fb824aecccea0", [0x2, 0x3f]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0x24) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7f) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="00000081c724e8ccf006e364c3fd82a000cdb52191fed39e673ae45a789922eb4375446c21b06ccd8ac1a572e0816f3eeae4ac27ebf113073b0fdf1a22308b80faef3a6fdea87e78e6a69f00fbe668209349cfefb7118ac52bc58aeba1e23151250f4e65244cde64be78fa821bbfa7baaa22d6409ef75b0ebfb194e739fd629d2bd509f7f2857669023b1e55815d3060b4a94a8b31b032181eaab810e54d94d7788cffc9b5f6c550ec0c31d0effc84150ea96671a0073d4ccb91d887ab7de093475e69a12d758487178ee3ec5e8eaa956814ceeef3b26a1961d7d1c1c4002d55ca210920f95dbe1babf10da52279f3c4b28ab146eadb56b46edc9fbd403b3dbc1c75b0587f2ca2cb5e8c96f95a850e2b", @ANYRES32, @ANYBLOB="0800010000000000"], 0x2c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e00), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000001400020020010000000000000000000000000002f20fd01c57871db93b67b8750a475e939f301c84a98607"], 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB='$@\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r7, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8009}, 0x1) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000a80)={0x64, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcca}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4004041) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf25040000002d000700737973746f626a6563745f723a7075626c69635f636f6e74656e745f72775f743a73300000000014000200fe80000000000000000000001d14000200fe8800000000000000000000000001b571e76447b45271a415c18edfc3ca0129000700797374656d5f753a6f62006563745f723a706f6c6963795f636f6e666956785d8f73300000000014000200fe8800"/200], 0xc0}, 0x1, 0x0, 0x0, 0x8840}, 0x4081) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0x541b, 0x0) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) [ 1238.705008][T25933] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x4800) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x4800) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) (async) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x4800) 16:32:23 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40040a}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r1, 0x408, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x22}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2c}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xb}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x200040c1) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40040a}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r1, 0x408, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x22}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2c}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xb}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x200040c1) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40040a}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r1, 0x408, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x22}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2c}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xb}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x200040c1) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff01}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff01}}, 0x24) (async, rerun: 64) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (rerun: 64) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff01}}, 0x24) (async) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff01}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socketpair(0x2, 0xa, 0x2, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) socketpair(0x2, 0xa, 0x2, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socketpair(0x2, 0xa, 0x2, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) socketpair(0x2, 0xa, 0x2, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) (async) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfff) ioctl$TIOCSIG(r1, 0x40045436, 0x3) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfff) ioctl$TIOCSIG(r1, 0x40045436, 0x3) [ 1238.887127][T25977] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 1238.894484][ T27] audit: type=1400 audit(1705595543.404:191): avc: denied { create } for pid=25976 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfff) ioctl$TIOCSIG(r1, 0x40045436, 0x3) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/73, 0x49, 0x3, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/73, 0x49, 0x3, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/73, 0x49, 0x3, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/73, 0x49, 0x3, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/73, 0x49, 0x3, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x801c581f, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x801c581f, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x801c581f, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) 16:32:23 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x801c581f, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x801c581f, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) [ 1242.564456][T26017] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1242.725276][T26028] FAULT_INJECTION: forcing a failure. [ 1242.725276][T26028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1242.738540][T26028] CPU: 0 PID: 26028 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1242.748610][T26028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1242.758664][T26028] Call Trace: [ 1242.761951][T26028] [ 1242.764875][T26028] dump_stack_lvl+0xda/0x130 [ 1242.769471][T26028] dump_stack+0x15/0x20 [ 1242.773623][T26028] should_fail_ex+0x21f/0x230 [ 1242.778303][T26028] __should_fail_alloc_page+0xfd/0x110 [ 1242.783772][T26028] __alloc_pages+0x108/0x340 [ 1242.788358][T26028] alloc_pages_mpol+0xb1/0x1d0 [ 1242.793130][T26028] alloc_pages+0xe0/0x100 [ 1242.797475][T26028] __pmd_alloc+0x4b/0x3c0 [ 1242.801811][T26028] copy_page_range+0x1f05/0x2150 [ 1242.806757][T26028] ? mas_wr_end_piv+0x15f/0x480 [ 1242.811627][T26028] copy_mm+0x938/0x1060 [ 1242.815786][T26028] copy_process+0x1002/0x20a0 [ 1242.820464][T26028] kernel_clone+0x169/0x560 [ 1242.824966][T26028] ? proc_fail_nth_read+0x140/0x140 [ 1242.830168][T26028] ? vfs_write+0x655/0x790 [ 1242.834593][T26028] __x64_sys_clone+0xe8/0x120 [ 1242.839277][T26028] do_syscall_64+0x59/0x120 [ 1242.843780][T26028] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1242.849684][T26028] RIP: 0033:0x7f960fea4da9 [ 1242.854096][T26028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:32:27 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 43) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:27 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r0 = io_uring_setup(0x2046, &(0x7f0000000000)={0x0, 0x6c47, 0x800, 0x3, 0x32b}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 16:32:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:27 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) read$msr(r1, &(0x7f0000000040)=""/234, 0xea) 16:32:27 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x440000) 16:32:27 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40087602, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:32:27 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x440000) 16:32:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) [ 1242.873704][T26028] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1242.882097][T26028] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1242.890048][T26028] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1242.898024][T26028] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1242.906014][T26028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1242.913966][T26028] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1242.921921][T26028] 16:32:27 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40087602, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:32:27 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r0 = io_uring_setup(0x2046, &(0x7f0000000000)={0x0, 0x6c47, 0x800, 0x3, 0x32b}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 16:32:27 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x440000) 16:32:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x228402) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x7fffffff, 0xffff, 0x9}) [ 1242.961273][T26043] FAULT_INJECTION: forcing a failure. [ 1242.961273][T26043] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.973961][T26043] CPU: 1 PID: 26043 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1242.984047][T26043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1242.994120][T26043] Call Trace: [ 1242.997449][T26043] [ 1243.000396][T26043] dump_stack_lvl+0xda/0x130 [ 1243.005020][T26043] dump_stack+0x15/0x20 16:32:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x228402) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x7fffffff, 0xffff, 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x7fffffff, 0xffff, 0x9}) 16:32:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x228402) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x7fffffff, 0xffff, 0x9}) 16:32:27 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40087602, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) [ 1243.009260][T26043] should_fail_ex+0x21f/0x230 [ 1243.014015][T26043] ? anon_vma_fork+0xac/0x2c0 [ 1243.018733][T26043] __should_failslab+0x92/0xa0 [ 1243.023651][T26043] should_failslab+0x9/0x20 [ 1243.028223][T26043] kmem_cache_alloc+0x56/0x2d0 [ 1243.033011][T26043] anon_vma_fork+0xac/0x2c0 [ 1243.037534][T26043] copy_mm+0x6f0/0x1060 [ 1243.041696][T26043] copy_process+0x1002/0x20a0 [ 1243.046386][T26043] kernel_clone+0x169/0x560 [ 1243.050918][T26043] ? proc_fail_nth_read+0x140/0x140 [ 1243.056130][T26043] ? vfs_write+0x655/0x790 16:32:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x60400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0x8, 0xff}, 0x0, 0x7, 0x0, {0x5, 0x4}, 0x0, 0x80}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x6, 0xf}, 0x0, 0x7, 0xfffffffd, {0x3d, 0x58}, 0x4, 0x6}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) 16:32:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x60400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) [ 1243.060630][T26043] __x64_sys_clone+0xe8/0x120 [ 1243.065537][T26043] do_syscall_64+0x59/0x120 [ 1243.070072][T26043] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1243.076001][T26043] RIP: 0033:0x7f960fea4da9 [ 1243.080436][T26043] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1243.100058][T26043] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0x8, 0xff}, 0x0, 0x7, 0x0, {0x5, 0x4}, 0x0, 0x80}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x6, 0xf}, 0x0, 0x7, 0xfffffffd, {0x3d, 0x58}, 0x4, 0x6}) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) 16:32:27 executing program 5: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r0 = io_uring_setup(0x2046, &(0x7f0000000000)={0x0, 0x6c47, 0x800, 0x3, 0x32b}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) (async) io_uring_setup(0x2046, &(0x7f0000000000)={0x0, 0x6c47, 0x800, 0x3, 0x32b}) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) (async) 16:32:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0x8, 0xff}, 0x0, 0x7, 0x0, {0x5, 0x4}, 0x0, 0x80}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x6, 0xf}, 0x0, 0x7, 0xfffffffd, {0x3d, 0x58}, 0x4, 0x6}) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) 16:32:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r3, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000013c0)={0x308, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_LLC_SDP={0x2ec, 0x13, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0x9d, 0x1, '\x1emf\xe02\xeb\x9b\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xe1\x02%|\x8f\xca`\x0eo\x18=\xba%\'\xb5\x86|\xbe.\xe4n\x1f\x8c\xaf\xf1ED<\xf5X\x0f\x82\xf4v=\xea\xc7}>\xf2\xf7\b\xe9\x8b\xda*.\xc4\x86\n\x9c6\x18\x04\xd7\x19\xb3E,1\xe3\xce\x7f\xdb\xc7$\xe5>\xa9\xb5\x9a\x1e\xc0\xd5#\xa7\xb3\x05\xb95n\x83\xd5N\xe6.\xff\x97\xc3\xe9\x0e\x90\f\xad\xc0\x7f9\x81\x06\xb8\xb6\xa1\x86\x15\x8f\x9e\x8d?\r\xc5\x1dE&\x85\xb3F\fD\aO\xad\x15xy$\xb4\xfe\xbb-\x99/\xde'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '::'}, {0xa, 0x1, '&^-\')$'}, {0x8, 0x1, ')-/#'}, {0x5, 0x1, '^'}, {0x4}, {0x9, 0x1, ':#$.\x14'}]}, {0x114, 0x0, 0x0, 0x1, [{0x4}, {0x10, 0x1, '\x01\x00\x00\x00\x00B\xa62\xf8\x9a\xea('}, {0x5, 0x1, '/'}, {0xc, 0x1, '&,\xc9\'&::^'}, {0x7, 0x1, ')@@'}, {0xb, 0x1, ',[]^\x8c(^'}, {0xd2, 0x1, '\x00\x00\x00\x00\x00\x00\x8bJ?X\b\xe6\xf5d\xfc8\xabj\xfc2\xbc\x19`\x17b\xcb\xb6dE\x8d\x0f1\xb0\x03\x1ac\x9e\x0f\f\xff\x11\xdc\x8bbIR\xd8\x12\x1b\xd8\xd7cu\xd2O\xf9^E\xa8\xddf\xdf\xb7x\x1e!\x85v\x02\xae\x8f]\xeb\x8a\xe6\x11z\xbdU\x16!\xc0\xf3v\x94\xee\xcc\xd9\x8f\xf7\xcc\x03\xc2\x1f/]\xff\xc9\xbfG\xc2\x9b\xd6M\xf0\x94\x1f\x12\xa8\xd2\x17q\xe7\xea4\xd7\xb1\xc3\r\x1dN\x01\xf5\xa8\x11h\x9f-T8\xf5\xbdm\xe9\x9f\xa1\x1b\x84\x1e\x8c\xa2\xc7\xd9b\xbd\xa1A\xdbi|\xbd G\x10\xf5I\xd48\xcd\x06\xe0\x9a\xe4\xd7\xdb})\'\x8a\xba\xdf\xaf_\'\xc259\xc4\xa9m\x8d8\x86\x83C\xc9\xf0\xbf)\x94~N@5\x92g\x9f\x1c\xedD\xcdh\xd4\x83t\xac'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x44, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, ')*&\\&'}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r9, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r9, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$NFC_CMD_LLC_SDREQ(r7, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000000d80)={0x2b8, r9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_SDP={0x29c, 0x13, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0xd2, 0x1, '\x00\x00\x00\x00\x00\x00\x8bJ?X\b\xe6\xf5d\xfc8\xabj\xfc2\xbc\x19`\x17b\xcb\xb6dE\x8d\x0f1\xb0\x03\x1ac\x9e\x0f\f\xff\x11\xdc\x8bbIR\xd8\x12\x1b\xd8\xd7cu\xd2O\xf9^E\xa8\xddf\xdf\xb7x\x1e!\x85v\x02\xae\x8f]\xeb\x8a\xe6\x11z\xbdU\x16!\xc0\xf3v\x94\xee\xcc\xd9\x8f\xf7\xcc\x03\xc2\x1f/]\xff\xc9\xbfG\xc2\x9b\xd6M\xf0\x94\x1f\x12\xa8\xd2\x17q\xe7\xea4\xd7\xb1\xc3\r\x1dN\x01\xf5\xa8\x11h\x9f-T8\xf5\xbdm\xe9\x9f\xa1\x1b\x84\x1e\x8c\xa2\xc7\xd9b\xbd\xa1A\xdbi|\xbd G\x10\xf5I\xd48\xcd\x06\xe0\x9a\xe4\xd7\xdb})\'\x8a\xba\xdf\xaf_\'\xc259\xc4\xa9m\x8d8\x86\x83C\xc9\xf0\xbf)\x94~N@5\x92g\x9f\x1c\xedD\xcdh\xd4\x83t\xac'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\'+\x00\x00\x00\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x8f, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x88, 0x1, 'l2tp\x00\xceG\x9d\x1fv\x1f(\x13\b\xee:\b\x8a#\xb1\x94\x13o\xe8\x17M\xb2]\xc9\n\x0e\xccH\xaa\xc1\x13\xcc\xc8\xfa~\xcc\x82\xd8d4\xd5\xb7H\xe3\xa5]E/\x9e\v\x8d\xa9\xb5\xabDb\x1f\x85\xb4N\x0ev+R\x14\xa7P\x7f.?u\xfe;\x98\xcc6\x89\x8ba\xa5\xf4\xf5\xee\xc6x1\x17\xc2\x91\\\xc6\x13l0;Z`~xx\xbf\xebRF\xe5\xbc.+\x8cc!\a\xc6D$\xd5]K\xbbO\xb5%6\x876\x95[q!\xc9\x82p\xd4'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '\xfc\xcb{\x915\xfbz5\\!\xd7\x06\x00\x00\x00US\x1f\x9a\x91\xf2_\x03\x1e\xb6\xefd\xf2'}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28008000}, 0x8804) timerfd_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x20000080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:27 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) read$msr(r1, &(0x7f0000000040)=""/234, 0xea) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) read$msr(r1, &(0x7f0000000040)=""/234, 0xea) (async) [ 1243.108484][T26043] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1243.116464][T26043] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1243.124447][T26043] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1243.132422][T26043] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1243.140447][T26043] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1243.148428][T26043] 16:32:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x60400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:27 executing program 2: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:32:27 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 44) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:27 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) 16:32:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) 16:32:27 executing program 2: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:32:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r3, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000013c0)={0x308, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_LLC_SDP={0x2ec, 0x13, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0x9d, 0x1, '\x1emf\xe02\xeb\x9b\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xe1\x02%|\x8f\xca`\x0eo\x18=\xba%\'\xb5\x86|\xbe.\xe4n\x1f\x8c\xaf\xf1ED<\xf5X\x0f\x82\xf4v=\xea\xc7}>\xf2\xf7\b\xe9\x8b\xda*.\xc4\x86\n\x9c6\x18\x04\xd7\x19\xb3E,1\xe3\xce\x7f\xdb\xc7$\xe5>\xa9\xb5\x9a\x1e\xc0\xd5#\xa7\xb3\x05\xb95n\x83\xd5N\xe6.\xff\x97\xc3\xe9\x0e\x90\f\xad\xc0\x7f9\x81\x06\xb8\xb6\xa1\x86\x15\x8f\x9e\x8d?\r\xc5\x1dE&\x85\xb3F\fD\aO\xad\x15xy$\xb4\xfe\xbb-\x99/\xde'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '::'}, {0xa, 0x1, '&^-\')$'}, {0x8, 0x1, ')-/#'}, {0x5, 0x1, '^'}, {0x4}, {0x9, 0x1, ':#$.\x14'}]}, {0x114, 0x0, 0x0, 0x1, [{0x4}, {0x10, 0x1, '\x01\x00\x00\x00\x00B\xa62\xf8\x9a\xea('}, {0x5, 0x1, '/'}, {0xc, 0x1, '&,\xc9\'&::^'}, {0x7, 0x1, ')@@'}, {0xb, 0x1, ',[]^\x8c(^'}, {0xd2, 0x1, '\x00\x00\x00\x00\x00\x00\x8bJ?X\b\xe6\xf5d\xfc8\xabj\xfc2\xbc\x19`\x17b\xcb\xb6dE\x8d\x0f1\xb0\x03\x1ac\x9e\x0f\f\xff\x11\xdc\x8bbIR\xd8\x12\x1b\xd8\xd7cu\xd2O\xf9^E\xa8\xddf\xdf\xb7x\x1e!\x85v\x02\xae\x8f]\xeb\x8a\xe6\x11z\xbdU\x16!\xc0\xf3v\x94\xee\xcc\xd9\x8f\xf7\xcc\x03\xc2\x1f/]\xff\xc9\xbfG\xc2\x9b\xd6M\xf0\x94\x1f\x12\xa8\xd2\x17q\xe7\xea4\xd7\xb1\xc3\r\x1dN\x01\xf5\xa8\x11h\x9f-T8\xf5\xbdm\xe9\x9f\xa1\x1b\x84\x1e\x8c\xa2\xc7\xd9b\xbd\xa1A\xdbi|\xbd G\x10\xf5I\xd48\xcd\x06\xe0\x9a\xe4\xd7\xdb})\'\x8a\xba\xdf\xaf_\'\xc259\xc4\xa9m\x8d8\x86\x83C\xc9\xf0\xbf)\x94~N@5\x92g\x9f\x1c\xedD\xcdh\xd4\x83t\xac'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x44, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, ')*&\\&'}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r9, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r9, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) (async) sendmsg$NFC_CMD_LLC_SDREQ(r7, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000000d80)={0x2b8, r9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_SDP={0x29c, 0x13, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0xd2, 0x1, '\x00\x00\x00\x00\x00\x00\x8bJ?X\b\xe6\xf5d\xfc8\xabj\xfc2\xbc\x19`\x17b\xcb\xb6dE\x8d\x0f1\xb0\x03\x1ac\x9e\x0f\f\xff\x11\xdc\x8bbIR\xd8\x12\x1b\xd8\xd7cu\xd2O\xf9^E\xa8\xddf\xdf\xb7x\x1e!\x85v\x02\xae\x8f]\xeb\x8a\xe6\x11z\xbdU\x16!\xc0\xf3v\x94\xee\xcc\xd9\x8f\xf7\xcc\x03\xc2\x1f/]\xff\xc9\xbfG\xc2\x9b\xd6M\xf0\x94\x1f\x12\xa8\xd2\x17q\xe7\xea4\xd7\xb1\xc3\r\x1dN\x01\xf5\xa8\x11h\x9f-T8\xf5\xbdm\xe9\x9f\xa1\x1b\x84\x1e\x8c\xa2\xc7\xd9b\xbd\xa1A\xdbi|\xbd G\x10\xf5I\xd48\xcd\x06\xe0\x9a\xe4\xd7\xdb})\'\x8a\xba\xdf\xaf_\'\xc259\xc4\xa9m\x8d8\x86\x83C\xc9\xf0\xbf)\x94~N@5\x92g\x9f\x1c\xedD\xcdh\xd4\x83t\xac'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\'+\x00\x00\x00\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x8f, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x88, 0x1, 'l2tp\x00\xceG\x9d\x1fv\x1f(\x13\b\xee:\b\x8a#\xb1\x94\x13o\xe8\x17M\xb2]\xc9\n\x0e\xccH\xaa\xc1\x13\xcc\xc8\xfa~\xcc\x82\xd8d4\xd5\xb7H\xe3\xa5]E/\x9e\v\x8d\xa9\xb5\xabDb\x1f\x85\xb4N\x0ev+R\x14\xa7P\x7f.?u\xfe;\x98\xcc6\x89\x8ba\xa5\xf4\xf5\xee\xc6x1\x17\xc2\x91\\\xc6\x13l0;Z`~xx\xbf\xebRF\xe5\xbc.+\x8cc!\a\xc6D$\xd5]K\xbbO\xb5%6\x876\x95[q!\xc9\x82p\xd4'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '\xfc\xcb{\x915\xfbz5\\!\xd7\x06\x00\x00\x00US\x1f\x9a\x91\xf2_\x03\x1e\xb6\xefd\xf2'}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28008000}, 0x8804) (async) timerfd_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x20000080) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) [ 1243.242594][T26103] FAULT_INJECTION: forcing a failure. [ 1243.242594][T26103] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.255422][T26103] CPU: 0 PID: 26103 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1243.265497][T26103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1243.275567][T26103] Call Trace: [ 1243.278858][T26103] [ 1243.281791][T26103] dump_stack_lvl+0xda/0x130 [ 1243.286401][T26103] dump_stack+0x15/0x20 16:32:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r6, 0x20, 0x3, 0x0, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40050) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000000c0)={0x4, 0x80000001, 0xffffff7f}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r8, 0xc05c5340, &(0x7f0000000000)={0xfff, 0x39, 0x9, {0xffffff00, 0x800}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0x5460, 0x0) 16:32:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) 16:32:27 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) 16:32:27 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) 16:32:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r3, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) (async) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000013c0)={0x308, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_LLC_SDP={0x2ec, 0x13, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0x9d, 0x1, '\x1emf\xe02\xeb\x9b\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xe1\x02%|\x8f\xca`\x0eo\x18=\xba%\'\xb5\x86|\xbe.\xe4n\x1f\x8c\xaf\xf1ED<\xf5X\x0f\x82\xf4v=\xea\xc7}>\xf2\xf7\b\xe9\x8b\xda*.\xc4\x86\n\x9c6\x18\x04\xd7\x19\xb3E,1\xe3\xce\x7f\xdb\xc7$\xe5>\xa9\xb5\x9a\x1e\xc0\xd5#\xa7\xb3\x05\xb95n\x83\xd5N\xe6.\xff\x97\xc3\xe9\x0e\x90\f\xad\xc0\x7f9\x81\x06\xb8\xb6\xa1\x86\x15\x8f\x9e\x8d?\r\xc5\x1dE&\x85\xb3F\fD\aO\xad\x15xy$\xb4\xfe\xbb-\x99/\xde'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x6, 0x1, '::'}, {0xa, 0x1, '&^-\')$'}, {0x8, 0x1, ')-/#'}, {0x5, 0x1, '^'}, {0x4}, {0x9, 0x1, ':#$.\x14'}]}, {0x114, 0x0, 0x0, 0x1, [{0x4}, {0x10, 0x1, '\x01\x00\x00\x00\x00B\xa62\xf8\x9a\xea('}, {0x5, 0x1, '/'}, {0xc, 0x1, '&,\xc9\'&::^'}, {0x7, 0x1, ')@@'}, {0xb, 0x1, ',[]^\x8c(^'}, {0xd2, 0x1, '\x00\x00\x00\x00\x00\x00\x8bJ?X\b\xe6\xf5d\xfc8\xabj\xfc2\xbc\x19`\x17b\xcb\xb6dE\x8d\x0f1\xb0\x03\x1ac\x9e\x0f\f\xff\x11\xdc\x8bbIR\xd8\x12\x1b\xd8\xd7cu\xd2O\xf9^E\xa8\xddf\xdf\xb7x\x1e!\x85v\x02\xae\x8f]\xeb\x8a\xe6\x11z\xbdU\x16!\xc0\xf3v\x94\xee\xcc\xd9\x8f\xf7\xcc\x03\xc2\x1f/]\xff\xc9\xbfG\xc2\x9b\xd6M\xf0\x94\x1f\x12\xa8\xd2\x17q\xe7\xea4\xd7\xb1\xc3\r\x1dN\x01\xf5\xa8\x11h\x9f-T8\xf5\xbdm\xe9\x9f\xa1\x1b\x84\x1e\x8c\xa2\xc7\xd9b\xbd\xa1A\xdbi|\xbd G\x10\xf5I\xd48\xcd\x06\xe0\x9a\xe4\xd7\xdb})\'\x8a\xba\xdf\xaf_\'\xc259\xc4\xa9m\x8d8\x86\x83C\xc9\xf0\xbf)\x94~N@5\x92g\x9f\x1c\xedD\xcdh\xd4\x83t\xac'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x44, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, ')*&\\&'}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xbebe9b12de7e325d) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r9, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r10, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x4048001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r9, 0x20, 0x3, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$NFC_CMD_LLC_SDREQ(r7, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000000d80)={0x2b8, r9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_SDP={0x29c, 0x13, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [{0x7, 0x1, '#}\x89'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0xd2, 0x1, '\x00\x00\x00\x00\x00\x00\x8bJ?X\b\xe6\xf5d\xfc8\xabj\xfc2\xbc\x19`\x17b\xcb\xb6dE\x8d\x0f1\xb0\x03\x1ac\x9e\x0f\f\xff\x11\xdc\x8bbIR\xd8\x12\x1b\xd8\xd7cu\xd2O\xf9^E\xa8\xddf\xdf\xb7x\x1e!\x85v\x02\xae\x8f]\xeb\x8a\xe6\x11z\xbdU\x16!\xc0\xf3v\x94\xee\xcc\xd9\x8f\xf7\xcc\x03\xc2\x1f/]\xff\xc9\xbfG\xc2\x9b\xd6M\xf0\x94\x1f\x12\xa8\xd2\x17q\xe7\xea4\xd7\xb1\xc3\r\x1dN\x01\xf5\xa8\x11h\x9f-T8\xf5\xbdm\xe9\x9f\xa1\x1b\x84\x1e\x8c\xa2\xc7\xd9b\xbd\xa1A\xdbi|\xbd G\x10\xf5I\xd48\xcd\x06\xe0\x9a\xe4\xd7\xdb})\'\x8a\xba\xdf\xaf_\'\xc259\xc4\xa9m\x8d8\x86\x83C\xc9\xf0\xbf)\x94~N@5\x92g\x9f\x1c\xedD\xcdh\xd4\x83t\xac'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x40}, {0x14, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\'+\x00\x00\x00\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan3\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '-{'}]}, {0x8f, 0x0, 0x0, 0x1, [{0x12, 0x1, '(}(:/$!^},\\%*!'}, {0x8, 0x1, 'S@\x16+'}, {0x9, 0x1, 'l2tp\x00'}, {0x88, 0x1, 'l2tp\x00\xceG\x9d\x1fv\x1f(\x13\b\xee:\b\x8a#\xb1\x94\x13o\xe8\x17M\xb2]\xc9\n\x0e\xccH\xaa\xc1\x13\xcc\xc8\xfa~\xcc\x82\xd8d4\xd5\xb7H\xe3\xa5]E/\x9e\v\x8d\xa9\xb5\xabDb\x1f\x85\xb4N\x0ev+R\x14\xa7P\x7f.?u\xfe;\x98\xcc6\x89\x8ba\xa5\xf4\xf5\xee\xc6x1\x17\xc2\x91\\\xc6\x13l0;Z`~xx\xbf\xebRF\xe5\xbc.+\x8cc!\a\xc6D$\xd5]K\xbbO\xb5%6\x876\x95[q!\xc9\x82p\xd4'}, {0x9, 0x1, '+-+&-'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x5, 0x1, '&'}, {0x8, 0x1, '!&{\xe2'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, 'l2tp\x00'}, {0x9, 0x1, '\xfc\xcb{\x915\xfbz5\\!\xd7\x06\x00\x00\x00US\x1f\x9a\x91\xf2_\x03\x1e\xb6\xefd\xf2'}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28008000}, 0x8804) (async) timerfd_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x20000080) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:27 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) (rerun: 64) 16:32:27 executing program 2: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40049409, 0x0) 16:32:27 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x541b, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) [ 1243.290571][T26103] should_fail_ex+0x21f/0x230 [ 1243.295339][T26103] ? vm_area_dup+0x2c/0x130 [ 1243.299919][T26103] __should_failslab+0x92/0xa0 [ 1243.304749][T26103] should_failslab+0x9/0x20 [ 1243.309290][T26103] kmem_cache_alloc+0x56/0x2d0 [ 1243.314083][T26103] vm_area_dup+0x2c/0x130 [ 1243.318440][T26103] copy_mm+0x67b/0x1060 [ 1243.322635][T26103] copy_process+0x1002/0x20a0 [ 1243.327325][T26103] kernel_clone+0x169/0x560 [ 1243.331841][T26103] ? proc_fail_nth_read+0x140/0x140 [ 1243.337140][T26103] ? vfs_write+0x655/0x790 16:32:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xac, 0x7f}, 0x0, 0x7f, 0x8000, {0x48, 0xff}, 0x8, 0x4}) 16:32:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xac, 0x7f}, 0x0, 0x7f, 0x8000, {0x48, 0xff}, 0x8, 0x4}) 16:32:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200400) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) [ 1243.341575][T26103] __x64_sys_clone+0xe8/0x120 [ 1243.346327][T26103] do_syscall_64+0x59/0x120 [ 1243.350849][T26103] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1243.356769][T26103] RIP: 0033:0x7f960fea4da9 [ 1243.361190][T26103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1243.381066][T26103] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x840) (async) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r6, 0x20, 0x3, 0x0, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40050) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000000c0)={0x4, 0x80000001, 0xffffff7f}) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r8, 0xc05c5340, &(0x7f0000000000)={0xfff, 0x39, 0x9, {0xffffff00, 0x800}, 0x6}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0x5460, 0x0) 16:32:27 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x541b, 0x0) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) (rerun: 64) 16:32:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200400) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (rerun: 64) 16:32:27 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 45) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x840) (async) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r6, 0x20, 0x3, 0x0, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x69}, @NFC_ATTR_VENDOR_DATA={0xf6, 0x1f, "92ccaa1674600182baaf1dd5f72873ed4583688906b5cca022f8474e931ae1926b3deb5f287ba6eff50ddc602fdb7d9f1ad0c41c89da2168837aa84319bffda1d7891fff0c1d5afdfe828926c12b976c3c463a425b31f81cb1e84fab2b6bb6c492d764aeafc90ded73d8d43c6451757d3f25236982b33142735e1497dcbc94b9bd12105411ebb495e5aed814248de1b74300684729cf41ca3391d63e5571a27739fb790657fee6480d4f14a856851c602986be6497865187279158fcd780e9ffd033d48a4a9babd5ce304aaf8f45f4dd21899de51c444ca3c268863413c7a72966a0e0e9c9b888acc464075dd6f7df59491d"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xfff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7fff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x44011}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40050) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000000c0)={0x4, 0x80000001, 0xffffff7f}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r8, 0xc05c5340, &(0x7f0000000000)={0xfff, 0x39, 0x9, {0xffffff00, 0x800}, 0x6}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0x5460, 0x0) 16:32:27 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200400) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200400) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xac, 0x7f}, 0x0, 0x7f, 0x8000, {0x48, 0xff}, 0x8, 0x4}) [ 1243.389483][T26103] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1243.397460][T26103] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1243.405441][T26103] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1243.413447][T26103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1243.421522][T26103] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1243.429525][T26103] 16:32:27 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x460000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 16:32:28 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) (async) 16:32:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$nci(r0, &(0x7f0000000040)=""/171, 0xab) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x4040534e, &(0x7f0000000400)={{0x0, 0x4}, 0x0, 0xa}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) 16:32:28 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="20002cbd7000ffdbdf250200000014000300fc00000000000000000000000000000005000100000000001400060076657468307e746f5f6873720000000014000300fe8000000000000000000000000000aa2c00070073797374656d5f753a6f626a6563745f723a7373685f6b65797369676e5f657865635f743a73300008000400ac1414bb2a00070073797374656d5f753a6f626a6563745f723a6175646974645f7661725f72756e5f743a73300000002600070073797374656d5f753a6f626a6563745f723a6c6f73745f666f756e645f743a7330000000"], 0xe0}, 0x1, 0x0, 0x0, 0x28040014}, 0x8000800) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:28 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8001) 16:32:28 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8001) [ 1243.496238][T26159] FAULT_INJECTION: forcing a failure. [ 1243.496238][T26159] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.509005][T26159] CPU: 0 PID: 26159 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1243.519122][T26159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1243.529615][T26159] Call Trace: [ 1243.532895][T26159] [ 1243.535826][T26159] dump_stack_lvl+0xda/0x130 [ 1243.540434][T26159] dump_stack+0x15/0x20 16:32:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$nci(r0, &(0x7f0000000040)=""/171, 0xab) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) read$nci(r0, &(0x7f0000000040)=""/171, 0xab) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) 16:32:28 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8001) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8001) (async) 16:32:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) read$nci(r0, &(0x7f0000000040)=""/171, 0xab) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:28 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) syz_open_dev$loop(&(0x7f0000001e40), 0x0, 0x8001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0xff}, 'port0\x00', 0x8, 0x28, 0xffffffff, 0x6, 0x20, 0x4, 0x3, 0x0, 0x2, 0x4}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x10000) r3 = syz_io_uring_setup(0x4116, &(0x7f0000000080)={0x0, 0x938b, 0x100, 0x2, 0x3b1}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) [ 1243.544606][T26159] should_fail_ex+0x21f/0x230 [ 1243.549340][T26159] ? vm_area_dup+0x98/0x130 [ 1243.553864][T26159] __should_failslab+0x92/0xa0 [ 1243.558634][T26159] should_failslab+0x9/0x20 [ 1243.563138][T26159] kmem_cache_alloc+0x56/0x2d0 [ 1243.567905][T26159] vm_area_dup+0x98/0x130 [ 1243.572258][T26159] copy_mm+0x67b/0x1060 [ 1243.576422][T26159] copy_process+0x1002/0x20a0 [ 1243.581191][T26159] kernel_clone+0x169/0x560 [ 1243.585703][T26159] ? proc_fail_nth_read+0x140/0x140 [ 1243.590952][T26159] ? vfs_write+0x655/0x790 16:32:28 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) syz_open_dev$loop(&(0x7f0000001e40), 0x0, 0x8001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fffffffffffffff) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0xff}, 'port0\x00', 0x8, 0x28, 0xffffffff, 0x6, 0x20, 0x4, 0x3, 0x0, 0x2, 0x4}) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x10000) r3 = syz_io_uring_setup(0x4116, &(0x7f0000000080)={0x0, 0x938b, 0x100, 0x2, 0x3b1}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 16:32:28 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="20002cbd7000ffdbdf250200000014000300fc00000000000000000000000000000005000100000000001400060076657468307e746f5f6873720000000014000300fe8000000000000000000000000000aa2c00070073797374656d5f753a6f626a6563745f723a7373685f6b65797369676e5f657865635f743a73300008000400ac1414bb2a00070073797374656d5f753a6f626a6563745f723a6175646974645f7661725f72756e5f743a73300000002600070073797374656d5f753a6f626a6563745f723a6c6f73745f666f756e645f743a7330000000"], 0xe0}, 0x1, 0x0, 0x0, 0x28040014}, 0x8000800) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) [ 1243.595406][T26159] __x64_sys_clone+0xe8/0x120 [ 1243.600101][T26159] do_syscall_64+0x59/0x120 [ 1243.604637][T26159] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1243.610614][T26159] RIP: 0033:0x7f960fea4da9 [ 1243.615158][T26159] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1243.634776][T26159] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:28 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) syz_open_dev$loop(&(0x7f0000001e40), 0x0, 0x8001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0xff}, 'port0\x00', 0x8, 0x28, 0xffffffff, 0x6, 0x20, 0x4, 0x3, 0x0, 0x2, 0x4}) (async) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x10000) (async) r3 = syz_io_uring_setup(0x4116, &(0x7f0000000080)={0x0, 0x938b, 0x100, 0x2, 0x3b1}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 16:32:28 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x460000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 16:32:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x4040534e, &(0x7f0000000400)={{0x0, 0x4}, 0x0, 0xa}) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) 16:32:28 executing program 5: socket$rxrpc(0x21, 0x2, 0x2) 16:32:28 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="20002cbd7000ffdbdf250200000014000300fc00000000000000000000000000000005000100000000001400060076657468307e746f5f6873720000000014000300fe8000000000000000000000000000aa2c00070073797374656d5f753a6f626a6563745f723a7373685f6b65797369676e5f657865635f743a73300008000400ac1414bb2a00070073797374656d5f753a6f626a6563745f723a6175646974645f7661725f72756e5f743a73300000002600070073797374656d5f753a6f626a6563745f723a6c6f73745f666f756e645f743a7330000000"], 0xe0}, 0x1, 0x0, 0x0, 0x28040014}, 0x8000800) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:28 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 46) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) [ 1243.643199][T26159] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1243.651181][T26159] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1243.659163][T26159] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1243.667194][T26159] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1243.675181][T26159] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1243.683199][T26159] [ 1244.857196][T25402] ================================================================== [ 1244.865372][T25402] BUG: KCSAN: data-race in blk_mq_sched_dispatch_requests / blk_mq_sched_dispatch_requests [ 1244.875335][T25402] [ 1244.877638][T25402] read-write to 0xffff888100fd5f50 of 8 bytes by task 25672 on cpu 1: [ 1244.885763][T25402] blk_mq_sched_dispatch_requests+0x84/0x100 [ 1244.891725][T25402] blk_mq_run_hw_queue+0x298/0x4c0 [ 1244.896812][T25402] blk_mq_flush_plug_list+0x7a7/0xdb0 [ 1244.902160][T25402] blk_add_rq_to_plug+0x102/0x3d0 [ 1244.907162][T25402] blk_mq_submit_bio+0x61d/0xdb0 [ 1244.912074][T25402] __submit_bio+0x11c/0x350 [ 1244.916568][T25402] submit_bio_noacct_nocheck+0x4ad/0x5e0 [ 1244.922178][T25402] submit_bio_noacct+0x67d/0x830 [ 1244.927091][T25402] submit_bio+0xb7/0xc0 [ 1244.931222][T25402] ext4_bio_write_folio+0x6c0/0x9a0 [ 1244.936423][T25402] ext4_do_writepages+0x139f/0x2100 [ 1244.941597][T25402] ext4_writepages+0x15e/0x2e0 [ 1244.946346][T25402] do_writepages+0x1c2/0x340 [ 1244.950911][T25402] filemap_fdatawrite_wbc+0xdb/0xf0 [ 1244.956349][T25402] filemap_flush+0x95/0xc0 [ 1244.960742][T25402] ext4_alloc_da_blocks+0x50/0x130 [ 1244.965829][T25402] ext4_release_file+0x5f/0x1c0 [ 1244.970661][T25402] __fput+0x299/0x630 [ 1244.974618][T25402] ____fput+0x15/0x20 [ 1244.978581][T25402] task_work_run+0x135/0x1a0 [ 1244.983159][T25402] do_exit+0x604/0x16d0 [ 1244.987468][T25402] do_group_exit+0x101/0x150 [ 1244.992038][T25402] get_signal+0xf4e/0x10a0 [ 1244.996431][T25402] arch_do_signal_or_restart+0x95/0x4b0 [ 1245.001952][T25402] irqentry_exit_to_user_mode+0x98/0x130 [ 1245.007563][T25402] irqentry_exit+0x12/0x40 [ 1245.011960][T25402] exc_general_protection+0x339/0x4c0 [ 1245.017404][T25402] asm_exc_general_protection+0x26/0x30 [ 1245.022957][T25402] [ 1245.025275][T25402] read-write to 0xffff888100fd5f50 of 8 bytes by task 25402 on cpu 0: [ 1245.033415][T25402] blk_mq_sched_dispatch_requests+0x84/0x100 [ 1245.039377][T25402] blk_mq_run_hw_queue+0x298/0x4c0 [ 1245.044464][T25402] blk_mq_flush_plug_list+0x7a7/0xdb0 [ 1245.049815][T25402] blk_add_rq_to_plug+0x102/0x3d0 [ 1245.054816][T25402] blk_mq_submit_bio+0x61d/0xdb0 [ 1245.060079][T25402] __submit_bio+0x11c/0x350 [ 1245.064573][T25402] submit_bio_noacct_nocheck+0x4ad/0x5e0 [ 1245.070183][T25402] submit_bio_noacct+0x67d/0x830 [ 1245.075114][T25402] submit_bio+0xb7/0xc0 [ 1245.079247][T25402] ext4_io_submit+0x8a/0xa0 [ 1245.083726][T25402] ext4_do_writepages+0xb3a/0x2100 [ 1245.088813][T25402] ext4_writepages+0x15e/0x2e0 [ 1245.093561][T25402] do_writepages+0x1c2/0x340 [ 1245.098143][T25402] filemap_fdatawrite_wbc+0xdb/0xf0 [ 1245.103317][T25402] filemap_flush+0x95/0xc0 [ 1245.107709][T25402] ext4_alloc_da_blocks+0x50/0x130 [ 1245.112798][T25402] ext4_release_file+0x5f/0x1c0 [ 1245.117629][T25402] __fput+0x299/0x630 [ 1245.121594][T25402] ____fput+0x15/0x20 [ 1245.125569][T25402] task_work_run+0x135/0x1a0 [ 1245.130141][T25402] do_exit+0x604/0x16d0 [ 1245.134279][T25402] do_group_exit+0x101/0x150 [ 1245.138847][T25402] get_signal+0xf4e/0x10a0 [ 1245.143247][T25402] arch_do_signal_or_restart+0x95/0x4b0 [ 1245.148781][T25402] irqentry_exit_to_user_mode+0x98/0x130 [ 1245.154397][T25402] irqentry_exit+0x12/0x40 [ 1245.158792][T25402] asm_exc_page_fault+0x26/0x30 [ 1245.163625][T25402] [ 1245.165924][T25402] value changed: 0x000000000002d441 -> 0x000000000002d442 [ 1245.173010][T25402] [ 1245.175326][T25402] Reported by Kernel Concurrency Sanitizer on: [ 1245.181460][T25402] CPU: 0 PID: 25402 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1245.191503][T25402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1245.201540][T25402] ================================================================== 16:32:33 executing program 0: r0 = syz_clone(0x1222000, &(0x7f0000000200)="1c55b29fa29dceb8cf6534f42f5e21edfc40b2f071cc71b3ff66fdae4c72edb08b00aba7f61372fee0659a908f09010a3c51168c3f6f8e477c849164a3f30147430d68d39900b0f832e2397f9fa740b8cd4a479472566cc104a59b537decd7505c63e7cdce01887f0d2901c885796da43f462c37ed13ed2700f2587a9c7caa95ab09f809e9fcd3be98daab9ffcdd52fdd3acce7734a5b6012bacbb917fe672", 0x9f, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000400)="d42d19e0e26b9649971533221e1575d843917580df04bf10514ca08a66693fc9ba1098ab4a873d66754679e465cf886b878918ee1dc282acda3133cc7ff40b24ef2dd8a0d10f2fbf6eec0ca6eb38905048ee16ff1f6b3aabbd3ad2c30573885497ec57c0a2c13ea4a1eeb88e2c2fbec125fd522e048af2417df7112b2ade3eb249c4e652ab9db588e17a571b1f116f2918892c65a6c2f89b705823260e9db2bea6983c91e6f5945589c1d3bc309997d938c5523b77d02597c51315d4741fc3bde6baffd2464dcd49be2a4b049111029b3f16ee789e3ce813") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340), 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x604c010}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r0, r1, 0x0, 0xb, &(0x7f0000000380)='/dev/loop#\x00'}, 0x30) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0x541b, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1) ioctl$LOOP_SET_FD(r6, 0x4c00, r6) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffc, 0x103502) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r10) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r9, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r10}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x400000c}, 0x840) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x881, 0x0) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000780)=[r8, r7, r5, r10, r6, r10, r10, r1], 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r11, 0x0, 0xb, &(0x7f00000005c0)='/dev/loop#\x00'}, 0x30) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000140)) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0x1, "9e9330db54d5778204196fb83dd3f76087ba85b0b013252a4be2b207aad03b60938b320141110dcd955f0467d89fa39c5bced6509d1d24523f2a125e01b98292", "b953ad20bc83230e7cc86f56046965325b153ef19dd9c7765885a4b6b787cf9bce0921dd6e44eb6e91ab4313f21ed4253a8e2716567159f4041143e5447076fc", "4c0dfe7b1e91e8f87596fce028ca33c92d5d52a2e66c238b98b12aad72e252a9", [0x4f933f69, 0x2]}) 16:32:33 executing program 5: socket$rxrpc(0x21, 0x2, 0x2) 16:32:33 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x460000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 16:32:33 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40002004}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x77, 0x1}, 0x1, 0x800, 0x640d4783, {0x6, 0x64}, 0x6, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) 16:32:33 executing program 5: socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0x2) (async) 16:32:33 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:33 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40002004}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x77, 0x1}, 0x1, 0x800, 0x640d4783, {0x6, 0x64}, 0x6, 0x2}) (async, rerun: 32) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) 16:32:33 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40002004}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x77, 0x1}, 0x1, 0x800, 0x640d4783, {0x6, 0x64}, 0x6, 0x2}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) [ 1249.386016][T26226] FAULT_INJECTION: forcing a failure. [ 1249.386016][T26226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1249.399295][T26226] CPU: 0 PID: 26226 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1249.409361][T26226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1249.419413][T26226] Call Trace: [ 1249.422688][T26226] [ 1249.425627][T26226] dump_stack_lvl+0xda/0x130 [ 1249.430223][T26226] dump_stack+0x15/0x20 16:32:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x50, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devlog_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044005}, 0x24004000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x2, &(0x7f0000000400)) syz_io_uring_setup(0x6721, &(0x7f0000000080)={0x0, 0x68f3, 0x0, 0x1, 0x1cc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = syz_io_uring_setup(0x6702, &(0x7f0000000180)={0x0, 0xfc02, 0x228, 0x1, 0x2e1}, &(0x7f0000000200), &(0x7f0000000540)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x2041}, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0x2b3e, 0x9, 0x8, {0xffff4070, 0x8000}, 0x2, 0x100}) r6 = syz_open_dev$loop(&(0x7f00000002c0), 0x3, 0x200) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) 16:32:33 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:33 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x4040534e, &(0x7f0000000400)={{0x0, 0x4}, 0x0, 0xa}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) [ 1249.434385][T26226] should_fail_ex+0x21f/0x230 [ 1249.439063][T26226] __should_fail_alloc_page+0xfd/0x110 [ 1249.444531][T26226] __alloc_pages+0x108/0x340 [ 1249.449128][T26226] alloc_pages_mpol+0xb1/0x1d0 [ 1249.453911][T26226] alloc_pages+0xe0/0x100 [ 1249.458260][T26226] __pud_alloc+0x4c/0x3b0 [ 1249.462609][T26226] copy_page_range+0x1fad/0x2150 [ 1249.467558][T26226] ? mas_wr_walk_descend+0x359/0x410 [ 1249.472869][T26226] ? mas_wr_end_piv+0x15f/0x480 [ 1249.477730][T26226] copy_mm+0x938/0x1060 [ 1249.481900][T26226] copy_process+0x1002/0x20a0 16:32:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x50, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devlog_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044005}, 0x24004000) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x2, &(0x7f0000000400)) (async) syz_io_uring_setup(0x6721, &(0x7f0000000080)={0x0, 0x68f3, 0x0, 0x1, 0x1cc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = syz_io_uring_setup(0x6702, &(0x7f0000000180)={0x0, 0xfc02, 0x228, 0x1, 0x2e1}, &(0x7f0000000200), &(0x7f0000000540)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x2041}, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0x2b3e, 0x9, 0x8, {0xffff4070, 0x8000}, 0x2, 0x100}) r6 = syz_open_dev$loop(&(0x7f00000002c0), 0x3, 0x200) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) 16:32:34 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 1249.486579][T26226] kernel_clone+0x169/0x560 [ 1249.491090][T26226] ? proc_fail_nth_read+0x140/0x140 [ 1249.496304][T26226] ? vfs_write+0x655/0x790 [ 1249.500736][T26226] __x64_sys_clone+0xe8/0x120 [ 1249.505428][T26226] do_syscall_64+0x59/0x120 [ 1249.509925][T26226] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1249.515821][T26226] RIP: 0033:0x7f960fea4da9 [ 1249.520233][T26226] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1249.539844][T26226] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1249.548256][T26226] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1249.556746][T26226] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1249.564722][T26226] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1249.572694][T26226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 16:32:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x50, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devlog_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044005}, 0x24004000) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x2, &(0x7f0000000400)) (async) syz_io_uring_setup(0x6721, &(0x7f0000000080)={0x0, 0x68f3, 0x0, 0x1, 0x1cc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) r4 = syz_io_uring_setup(0x6702, &(0x7f0000000180)={0x0, 0xfc02, 0x228, 0x1, 0x2e1}, &(0x7f0000000200), &(0x7f0000000540)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x2041}, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0x2b3e, 0x9, 0x8, {0xffff4070, 0x8000}, 0x2, 0x100}) r6 = syz_open_dev$loop(&(0x7f00000002c0), 0x3, 0x200) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) [ 1249.580762][T26226] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1249.588735][T26226] 16:32:34 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 16:32:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:34 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 16:32:34 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0882) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x9c040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:34 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = io_uring_setup(0x3b6e, &(0x7f0000000000)={0x0, 0x3c2, 0x0, 0x1, 0x64}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 16:32:34 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0882) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xc6080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$nci(r1, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @a={0x0, 0x0, 0x0, 0x0, {0x0, 0xff4, "072974c78c5d1b274522eb24fb679ceb81f5fa84da77071fc8664fc8d68d5ef8a62d0ce6171f30f7d013ca980dbeae84b24bb07f41150fe60b6bc33d82728a715f772ad1726d8b0175b57f3a27181dc0e340b5f5dd4f14f79c8de1874c2e6977f4a4ce0a60030d555da977ec898f7dafb20a942a6e1d29f8901f82cdb60bd7ce6a55381ca895f58f6b5ead6d3579642efa5cdddfd9362e7398573b27333fe09b68fafc2c8c198b6eaafc164223ccb4dcefe6b6423b7f7406982b7b60f8f7bad9dcda26742a6c066ca46b441656fd45a5a4dc38bbf18df92364d28a120317c5d8a370d45ced0b3d37df84cde91a1ff3fe3ba81b501a9b934d37d284c913b0b135fd55743c544736ff361e57c900a03ed97fa51dcd727b159a5f8e5c046258c893235de53beea8932fb7791d6373fd7645335d231f71b556e6331e73c60ad4f3ba4dee4f978651f9066c18ed3e507a7aa47d74cff96390f27ccde69d1522113384e9bac81b887165fd10bb9e0fcc11b4c209290a0101ace1e1dcdefea2a396f99f97f5e2d86e89ea31afc4b3e6c3963fe7c3deab2b29844d2807720c74de75392d96bd752d01193b34d320f29880b7d285f79221400759391ec4676365d4cef2dc5693b1899dffa4a276df30f62929aba3174c91ed64f369342658f3c9e2e7dbc610373c63df33c807f07aaf9f2946aef7484e92865b87191298d73f4f3ce5a15b0f19cd1492f758ab8ed09e7fb2e9c9b94f176b77f65091952f6b694e3194ca02e613391285db32d8d21181e7429f1ad93e69c1477933bbcd5f7dd2980cdd2667075e55235ad7ccabcce4b2bf2b15a4604f5a35fde9aa9937f7245ee992de2581cdf23c5b577fb7379fb80b997dbefcb57ae33ea3928f902d636084749d2b0a5bef160f212132a3b1f4a6760b61521baceb487523ed7d70f69c720136594e089f5eedb01e98b585c3de87ac338dfc361d6e4cb3537c1510d8c2b5a73ec7e92ec72ac59c814415af97c83c54ecf4527ea5e6eabe1fa7c6f834c1f8ade70101f816f950693a825a83d492d3c628424616d622ee1716990ea6605f2ca2e3df09e217f1457b1f9fe7f6c30faf1a621bf0c29141c55b099406fef0d60a3096766dc2a593758b95e4fcbc36017381c04b773a6edf1ecf2ba07efe97aa5c2385ff0877bd4913c5af53b76b9a522d67edb7ffdc620f22ae70beee24037e50adc66fdc4ba2b6c3968a441faacf554eed5f89d1b7a527ebc0aed76c1a17c5fbbd6ef2455120135f1f2d4c25bf48a780c3f87113713db9133581d77818d6cf686c80e0540c689a3adffc75e784dc0f8ab151b1d3f285142de714ae8a3252a97b9cce44c1801fd737683bc4e212209460c474507bac38f034c79d2d25f68b75c6dff783edf1159bc9c32ca892f8a8f875df707d41e9bcf5a57b92bed0838b469f48a49e7c74ad94981c182fd543798151c4229ab18fd9a912868278d906ba2b7214ef310ecd1824f24ff90938a974d007005ac02211daf12463f0894e31e38ff43d64a7273d4aa61c81ae5e6986ef115afc4ccbaeffc00cdc9921376cc90372917ca3d2595beb7bdd3740671699b3d31cd060af39959ab9213b8cdad6b5d93abf9c1ff453d39db861fe46890a44ec2847e3ff0d0c1e8f89d4a6986107f31fc67918d0d6987a789c0f369059a323e4bb8227989684b55cc3d037c8a60e1e7b016e73432fd655c07850893e9366c2d10bb5141a8c4177fb0316dafacb550f768018d5629f5ad79b4e0056e8d0d1d7eb31ebd240499e99dc5d10ecb1aa1989951bfaab38bf85e047aaa5c3134843936112f3d2d5a1d499e2f947eb992d3fad052e28908b0cc878ba9f4694ca972770cef77f5f0841afb3b303e311f7c0016c6a6c7def025bb9380a2a5a5ee64b0d22c4b7551d7faabdfe6039bd321bbd05c9e51cb43ddb56aec5f00687fc39082d2fd8b28df4989495eb9db1d6e6cb47650770bd04b246cd72de291044b71f89970db64cbc80e8962ec2b3bb878c9ec588a1ef484ccce30885c968a24e84fa4fcca1454c2e66d0cfb2fa8a9b4a7ff47e7da7a13568489774e1266b1f595a7ce850dd74caeecdfd14e77b7dac39ff60aaad7d88cdc823075fde618a5a224426208a9eb7f644114775109790af84822e61e8a8a6539d6cb294560734163d0d61982ef5981fcc4b5c0cb20bf47591ba719e7a963dddafc2179622f471196183b07c405f4166f39ce107b80069ef66e4c2ef8eb2e695d677e2f632c54e7cc710ba8ab8a965df4cee6c4344752eafa6ed1db6ce986963fffabbfc1e6b92f856d561f0007e4a37e0d6d78ce6886e028c0a74120ee85a4bc77c25a761ae0f8f01d0ef04f0d9d778be5e7369de4dd04d7335416ebb7a9cab89202710d37968cf3d36ea074b78b34a449998910746d6453b70bb6619cf14d6c9d1392a2b9e7667d28be60b18317abe05c9f8d00a7bdf8d5ae635539d291834670ec151e88434deaa7f896bef99a6cfb0c831137e6dea5e01bba52d13aa65300f14e7dff089339fe514dbd184cd63297b36023749b2ca044e05b36fb6aaf606930f7b3362738445ffcf4dd7614ba1f2f2c94f590e1df787f45c4f068cb6df5a3c553c3bde544f69454fb493c679e4d16717c1818f0f225f6978bad4134dc55f8b85adf2248c1fd472ba36604a30ab5d36d59b90950164dae3f003a09e05ad73c86ce2a005a127b49757a19c83dddfdaabd0bdd55a15b2f3a1f990f1705a465467c0ba2ca2e9772aac5a804e917f31f1c809cbe50e34b3250158f3efd13094678720f04656f74c5d417578e896f282a1ca6166ce15c84f4d4e9ed24c1289ee7f714c966baf338c24447a6fcc605476d4b450a4f0139b40bc6b4945120cdfe2f29c93d0b6dde70f39e3fb0b71cf58f69397dfe499da7a247e1eda9359782602cc7213aae45db5d2245fcbee044d2b74e5d4902363afe01fbd44607afb55e9196a16f9282dba98781acc1b7cdaa543ad236b83cb4cd26e03d3ec73b09c3c6dcd823e1aab1889c4265f6cca10e9c9ac6c91abe89260fe1802b18ee458b0f7880e5a204e6cbd85061bc65d946c4300e06ca10fa9739ba06e908e985946304f6972b6518dc6f09aa99279035c83489bd63a9343d404fea1d0991d18c9104fe7fae331eb8405ea50a12c09fb6349f46e1c68753e5facd6cec4fad968b68887d0f13d491df009c77d2558501d3ea2c326e902acdde4b575b87f81ff5985e92a47fcff00f5db6078697b6a7df35651908ac029278c3524d7fcb32c4ba99e622441e42fbf65d0090f3751e2f60a05e5ac8af3e408956ae3b5603d422d0a941e8c2e655fdbf395e10ce8e3bfca3dcecb6995fbb9c933470da79ba5f779d6714990840a73bc385263bbd6060ee9e8c745356a9f9749b84151f5ca54c87465203ac793c0b2ffa0261bf4d3825e0181dbbbb9fc997b01236fa77adb7c8e1022ad9af8f9df3ba8f74be452f0f0d8d5de4ced0daa333bdace130f5600bd09fbf1be3096956035c618f1c6288bc1a40cd84e2a5b809258190686149bebb57b10f9fe03e7f91c8f30e121ffb277f679913009530c65b0cbe819dbc563dd2f18fa4aad2f131e6d3e6a6d9710585f30aa2e59dad47aaa79edc80ac0c16fac1ca16cd6e64623c11f27b1477c7b7bcf49116ec12286f816c385f921cb9f1ed7879e3094dd52f835797355542cd592e9ec6286a87a607fe0a53a132b9885f5a7289f2a1482e0d84977ee555d04fdea8eabdeda75e1e319e87a9e0b9b1cec3e36fa852cc37c21be5c6d6c095c6325afaa9d782840542588f208a68690c489cad5f340a362fbd710a3150491fa4c9d611253975a2b9f873f3ba603a62cc298b7c0f4c3c4498fe9297b78b57af4792b981a261c76c602a7fa4302f1e0aeaa51c5408e7233f030ff21e38eed7868734499a2077bd9a4654104c766be9fd954bca020088412ea773aa275d7671d76dfcc600d6fa81c57cdf5cbe95900813e7196b229f84ec2f86a29bc758daad94c10aa1111d9259ccf1fdab53f29946511f4534a3fc923792549aa57e9540da3ea2a931c4430d8bb6e37a078e23725503a0aa28e126becbc0c91a5a87be0a52fef8c10ef7112a6938066136b98729e7a8a82dbfa9ebbf68878d70524fd173a04dba52b248f18f18f32a928abb140750173401885edecca83bc5fe053ee52e4991c72d071ae95be7e712d656c0c5cdf37d808f3380609cc6dcc742f0b4aaf633bf98f7e6fbdceddac8c8ec454c912c16ebb466ff6ede39b829600c93bbbf5029207c99f25479f90f40faceafcbb5f8f10e80fed1f1630179e863f5e3be3020eb5ebbea6ad91f9dd635fd884e4d6b1b135318636cc1d166a9ada87648b2c1e1f187305992274cd05261122c6aa4ecda7b16061ab96c78ce91f9bd307d4d1cf59758711a6cb41b95a548378550f08b53d267fb08e704c5c2a22699d4abee521a192e84b6201bebc994697e10b4f2169a8aff0b0fcbd0b127f7d7ac689d48ac024e5f706fdab44b029b8aaffcf1be883115bcf7bc403ab2e48866c84a25d252496c92e49d30272507372fd1ddec1f828660f32a267789a4dbfd2015106aee3fbb23d3bd6f281e3e5e4414eaf8d1886e9bafe57e5ceb46a42fba128ad4d20c1351b1ed1e1f51993650bdbd6bb89bc43617c9357909475188742f2efe6bd8d12bff08a5c85700073ae8b423e0d7e9ae2e7a93b78847567a154bd27f24801005c8c2ba6af5c1f50f23a8d309c8282a78e1dffcdc2c4cadab0e701f5561144aa383c461025a5fb4d9d43658e85ddd7ce3a906f33ca43b1c7d3c6cb45cbbd1bcbe66fd2b4064b109be0f57881ef5e693317e5a3e0037ffd8bfa0c7f91b1c09d80ddcb43f5bf9bc20d9631af4f9c547bc8fd1f2635da4a513d7467294e015457b970f526fc856398083483e9b6bd0cfd84954a75d1d3d0d8e56d5e0c8003a2c55aa19e58559c4291d98a41e1403914bc9e2182753dc017d1913cda6d5c1954d38a30c0ed96a483095dcd5bd12e4a5059fe6136378f5fea66e3065ee8c83ab70f770f27fb99052802420ad706b3205552caeaf2f6c99250bd770a3f1b57b66d19c9494522a2caf6f333367e014ab6b69dcb121efae7ec1e530c338dbc233166bd3d9d90b0069762e9127940db10a2410dff09c84c2e1f12c4127eb4e1ebcde419bbd149465af171f142c0b1292a1d50a2f27d98a5033a3c182db24a8f530954ea955237fe16e59da27259ff3290b4776bec4e857da3566b318a9980514b22a3294d985695ad46801692f6cfbbadc756645f6ead1ba6ac13d4e4655ea6525408cbe2a537dd5e1c36d296a107a4a3610ff1e6c34a4e480698ff9dec0abe5b07c2e9475f46676d44bec215416692185ce86fbb0d411cbc116987b58b15e23eb2edae7e23f8ff65d932ecd8337ad0e6e5187808a075372d3b6da09d90caaa0705260436c59c30329f85d1a15cee816a074485a0b204447a8899ab5d76322029f803d75e012e3cccc8e238e6713e6993dfba23019f192408972cd7029abb33cbf65fcf20befa53a9b3901338c00af720f94c7efba37b84bfdf67d992977ed81b731f50ff7ea83f5460598d0a673f7b2bd58cfb78b35105c0dab07752595af589a2f822a4289495a24851b8cfcdff0fd728fa7264de078a5ff1f848e959c214876be2224bce406122f1bcafb4d9dee096b1bd3be3c84917e1de1ac1cca220995664fe90cfb2063f0ee3c9a696cf9b595ab0838be666857b42b795fb367d6bb5936db3a1"}}}, 0x1000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) pipe2$9p(&(0x7f0000000040), 0x84800) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 16:32:34 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) r1 = io_uring_setup(0x3b6e, &(0x7f0000000000)={0x0, 0x3c2, 0x0, 0x1, 0x64}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 16:32:34 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 47) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:34 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/36, 0x24, 0x10101, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8fe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xc6080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$nci(r1, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @a={0x0, 0x0, 0x0, 0x0, {0x0, 0xff4, "072974c78c5d1b274522eb24fb679ceb81f5fa84da77071fc8664fc8d68d5ef8a62d0ce6171f30f7d013ca980dbeae84b24bb07f41150fe60b6bc33d82728a715f772ad1726d8b0175b57f3a27181dc0e340b5f5dd4f14f79c8de1874c2e6977f4a4ce0a60030d555da977ec898f7dafb20a942a6e1d29f8901f82cdb60bd7ce6a55381ca895f58f6b5ead6d3579642efa5cdddfd9362e7398573b27333fe09b68fafc2c8c198b6eaafc164223ccb4dcefe6b6423b7f7406982b7b60f8f7bad9dcda26742a6c066ca46b441656fd45a5a4dc38bbf18df92364d28a120317c5d8a370d45ced0b3d37df84cde91a1ff3fe3ba81b501a9b934d37d284c913b0b135fd55743c544736ff361e57c900a03ed97fa51dcd727b159a5f8e5c046258c893235de53beea8932fb7791d6373fd7645335d231f71b556e6331e73c60ad4f3ba4dee4f978651f9066c18ed3e507a7aa47d74cff96390f27ccde69d1522113384e9bac81b887165fd10bb9e0fcc11b4c209290a0101ace1e1dcdefea2a396f99f97f5e2d86e89ea31afc4b3e6c3963fe7c3deab2b29844d2807720c74de75392d96bd752d01193b34d320f29880b7d285f79221400759391ec4676365d4cef2dc5693b1899dffa4a276df30f62929aba3174c91ed64f369342658f3c9e2e7dbc610373c63df33c807f07aaf9f2946aef7484e92865b87191298d73f4f3ce5a15b0f19cd1492f758ab8ed09e7fb2e9c9b94f176b77f65091952f6b694e3194ca02e613391285db32d8d21181e7429f1ad93e69c1477933bbcd5f7dd2980cdd2667075e55235ad7ccabcce4b2bf2b15a4604f5a35fde9aa9937f7245ee992de2581cdf23c5b577fb7379fb80b997dbefcb57ae33ea3928f902d636084749d2b0a5bef160f212132a3b1f4a6760b61521baceb487523ed7d70f69c720136594e089f5eedb01e98b585c3de87ac338dfc361d6e4cb3537c1510d8c2b5a73ec7e92ec72ac59c814415af97c83c54ecf4527ea5e6eabe1fa7c6f834c1f8ade70101f816f950693a825a83d492d3c628424616d622ee1716990ea6605f2ca2e3df09e217f1457b1f9fe7f6c30faf1a621bf0c29141c55b099406fef0d60a3096766dc2a593758b95e4fcbc36017381c04b773a6edf1ecf2ba07efe97aa5c2385ff0877bd4913c5af53b76b9a522d67edb7ffdc620f22ae70beee24037e50adc66fdc4ba2b6c3968a441faacf554eed5f89d1b7a527ebc0aed76c1a17c5fbbd6ef2455120135f1f2d4c25bf48a780c3f87113713db9133581d77818d6cf686c80e0540c689a3adffc75e784dc0f8ab151b1d3f285142de714ae8a3252a97b9cce44c1801fd737683bc4e212209460c474507bac38f034c79d2d25f68b75c6dff783edf1159bc9c32ca892f8a8f875df707d41e9bcf5a57b92bed0838b469f48a49e7c74ad94981c182fd543798151c4229ab18fd9a912868278d906ba2b7214ef310ecd1824f24ff90938a974d007005ac02211daf12463f0894e31e38ff43d64a7273d4aa61c81ae5e6986ef115afc4ccbaeffc00cdc9921376cc90372917ca3d2595beb7bdd3740671699b3d31cd060af39959ab9213b8cdad6b5d93abf9c1ff453d39db861fe46890a44ec2847e3ff0d0c1e8f89d4a6986107f31fc67918d0d6987a789c0f369059a323e4bb8227989684b55cc3d037c8a60e1e7b016e73432fd655c07850893e9366c2d10bb5141a8c4177fb0316dafacb550f768018d5629f5ad79b4e0056e8d0d1d7eb31ebd240499e99dc5d10ecb1aa1989951bfaab38bf85e047aaa5c3134843936112f3d2d5a1d499e2f947eb992d3fad052e28908b0cc878ba9f4694ca972770cef77f5f0841afb3b303e311f7c0016c6a6c7def025bb9380a2a5a5ee64b0d22c4b7551d7faabdfe6039bd321bbd05c9e51cb43ddb56aec5f00687fc39082d2fd8b28df4989495eb9db1d6e6cb47650770bd04b246cd72de291044b71f89970db64cbc80e8962ec2b3bb878c9ec588a1ef484ccce30885c968a24e84fa4fcca1454c2e66d0cfb2fa8a9b4a7ff47e7da7a13568489774e1266b1f595a7ce850dd74caeecdfd14e77b7dac39ff60aaad7d88cdc823075fde618a5a224426208a9eb7f644114775109790af84822e61e8a8a6539d6cb294560734163d0d61982ef5981fcc4b5c0cb20bf47591ba719e7a963dddafc2179622f471196183b07c405f4166f39ce107b80069ef66e4c2ef8eb2e695d677e2f632c54e7cc710ba8ab8a965df4cee6c4344752eafa6ed1db6ce986963fffabbfc1e6b92f856d561f0007e4a37e0d6d78ce6886e028c0a74120ee85a4bc77c25a761ae0f8f01d0ef04f0d9d778be5e7369de4dd04d7335416ebb7a9cab89202710d37968cf3d36ea074b78b34a449998910746d6453b70bb6619cf14d6c9d1392a2b9e7667d28be60b18317abe05c9f8d00a7bdf8d5ae635539d291834670ec151e88434deaa7f896bef99a6cfb0c831137e6dea5e01bba52d13aa65300f14e7dff089339fe514dbd184cd63297b36023749b2ca044e05b36fb6aaf606930f7b3362738445ffcf4dd7614ba1f2f2c94f590e1df787f45c4f068cb6df5a3c553c3bde544f69454fb493c679e4d16717c1818f0f225f6978bad4134dc55f8b85adf2248c1fd472ba36604a30ab5d36d59b90950164dae3f003a09e05ad73c86ce2a005a127b49757a19c83dddfdaabd0bdd55a15b2f3a1f990f1705a465467c0ba2ca2e9772aac5a804e917f31f1c809cbe50e34b3250158f3efd13094678720f04656f74c5d417578e896f282a1ca6166ce15c84f4d4e9ed24c1289ee7f714c966baf338c24447a6fcc605476d4b450a4f0139b40bc6b4945120cdfe2f29c93d0b6dde70f39e3fb0b71cf58f69397dfe499da7a247e1eda9359782602cc7213aae45db5d2245fcbee044d2b74e5d4902363afe01fbd44607afb55e9196a16f9282dba98781acc1b7cdaa543ad236b83cb4cd26e03d3ec73b09c3c6dcd823e1aab1889c4265f6cca10e9c9ac6c91abe89260fe1802b18ee458b0f7880e5a204e6cbd85061bc65d946c4300e06ca10fa9739ba06e908e985946304f6972b6518dc6f09aa99279035c83489bd63a9343d404fea1d0991d18c9104fe7fae331eb8405ea50a12c09fb6349f46e1c68753e5facd6cec4fad968b68887d0f13d491df009c77d2558501d3ea2c326e902acdde4b575b87f81ff5985e92a47fcff00f5db6078697b6a7df35651908ac029278c3524d7fcb32c4ba99e622441e42fbf65d0090f3751e2f60a05e5ac8af3e408956ae3b5603d422d0a941e8c2e655fdbf395e10ce8e3bfca3dcecb6995fbb9c933470da79ba5f779d6714990840a73bc385263bbd6060ee9e8c745356a9f9749b84151f5ca54c87465203ac793c0b2ffa0261bf4d3825e0181dbbbb9fc997b01236fa77adb7c8e1022ad9af8f9df3ba8f74be452f0f0d8d5de4ced0daa333bdace130f5600bd09fbf1be3096956035c618f1c6288bc1a40cd84e2a5b809258190686149bebb57b10f9fe03e7f91c8f30e121ffb277f679913009530c65b0cbe819dbc563dd2f18fa4aad2f131e6d3e6a6d9710585f30aa2e59dad47aaa79edc80ac0c16fac1ca16cd6e64623c11f27b1477c7b7bcf49116ec12286f816c385f921cb9f1ed7879e3094dd52f835797355542cd592e9ec6286a87a607fe0a53a132b9885f5a7289f2a1482e0d84977ee555d04fdea8eabdeda75e1e319e87a9e0b9b1cec3e36fa852cc37c21be5c6d6c095c6325afaa9d782840542588f208a68690c489cad5f340a362fbd710a3150491fa4c9d611253975a2b9f873f3ba603a62cc298b7c0f4c3c4498fe9297b78b57af4792b981a261c76c602a7fa4302f1e0aeaa51c5408e7233f030ff21e38eed7868734499a2077bd9a4654104c766be9fd954bca020088412ea773aa275d7671d76dfcc600d6fa81c57cdf5cbe95900813e7196b229f84ec2f86a29bc758daad94c10aa1111d9259ccf1fdab53f29946511f4534a3fc923792549aa57e9540da3ea2a931c4430d8bb6e37a078e23725503a0aa28e126becbc0c91a5a87be0a52fef8c10ef7112a6938066136b98729e7a8a82dbfa9ebbf68878d70524fd173a04dba52b248f18f18f32a928abb140750173401885edecca83bc5fe053ee52e4991c72d071ae95be7e712d656c0c5cdf37d808f3380609cc6dcc742f0b4aaf633bf98f7e6fbdceddac8c8ec454c912c16ebb466ff6ede39b829600c93bbbf5029207c99f25479f90f40faceafcbb5f8f10e80fed1f1630179e863f5e3be3020eb5ebbea6ad91f9dd635fd884e4d6b1b135318636cc1d166a9ada87648b2c1e1f187305992274cd05261122c6aa4ecda7b16061ab96c78ce91f9bd307d4d1cf59758711a6cb41b95a548378550f08b53d267fb08e704c5c2a22699d4abee521a192e84b6201bebc994697e10b4f2169a8aff0b0fcbd0b127f7d7ac689d48ac024e5f706fdab44b029b8aaffcf1be883115bcf7bc403ab2e48866c84a25d252496c92e49d30272507372fd1ddec1f828660f32a267789a4dbfd2015106aee3fbb23d3bd6f281e3e5e4414eaf8d1886e9bafe57e5ceb46a42fba128ad4d20c1351b1ed1e1f51993650bdbd6bb89bc43617c9357909475188742f2efe6bd8d12bff08a5c85700073ae8b423e0d7e9ae2e7a93b78847567a154bd27f24801005c8c2ba6af5c1f50f23a8d309c8282a78e1dffcdc2c4cadab0e701f5561144aa383c461025a5fb4d9d43658e85ddd7ce3a906f33ca43b1c7d3c6cb45cbbd1bcbe66fd2b4064b109be0f57881ef5e693317e5a3e0037ffd8bfa0c7f91b1c09d80ddcb43f5bf9bc20d9631af4f9c547bc8fd1f2635da4a513d7467294e015457b970f526fc856398083483e9b6bd0cfd84954a75d1d3d0d8e56d5e0c8003a2c55aa19e58559c4291d98a41e1403914bc9e2182753dc017d1913cda6d5c1954d38a30c0ed96a483095dcd5bd12e4a5059fe6136378f5fea66e3065ee8c83ab70f770f27fb99052802420ad706b3205552caeaf2f6c99250bd770a3f1b57b66d19c9494522a2caf6f333367e014ab6b69dcb121efae7ec1e530c338dbc233166bd3d9d90b0069762e9127940db10a2410dff09c84c2e1f12c4127eb4e1ebcde419bbd149465af171f142c0b1292a1d50a2f27d98a5033a3c182db24a8f530954ea955237fe16e59da27259ff3290b4776bec4e857da3566b318a9980514b22a3294d985695ad46801692f6cfbbadc756645f6ead1ba6ac13d4e4655ea6525408cbe2a537dd5e1c36d296a107a4a3610ff1e6c34a4e480698ff9dec0abe5b07c2e9475f46676d44bec215416692185ce86fbb0d411cbc116987b58b15e23eb2edae7e23f8ff65d932ecd8337ad0e6e5187808a075372d3b6da09d90caaa0705260436c59c30329f85d1a15cee816a074485a0b204447a8899ab5d76322029f803d75e012e3cccc8e238e6713e6993dfba23019f192408972cd7029abb33cbf65fcf20befa53a9b3901338c00af720f94c7efba37b84bfdf67d992977ed81b731f50ff7ea83f5460598d0a673f7b2bd58cfb78b35105c0dab07752595af589a2f822a4289495a24851b8cfcdff0fd728fa7264de078a5ff1f848e959c214876be2224bce406122f1bcafb4d9dee096b1bd3be3c84917e1de1ac1cca220995664fe90cfb2063f0ee3c9a696cf9b595ab0838be666857b42b795fb367d6bb5936db3a1"}}}, 0x1000) (async) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) (async) pipe2$9p(&(0x7f0000000040), 0x84800) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 16:32:34 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0882) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0882) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:34 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = io_uring_setup(0x3b6e, &(0x7f0000000000)={0x0, 0x3c2, 0x0, 0x1, 0x64}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 16:32:34 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/36, 0x24, 0x10101, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8fe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}, 0x24) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xd1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) [ 1249.819377][T26287] FAULT_INJECTION: forcing a failure. [ 1249.819377][T26287] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.832147][T26287] CPU: 1 PID: 26287 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1249.842223][T26287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1249.852543][T26287] Call Trace: [ 1249.855819][T26287] [ 1249.858748][T26287] dump_stack_lvl+0xda/0x130 [ 1249.863427][T26287] dump_stack+0x15/0x20 [ 1249.867584][T26287] should_fail_ex+0x21f/0x230 [ 1249.872282][T26287] ? vm_area_dup+0x98/0x130 [ 1249.876813][T26287] __should_failslab+0x92/0xa0 [ 1249.881573][T26287] should_failslab+0x9/0x20 [ 1249.886072][T26287] kmem_cache_alloc+0x56/0x2d0 [ 1249.890931][T26287] vm_area_dup+0x98/0x130 [ 1249.895260][T26287] copy_mm+0x67b/0x1060 [ 1249.899397][T26287] copy_process+0x1002/0x20a0 [ 1249.904121][T26287] kernel_clone+0x169/0x560 [ 1249.908626][T26287] ? proc_fail_nth_read+0x140/0x140 [ 1249.913881][T26287] ? vfs_write+0x655/0x790 [ 1249.918373][T26287] __x64_sys_clone+0xe8/0x120 [ 1249.923172][T26287] do_syscall_64+0x59/0x120 [ 1249.927736][T26287] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1249.933637][T26287] RIP: 0033:0x7f960fea4da9 [ 1249.938039][T26287] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1249.957975][T26287] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1249.966385][T26287] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1249.974369][T26287] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1249.982319][T26287] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1249.990338][T26287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1249.998299][T26287] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1250.006271][T26287] 16:32:36 executing program 0: r0 = syz_clone(0x1222000, &(0x7f0000000200)="1c55b29fa29dceb8cf6534f42f5e21edfc40b2f071cc71b3ff66fdae4c72edb08b00aba7f61372fee0659a908f09010a3c51168c3f6f8e477c849164a3f30147430d68d39900b0f832e2397f9fa740b8cd4a479472566cc104a59b537decd7505c63e7cdce01887f0d2901c885796da43f462c37ed13ed2700f2587a9c7caa95ab09f809e9fcd3be98daab9ffcdd52fdd3acce7734a5b6012bacbb917fe672", 0x9f, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000400)="d42d19e0e26b9649971533221e1575d843917580df04bf10514ca08a66693fc9ba1098ab4a873d66754679e465cf886b878918ee1dc282acda3133cc7ff40b24ef2dd8a0d10f2fbf6eec0ca6eb38905048ee16ff1f6b3aabbd3ad2c30573885497ec57c0a2c13ea4a1eeb88e2c2fbec125fd522e048af2417df7112b2ade3eb249c4e652ab9db588e17a571b1f116f2918892c65a6c2f89b705823260e9db2bea6983c91e6f5945589c1d3bc309997d938c5523b77d02597c51315d4741fc3bde6baffd2464dcd49be2a4b049111029b3f16ee789e3ce813") (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340), 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x604c010}, 0x4000000) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r0, r1, 0x0, 0xb, &(0x7f0000000380)='/dev/loop#\x00'}, 0x30) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0x541b, 0x0) (async) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1) (async) ioctl$LOOP_SET_FD(r6, 0x4c00, r6) (async) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffc, 0x103502) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r9, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r10}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x400000c}, 0x840) (async) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x881, 0x0) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000780)=[r8, r7, r5, r10, r6, r10, r10, r1], 0x8) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r11, 0x0, 0xb, &(0x7f00000005c0)='/dev/loop#\x00'}, 0x30) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000140)) (async) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0x1, "9e9330db54d5778204196fb83dd3f76087ba85b0b013252a4be2b207aad03b60938b320141110dcd955f0467d89fa39c5bced6509d1d24523f2a125e01b98292", "b953ad20bc83230e7cc86f56046965325b153ef19dd9c7765885a4b6b787cf9bce0921dd6e44eb6e91ab4313f21ed4253a8e2716567159f4041143e5447076fc", "4c0dfe7b1e91e8f87596fce028ca33c92d5d52a2e66c238b98b12aad72e252a9", [0x4f933f69, 0x2]}) 16:32:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_acf_crc_rsp_error\x00'}, 0x10) 16:32:36 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/36, 0x24, 0x10101, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8fe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}, 0x24) (async) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/36, 0x24, 0x10101, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8fe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 16:32:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xd1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) 16:32:36 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xc6080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$nci(r1, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @a={0x0, 0x0, 0x0, 0x0, {0x0, 0xff4, "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"}}}, 0x1000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) pipe2$9p(&(0x7f0000000040), 0x84800) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 16:32:36 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xd1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x1) (async) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xd1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x2, &(0x7f0000000400)) (async) 16:32:36 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x290203) socket$l2tp(0x2, 0x2, 0x73) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x10001, 0x2, 0x6, {0xffff1244, 0x8001}, 0x8, 0x40}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40305829, 0x0) epoll_pwait2(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x6]}, 0x8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xa81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) 16:32:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_acf_crc_rsp_error\x00'}, 0x10) 16:32:36 executing program 5: pipe2$9p(&(0x7f0000000140), 0x106751c975ed9832) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000073c08cdc76cb5e41e54e79c89624389dc8e01216e6205e6d8b1764c570bf964588fc0d8b83cc91ba4792c3d6d640c74e9e4fc094d8fd85c3d57681039558e1491e35f191d15f1f210b09b2d0f01ed8cd1ddfae0090b2c04cb12a4b6c0b4814e94ecdc4a4a10d66eb33f428ba67f9d0075a04"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000d080) 16:32:36 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x290203) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x10001, 0x2, 0x6, {0xffff1244, 0x8001}, 0x8, 0x40}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40305829, 0x0) epoll_pwait2(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x6]}, 0x8) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xa81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) 16:32:36 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) 16:32:37 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 49) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:37 executing program 0: r0 = syz_clone(0x1222000, &(0x7f0000000200)="1c55b29fa29dceb8cf6534f42f5e21edfc40b2f071cc71b3ff66fdae4c72edb08b00aba7f61372fee0659a908f09010a3c51168c3f6f8e477c849164a3f30147430d68d39900b0f832e2397f9fa740b8cd4a479472566cc104a59b537decd7505c63e7cdce01887f0d2901c885796da43f462c37ed13ed2700f2587a9c7caa95ab09f809e9fcd3be98daab9ffcdd52fdd3acce7734a5b6012bacbb917fe672", 0x9f, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000400)="d42d19e0e26b9649971533221e1575d843917580df04bf10514ca08a66693fc9ba1098ab4a873d66754679e465cf886b878918ee1dc282acda3133cc7ff40b24ef2dd8a0d10f2fbf6eec0ca6eb38905048ee16ff1f6b3aabbd3ad2c30573885497ec57c0a2c13ea4a1eeb88e2c2fbec125fd522e048af2417df7112b2ade3eb249c4e652ab9db588e17a571b1f116f2918892c65a6c2f89b705823260e9db2bea6983c91e6f5945589c1d3bc309997d938c5523b77d02597c51315d4741fc3bde6baffd2464dcd49be2a4b049111029b3f16ee789e3ce813") bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340), 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340), 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x604c010}, 0x4000000) (async) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x604c010}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r0, r1, 0x0, 0xb, &(0x7f0000000380)='/dev/loop#\x00'}, 0x30) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0x541b, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) (async) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1) ioctl$LOOP_SET_FD(r6, 0x4c00, r6) (async) ioctl$LOOP_SET_FD(r6, 0x4c00, r6) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffc, 0x103502) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r10) (async) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r10) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r9, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r10}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x400000c}, 0x840) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x881, 0x0) (async) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x881, 0x0) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000780)=[r8, r7, r5, r10, r6, r10, r10, r1], 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r11, 0x0, 0xb, &(0x7f00000005c0)='/dev/loop#\x00'}, 0x30) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000140)) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0x1, "9e9330db54d5778204196fb83dd3f76087ba85b0b013252a4be2b207aad03b60938b320141110dcd955f0467d89fa39c5bced6509d1d24523f2a125e01b98292", "b953ad20bc83230e7cc86f56046965325b153ef19dd9c7765885a4b6b787cf9bce0921dd6e44eb6e91ab4313f21ed4253a8e2716567159f4041143e5447076fc", "4c0dfe7b1e91e8f87596fce028ca33c92d5d52a2e66c238b98b12aad72e252a9", [0x4f933f69, 0x2]}) 16:32:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_acf_crc_rsp_error\x00'}, 0x10) 16:32:37 executing program 5: pipe2$9p(&(0x7f0000000140), 0x106751c975ed9832) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000073c08cdc76cb5e41e54e79c89624389dc8e01216e6205e6d8b1764c570bf964588fc0d8b83cc91ba4792c3d6d640c74e9e4fc094d8fd85c3d57681039558e1491e35f191d15f1f210b09b2d0f01ed8cd1ddfae0090b2c04cb12a4b6c0b4814e94ecdc4a4a10d66eb33f428ba67f9d0075a04"], 0x14}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000d080) 16:32:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x290203) socket$l2tp(0x2, 0x2, 0x73) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x10001, 0x2, 0x6, {0xffff1244, 0x8001}, 0x8, 0x40}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40305829, 0x0) epoll_pwait2(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x6]}, 0x8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xa81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8100) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x290203) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x10001, 0x2, 0x6, {0xffff1244, 0x8001}, 0x8, 0x40}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40305829, 0x0) (async) epoll_pwait2(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x6]}, 0x8) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xa81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) 16:32:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) [ 1252.511686][T26343] FAULT_INJECTION: forcing a failure. [ 1252.511686][T26343] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.524414][T26343] CPU: 1 PID: 26343 Comm: syz-executor.4 Not tainted 6.7.0-syzkaller-11091-g296455ade1fd #0 [ 1252.534522][T26343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1252.544582][T26343] Call Trace: [ 1252.547853][T26343] [ 1252.550849][T26343] dump_stack_lvl+0xda/0x130 [ 1252.555460][T26343] dump_stack+0x15/0x20 16:32:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a40) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:37 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) [ 1252.559688][T26343] should_fail_ex+0x21f/0x230 [ 1252.564483][T26343] ? vm_area_dup+0x2c/0x130 [ 1252.569067][T26343] __should_failslab+0x92/0xa0 [ 1252.573889][T26343] should_failslab+0x9/0x20 [ 1252.578400][T26343] kmem_cache_alloc+0x56/0x2d0 [ 1252.583238][T26343] vm_area_dup+0x2c/0x130 [ 1252.587649][T26343] copy_mm+0x67b/0x1060 [ 1252.591861][T26343] copy_process+0x1002/0x20a0 [ 1252.596545][T26343] kernel_clone+0x169/0x560 [ 1252.601055][T26343] ? proc_fail_nth_read+0x140/0x140 [ 1252.606259][T26343] ? vfs_write+0x655/0x790 16:32:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x60a000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)={0x9, 0x5, 0x10001}) 16:32:37 executing program 5: pipe2$9p(&(0x7f0000000140), 0x106751c975ed9832) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000073c08cdc76cb5e41e54e79c89624389dc8e01216e6205e6d8b1764c570bf964588fc0d8b83cc91ba4792c3d6d640c74e9e4fc094d8fd85c3d57681039558e1491e35f191d15f1f210b09b2d0f01ed8cd1ddfae0090b2c04cb12a4b6c0b4814e94ecdc4a4a10d66eb33f428ba67f9d0075a04"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000d080) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xdb46ced5381e1bd7) getpid() ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) [ 1252.610726][T26343] __x64_sys_clone+0xe8/0x120 [ 1252.615418][T26343] do_syscall_64+0x59/0x120 [ 1252.619932][T26343] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1252.625907][T26343] RIP: 0033:0x7f960fea4da9 [ 1252.630342][T26343] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1252.649954][T26343] RSP: 002b:00007f960f227078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 16:32:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a40) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000aa0100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x64}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:32:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x60a000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252300) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)={0x9, 0x5, 0x10001}) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xdb46ced5381e1bd7) (async) getpid() ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000aa0100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x64}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:32:37 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) fsopen(&(0x7f0000000000)='afs\x00', 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) [ 1252.658398][T26343] RAX: ffffffffffffffda RBX: 00007f960ffd3f80 RCX: 00007f960fea4da9 [ 1252.666375][T26343] RDX: 0000000020000200 RSI: 00000000200001e0 RDI: 0000000050001000 [ 1252.674397][T26343] RBP: 00007f960f227120 R08: 0000000020000280 R09: 0000000020000280 [ 1252.682426][T26343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1252.690427][T26343] R13: 000000000000000b R14: 00007f960ffd3f80 R15: 00007ffda36bc748 [ 1252.698435][T26343] 16:32:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a40) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a40) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) (async) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xdb46ced5381e1bd7) getpid() (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x60a000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x252300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)={0x9, 0x5, 0x10001}) 16:32:37 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) syz_clone(0x50001100, &(0x7f0000000100)="d8b0dda7bc6c1b4688074d64c8bbb459c110ce0b6cd8c526ee9ff95c018844f43e0c63c6d31ccc45865092f7d90ff81c1be53a374f023ea2b366bf3f29cd7db6e07147a482911aeed7d897150aa2960bb625f9d4f5e1e2463e1b427cf0d941fda0d9c828c40598bd9f68ca3da52a2a144bbbe9a912af2c330ae7745b94f15b0177cfe048aeaf9d26c14eb7af9b012c1737e758a063b908b5ce43b24077c282d3b1a89c5db83b21a90258a11766cf8ae452d341ab99c30981ef668b0458ac8ebccdeff3abbd84fa665ad018f59f24addb255a47f24b2f82a1af84275e679d5558a6d0ac6783b339ba097ea406", 0xec, &(0x7f0000000200), 0x0, &(0x7f0000000280)="41fbc169289c00f1c5614575325c79b45739b2ada7dfc16a715cfd8c141fcaef0850f343e74595c898359107f4f99ef18aa226b5be35812964b703d9b874235d3758ad7691e23da2fbcb8516cbf8a4fe1f260822c7834d5e452d3e1bc474d0656c3d98ba681b3b73d0d8bf2af983cdd42904bc2b4d834dd911f4a70514") (fail_nth: 50) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x2327, &(0x7f0000000080), 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r3], 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000000c0)={[0x80000001]}, 0x8) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:37 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000aa0100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000aa0100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x64}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40) 16:32:37 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) fsopen(&(0x7f0000000000)='afs\x00', 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) socket$rxrpc(0x21, 0x2, 0xa) (async) fsopen(&(0x7f0000000000)='afs\x00', 0x1) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) (async) 16:32:37 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x5010c2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x420080) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101c00) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4b49, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x30400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:37 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 16:32:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x30400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:37 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x5010c2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x420080) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101c00) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4b49, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) 16:32:37 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) (async) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x3ee56b809896f370) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x40) 16:32:37 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) fsopen(&(0x7f0000000000)='afs\x00', 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) socket$rxrpc(0x21, 0x2, 0xa) (async) fsopen(&(0x7f0000000000)='afs\x00', 0x1) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) (async) 16:32:37 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x5010c2) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x420080) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101c00) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4b49, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) 16:32:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x30400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) 16:32:37 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 16:32:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0xffffffff, 0x0, 0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000825bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="1a008100", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x24048801) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0xed, 0x47}, 'port0\x00', 0x6, 0x150800, 0x7, 0x9, 0x3, 0x1, 0x8, 0x0, 0x8, 0xd}) 16:32:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x5, 0x20, 0x3}) r1 = epoll_create(0x7c4a) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x838, &(0x7f00000000c0)={[0x3]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000200)=[@register_looper, @increfs={0x40046304, 0xffffffff}, @dead_binder_done], 0x7e, 0x0, &(0x7f0000000140)="fe883fb5eed8deee9c655902b0b11efe8ac50d11e6e74a2a8805af1c13e445093692f34c78127715d9112a7c6c43ca1d2dfe7a9abfbffebd2764357b614f61e1e219acc8fa25939f762f96a5580f64e2c1710dda98621939584803db5839b370969ff50bfde17359053eedabf7914fa2ca4fbf5758b113d344f82d1d4439"}) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x3ee56b809896f370) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x40) 16:32:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0xffffffff, 0x0, 0x2}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000825bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="1a008100", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x24048801) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0xed, 0x47}, 'port0\x00', 0x6, 0x150800, 0x7, 0x9, 0x3, 0x1, 0x8, 0x0, 0x8, 0xd}) 16:32:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x7}, 0x1, 0x9, 0x0, {0x8, 0x3}, 0xff, 0x81}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x80000000, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r3 = epoll_create1(0x0) read$nci(r1, &(0x7f0000000480)=""/58, 0x3a) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r4) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r6, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x42d}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r10 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000180)=[r9, r9], 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000001d40)={0x3f}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r8, 0xc05c5340, &(0x7f00000000c0)={0xd2, 0x0, 0x4, {0x4, 0xfa03}, 0x7, 0x9}) 16:32:37 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\'\x00', 0x2) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x3ee56b809896f370) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x40) 16:32:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0xffffffff, 0x0, 0x2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000825bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="1a008100", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x24048801) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0xed, 0x47}, 'port0\x00', 0x6, 0x150800, 0x7, 0x9, 0x3, 0x1, 0x8, 0x0, 0x8, 0xd}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0xed, 0x47}, 'port0\x00', 0x6, 0x150800, 0x7, 0x9, 0x3, 0x1, 0x8, 0x0, 0x8, 0xd}) 16:32:37 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\'\x00', 0x2) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\'\x00', 0x2) (async) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x20000000}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 16:32:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x7}, 0x1, 0x9, 0x0, {0x8, 0x3}, 0xff, 0x81}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x7}, 0x1, 0x9, 0x0, {0x8, 0x3}, 0xff, 0x81}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x80000000, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r3 = epoll_create1(0x0) read$nci(r1, &(0x7f0000000480)=""/58, 0x3a) (async) read$nci(r1, &(0x7f0000000480)=""/58, 0x3a) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r4) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r4) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x1) (async) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r6, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x42d}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0x0) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r10 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000180)=[r9, r9], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000001d40)={0x3f}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r8, 0xc05c5340, &(0x7f00000000c0)={0xd2, 0x0, 0x4, {0x4, 0xfa03}, 0x7, 0x9}) 16:32:37 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, 0x0) epoll_create(0x10000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}) 16:32:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x20000000}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x20000000}) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) 16:32:37 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\'\x00', 0x2) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='\'\x00', 0x2) (async) 16:32:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x7}, 0x1, 0x9, 0x0, {0x8, 0x3}, 0xff, 0x81}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x80000000, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) (async) r3 = epoll_create1(0x0) (async) read$nci(r1, &(0x7f0000000480)=""/58, 0x3a) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r4) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r6, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x42d}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000000400)) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r10 = syz_io_uring_setup(0x2327, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000180)=[r9, r9], 0x2) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000001d40)={0x3f}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r8, 0xc05c5340, &(0x7f00000000c0)={0xd2, 0x0, 0x4, {0x4, 0xfa03}, 0x7, 0x9})