(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x4, 0x101, 0x1, 0x8, 0x2, 0xfffffffb, 0x6, 0x800, 0x3], &(0x7f00000001c0)=[0x0], 0x9, 0x8, 0xb0b0b0b0}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01cd0400", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={r4, @in6={{0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r4, 0x7, 0x9368}, 0xc) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000100)={0x6, 0x7}, 0x2) 07:43:05 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, 0xffffffffffffffff, 0xb8703000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1513.128921] FAULT_INJECTION: forcing a failure. [ 1513.128921] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.140644] CPU: 0 PID: 22015 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1513.148717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1513.158184] Call Trace: [ 1513.160818] dump_stack+0x1b2/0x283 [ 1513.164470] should_fail.cold+0x10a/0x154 [ 1513.168660] should_failslab+0xd6/0x130 [ 1513.172659] kmem_cache_alloc_node+0x25f/0x400 [ 1513.177794] __alloc_skb+0x9a/0x4c0 [ 1513.181445] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1513.186829] ? lock_downgrade+0x6e0/0x6e0 [ 1513.190999] alloc_skb_with_frags+0x85/0x500 [ 1513.195538] ? check_preemption_disabled+0x35/0x240 [ 1513.200653] ? perf_trace_lock+0x109/0x4b0 [ 1513.204991] sock_alloc_send_pskb+0x57b/0x6d0 [ 1513.209506] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1513.214391] ? sock_kzfree_s+0x50/0x50 [ 1513.218525] ? _copy_from_iter_full+0x1c7/0x680 [ 1513.223715] ? __lock_acquire+0x655/0x42a0 [ 1513.228142] tun_get_user+0x5d9/0x40c0 [ 1513.232146] ? tun_rx_batched.isra.0+0x740/0x740 [ 1513.237257] ? perf_trace_lock+0x109/0x4b0 [ 1513.241943] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1513.246975] ? check_preemption_disabled+0x35/0x240 [ 1513.252268] ? __tun_get+0x11c/0x220 [ 1513.256086] ? lock_acquire+0x170/0x3f0 [ 1513.260721] ? lock_downgrade+0x6e0/0x6e0 [ 1513.265069] tun_chr_write_iter+0xcf/0x180 [ 1513.269979] __vfs_write+0x44e/0x630 [ 1513.273715] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1513.279037] ? kernel_read+0x110/0x110 [ 1513.283694] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1513.289701] __kernel_write+0xf5/0x330 [ 1513.294911] write_pipe_buf+0x143/0x1b0 [ 1513.299454] ? default_file_splice_read+0x870/0x870 [ 1513.304958] ? __put_page+0xb9/0x2f0 [ 1513.308782] ? anon_pipe_buf_release+0x237/0x2e0 [ 1513.313904] __splice_from_pipe+0x332/0x740 [ 1513.318597] ? default_file_splice_read+0x870/0x870 [ 1513.323781] ? default_file_splice_read+0x870/0x870 [ 1513.328816] splice_from_pipe+0xc6/0x120 [ 1513.332900] ? splice_shrink_spd+0xb0/0xb0 [ 1513.337234] ? __inode_security_revalidate+0xcf/0x120 [ 1513.342442] ? security_file_permission+0x82/0x1e0 [ 1513.347386] default_file_splice_write+0x37/0x80 [ 1513.352157] ? generic_splice_sendpage+0x40/0x40 [ 1513.356921] SyS_splice+0xca0/0x1230 [ 1513.360649] ? SyS_write+0x14d/0x210 [ 1513.364372] ? compat_SyS_vmsplice+0x150/0x150 [ 1513.369045] ? SyS_clock_settime+0x1a0/0x1a0 [ 1513.373460] ? do_syscall_64+0x4c/0x640 [ 1513.377440] ? compat_SyS_vmsplice+0x150/0x150 [ 1513.382037] do_syscall_64+0x1d5/0x640 [ 1513.386458] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1513.392039] RIP: 0033:0x45ca29 [ 1513.395431] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1513.403370] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1513.411167] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1513.418440] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 07:43:05 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1513.425812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1513.433749] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:05 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote={[], 0x1}, 0x6, 'xfrm0\x00'}) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000080)=""/49, &(0x7f00000000c0)=0x31) 07:43:05 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x60, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0xfffffffffffffed4, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x65}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe7}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd8c}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4c051) clone(0x82040980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x12) ptrace$cont(0x7, r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r8, 0x401870cc, &(0x7f0000000000)={0x8, 0x80000001, 0x40, 0x7}) 07:43:06 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x0, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:06 executing program 4 (fault-call:11 fault-nth:13): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1514.032242] FAULT_INJECTION: forcing a failure. [ 1514.032242] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.047373] CPU: 1 PID: 22060 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1514.056091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1514.065472] Call Trace: [ 1514.068065] dump_stack+0x1b2/0x283 [ 1514.071770] should_fail.cold+0x10a/0x154 [ 1514.076113] should_failslab+0xd6/0x130 [ 1514.080698] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1514.085983] __kmalloc_node_track_caller+0x38/0x70 [ 1514.092222] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1514.098157] __alloc_skb+0xca/0x4c0 [ 1514.101967] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1514.106963] ? lock_downgrade+0x6e0/0x6e0 [ 1514.111293] alloc_skb_with_frags+0x85/0x500 [ 1514.115715] ? check_preemption_disabled+0x35/0x240 [ 1514.120834] ? perf_trace_lock+0x109/0x4b0 [ 1514.125697] sock_alloc_send_pskb+0x57b/0x6d0 [ 1514.130368] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1514.135135] ? sock_kzfree_s+0x50/0x50 [ 1514.139025] ? _copy_from_iter_full+0x1c7/0x680 [ 1514.143787] ? __lock_acquire+0x655/0x42a0 [ 1514.148032] tun_get_user+0x5d9/0x40c0 [ 1514.151926] ? tun_rx_batched.isra.0+0x740/0x740 [ 1514.156676] ? perf_trace_lock+0x109/0x4b0 [ 1514.160927] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1514.166058] ? check_preemption_disabled+0x35/0x240 [ 1514.171067] ? __tun_get+0x11c/0x220 [ 1514.174781] ? lock_acquire+0x170/0x3f0 [ 1514.178759] ? lock_downgrade+0x6e0/0x6e0 [ 1514.183080] tun_chr_write_iter+0xcf/0x180 [ 1514.188057] __vfs_write+0x44e/0x630 [ 1514.191780] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1514.196889] ? kernel_read+0x110/0x110 [ 1514.201002] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1514.206301] __kernel_write+0xf5/0x330 [ 1514.210314] write_pipe_buf+0x143/0x1b0 [ 1514.214295] ? default_file_splice_read+0x870/0x870 [ 1514.219317] ? __put_page+0xb9/0x2f0 [ 1514.223176] ? anon_pipe_buf_release+0x237/0x2e0 [ 1514.228060] __splice_from_pipe+0x332/0x740 [ 1514.232433] ? default_file_splice_read+0x870/0x870 [ 1514.237449] ? default_file_splice_read+0x870/0x870 [ 1514.242638] splice_from_pipe+0xc6/0x120 [ 1514.246697] ? splice_shrink_spd+0xb0/0xb0 [ 1514.250933] ? __inode_security_revalidate+0xcf/0x120 [ 1514.256289] ? security_file_permission+0x82/0x1e0 [ 1514.261501] default_file_splice_write+0x37/0x80 [ 1514.266284] ? generic_splice_sendpage+0x40/0x40 [ 1514.271190] SyS_splice+0xca0/0x1230 [ 1514.274906] ? SyS_write+0x14d/0x210 [ 1514.278620] ? compat_SyS_vmsplice+0x150/0x150 [ 1514.283206] ? SyS_clock_settime+0x1a0/0x1a0 [ 1514.287754] ? do_syscall_64+0x4c/0x640 [ 1514.291727] ? compat_SyS_vmsplice+0x150/0x150 [ 1514.297278] do_syscall_64+0x1d5/0x640 [ 1514.301187] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1514.306815] RIP: 0033:0x45ca29 [ 1514.310020] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1514.317747] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1514.325032] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1514.332613] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1514.340272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1514.347539] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:08 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x1288, 0x1c, 0x20, 0x70bd26, 0x25dfdbff, {0x15}, [@generic="05fb35c96298d6a384af47d3835c735bd0b5507e3bfe62e2f791bd130a9f2d8fa2160d52ddcc155aa704160ff82919ba8d14eb1dfb1331267f3b78e4c087866aff12cc5aaf7bf8900df55113382bbc32537a5fe7e4856de39c08ccc19e87887e784ee5d979fdf03105db9aaafc0dbf6d0ff6db1767907853a505e4b820c4a6cf5948889e4835dc30ed3b1c843809a853d660ecf25c58ddeab3bd3e6d8d0879f50a68e8487f37af01c4d1e8f4ad490d5e3e70c09a5993c4cfd63db2e753a096a28369c7af6cccde8fed816dfa074a", @nested={0x8, 0x6d, 0x0, 0x1, [@typed={0x4, 0x4c}]}, @generic="544f1ae13105f9a45afed6649d59e286a5d9c95409ce06cdc9f83bb5a63ab88cbaf6cab55fc0e57b3a448c4a5d63474c200ef3a16c06b1f665aac60b64fc9a1ba33e63552b3709aef0b3d447d7fafd18c65f0609578b4f4e0ed4661fcec062ef7e3ac8e264750449453d4dcdfff85fece11e815f505d89", @nested={0x1004, 0x3b, 0x0, 0x1, [@generic="1b57d37e260e5be2bace444ab4a0ecdc454ccf2d958907ccba9d7f464b01b28437c2e7cf2845a98e4f6716bc6dbd86bbab56fe393f186289686ab60221ba2772636b095a9635cfaa9597b95318ea742a5ad98312d7c84cdc4638ee741c29e741b14249b3f907a239b9a3b05ae049ad0174171c30c7f87348cdd3d852b1dd53fbb1a3ddd8340f924f41541cff9660650cb888aec46a9b24e70246740b231261266c36212bc727188ee3de3797b8b6167c50e5198ad5aaad38cc5f24992eaba6614b76d22200b1f69409c56605e92253eea9665b16ca5702d46794a73dd095b2a9a2c2d0ac3e46c9933c019115df6de25c3d48aa583d7633d3dbcecafd25d7aed9d1c0a1a59da920b52431f46c204c541ee1450858703489ffc0af7b26843ff207c9d788540ac7858f8d48fdf1b6b5df2b6c53e6d6b694a4b4cc4c0a12ad341bb282b17603360d0dd9cb5fcd4a22e12c68dd66aceac57879c85f1a416692c8e8742880fcaafdb3721de23aca91952164b262a1d1b287b4a0f27945c8bfafc2561a261e454fedc8559437834b0d219febae28a22475732baf728e2423a18d942fc492998280c8fd81dfab3f6786c74a940388bd0422c98629c48f49dcd987a2cc8b37d11b1f006b191f30eb260b804ebf7862e2c678d60dc96b51eb517fa703c09d0dacabedaf8bd11fc6b31ac486793fe13dcaa28ff5b0eece439154487dc236659263f6489c3814db3ba2f0b56d2e2af754537f6d0620d47b9ef0edf841576a540282192befab7a31a0ff6cbe5854650396a029a8f467b09efc76e152236fc65b0b24ee0648116bbaa0fc312c2b37a93b0a0fbdfd8c00b8946767135abdf1a548c0b1e4d2f9215a3497a365f6067ea42ec0f8ad9233057f2dbb6281159348a69b754971faf73143ef598f02367d367d0171255785675052beffee856dc848114f1a32fcbaab42d5450a48773c8c02be8a9e15ab5a4914dac71899b384afaf8b4546d270fd2a6cc0e2673fa3bd2235a440a25302e31873b3e6f2093dd7e8d44a701b3fbbfa88695c0bbf6eeae7e00c107825bb711588d472d4663abe3dd7e89fac175ff66ab70d3ed2ad7b290cff933f874babedcbf34a71e13b5f3c1f61148f766e26757f1ffcb5dd4105f6d61b954513bb5d98e483f180e1c5473c3c540afe07c6674d68efbdfbeda08e8bc0bf06cb03a4b57d2b7c7ce446886bfa5603d9107afcacb45ba7adb6ddc65bd433a6110f878ec80a550682201ae412cae935f8866e06484cb85ab9950d75b95337cb737313ef5b20278f9ce5103b64a2af6b99e800b3e7288e9274291d1dcc38a74ef4b1efb5c61dc232250a355f4bae0a047577e70a9bbfa80dbb32bc02e22b49a61361eee71884f8b2ca5e392730ff537f7850ca5fe7a2efab6d08eb693e165f76d48272133fb52e2637dceb2fe210787c0fd1a211a83c391309b41d13cdc186876beb28691b82bff1e0d2ce1b8954b0afcc1f765866caed370d6aa2cd616abd6d208cf258349f4c8de96807c892859dd9db3353c0664a476f54114695df0cc2b693ec3cd269f64218de8c3e7ff5d70983f56c5d669afe1963915820e9792067852ed165ce7b1abb7c7b2954cdb354168a1165120aa7f4fa0181b3c11a50d1223e9afb1c0f2ff0411f0b589183560b77a792cf7e37dd616939fa56860c6c90cde714d4f30f70e5b58e4b0990853126f598f43d71a1999816e38d5aa2d8c441b489a9a437dfb82df3ad8de9ed1e84f8be914cafd73858137c29f6b9b8c92a667c89fd7ac1f0b76d0a3ffd2b08d9eeabdea888239ca50ffa6171fb7de633a71f9c7a3b9970b8bd02854deed0ccb6c752713513b132fada19ac2bb1c2390dbf4777e5540cc1ca5b49e261ebf35cab0b385391b791a732142f27b6eaf42775b37a66aae953590e317cd31ce1287781531de4ab5540039bc8d3ad5057b039baa802d69dc27cb8095466f263d573937f2698817c15a4408b43fb39b732596a5ac4896facd025206fa28c77eb81627909568d252d3ca2c2835c97e0ff1af8f91f0f17ca7d73957434b509dee61e41dff107c394a7f78fd09fc4cc8d624428d0ec5965cd06a87ccb3aacef9f9904a83eb5a3ae77ad0f17aa802c7188ac429a5ea671bcc332045f9e325880a2190f06f51c6bd9d11572fd2da91845007f681b49d41196fad35a78d862c2d22d867c30dc32e2b12311f122a40b776510417fabd3aee111f8859701984a7fd2cc7689eaea6a0c12c6ef361f6ca96c4af54f69d65d9bc26aaf27132aa4e7e742555f92d6230a852cf6757b8c65014a6b90dcd0ff3c4543d9a54f977eaa1f1e87c48e2225cbc30e58b1a2bc39d51ed3419dffcd7740f5eae306a20807fd742b9089221f3922fddf61634adf23e587baeafcccfcc8f759151943b91979752b7a9fb0be8b5977eef6199ac0ead1fc0e33ce6d6f3e3e2b59116e49c2795d5d4cb97f49098b99f6844070f0df6cba86722ea6f0204dc6c28e86c6ec12a92c27da716d919304d41eb5b2e863550283977b94c2b99c70951362ad39c0e6ea660c9e8fced44b88f9a07afb072eef10cb1972fbd8b6bbe11e09a174963acdb529025d396b139d2b6dca57a6a0a245346e39f15efcfcc23042b414d0899cc36af70f24177689f37b72af4c47a013384bafcfb4e249b351dc7909cb2922a6310feb442304d0b97ead9cb50497b40fb800c9788438cab376505c338a0a853e05af7e033068b6a288f32a224b2e3e74be33b03911a45346731747aed677450b4c9e383217038e06ddf5744a4b76fac499fa1d153dfe28f0076ec51320f0cdb65d3da2da5075263242e3d2bd51f293eb5e67bae8a148f3367b63f6f3ba0eaf1cc1048d2a29ffa6927183c7cf191bacf429b46bb08372516dab8cfef42ecd7c66d7eb76b84c8573a8d7de4f871a2541e1b876ba05d06b1c30197359e5fae0c90ed66cdb06c6619b72ba631fd3ad4feb434ae460a92fcec117563889143c136ad2a7a5d2a1927200150bc9255e20eea29f0fc097a1286a17f5f20ec446c1e242746db02312918610d02f82b9aceb7c4d349854b4f6bc891412392a804b96158f39a6ba9914f85705413d603bc63f9dd07574241c286f7b5e060c5f51c6e4b6dd6587e8d8982153f9b2d94a3a5134026dbb87d9043a7c83936bd7dd31b98d251b495c17a43c33c5c3b6132d3a882279a270739612c1ae92132600b923c7a834f835f365642e1432d21656b486f3d31c71f9fce4ea14e514fb728f3a7a20e5335e660da229962b22220ff80503ecea48683d51a8e885eb1bf2e3e61509a998896e045b15d407bf50b426bcb26add256ad0a87b90f34e356d51bcc08026ae5a733cfded760b3a1b9c5f551c2b573fc62577c0d52a3d4e36552b9d85a1dc870b59ae898975cd3630f63e627eebaf3f42c910318439ca960d6a3ccbb14d8c5a2082b71aeac2561130279cb13da6f4d8f237b7d56e15f48b72f453c7717f155097c83a93df6c33403fe60451817e0e9e0e85c915b137b88c7b6a074a8f5353067b56a99fcb731d273f4d3c1219739236514134d44a25902975fd7839076f60c592a7b8a720f199432a64349c1a2bdc6ef5e6a9b668a49f75d26779462d9d635c6a1927be9834170218731bd9670384c697dff7f7612ab7679553132a7ebd1924dcb8fec57af38239fa124e34c6b8d35b9b2b74cd6b15fe7650b3863089b3a624ecd58791ad08bb1c4ddbffc33f87503fc9076765b258268fac6d090be11a1f850c428b4eac4be289d3a9fd037bd528f6ad4d3b67ff447b9ea14d2758d6d8d1a91f0bd7e79d604090f8a9ddf62fd12139aa0cc601ff4a6c85e0f13ff3eac7ba30eb5d0a5e7a40b687fd72095f9097de353e39684a54770d5caa56dcf76045c4d08050f937c6d44949128b3b37cd49ff3f82c88a42f37f6ad9b0535f763c99bf294be17bdb8fe43a88817a3fb69a4336a062621d2dcc3c1909be886a40fb6bf1c024d34c319f403cc0c9cc1a529068ef975fd8d4af989c6f9485acdff2b699bd12ebb328530f0667ea2c580a2658b8463b9d7e28725c8db530cb0e384eede9807b9093616833cf4412a822c9dde410a67a405ecf8376981da031494e8efebaa73572286d7508dcee52b2cf7c0211e5070acd7480ddf694d0cea5c58de419857ec1801c52967cd44c3bee5573e30a40b6f614f0b4537890ae75fe4a659d77557f7bade70ab3770a85872240465b1f41068155621ddf89b78feddc290f8e006d1eea8fedc2f1c022ad3d52e9b85be30f85079a91827e70906b57b44e56ec8459a420c239e275044a919a004d059d1c3171b16003b6e9f08370ac7cd541b135af93ce689df6fc99007d58f0c3daecbe0a09ff46eee9fd6857cdb72bd117a9a6e36e6bed09779f22b5c3aee1c2bff86649cf0e53208773799f2fdce8a5921196b97dd8e255264863f6d0df9500aa5379c9587661394ac90cd24517792168f67b476c1093681d67b88d9a36144c22b69283803e146a20cea0bf4383a5c5fafbc02a09e3c2cc3afad078cecbe0f3fa549dede019ecf4e9bdab7b4a9cee7585fd97b165a2cc9c81625c33adfc51fd0ea424c7954982144dbd0c9e9a32f42c4c28763ec613c4e1b0ca2a6c416297da2d8b632864cb37ca54c2363bc04e8b79418f33b4b8a412727920deb1216300914586bda5924f2c883be1bf70d0718c4041ef64d7615d0e6a62302aa70a6d1f8634d24813e5d107d1e84b73a75c27aeccba3a3283da8a504025afd1b2a1df436608e4f3a523f133784b6a1f8d8f73014138fb9125721befcffb1657b328b156285b2c54cc59e03bff82f3857dff8e680040a5be6b8a7c49ae6aea0a49930fe39474f85f6bdecce96818b503272220e3f33ed94f4f956bf13dbe30d507aa70dcafeb52b30665a762ea3f978786a99ad91942e73d1e6970ad4e5c1c8df08df2beb8536a0d3d2ba6009b1ff8fa7ad4de459f8c0c5eccfd0872f08a5599faf04c01712f5d0d7d48948844bea65ffb3ae62824be4710e1eae4e78960d1968277afa4fe5d4cd0e9abcd94c7c5f1b18d261fae662fbddb3d213f36363bb2ec44f8f2b1d29b60306a58b7bf2c49ece7b995e7972f15353f66fd74bfcac3a86d21e5af1167289d49b78a741cd2be963f3d09562e99538c3d97c5e52a16ee4fb5b02790c107de552c03d6d31ea5b8ec9ac760a58697d990dce89ac27e32fc1cf302d6f05142ecffafc86ad16b33abd241d700bee0fb3e1adccdd6ccd560073b6ac7d603e2a2eba4221e5de98c79b038cf04e393156ec1810b31df48fc8833a38d57653e9a836cbbb19694cba9f71768eed207071426aeceb17a4ebe0f1d02d78695b0e92a68551e8fdf0b117393bf2a15dd7e9612fc6cef8716610a61c33e8f1f2dc61bda22785c34f0fbd6d8d0470c4ce01f66252afbf4fe358c7769162a21255e89771dbc0b54857186a35483f448518776ec1ffdfb129ef77e1c9870f67458291c2cc1c4ba785ea332353e138df9e42e6f702953f65b52025c9de695f29d4761a10ae7741f1132d0e6f16e65f8adc08521b3d002f6422d8e61e53d81d6e394a435802bbb6a21a4c2baa293667d70c3502a84bc0c7c1e828a53bb1290e27d85e3b74425e8e031c000be0a4521cb27c8f93bd8441b9e7dc995394db8879008ecf8b639bb709b164e65111a487f7bb8208de6cd3edb292b263c13dd7914e122b181e2eb9b891f0e399046372627d206ffa8b593dd6942a46d244bfd4f32c39431bf4d5b46fe4f20f6edbec3f5a15ac615c8c79f"]}, @generic="60a82535edd4fddad3dd1e7895093229db8c13890f249bfa3dcf17a9c86a208279f894dfd98d4242d4785e4e5b088fe78c06605717556f930f4451800bca5a488719bf9fe5247c5bdd146e869fc645fecff165ac86a42a6e804f711732fb4e54101c28aa18e5f2b878d3866c6227ad85452012876dbe9c298bccaf40f1a987a236796d560eeb91a9ff3bece4aac5d60dff6f8dd02722ba8e39e5dd7875", @generic="e5e921337180d7f08afcdf2270cb81a06858f371752ad04d9d3cd1940178fee9278f4c449b6fbbf67d38102bdad8f4910e7e1024e723f9b240c2e6daa4fcdb105d1c982e623dcdd6ac9836c90d64c3cb0dd776006a9399145263ca08805b51d535ba4c2944e81e7b076223a2d8bc4c0e680aa03c9edba704e1e804cd46478380e8eaaa1561"]}, 0x1288}, 0x1, 0x0, 0x0, 0x4008811}, 0x48005) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000240)=0x0) sendmsg$AUDIT_SET(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x3e9, 0x800, 0x70bd2a, 0x25dfdbfc, {0x40, 0x1, 0x0, r8, 0x6, 0xb6, 0x3, 0x0, 0xffff}, ["", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x24008011) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:08 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:08 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x0, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:08 executing program 4 (fault-call:11 fault-nth:14): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:08 executing program 2: unshare(0x2e020000) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socket$bt_cmtp(0x1f, 0x3, 0x5) 07:43:08 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x0, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1516.177812] FAULT_INJECTION: forcing a failure. [ 1516.177812] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.221599] CPU: 1 PID: 22086 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1516.229549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1516.238913] Call Trace: [ 1516.241515] dump_stack+0x1b2/0x283 [ 1516.245170] should_fail.cold+0x10a/0x154 [ 1516.249347] should_failslab+0xd6/0x130 [ 1516.253687] kmem_cache_alloc_node+0x25f/0x400 [ 1516.258287] __alloc_skb+0x9a/0x4c0 [ 1516.261928] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1516.266786] ? lock_downgrade+0x6e0/0x6e0 [ 1516.270949] alloc_skb_with_frags+0x85/0x500 [ 1516.275506] ? check_preemption_disabled+0x35/0x240 [ 1516.280552] ? perf_trace_lock+0x109/0x4b0 [ 1516.284800] sock_alloc_send_pskb+0x57b/0x6d0 [ 1516.289309] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1516.294082] ? sock_kzfree_s+0x50/0x50 [ 1516.297983] ? _copy_from_iter_full+0x1c7/0x680 [ 1516.302668] ? __lock_acquire+0x655/0x42a0 [ 1516.306911] tun_get_user+0x5d9/0x40c0 [ 1516.310815] ? tun_rx_batched.isra.0+0x740/0x740 [ 1516.316014] ? perf_trace_lock+0x109/0x4b0 [ 1516.320259] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1516.325193] ? check_preemption_disabled+0x35/0x240 [ 1516.330214] ? __tun_get+0x11c/0x220 [ 1516.333934] ? lock_acquire+0x170/0x3f0 [ 1516.337908] ? lock_downgrade+0x6e0/0x6e0 [ 1516.342149] tun_chr_write_iter+0xcf/0x180 [ 1516.346391] __vfs_write+0x44e/0x630 [ 1516.350207] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1516.355312] ? kernel_read+0x110/0x110 [ 1516.359210] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1516.364338] __kernel_write+0xf5/0x330 [ 1516.368232] write_pipe_buf+0x143/0x1b0 [ 1516.372646] ? default_file_splice_read+0x870/0x870 [ 1516.377664] ? __put_page+0xb9/0x2f0 [ 1516.381506] ? anon_pipe_buf_release+0x237/0x2e0 [ 1516.386486] __splice_from_pipe+0x332/0x740 [ 1516.391162] ? default_file_splice_read+0x870/0x870 [ 1516.396273] ? default_file_splice_read+0x870/0x870 [ 1516.401309] splice_from_pipe+0xc6/0x120 [ 1516.405381] ? splice_shrink_spd+0xb0/0xb0 [ 1516.409625] ? __inode_security_revalidate+0xcf/0x120 [ 1516.414823] ? security_file_permission+0x82/0x1e0 [ 1516.419758] default_file_splice_write+0x37/0x80 [ 1516.424519] ? generic_splice_sendpage+0x40/0x40 [ 1516.429275] SyS_splice+0xca0/0x1230 [ 1516.433022] ? SyS_write+0x14d/0x210 [ 1516.436770] ? compat_SyS_vmsplice+0x150/0x150 [ 1516.441359] ? SyS_clock_settime+0x1a0/0x1a0 [ 1516.445771] ? do_syscall_64+0x4c/0x640 [ 1516.449747] ? compat_SyS_vmsplice+0x150/0x150 [ 1516.454791] do_syscall_64+0x1d5/0x640 [ 1516.458689] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1516.463962] RIP: 0033:0x45ca29 [ 1516.467237] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1516.474949] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1516.482222] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1516.489537] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1516.496840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1516.504211] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:08 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x80000000, 0x5, 0x4, 0x2000000, 0x6, {r3, r4/1000+60000}, {0x7, 0x8, 0x0, 0x5, 0xf9, 0x1, "9383374d"}, 0x5, 0x3, @fd, 0x101}) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x107880, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$llc_int(r8, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) ptrace$cont(0x9, 0x0, 0x0, 0x6) 07:43:09 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x9, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 07:43:09 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getrlimit(0xc, &(0x7f0000000000)) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0, {[0x21fef80f]}}, 0x0, 0x8, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:11 executing program 4 (fault-call:11 fault-nth:15): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:11 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:11 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:11 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r8, 0x0, 0x0, 0x80800) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r8, @ANYRES16=r1, @ANYRES64=r8], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:11 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1519.166299] FAULT_INJECTION: forcing a failure. [ 1519.166299] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.178336] CPU: 0 PID: 22156 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1519.187017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.196844] Call Trace: [ 1519.199636] dump_stack+0x1b2/0x283 [ 1519.203596] should_fail.cold+0x10a/0x154 [ 1519.207752] should_failslab+0xd6/0x130 [ 1519.211731] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1519.217702] __kmalloc_node_track_caller+0x38/0x70 [ 1519.222633] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1519.227666] __alloc_skb+0xca/0x4c0 [ 1519.231513] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1519.236816] ? lock_downgrade+0x6e0/0x6e0 [ 1519.241068] alloc_skb_with_frags+0x85/0x500 [ 1519.247345] ? check_preemption_disabled+0x35/0x240 [ 1519.258222] ? perf_trace_lock+0x109/0x4b0 [ 1519.267213] sock_alloc_send_pskb+0x57b/0x6d0 [ 1519.272369] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1519.277320] ? sock_kzfree_s+0x50/0x50 [ 1519.282266] ? _copy_from_iter_full+0x1c7/0x680 [ 1519.309168] ? __lock_acquire+0x655/0x42a0 [ 1519.329904] tun_get_user+0x5d9/0x40c0 [ 1519.335947] ? tun_rx_batched.isra.0+0x740/0x740 [ 1519.341077] ? perf_trace_lock+0x109/0x4b0 [ 1519.345369] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1519.350661] ? check_preemption_disabled+0x35/0x240 [ 1519.356827] ? __tun_get+0x11c/0x220 [ 1519.360551] ? lock_acquire+0x170/0x3f0 [ 1519.364524] ? lock_downgrade+0x6e0/0x6e0 [ 1519.368964] tun_chr_write_iter+0xcf/0x180 [ 1519.373983] __vfs_write+0x44e/0x630 [ 1519.377791] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1519.383313] ? kernel_read+0x110/0x110 [ 1519.387483] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1519.392611] __kernel_write+0xf5/0x330 [ 1519.396600] write_pipe_buf+0x143/0x1b0 [ 1519.400663] ? default_file_splice_read+0x870/0x870 [ 1519.405672] ? __put_page+0xb9/0x2f0 [ 1519.409407] ? anon_pipe_buf_release+0x237/0x2e0 [ 1519.414188] __splice_from_pipe+0x332/0x740 [ 1519.418500] ? default_file_splice_read+0x870/0x870 [ 1519.423512] ? default_file_splice_read+0x870/0x870 [ 1519.428522] splice_from_pipe+0xc6/0x120 [ 1519.432573] ? splice_shrink_spd+0xb0/0xb0 [ 1519.436792] ? __inode_security_revalidate+0xcf/0x120 [ 1519.441986] ? security_file_permission+0x82/0x1e0 [ 1519.446927] default_file_splice_write+0x37/0x80 [ 1519.451717] ? generic_splice_sendpage+0x40/0x40 [ 1519.456466] SyS_splice+0xca0/0x1230 [ 1519.460192] ? SyS_write+0x14d/0x210 [ 1519.464186] ? compat_SyS_vmsplice+0x150/0x150 [ 1519.468768] ? SyS_clock_settime+0x1a0/0x1a0 [ 1519.473175] ? do_syscall_64+0x4c/0x640 [ 1519.477131] ? compat_SyS_vmsplice+0x150/0x150 [ 1519.481750] do_syscall_64+0x1d5/0x640 [ 1519.485634] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1519.491192] RIP: 0033:0x45ca29 [ 1519.494369] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1519.502192] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1519.509719] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1519.517079] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1519.524587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1519.531856] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:11 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:12 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x340, 0x0) write$midi(r0, &(0x7f0000000180)="9d351498d5d39714721fcc4ef71588af2eaa85fb98240f928c2498dc04ab0a388cf9d8fbfecba0fe67ffd4ea7ecc2ac660fd12239f03982c4787f1325ad37c0ae9e53d487032fa1004b54608bf21671fef52206a62b7daf136155cfb4096d4de1fe4d3eae2833cd6afe42c1bc1058d1324a0c87862560b37d330d9a4288b1fa2d6de1db8e7f23cc3d6379d5bf33d59711726c29106ddfd0505a559039e4cd6571620b69135e7503d74bbea36ea07168adfdfd5018a6ba0e38ae28150001ce728651f3b0a06980111d30c847806", 0xcd) r1 = semget(0x3, 0x1, 0x200) semctl$IPC_RMID(r1, 0x0, 0x0) unshare(0x2e020400) r2 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x6ad6165c, 0x101080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f00000000c0)={{0x81, 0x8}, {0x23, 0xd8}, 0xb43, 0x7, 0x7}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:12 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10000) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0xfe08) read(r5, &(0x7f0000000380)=""/225, 0x900a453f) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x1) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:12 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:12 executing program 4 (fault-call:11 fault-nth:16): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1520.068418] FAULT_INJECTION: forcing a failure. [ 1520.068418] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.080731] CPU: 0 PID: 22201 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1520.089218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.099103] Call Trace: [ 1520.101793] dump_stack+0x1b2/0x283 [ 1520.105606] should_fail.cold+0x10a/0x154 [ 1520.109926] should_failslab+0xd6/0x130 [ 1520.113981] kmem_cache_alloc_node+0x25f/0x400 [ 1520.118652] __alloc_skb+0x9a/0x4c0 [ 1520.122938] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1520.127998] ? lock_downgrade+0x6e0/0x6e0 [ 1520.132158] alloc_skb_with_frags+0x85/0x500 [ 1520.136682] ? check_preemption_disabled+0x35/0x240 [ 1520.141732] ? perf_trace_lock+0x109/0x4b0 [ 1520.145993] sock_alloc_send_pskb+0x57b/0x6d0 [ 1520.150482] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1520.155230] ? sock_kzfree_s+0x50/0x50 [ 1520.159114] ? _copy_from_iter_full+0x1c7/0x680 [ 1520.163794] ? __lock_acquire+0x655/0x42a0 [ 1520.168083] tun_get_user+0x5d9/0x40c0 [ 1520.171976] ? tun_rx_batched.isra.0+0x740/0x740 [ 1520.176933] ? perf_trace_lock+0x109/0x4b0 [ 1520.181278] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1520.187646] ? check_preemption_disabled+0x35/0x240 [ 1520.193548] ? __tun_get+0x11c/0x220 [ 1520.198055] ? lock_acquire+0x170/0x3f0 [ 1520.202483] ? lock_downgrade+0x6e0/0x6e0 [ 1520.207174] tun_chr_write_iter+0xcf/0x180 [ 1520.211426] __vfs_write+0x44e/0x630 [ 1520.215366] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1520.221216] ? kernel_read+0x110/0x110 [ 1520.225116] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1520.230253] __kernel_write+0xf5/0x330 [ 1520.234315] write_pipe_buf+0x143/0x1b0 [ 1520.238301] ? default_file_splice_read+0x870/0x870 [ 1520.243393] ? __put_page+0xb9/0x2f0 [ 1520.247200] ? anon_pipe_buf_release+0x237/0x2e0 [ 1520.251961] __splice_from_pipe+0x332/0x740 [ 1520.256507] ? default_file_splice_read+0x870/0x870 [ 1520.261687] ? default_file_splice_read+0x870/0x870 [ 1520.266859] splice_from_pipe+0xc6/0x120 [ 1520.270922] ? splice_shrink_spd+0xb0/0xb0 [ 1520.275153] ? __inode_security_revalidate+0xcf/0x120 [ 1520.280561] ? security_file_permission+0x82/0x1e0 [ 1520.285500] default_file_splice_write+0x37/0x80 [ 1520.290330] ? generic_splice_sendpage+0x40/0x40 [ 1520.295188] SyS_splice+0xca0/0x1230 [ 1520.298946] ? SyS_write+0x14d/0x210 [ 1520.302672] ? compat_SyS_vmsplice+0x150/0x150 [ 1520.307250] ? SyS_clock_settime+0x1a0/0x1a0 [ 1520.311656] ? do_syscall_64+0x4c/0x640 [ 1520.315632] ? compat_SyS_vmsplice+0x150/0x150 [ 1520.320240] do_syscall_64+0x1d5/0x640 [ 1520.324136] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1520.329315] RIP: 0033:0x45ca29 [ 1520.332507] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1520.340310] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1520.347577] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1520.354915] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1520.362355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1520.369738] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a782ffa4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f14c82a1cef20d94c30e478947d190ab8393646d6c0b004d9246a8f6542614f2f03f76a9938fff364f69d06e07d3d818e0db72a147aed99f6c5719e4ba33c6c077c70a81aa0839b0c9e7b6e79148c0b0d4ff1a74653751762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de07549948ed7d897d1df0a387b5ea225e2aca5c9f1c9525d1dc263fd0a7bc2cf9032624d3901edefc7c2c507cd03e263fc024ae73f61c64d3c2ddbf4990f7f46cc4b2a4633615d7b9e34d85a15a03ccc0c329cec77c50b4ec964741d3ad616e9180a0230c784751f74bc1acd6cd3ea35868cfd076de95506d8c0008034d56415f3cf8678390625d08894fbfc9fb6169a5f901a5eba2ecf303ce5044170375e7ac1e70966c9018b5e5da088c20c82ac0f34444bb397944830be5a9985098f2080c359c37e75207da9cd8bb000000004000f466"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:14 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x4e21, @local}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000000c0)=0x1) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:14 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x9) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:14 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:14 executing program 4 (fault-call:11 fault-nth:17): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1522.213593] FAULT_INJECTION: forcing a failure. [ 1522.213593] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.230701] CPU: 0 PID: 22226 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1522.238649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.248036] Call Trace: [ 1522.250727] dump_stack+0x1b2/0x283 [ 1522.254370] should_fail.cold+0x10a/0x154 [ 1522.258533] should_failslab+0xd6/0x130 [ 1522.262607] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1522.267723] __kmalloc_node_track_caller+0x38/0x70 [ 1522.272661] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1522.277366] __alloc_skb+0xca/0x4c0 [ 1522.280999] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1522.285860] ? lock_downgrade+0x6e0/0x6e0 [ 1522.290018] alloc_skb_with_frags+0x85/0x500 [ 1522.294433] ? check_preemption_disabled+0x35/0x240 [ 1522.299456] ? perf_trace_lock+0x109/0x4b0 [ 1522.303697] sock_alloc_send_pskb+0x57b/0x6d0 [ 1522.308228] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1522.312994] ? sock_kzfree_s+0x50/0x50 [ 1522.316914] ? _copy_from_iter_full+0x1c7/0x680 [ 1522.321592] ? __lock_acquire+0x655/0x42a0 [ 1522.325846] tun_get_user+0x5d9/0x40c0 [ 1522.329733] ? tun_rx_batched.isra.0+0x740/0x740 [ 1522.334508] ? perf_trace_lock+0x109/0x4b0 [ 1522.338753] ? check_preemption_disabled+0x35/0x240 [ 1522.343786] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1522.348702] ? check_preemption_disabled+0x35/0x240 [ 1522.353749] ? __tun_get+0x11c/0x220 [ 1522.357505] ? lock_acquire+0x170/0x3f0 [ 1522.361471] ? lock_downgrade+0x6e0/0x6e0 [ 1522.365618] tun_chr_write_iter+0xcf/0x180 [ 1522.370089] __vfs_write+0x44e/0x630 [ 1522.373795] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1522.378936] ? kernel_read+0x110/0x110 [ 1522.382810] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1522.388030] __kernel_write+0xf5/0x330 [ 1522.392361] write_pipe_buf+0x143/0x1b0 [ 1522.396459] ? default_file_splice_read+0x870/0x870 [ 1522.401682] ? __put_page+0xb9/0x2f0 [ 1522.405528] ? anon_pipe_buf_release+0x237/0x2e0 [ 1522.410594] __splice_from_pipe+0x332/0x740 [ 1522.414911] ? default_file_splice_read+0x870/0x870 [ 1522.420038] ? default_file_splice_read+0x870/0x870 [ 1522.425060] splice_from_pipe+0xc6/0x120 [ 1522.429203] ? splice_shrink_spd+0xb0/0xb0 [ 1522.433468] ? __inode_security_revalidate+0xcf/0x120 [ 1522.438663] ? security_file_permission+0x82/0x1e0 [ 1522.443605] default_file_splice_write+0x37/0x80 [ 1522.448384] ? generic_splice_sendpage+0x40/0x40 [ 1522.453216] SyS_splice+0xca0/0x1230 [ 1522.456932] ? SyS_write+0x14d/0x210 [ 1522.460629] ? compat_SyS_vmsplice+0x150/0x150 [ 1522.465202] ? SyS_clock_settime+0x1a0/0x1a0 [ 1522.469611] ? do_syscall_64+0x4c/0x640 [ 1522.473577] ? compat_SyS_vmsplice+0x150/0x150 [ 1522.478179] do_syscall_64+0x1d5/0x640 [ 1522.482066] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1522.487262] RIP: 0033:0x45ca29 [ 1522.490435] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1522.498290] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1522.505547] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 07:43:14 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1522.512802] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1522.520061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1522.527340] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:14 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) 07:43:14 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:15 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = dup2(r3, r1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)={0x1, 0x2, 0x2, 0x0, 0xc000000, 0xff, 0x7f, 0x5, 0x86, 0x1f, 0x6, 0x80, 0x0, 0x1, 0x9, 0x4, 0x6, 0x4, 0xc9, [], 0x6, 0x2}) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x100000001) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:15 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:15 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x4, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000000, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:17 executing program 4 (fault-call:11 fault-nth:18): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:17 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, 0x0) 07:43:17 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x401}, 0xfffffffe, 0x40, 0x7fffffff, 0xb91, 0x0, 0x0, 0x4}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8c}, 0x40, 0x1, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x9) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:17 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="62c50ddd62577bae06d930382fafda37110bc501cec0e7853418a7a7c691555a6265c80831465f66517cdac506ff4de37261b956d7065cf91bca939a47f60789eb4a48431f01efe5c71246c2c95f818e60b6726fea72361a2c4e016d49b4865884b19beb31486b3ea5c1ae9fa887ecb1e41504b3815322592fc42b7942797e", 0x7f}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:17 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, 0x0) [ 1525.222871] FAULT_INJECTION: forcing a failure. [ 1525.222871] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.245221] CPU: 1 PID: 22295 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1525.253147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.262519] Call Trace: [ 1525.265121] dump_stack+0x1b2/0x283 [ 1525.268812] should_fail.cold+0x10a/0x154 [ 1525.272973] should_failslab+0xd6/0x130 [ 1525.276958] kmem_cache_alloc_node+0x25f/0x400 [ 1525.281553] __alloc_skb+0x9a/0x4c0 [ 1525.285186] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1525.290036] ? lock_downgrade+0x6e0/0x6e0 [ 1525.294334] alloc_skb_with_frags+0x85/0x500 [ 1525.298758] ? check_preemption_disabled+0x35/0x240 [ 1525.303788] ? perf_trace_lock+0x109/0x4b0 [ 1525.308063] sock_alloc_send_pskb+0x57b/0x6d0 [ 1525.312569] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1525.318687] ? sock_kzfree_s+0x50/0x50 [ 1525.322586] ? _copy_from_iter_full+0x1c7/0x680 [ 1525.327263] ? __lock_acquire+0x655/0x42a0 [ 1525.331521] tun_get_user+0x5d9/0x40c0 [ 1525.335528] ? tun_rx_batched.isra.0+0x740/0x740 [ 1525.340290] ? perf_trace_lock+0x109/0x4b0 [ 1525.344553] ? _raw_spin_unlock_irq+0x24/0x90 [ 1525.349096] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1525.354036] ? check_preemption_disabled+0x35/0x240 [ 1525.359082] ? __tun_get+0x11c/0x220 [ 1525.362808] ? lock_acquire+0x170/0x3f0 [ 1525.366811] ? lock_downgrade+0x6e0/0x6e0 [ 1525.370963] tun_chr_write_iter+0xcf/0x180 [ 1525.375406] __vfs_write+0x44e/0x630 [ 1525.379231] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1525.384335] ? kernel_read+0x110/0x110 [ 1525.388214] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1525.393313] __kernel_write+0xf5/0x330 [ 1525.397449] write_pipe_buf+0x143/0x1b0 [ 1525.401522] ? default_file_splice_read+0x870/0x870 [ 1525.406525] ? __put_page+0xb9/0x2f0 [ 1525.410253] ? anon_pipe_buf_release+0x237/0x2e0 [ 1525.415001] __splice_from_pipe+0x332/0x740 [ 1525.419306] ? default_file_splice_read+0x870/0x870 [ 1525.424304] ? default_file_splice_read+0x870/0x870 [ 1525.430018] splice_from_pipe+0xc6/0x120 [ 1525.434080] ? splice_shrink_spd+0xb0/0xb0 [ 1525.438313] ? __inode_security_revalidate+0xcf/0x120 [ 1525.443498] ? security_file_permission+0x82/0x1e0 [ 1525.448433] default_file_splice_write+0x37/0x80 [ 1525.453172] ? generic_splice_sendpage+0x40/0x40 [ 1525.457923] SyS_splice+0xca0/0x1230 [ 1525.461795] ? SyS_write+0x14d/0x210 [ 1525.465488] ? compat_SyS_vmsplice+0x150/0x150 [ 1525.470056] ? SyS_clock_settime+0x1a0/0x1a0 [ 1525.474446] ? do_syscall_64+0x4c/0x640 [ 1525.478412] ? compat_SyS_vmsplice+0x150/0x150 [ 1525.482975] do_syscall_64+0x1d5/0x640 [ 1525.486907] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1525.492089] RIP: 0033:0x45ca29 [ 1525.495276] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1525.502986] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1525.510238] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1525.517575] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1525.524947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1525.532223] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:17 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, 0x0) 07:43:17 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f0000000180)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\aC\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC=\xd12\xc9U\xfaV\x16\xe8\xfe\x11\x83++\xeeI\xbd\xc4\xc4\xcf\xfd\xce\xc4\x00>\xe8\x9c\xfc\x0f\x17\xa3B\xd5\xe8\x1c\x18rY\x00\x86\xbej\xeb\xbeG\xbfq\x14t\xab\x7f\xeb\xdf\x02%i5]\x96\x839B\xa4\xf6\x81 \xcd\xd1\xb2k\xcd\xe9\r\x9d\xfa\x0e5\xf0y\x15\x03\xeb\x95\xa2\x84\xa1\x1bn\x97\xda\\?\xe3\x96\xb9\x84\x9b\xcc)\xc6\xab\x80@\x95\xf1\xb5\xc2\x84bf\xa6\x1f\bv6L\xed\b\x92\x85', 0x2) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) geteuid() rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') semget(0x3, 0x2, 0x241) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:18 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getrlimit(0xc, &(0x7f0000000000)) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0, {[0x21fef80f]}}, 0x0, 0x8, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x232c600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x12) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:43:18 executing program 4 (fault-call:11 fault-nth:19): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:18 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)={0x2, 0x8, 0x4, 0x20000, 0x3, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x4, 0x3, 0x7, "73606cb9"}, 0x20, 0x3, @offset=0x10001, 0x50000, 0x0, r5}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x8001, 0x4) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0xf0}) rt_sigaction(0xb, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x8000003, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r7, 0x4b69, &(0x7f00000001c0)=""/180) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1526.182778] FAULT_INJECTION: forcing a failure. [ 1526.182778] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.194377] CPU: 1 PID: 22344 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1526.202303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.211659] Call Trace: [ 1526.214351] dump_stack+0x1b2/0x283 [ 1526.217998] should_fail.cold+0x10a/0x154 [ 1526.222541] should_failslab+0xd6/0x130 [ 1526.226612] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1526.231942] __kmalloc_node_track_caller+0x38/0x70 [ 1526.236916] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1526.241577] __alloc_skb+0xca/0x4c0 [ 1526.245220] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1526.250081] ? lock_downgrade+0x6e0/0x6e0 [ 1526.254230] alloc_skb_with_frags+0x85/0x500 [ 1526.258858] ? check_preemption_disabled+0x35/0x240 [ 1526.263960] ? perf_trace_lock+0x109/0x4b0 [ 1526.268488] sock_alloc_send_pskb+0x57b/0x6d0 [ 1526.273195] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1526.277952] ? sock_kzfree_s+0x50/0x50 [ 1526.281838] ? _copy_from_iter_full+0x1c7/0x680 [ 1526.286518] ? __lock_acquire+0x655/0x42a0 [ 1526.290749] tun_get_user+0x5d9/0x40c0 [ 1526.294655] ? tun_rx_batched.isra.0+0x740/0x740 [ 1526.299419] ? perf_trace_lock+0x109/0x4b0 [ 1526.303655] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1526.308577] ? check_preemption_disabled+0x35/0x240 [ 1526.313583] ? __tun_get+0x11c/0x220 [ 1526.317300] ? lock_acquire+0x170/0x3f0 [ 1526.321442] ? lock_downgrade+0x6e0/0x6e0 [ 1526.325600] tun_chr_write_iter+0xcf/0x180 [ 1526.329847] __vfs_write+0x44e/0x630 [ 1526.333797] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1526.339939] ? kernel_read+0x110/0x110 [ 1526.343822] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1526.348997] __kernel_write+0xf5/0x330 [ 1526.352901] write_pipe_buf+0x143/0x1b0 [ 1526.356887] ? default_file_splice_read+0x870/0x870 [ 1526.361932] ? __put_page+0xb9/0x2f0 [ 1526.365761] ? anon_pipe_buf_release+0x237/0x2e0 [ 1526.370521] __splice_from_pipe+0x332/0x740 [ 1526.375449] ? default_file_splice_read+0x870/0x870 [ 1526.380481] ? default_file_splice_read+0x870/0x870 [ 1526.385500] splice_from_pipe+0xc6/0x120 [ 1526.389711] ? splice_shrink_spd+0xb0/0xb0 [ 1526.393940] ? __inode_security_revalidate+0xcf/0x120 [ 1526.399199] ? security_file_permission+0x82/0x1e0 [ 1526.404278] default_file_splice_write+0x37/0x80 [ 1526.409059] ? generic_splice_sendpage+0x40/0x40 [ 1526.413932] SyS_splice+0xca0/0x1230 [ 1526.417645] ? SyS_write+0x14d/0x210 [ 1526.421375] ? compat_SyS_vmsplice+0x150/0x150 [ 1526.425943] ? SyS_clock_settime+0x1a0/0x1a0 [ 1526.430340] ? do_syscall_64+0x4c/0x640 [ 1526.434307] ? compat_SyS_vmsplice+0x150/0x150 [ 1526.439839] do_syscall_64+0x1d5/0x640 [ 1526.443731] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1526.448912] RIP: 0033:0x45ca29 [ 1526.452084] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1526.459806] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1526.467160] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1526.474427] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1526.481691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1526.489048] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000040)=0x100000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000080)={0x7, 0x3, 0xa0e, 0x9, 0xff, 0x0, 0x7ff}) fcntl$setpipe(r3, 0x407, 0x3) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x12) ptrace$cont(0x7, r5, 0x0, 0x0) 07:43:20 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, 0x0, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:20 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpeername$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000100)=0x78) ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f0000000200)=""/18) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:20 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000040)=0xf4240) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:20 executing program 4 (fault-call:11 fault-nth:20): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x300000000000000, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:20 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, 0xffffffffffffffff, 0xb8703000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1528.287961] FAULT_INJECTION: forcing a failure. [ 1528.287961] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.311650] CPU: 0 PID: 22380 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1528.319758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1528.329126] Call Trace: [ 1528.331729] dump_stack+0x1b2/0x283 [ 1528.335404] should_fail.cold+0x10a/0x154 [ 1528.339576] should_failslab+0xd6/0x130 [ 1528.343565] kmem_cache_alloc_node+0x25f/0x400 [ 1528.348171] __alloc_skb+0x9a/0x4c0 [ 1528.351829] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1528.356678] ? lock_downgrade+0x6e0/0x6e0 [ 1528.360851] alloc_skb_with_frags+0x85/0x500 [ 1528.365275] ? check_preemption_disabled+0x35/0x240 [ 1528.370422] ? perf_trace_lock+0x109/0x4b0 [ 1528.374845] sock_alloc_send_pskb+0x57b/0x6d0 [ 1528.379361] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1528.384139] ? sock_kzfree_s+0x50/0x50 [ 1528.388040] ? _copy_from_iter_full+0x1c7/0x680 [ 1528.392746] ? __lock_acquire+0x655/0x42a0 [ 1528.397274] tun_get_user+0x5d9/0x40c0 [ 1528.401185] ? tun_rx_batched.isra.0+0x740/0x740 [ 1528.405952] ? perf_trace_lock+0x109/0x4b0 [ 1528.410194] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1528.415126] ? check_preemption_disabled+0x35/0x240 [ 1528.420154] ? __tun_get+0x11c/0x220 [ 1528.423879] ? lock_acquire+0x170/0x3f0 [ 1528.427858] ? lock_downgrade+0x6e0/0x6e0 [ 1528.432018] tun_chr_write_iter+0xcf/0x180 [ 1528.436284] __vfs_write+0x44e/0x630 [ 1528.440000] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1528.445143] ? kernel_read+0x110/0x110 [ 1528.449036] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1528.454199] __kernel_write+0xf5/0x330 [ 1528.458095] write_pipe_buf+0x143/0x1b0 [ 1528.462076] ? default_file_splice_read+0x870/0x870 [ 1528.467099] ? __put_page+0xb9/0x2f0 [ 1528.470821] ? anon_pipe_buf_release+0x237/0x2e0 [ 1528.475637] __splice_from_pipe+0x332/0x740 [ 1528.479965] ? default_file_splice_read+0x870/0x870 [ 1528.484991] ? default_file_splice_read+0x870/0x870 [ 1528.490013] splice_from_pipe+0xc6/0x120 [ 1528.494079] ? splice_shrink_spd+0xb0/0xb0 [ 1528.498324] ? __inode_security_revalidate+0xcf/0x120 [ 1528.503530] ? security_file_permission+0x82/0x1e0 [ 1528.508473] default_file_splice_write+0x37/0x80 [ 1528.513236] ? generic_splice_sendpage+0x40/0x40 [ 1528.518001] SyS_splice+0xca0/0x1230 [ 1528.521737] ? SyS_write+0x14d/0x210 [ 1528.525539] ? compat_SyS_vmsplice+0x150/0x150 [ 1528.530122] ? SyS_clock_settime+0x1a0/0x1a0 [ 1528.534546] ? do_syscall_64+0x4c/0x640 [ 1528.538524] ? compat_SyS_vmsplice+0x150/0x150 [ 1528.543144] do_syscall_64+0x1d5/0x640 [ 1528.547050] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1528.552252] RIP: 0033:0x45ca29 [ 1528.555442] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1528.563157] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1528.570461] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1528.577745] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 07:43:20 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x8180) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0x40000000, 0x9, "518bdd3ba57f274d83c74f11888009cd7a7e9901b248b15ab3d7f104e139eb00", 0x400, 0xffff, 0x7f, 0x80, 0xc, 0x400, 0x5, 0x6, [0xfffffffe, 0x1, 0x4, 0x5]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000f9ffffffffffffff08", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}}}, 0x24}, 0x8}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f00000001c0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001ac0)={0x4e4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xee5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x65e}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x73}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x9000}, 0x40000) ptrace$setopts(0x4200, r1, 0x4, 0x0) tkill(r1, 0x12) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1528.585026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1528.592500] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:20 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f00000000c0)) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x12002, 0x0) ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000000200)=""/177) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000080)={0x9b0000, 0x1, 0x8a6, r2, 0x0, &(0x7f0000000040)={0x9c0901, 0x75bb, [], @string=&(0x7f0000000000)=0x1}}) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000000c0)=r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x164, r10, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x65}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc93}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xb7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:21 executing program 4 (fault-call:11 fault-nth:21): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1529.252209] FAULT_INJECTION: forcing a failure. [ 1529.252209] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.304342] CPU: 0 PID: 22417 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1529.312290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1529.321690] Call Trace: [ 1529.324299] dump_stack+0x1b2/0x283 [ 1529.327952] should_fail.cold+0x10a/0x154 [ 1529.332113] should_failslab+0xd6/0x130 [ 1529.336144] kmem_cache_alloc_node+0x25f/0x400 [ 1529.340913] __alloc_skb+0x9a/0x4c0 [ 1529.344592] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1529.349443] ? lock_downgrade+0x6e0/0x6e0 [ 1529.353659] alloc_skb_with_frags+0x85/0x500 [ 1529.358251] ? check_preemption_disabled+0x35/0x240 [ 1529.363274] ? perf_trace_lock+0x109/0x4b0 [ 1529.367517] sock_alloc_send_pskb+0x57b/0x6d0 [ 1529.372027] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1529.376806] ? sock_kzfree_s+0x50/0x50 [ 1529.380711] ? _copy_from_iter_full+0x1c7/0x680 [ 1529.385392] ? __lock_acquire+0x655/0x42a0 [ 1529.389649] tun_get_user+0x5d9/0x40c0 [ 1529.393561] ? tun_rx_batched.isra.0+0x740/0x740 [ 1529.398337] ? perf_trace_lock+0x109/0x4b0 [ 1529.402585] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1529.407533] ? check_preemption_disabled+0x35/0x240 [ 1529.412566] ? __tun_get+0x11c/0x220 [ 1529.416315] ? lock_acquire+0x170/0x3f0 [ 1529.420298] ? lock_downgrade+0x6e0/0x6e0 [ 1529.424462] tun_chr_write_iter+0xcf/0x180 [ 1529.428706] __vfs_write+0x44e/0x630 [ 1529.432434] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1529.437543] ? kernel_read+0x110/0x110 [ 1529.441441] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1529.446568] __kernel_write+0xf5/0x330 [ 1529.450470] write_pipe_buf+0x143/0x1b0 [ 1529.454455] ? default_file_splice_read+0x870/0x870 [ 1529.459477] ? __put_page+0xb9/0x2f0 [ 1529.463232] ? anon_pipe_buf_release+0x237/0x2e0 [ 1529.468004] __splice_from_pipe+0x332/0x740 [ 1529.472383] ? default_file_splice_read+0x870/0x870 [ 1529.477415] ? default_file_splice_read+0x870/0x870 [ 1529.482445] splice_from_pipe+0xc6/0x120 [ 1529.486524] ? splice_shrink_spd+0xb0/0xb0 [ 1529.490768] ? __inode_security_revalidate+0xcf/0x120 [ 1529.495977] ? security_file_permission+0x82/0x1e0 [ 1529.500927] default_file_splice_write+0x37/0x80 [ 1529.505708] ? generic_splice_sendpage+0x40/0x40 [ 1529.510509] SyS_splice+0xca0/0x1230 [ 1529.514252] ? SyS_write+0x14d/0x210 [ 1529.518001] ? compat_SyS_vmsplice+0x150/0x150 [ 1529.522592] ? SyS_clock_settime+0x1a0/0x1a0 [ 1529.527031] ? do_syscall_64+0x4c/0x640 [ 1529.531019] ? compat_SyS_vmsplice+0x150/0x150 [ 1529.535618] do_syscall_64+0x1d5/0x640 [ 1529.539525] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1529.544727] RIP: 0033:0x45ca29 [ 1529.547919] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1529.555668] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1529.562948] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1529.570227] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1529.577678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1529.584964] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:23 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0xfe, 0x6, 0x7fff}) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) 07:43:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:23 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:23 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x30}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}]}, 0x3c}}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}) 07:43:23 executing program 4 (fault-call:11 fault-nth:22): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1531.315125] FAULT_INJECTION: forcing a failure. [ 1531.315125] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.334516] CPU: 1 PID: 22447 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1531.342436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1531.351825] Call Trace: [ 1531.354428] dump_stack+0x1b2/0x283 [ 1531.358858] should_fail.cold+0x10a/0x154 [ 1531.363022] should_failslab+0xd6/0x130 [ 1531.367009] kmem_cache_alloc_node+0x25f/0x400 [ 1531.371608] __alloc_skb+0x9a/0x4c0 [ 1531.375239] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1531.380093] ? lock_downgrade+0x6e0/0x6e0 [ 1531.384271] alloc_skb_with_frags+0x85/0x500 [ 1531.388706] ? check_preemption_disabled+0x35/0x240 [ 1531.393742] ? perf_trace_lock+0x109/0x4b0 [ 1531.397992] sock_alloc_send_pskb+0x57b/0x6d0 [ 1531.402532] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1531.407415] ? sock_kzfree_s+0x50/0x50 [ 1531.411342] ? _copy_from_iter_full+0x1c7/0x680 [ 1531.416022] ? __lock_acquire+0x655/0x42a0 [ 1531.420278] tun_get_user+0x5d9/0x40c0 [ 1531.424184] ? tun_rx_batched.isra.0+0x740/0x740 [ 1531.429394] ? perf_trace_lock+0x109/0x4b0 [ 1531.433645] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1531.438586] ? check_preemption_disabled+0x35/0x240 [ 1531.443614] ? __tun_get+0x11c/0x220 [ 1531.447338] ? lock_acquire+0x170/0x3f0 [ 1531.451320] ? lock_downgrade+0x6e0/0x6e0 [ 1531.455487] tun_chr_write_iter+0xcf/0x180 [ 1531.459729] __vfs_write+0x44e/0x630 [ 1531.463483] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1531.468651] ? kernel_read+0x110/0x110 [ 1531.472543] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1531.477668] __kernel_write+0xf5/0x330 [ 1531.481571] write_pipe_buf+0x143/0x1b0 [ 1531.485564] ? default_file_splice_read+0x870/0x870 [ 1531.490585] ? __put_page+0xb9/0x2f0 [ 1531.494302] ? anon_pipe_buf_release+0x237/0x2e0 [ 1531.499062] __splice_from_pipe+0x332/0x740 [ 1531.503828] ? default_file_splice_read+0x870/0x870 [ 1531.508867] ? default_file_splice_read+0x870/0x870 [ 1531.513914] splice_from_pipe+0xc6/0x120 [ 1531.518008] ? splice_shrink_spd+0xb0/0xb0 [ 1531.522254] ? __inode_security_revalidate+0xcf/0x120 [ 1531.527461] ? security_file_permission+0x82/0x1e0 [ 1531.532410] default_file_splice_write+0x37/0x80 [ 1531.537183] ? generic_splice_sendpage+0x40/0x40 [ 1531.542043] SyS_splice+0xca0/0x1230 [ 1531.545769] ? SyS_write+0x14d/0x210 [ 1531.549525] ? compat_SyS_vmsplice+0x150/0x150 [ 1531.554135] ? SyS_clock_settime+0x1a0/0x1a0 [ 1531.558555] ? do_syscall_64+0x4c/0x640 [ 1531.562570] ? compat_SyS_vmsplice+0x150/0x150 [ 1531.567157] do_syscall_64+0x1d5/0x640 [ 1531.571057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1531.576408] RIP: 0033:0x45ca29 [ 1531.579629] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1531.587544] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1531.594919] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1531.602480] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1531.609850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1531.617127] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:24 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0xfe, 0x6, 0x7fff}) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) 07:43:24 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x72, 0x9, 0x401, 0x2}}) unshare(0x2e020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_dccp_int(r5, 0x21, 0x15, &(0x7f0000000080), 0x4) r6 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r6, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r7, 0x0) quotactl(0x10000, &(0x7f0000000100)='./file0\x00', r7, &(0x7f0000000180)="36b0b94c9f78edea0caa081bb0327d3eb1ab4814663eb3dd444361c16b64b878d3974cd8a9beb29e10bbdab286c0f0a212447344c6b54233fee21e26c89dda70ce2e6c97fef6f2d65a56cc0be9a35c7713672ad4436b4ea6012fd76f5f9dbadebda509c7d9bb90bf3f9cf88ee830aefc0dcc716ea55c2849a5642111d8c3a3d86d411ce55a2615741733e7c167ac4ed2e45e36e4baab36d8b69cec96c84d9990006739caf5f41679ce6e7643de4a215edce542fc2972c2fdac8c13a4c43b5caec9cb837d94890439a6c7757571b89776f6019d0d36b6d6c3236354bb4bf00d7f23681a924b") syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:24 executing program 0 (fault-call:8 fault-nth:0): unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1531.993867] FAULT_INJECTION: forcing a failure. [ 1531.993867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1532.025100] CPU: 1 PID: 22475 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0 [ 1532.033021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.042644] Call Trace: [ 1532.045249] dump_stack+0x1b2/0x283 [ 1532.048894] should_fail.cold+0x10a/0x154 [ 1532.053057] __alloc_pages_nodemask+0x22b/0x2730 [ 1532.057826] ? perf_trace_lock+0x109/0x4b0 [ 1532.062079] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1532.067169] ? kstrtouint+0xe6/0x130 [ 1532.070928] ? _kstrtoul+0x110/0x110 [ 1532.074664] ? __might_fault+0x177/0x1b0 [ 1532.078734] ? _copy_from_user+0x94/0x100 [ 1532.082996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1532.087885] ? check_preemption_disabled+0x35/0x240 [ 1532.092929] ? __lock_acquire+0x655/0x42a0 [ 1532.097182] ? __lock_acquire+0x655/0x42a0 [ 1532.101433] ? perf_trace_lock+0x109/0x4b0 [ 1532.105697] alloc_pages_current+0xe7/0x1e0 [ 1532.110034] pte_alloc_one+0x15/0x100 [ 1532.113853] __handle_mm_fault+0x29f2/0x3700 [ 1532.118275] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 1532.123053] handle_mm_fault+0x306/0x794 [ 1532.127157] __do_page_fault+0x578/0xb50 [ 1532.131233] ? mm_fault_error+0x2c0/0x2c0 [ 1532.135393] ? do_page_fault+0x60/0x4f2 [ 1532.139395] ? page_fault+0x2f/0x50 07:43:24 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:24 executing program 0 (fault-call:8 fault-nth:1): unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1532.143032] page_fault+0x45/0x50 [ 1532.146484] RIP: 40f80ae8:0x4c198c 07:43:24 executing program 4 (fault-call:11 fault-nth:23): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1532.150015] RSP: 40f80970:00007f0b40f80960 EFLAGS: 004c1981 [ 1532.231644] FAULT_INJECTION: forcing a failure. [ 1532.231644] name failslab, interval 1, probability 0, space 0, times 0 07:43:24 executing program 0 (fault-call:8 fault-nth:2): unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1532.339980] CPU: 0 PID: 22489 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0 [ 1532.347995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.357418] Call Trace: [ 1532.360191] dump_stack+0x1b2/0x283 [ 1532.363829] should_fail.cold+0x10a/0x154 [ 1532.367985] should_failslab+0xd6/0x130 [ 1532.371965] kmem_cache_alloc+0x28e/0x3c0 [ 1532.376293] ptlock_alloc+0x1d/0x70 [ 1532.379930] pte_alloc_one+0x57/0x100 [ 1532.383734] __handle_mm_fault+0x29f2/0x3700 [ 1532.388148] ? vm_insert_mixed_mkwrite+0x30/0x30 [ 1532.392933] handle_mm_fault+0x306/0x794 [ 1532.397003] __do_page_fault+0x578/0xb50 [ 1532.401096] ? mm_fault_error+0x2c0/0x2c0 [ 1532.401761] FAULT_INJECTION: forcing a failure. [ 1532.401761] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.405247] ? do_page_fault+0x60/0x4f2 [ 1532.420400] ? page_fault+0x2f/0x50 [ 1532.424096] page_fault+0x45/0x50 [ 1532.427547] RIP: 40f80ae8:0x4c198c [ 1532.431078] RSP: 40f80970:00007f0b40f80960 EFLAGS: 004c1981 [ 1532.431098] CPU: 1 PID: 22503 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0 [ 1532.445983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.455529] Call Trace: [ 1532.458122] dump_stack+0x1b2/0x283 [ 1532.461753] should_fail.cold+0x10a/0x154 [ 1532.465905] should_failslab+0xd6/0x130 [ 1532.469882] kmem_cache_alloc+0x40/0x3c0 [ 1532.473949] __sigqueue_alloc+0x1b8/0x3e0 [ 1532.478104] __send_signal+0x193/0x1280 [ 1532.482221] force_sig_info+0x240/0x340 [ 1532.486208] force_sig_info_fault.constprop.0+0x185/0x260 [ 1532.491752] ? is_prefetch.isra.0.part.0+0x300/0x300 [ 1532.497019] ? is_prefetch.isra.0.part.0+0x1fa/0x300 [ 1532.502204] ? pgtable_bad+0x110/0x110 [ 1532.506081] ? lock_downgrade+0x6e0/0x6e0 [ 1532.510331] mm_fault_error+0x1c0/0x2c0 [ 1532.514360] __do_page_fault+0x9d1/0xb50 [ 1532.518411] ? mm_fault_error+0x2c0/0x2c0 [ 1532.522545] ? do_page_fault+0x60/0x4f2 [ 1532.526505] ? page_fault+0x2f/0x50 [ 1532.531164] page_fault+0x45/0x50 [ 1532.534602] RIP: 40f80ae8:0x4c198c [ 1532.538431] RSP: 40f80970:00007f0b40f80960 EFLAGS: 004c1981 [ 1532.545308] FAULT_INJECTION: forcing a failure. [ 1532.545308] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.563682] CPU: 0 PID: 22508 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1532.572189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.581727] Call Trace: [ 1532.584444] dump_stack+0x1b2/0x283 [ 1532.588530] should_fail.cold+0x10a/0x154 [ 1532.592898] should_failslab+0xd6/0x130 [ 1532.597078] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1532.602417] __kmalloc_node_track_caller+0x38/0x70 [ 1532.607534] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1532.612403] __alloc_skb+0xca/0x4c0 [ 1532.616047] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1532.620991] ? lock_downgrade+0x6e0/0x6e0 [ 1532.625362] alloc_skb_with_frags+0x85/0x500 [ 1532.629777] ? check_preemption_disabled+0x35/0x240 [ 1532.634812] ? perf_trace_lock+0x109/0x4b0 [ 1532.639061] sock_alloc_send_pskb+0x57b/0x6d0 [ 1532.644285] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1532.649235] ? sock_kzfree_s+0x50/0x50 [ 1532.653137] ? _copy_from_iter_full+0x1c7/0x680 [ 1532.657827] ? __lock_acquire+0x655/0x42a0 [ 1532.662072] tun_get_user+0x5d9/0x40c0 [ 1532.665985] ? tun_rx_batched.isra.0+0x740/0x740 [ 1532.670751] ? perf_trace_lock+0x109/0x4b0 [ 1532.674995] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1532.679920] ? check_preemption_disabled+0x35/0x240 [ 1532.685046] ? __tun_get+0x11c/0x220 [ 1532.688920] ? lock_acquire+0x170/0x3f0 [ 1532.693104] ? lock_downgrade+0x6e0/0x6e0 [ 1532.697887] tun_chr_write_iter+0xcf/0x180 [ 1532.702129] __vfs_write+0x44e/0x630 [ 1532.705836] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1532.710979] ? kernel_read+0x110/0x110 [ 1532.715172] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1532.720299] __kernel_write+0xf5/0x330 [ 1532.724211] write_pipe_buf+0x143/0x1b0 [ 1532.728178] ? default_file_splice_read+0x870/0x870 [ 1532.733200] ? __put_page+0xb9/0x2f0 [ 1532.736923] ? anon_pipe_buf_release+0x237/0x2e0 [ 1532.741672] __splice_from_pipe+0x332/0x740 [ 1532.746012] ? default_file_splice_read+0x870/0x870 [ 1532.751019] ? default_file_splice_read+0x870/0x870 [ 1532.756174] splice_from_pipe+0xc6/0x120 [ 1532.760252] ? splice_shrink_spd+0xb0/0xb0 [ 1532.764996] ? __inode_security_revalidate+0xcf/0x120 [ 1532.770190] ? security_file_permission+0x82/0x1e0 [ 1532.775127] default_file_splice_write+0x37/0x80 [ 1532.779895] ? generic_splice_sendpage+0x40/0x40 [ 1532.784669] SyS_splice+0xca0/0x1230 [ 1532.788387] ? SyS_write+0x14d/0x210 [ 1532.792109] ? compat_SyS_vmsplice+0x150/0x150 [ 1532.796687] ? SyS_clock_settime+0x1a0/0x1a0 [ 1532.801198] ? do_syscall_64+0x4c/0x640 [ 1532.805171] ? compat_SyS_vmsplice+0x150/0x150 [ 1532.809755] do_syscall_64+0x1d5/0x640 [ 1532.813637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1532.818821] RIP: 0033:0x45ca29 [ 1532.822004] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1532.829714] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1532.837687] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1532.845004] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1532.852296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1532.859570] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:26 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000010008, 0x0) 07:43:26 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0xff, 0x1) unshare(0x2e020400) r3 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r3, 0x46d0c000) rt_sigaction(0x3d, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x200000, &(0x7f00000000c0)) ptrace$cont(0x20, r4, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000100)='fd\x00') 07:43:26 executing program 0 (fault-call:8 fault-nth:3): unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:27 executing program 4 (fault-call:11 fault-nth:24): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:27 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 07:43:27 executing program 0: unshare(0x2e020000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x0, 0x6, {0x0, 0xea60}, {0x5, 0x0, 0x75, 0x5, 0x1, 0x40, "d9ba4651"}, 0xffffffff, 0x3, @offset=0x1f, 0x7, 0x0, r1}) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x1, @remote, 'lo\x00'}}, 0x1e) r4 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) 07:43:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000967e7207d1593feee5e9518ba6dd43f5c408c06b23662e752df78cfac7e76533b53ca517c8c9c194cee0b12270916c4b7095227c02704fe0e04088d74083114b0d670c344c2f8cd4f649ef1a79e91463ae7b123eaa7fccdf21d4c9d68fd1dff1725681430d050638001c7eae4e9ef559d729e9b8ae56aa00b250", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={r7, @in6={{0xa, 0x0, 0x0, @remote}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100)=r7, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000180)={{0x7, 0x2, 0x6b2, 0x4, 'syz1\x00', 0xa6}, 0x4, 0x10000000, 0x7, r0, 0x3, 0x9, 'syz1\x00', &(0x7f0000000000)=['-,\x00', 'security\x00', '\x00'], 0xd, [], [0x6, 0x2, 0x1c, 0x6]}) tkill(r0, 0x12) setxattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="759065722e73793a31004970f1b578044d98da4b49628e8a2e3d23503b85e1af9bb123f52dee30818810c94a4bbc039d7cf8"], &(0x7f00000000c0)='self-**vmnet0eth1(-\x00', 0x14, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:27 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x10, 0x11, r0, 0x0) rt_sigaction(0x9, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xc0000002, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1534.826488] FAULT_INJECTION: forcing a failure. [ 1534.826488] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.842746] CPU: 1 PID: 22552 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1534.850665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1534.860184] Call Trace: [ 1534.862786] dump_stack+0x1b2/0x283 [ 1534.866416] should_fail.cold+0x10a/0x154 [ 1534.870608] should_failslab+0xd6/0x130 [ 1534.874584] kmem_cache_alloc_node+0x25f/0x400 [ 1534.879273] __alloc_skb+0x9a/0x4c0 [ 1534.883087] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1534.888628] ? lock_downgrade+0x6e0/0x6e0 [ 1534.892884] alloc_skb_with_frags+0x85/0x500 [ 1534.897383] ? check_preemption_disabled+0x35/0x240 [ 1534.902413] ? perf_trace_lock+0x109/0x4b0 [ 1534.906919] sock_alloc_send_pskb+0x57b/0x6d0 [ 1534.911667] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1534.916517] ? sock_kzfree_s+0x50/0x50 [ 1534.920440] ? _copy_from_iter_full+0x1c7/0x680 [ 1534.925101] ? __lock_acquire+0x655/0x42a0 [ 1534.929342] tun_get_user+0x5d9/0x40c0 [ 1534.933228] ? tun_rx_batched.isra.0+0x740/0x740 [ 1534.938000] ? perf_trace_lock+0x109/0x4b0 [ 1534.942223] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1534.947143] ? check_preemption_disabled+0x35/0x240 [ 1534.952154] ? __tun_get+0x11c/0x220 [ 1534.955870] ? lock_acquire+0x170/0x3f0 [ 1534.959837] ? lock_downgrade+0x6e0/0x6e0 [ 1534.963988] tun_chr_write_iter+0xcf/0x180 [ 1534.968224] __vfs_write+0x44e/0x630 [ 1534.971932] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1534.977037] ? kernel_read+0x110/0x110 [ 1534.980914] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1534.986029] __kernel_write+0xf5/0x330 [ 1534.989918] write_pipe_buf+0x143/0x1b0 [ 1534.993880] ? default_file_splice_read+0x870/0x870 [ 1534.998881] ? __put_page+0xb9/0x2f0 [ 1535.002579] ? anon_pipe_buf_release+0x237/0x2e0 [ 1535.007322] __splice_from_pipe+0x332/0x740 [ 1535.011643] ? default_file_splice_read+0x870/0x870 [ 1535.016660] ? default_file_splice_read+0x870/0x870 [ 1535.021726] splice_from_pipe+0xc6/0x120 [ 1535.025905] ? splice_shrink_spd+0xb0/0xb0 [ 1535.030129] ? __inode_security_revalidate+0xcf/0x120 [ 1535.035439] ? security_file_permission+0x82/0x1e0 [ 1535.040401] default_file_splice_write+0x37/0x80 [ 1535.045155] ? generic_splice_sendpage+0x40/0x40 [ 1535.049934] SyS_splice+0xca0/0x1230 [ 1535.053643] ? SyS_write+0x14d/0x210 [ 1535.057525] ? compat_SyS_vmsplice+0x150/0x150 [ 1535.062222] ? SyS_clock_settime+0x1a0/0x1a0 [ 1535.066737] ? do_syscall_64+0x4c/0x640 [ 1535.070703] ? compat_SyS_vmsplice+0x150/0x150 [ 1535.075536] do_syscall_64+0x1d5/0x640 [ 1535.079424] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1535.084888] RIP: 0033:0x45ca29 [ 1535.088083] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1535.095931] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1535.103207] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1535.110486] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1535.117964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1535.125240] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:27 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x150, r6, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_FLAGS2={0xc}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_STA_FLAGS2={0xc}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x1a}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcd, 0xbe, "f27e7a61cd55de266db9e62c9e7773feef3377c26e48ef768ce80c6d3350cf7a03b1034b2c60d22ef035247d444597269587ee09fff4d8de77438cf1cd92b5619600635fc89c0c544d94b1943ec71b04f8a8c4fdd5296293d9914c6c3f072c82f87a13636d02cb2b0c06fea6999fdbb9ec84598d9fa6af9454f2f7da4fe9added84437e20d05c902891b75d6a5dd6e74efeb01a1c712fd89c9df82b5b142d1a3148e21fa88e5f18eb4391cea0f222b92406b6b9d821c6042ff40f17482e9a9408d09b160e84805aa50"}]}, 0x150}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x12400, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f00000000c0)=0x3ff, 0x4) 07:43:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000180)={0x8, 0x0, [], {0x0, @reserved}}) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r3 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq1|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00E\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x15\x18W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\b\x10\xce4\x0e\xa1\xd6\xddM\x8cg\xaeF\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000080)=0x9) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:27 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x200, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000100)=0x7ff) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r4, r7, 0x0, r2}, 0x10) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1535.427198] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.5'. 07:43:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:29 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='attr/current\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:29 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x18040c40) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x0, 0x0, 0xfff, 0x1, 0x99e8}}) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:29 executing program 4 (fault-call:11 fault-nth:25): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:29 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfe08) read(0xffffffffffffffff, &(0x7f0000000380)=""/225, 0x900a453f) write(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x2, 0x3, 0x6, 0x1, 0x356a799d}) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000040)=@netrom={'nr', 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000001000a, 0x8) 07:43:29 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1537.417460] FAULT_INJECTION: forcing a failure. [ 1537.417460] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.430907] CPU: 0 PID: 22634 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1537.438845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1537.448207] Call Trace: [ 1537.450808] dump_stack+0x1b2/0x283 [ 1537.454448] should_fail.cold+0x10a/0x154 [ 1537.458607] should_failslab+0xd6/0x130 [ 1537.462588] kmem_cache_alloc_node+0x25f/0x400 [ 1537.467178] __alloc_skb+0x9a/0x4c0 [ 1537.470810] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1537.475662] ? lock_downgrade+0x6e0/0x6e0 [ 1537.479830] alloc_skb_with_frags+0x85/0x500 [ 1537.484240] ? check_preemption_disabled+0x35/0x240 [ 1537.489261] ? perf_trace_lock+0x109/0x4b0 [ 1537.493516] sock_alloc_send_pskb+0x57b/0x6d0 [ 1537.499845] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1537.504651] ? sock_kzfree_s+0x50/0x50 [ 1537.508633] ? _copy_from_iter_full+0x1c7/0x680 [ 1537.513309] ? __lock_acquire+0x655/0x42a0 [ 1537.517553] tun_get_user+0x5d9/0x40c0 [ 1537.521456] ? tun_rx_batched.isra.0+0x740/0x740 [ 1537.526246] ? perf_trace_lock+0x109/0x4b0 [ 1537.530493] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1537.535524] ? check_preemption_disabled+0x35/0x240 [ 1537.543344] ? __tun_get+0x11c/0x220 [ 1537.547218] ? lock_acquire+0x170/0x3f0 [ 1537.551194] ? lock_downgrade+0x6e0/0x6e0 [ 1537.555528] tun_chr_write_iter+0xcf/0x180 [ 1537.559769] __vfs_write+0x44e/0x630 [ 1537.563518] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1537.568624] ? kernel_read+0x110/0x110 [ 1537.572531] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1537.577661] __kernel_write+0xf5/0x330 [ 1537.581817] write_pipe_buf+0x143/0x1b0 [ 1537.586046] ? default_file_splice_read+0x870/0x870 [ 1537.591961] ? __put_page+0xb9/0x2f0 [ 1537.595672] ? anon_pipe_buf_release+0x237/0x2e0 [ 1537.600426] __splice_from_pipe+0x332/0x740 [ 1537.604924] ? default_file_splice_read+0x870/0x870 [ 1537.610000] ? default_file_splice_read+0x870/0x870 [ 1537.615336] splice_from_pipe+0xc6/0x120 [ 1537.619544] ? splice_shrink_spd+0xb0/0xb0 [ 1537.623864] ? __inode_security_revalidate+0xcf/0x120 [ 1537.629171] ? security_file_permission+0x82/0x1e0 [ 1537.634167] default_file_splice_write+0x37/0x80 [ 1537.638912] ? generic_splice_sendpage+0x40/0x40 [ 1537.643662] SyS_splice+0xca0/0x1230 [ 1537.647387] ? SyS_write+0x14d/0x210 [ 1537.651099] ? compat_SyS_vmsplice+0x150/0x150 [ 1537.655686] ? SyS_clock_settime+0x1a0/0x1a0 [ 1537.660093] ? do_syscall_64+0x4c/0x640 [ 1537.664075] ? compat_SyS_vmsplice+0x150/0x150 [ 1537.668684] do_syscall_64+0x1d5/0x640 [ 1537.672585] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1537.677767] RIP: 0033:0x45ca29 [ 1537.680939] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1537.688637] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1537.696082] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1537.703603] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1537.711050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 07:43:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) close(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="1110eb0644f957e0e94cec18375cbc8a335922fabe593eab0319360a588a650a741a75df63f7f06bf668122fb5fd45bef5ddc326c5cc78ed26b2dd9ca25383a29b6853f8695831f0768c153c2d0d09dbbb9062df32e7e84c7a52746c27c168b06f6e89ca40eac6a61dd619d890184fcc8f339a50159f42df6a6ef9f541748d47b112631f54832fdfb4ceb4fcfdc271e1ad3e6f84fa22db5f43", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000280)={r7, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r7, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x4afb7fa3, 0x3, 0xcc15, 0x2, 0x41, 0xffffffc1, 0x7}, 0x9c) [ 1537.718656] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSIG(r4, 0x40045436, 0x1) tkill(0x0, 0x12) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:43:30 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000080)="5626778252f307eeb6033daf6ba7f2ea396b67dc108a750b491994087cc9acb77d0d035a561bf70aedb00b8a957e8168bdb9aee7f72343c3f389f781c5ca1215529652f4fd91c7", 0x47) r1 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:30 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/dev_mcast\x00') getsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100), &(0x7f0000000180)=0x4) keyctl$get_security(0x11, 0x0, &(0x7f00000001c0)=""/174, 0xae) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x80, 0x0) ioctl$VT_RELDISP(r2, 0x5605) r3 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:30 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x0) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd, 0x4000010, r0, 0xffffe000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0xfffff30f, 0x7, r1, 0x0, &(0x7f00000000c0)={0x990a7e, 0x8c, [], @p_u16=&(0x7f0000000080)=0x5}}) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000140)) prctl$PR_SET_DUMPABLE(0x4, 0x0) 07:43:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000084) r5 = dup3(r3, r4, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x1, 0x4, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8642}, @NFULA_CFG_MODE={0xa, 0x2, {0xdfe9}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xd6f}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3d2cca67}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c0}, 0x40084) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r5, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x1, 0x8, 0x3}, &(0x7f00000000c0)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r7, 0x4) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000002c0)) 07:43:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a782ffa4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f14c82a1cef20d94c30e478947d190ab8393646d6c0b004d9246a8f6542614f2f03f76a9938fff364f69d06e07d3d818e0db72a147aed99f6c5719e4ba33c6c077c70a81aa0839b0c9e7b6e79148c0b0d4ff1a74653751762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de07549948ed7d897d1df0a387b5ea225e2aca5c9f1c9525d1dc263fd0a7bc2cf9032624d3901edefc7c2c507cd03e263fc024ae73f61c64d3c2ddbf4990f7f46cc4b2a4633615d7b9e34d85a15a03ccc0c329cec77c50b4ec964741d3ad616e9180a0230c784751f74bc1acd6cd3ea35868cfd076de95506d8c0008034d56415f3cf8678390625d08894fbfc9fb6169a5f901a5eba2ecf303ce5044170375e7ac1e70966c9018b5e5da088c20c82ac0f34444bb397944830be5a9985098f2080c359c37e75207da9cd8bb000000004000f466"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:32 executing program 2: unshare(0x2e020000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x7, &(0x7f0000000740)=[{&(0x7f0000000100)="185371b77f14548849c043c7923a59520ac102213fa0b77f634097", 0x1b, 0x2}, {&(0x7f0000000180)="24535ca5a00ed76424762dce61cb410982b668cdd72c4f13e4bc39fe050a8ea32d0d5c87c8eb5083bfe7f05b4eca76e5885924c2b75f58869f0f9fdf394802a69b63d8fed679ac2cdd0bd3a48d77813a0f2f4a4650967a2b28617eeeb788ed8bff1a44319eee6b76ba8b2794706d95582252a48730d41d6b10ab0424fee624613fb32c90a971c60af411929b561679807fbbc87a8e6c6c7e9f338d15c42969dda7f164c1809de60b7ac9555eb6c63d31c3f8f53a1e216fcd5c98973c8bdd738ce10627f1ae902580b6bb0a73f1b55f3c", 0xd0, 0x200000000000000}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="18c6f816eb9ea61d5039f876236ab28cb301af0d5d4d09777a7a42752fc31dc03fde512eb3105df94fa00ceb90bc93b02d23863becab6615ce9c56a6ccb14e37b1f2cb6c15d065eceae763aeb9bad1cbc9aab90a141bf09e4f39510b41a8f88e114ec4df85ff239e380876d5d2638dabf147705c7301c143b85e57f21210e9cf13d706cfcef186f877d0c1eae5123e775f93078b9896c93ac7cd154a9679fdb137d7f08c456d63c4e5f963e9764d7efcaa35e3d394a9f619709753718d10d5fa", 0xc0, 0x7}, {&(0x7f0000000380)="eafabaab186aa980c7770acb0d87", 0xe, 0x2}, {&(0x7f00000003c0)="6a03d76f5a4e6abafb47a558de1c90ad24ee0819be1c4e54f30d91b3a0df48d4b2803c96cd35791a8b6d664f7581a378ec47f58ecded9b5076d567ffa9994bfcc740a622cff472534a3f87e9cd32f9", 0x4f, 0x10001}, {&(0x7f0000000680)="0ce318591dac7d9138ccdbb0f792f3ea83235e4389d1fd413e3b34893c4b67f75ba44d6623bc1e86c9d10d428348bf0d935edb3465e273aa5e4b69fbb051ef7c5ee940ba71898fb9854234b1ff4dec116a4b65e5bae52cb9bd531a6c867ca4ddfc1e046bb5b0cec7f574b66c84bc1bd076e91a8821b82963150c5f860b5b9aa7ec9df402d485d89d3178f319608333ba4c41d6d325433ce0e90e4ae42a40e6e3add7a4374c", 0xa5, 0x1}], 0x0, &(0x7f0000000800)={[{@check_strict='check=strict'}], [{@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r0}}, {@audit='audit'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r1, 0x0) rt_sigaction(0x15, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x48000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) kcmp(0x0, 0x0, 0x2, r1, r2) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:32 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xffffffffffffffda, 0x3, {{0x0, 0x3, 0x1}}}, 0x28) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fcntl$dupfd(r7, 0x406, r4) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:32 executing program 4 (fault-call:11 fault-nth:26): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:32 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x18) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x3}}}, &(0x7f0000000180)=0x84) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1540.440326] FAULT_INJECTION: forcing a failure. [ 1540.440326] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.468885] CPU: 1 PID: 22707 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1540.476926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.486579] Call Trace: [ 1540.489269] dump_stack+0x1b2/0x283 [ 1540.493121] should_fail.cold+0x10a/0x154 [ 1540.497279] should_failslab+0xd6/0x130 [ 1540.501346] kmem_cache_alloc_node+0x25f/0x400 [ 1540.505973] __alloc_skb+0x9a/0x4c0 [ 1540.509631] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1540.514559] ? lock_downgrade+0x6e0/0x6e0 [ 1540.518741] alloc_skb_with_frags+0x85/0x500 [ 1540.523152] ? check_preemption_disabled+0x35/0x240 [ 1540.528175] ? perf_trace_lock+0x109/0x4b0 [ 1540.532763] sock_alloc_send_pskb+0x57b/0x6d0 [ 1540.537277] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1540.542044] ? sock_kzfree_s+0x50/0x50 [ 1540.545939] ? _copy_from_iter_full+0x1c7/0x680 [ 1540.550613] ? __lock_acquire+0x655/0x42a0 [ 1540.554866] tun_get_user+0x5d9/0x40c0 [ 1540.558770] ? tun_rx_batched.isra.0+0x740/0x740 [ 1540.563623] ? perf_trace_lock+0x109/0x4b0 [ 1540.567881] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1540.572906] ? check_preemption_disabled+0x35/0x240 [ 1540.578039] ? __tun_get+0x11c/0x220 [ 1540.581763] ? lock_acquire+0x170/0x3f0 [ 1540.585942] ? lock_downgrade+0x6e0/0x6e0 [ 1540.590516] tun_chr_write_iter+0xcf/0x180 [ 1540.594876] __vfs_write+0x44e/0x630 [ 1540.598868] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1540.604089] ? kernel_read+0x110/0x110 [ 1540.608160] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1540.613375] __kernel_write+0xf5/0x330 [ 1540.617277] write_pipe_buf+0x143/0x1b0 [ 1540.621257] ? default_file_splice_read+0x870/0x870 [ 1540.626281] ? __put_page+0xb9/0x2f0 [ 1540.630157] ? anon_pipe_buf_release+0x237/0x2e0 [ 1540.635116] __splice_from_pipe+0x332/0x740 [ 1540.639500] ? default_file_splice_read+0x870/0x870 [ 1540.644519] ? default_file_splice_read+0x870/0x870 [ 1540.649539] splice_from_pipe+0xc6/0x120 [ 1540.653600] ? splice_shrink_spd+0xb0/0xb0 [ 1540.657843] ? __inode_security_revalidate+0xcf/0x120 [ 1540.663069] ? security_file_permission+0x82/0x1e0 [ 1540.668001] default_file_splice_write+0x37/0x80 [ 1540.672755] ? generic_splice_sendpage+0x40/0x40 [ 1540.678294] SyS_splice+0xca0/0x1230 [ 1540.682042] ? SyS_write+0x14d/0x210 [ 1540.685760] ? compat_SyS_vmsplice+0x150/0x150 [ 1540.690347] ? SyS_clock_settime+0x1a0/0x1a0 [ 1540.694759] ? do_syscall_64+0x4c/0x640 [ 1540.698738] ? compat_SyS_vmsplice+0x150/0x150 [ 1540.703330] do_syscall_64+0x1d5/0x640 [ 1540.707229] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1540.712460] RIP: 0033:0x45ca29 [ 1540.715645] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1540.723384] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1540.730663] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1540.738293] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1540.745593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1540.752863] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:33 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) syz_open_procfs(r2, &(0x7f0000000080)='net/if_inet6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x1, 0x40, 0x1, 0x1, 0x0, 0x0, 0xa008, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0x1080, 0x1, 0xfffffffc, 0x8, 0x0, 0x8, 0x6693}, 0x0, 0xb, 0xffffffffffffffff, 0x0) recvfrom$ax25(r5, &(0x7f0000000180)=""/4096, 0x1000, 0x10000, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:33 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000000080)="3633c6092a2a2145677b8f280cbd5047ea15c1eaa516c1b660971f3fbbaccfbefc508e284142f7ee60e88d3a05c2ca7d5537945aedc08602654d337bd4566902e25ac1c786f260043c3f835d7c152288d51ce8389480cd9afd61d252daa177ee687a323f9a74981c6eb7c2bd2a054d2999f6483370d30cb1f6c698ff6314b68903e6812eeeac5d48eda2949cd5b4ad04e8b54a372435eb3298d944d693815115e13082b8983dd6b9f0d5df0eee1a3fb4b2d3ce", 0xb3) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:33 executing program 4 (fault-call:11 fault-nth:27): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:33 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000001c0)={{0x2, 0x3, 0x1, 0x0, 0x5}, 0xfffffffffffffffa, 0x1}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000100)={r6, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r6, 0x4}) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0xfe08) read(r5, &(0x7f0000000380)=""/225, 0x900a453f) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setgroups(0x2, &(0x7f0000000180)=[0xffffffffffffffff, r6]) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x4, @name="27b6cd0d61f257bbc95624ee922505564b6a95ae3fee0ea651f399a1ff262d2e"}, 0x8, 0x3, 0x643a}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1541.360674] FAULT_INJECTION: forcing a failure. [ 1541.360674] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.381199] CPU: 1 PID: 22748 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1541.389124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1541.398485] Call Trace: [ 1541.401091] dump_stack+0x1b2/0x283 [ 1541.404747] should_fail.cold+0x10a/0x154 [ 1541.410156] should_failslab+0xd6/0x130 [ 1541.414152] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1541.419273] __kmalloc_node_track_caller+0x38/0x70 [ 1541.424218] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1541.428921] __alloc_skb+0xca/0x4c0 [ 1541.432599] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1541.437460] ? lock_downgrade+0x6e0/0x6e0 [ 1541.441633] alloc_skb_with_frags+0x85/0x500 [ 1541.446318] ? check_preemption_disabled+0x35/0x240 [ 1541.451390] ? perf_trace_lock+0x109/0x4b0 [ 1541.455642] sock_alloc_send_pskb+0x57b/0x6d0 [ 1541.460151] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1541.465141] ? sock_kzfree_s+0x50/0x50 [ 1541.469044] ? _copy_from_iter_full+0x1c7/0x680 [ 1541.473758] ? __lock_acquire+0x655/0x42a0 [ 1541.478269] tun_get_user+0x5d9/0x40c0 [ 1541.482180] ? tun_rx_batched.isra.0+0x740/0x740 [ 1541.487687] ? perf_trace_lock+0x109/0x4b0 [ 1541.491969] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1541.496912] ? check_preemption_disabled+0x35/0x240 [ 1541.501953] ? __tun_get+0x11c/0x220 [ 1541.505680] ? lock_acquire+0x170/0x3f0 [ 1541.509665] ? lock_downgrade+0x6e0/0x6e0 [ 1541.513832] tun_chr_write_iter+0xcf/0x180 [ 1541.518082] __vfs_write+0x44e/0x630 [ 1541.522069] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1541.527184] ? kernel_read+0x110/0x110 [ 1541.531204] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1541.536374] __kernel_write+0xf5/0x330 [ 1541.540282] write_pipe_buf+0x143/0x1b0 [ 1541.544409] ? default_file_splice_read+0x870/0x870 [ 1541.549449] ? __put_page+0xb9/0x2f0 [ 1541.553270] ? anon_pipe_buf_release+0x237/0x2e0 [ 1541.558042] __splice_from_pipe+0x332/0x740 [ 1541.562909] ? default_file_splice_read+0x870/0x870 [ 1541.567972] ? default_file_splice_read+0x870/0x870 [ 1541.573005] splice_from_pipe+0xc6/0x120 [ 1541.577082] ? splice_shrink_spd+0xb0/0xb0 [ 1541.581448] ? __inode_security_revalidate+0xcf/0x120 [ 1541.586942] ? security_file_permission+0x82/0x1e0 [ 1541.592020] default_file_splice_write+0x37/0x80 [ 1541.596805] ? generic_splice_sendpage+0x40/0x40 [ 1541.601818] SyS_splice+0xca0/0x1230 [ 1541.606164] ? SyS_write+0x14d/0x210 [ 1541.610199] ? compat_SyS_vmsplice+0x150/0x150 [ 1541.614884] ? SyS_clock_settime+0x1a0/0x1a0 [ 1541.619709] ? do_syscall_64+0x4c/0x640 [ 1541.623711] ? compat_SyS_vmsplice+0x150/0x150 [ 1541.628326] do_syscall_64+0x1d5/0x640 [ 1541.632241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1541.637455] RIP: 0033:0x45ca29 [ 1541.640650] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1541.648649] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1541.656020] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1541.663390] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1541.670777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1541.678251] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:34 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20080801) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) write$FUSE_LK(r5, &(0x7f0000000200)={0x28, 0xffffffffffffffda, 0x1, {{0xff, 0x57, 0xe78903a1108d6625}}}, 0x28) 07:43:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:35 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0xa001, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000000c0)={0x1000000000000000, 0xd000, 0x102, 0x2, 0x1}) unshare(0x2c020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r1 = memfd_create(&(0x7f0000000180)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UA~\x91\x00\xc2\xde\xa9\x85\xecD]O\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10RF\xbb\x813mtYn\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) restart_syscall() syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@remote}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:35 executing program 4 (fault-call:11 fault-nth:28): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:35 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000280)={r7, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000080)={r7, @in={{0x2, 0x4e21, @private=0xa010101}}}, 0x84) syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') 07:43:35 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x22600, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1543.470685] FAULT_INJECTION: forcing a failure. [ 1543.470685] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.482483] CPU: 1 PID: 22806 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1543.490488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.499871] Call Trace: [ 1543.502476] dump_stack+0x1b2/0x283 [ 1543.506122] should_fail.cold+0x10a/0x154 [ 1543.510280] should_failslab+0xd6/0x130 [ 1543.514407] kmem_cache_alloc_node+0x25f/0x400 [ 1543.519007] __alloc_skb+0x9a/0x4c0 [ 1543.522642] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1543.527497] ? lock_downgrade+0x6e0/0x6e0 [ 1543.531660] alloc_skb_with_frags+0x85/0x500 [ 1543.536197] ? check_preemption_disabled+0x35/0x240 [ 1543.541340] ? perf_trace_lock+0x109/0x4b0 [ 1543.545738] sock_alloc_send_pskb+0x57b/0x6d0 [ 1543.550363] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1543.555443] ? sock_kzfree_s+0x50/0x50 [ 1543.559492] ? _copy_from_iter_full+0x1c7/0x680 [ 1543.564182] ? __lock_acquire+0x655/0x42a0 [ 1543.568428] tun_get_user+0x5d9/0x40c0 [ 1543.575739] ? tun_rx_batched.isra.0+0x740/0x740 [ 1543.580591] ? perf_trace_lock+0x109/0x4b0 [ 1543.584842] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1543.589785] ? check_preemption_disabled+0x35/0x240 [ 1543.594821] ? __tun_get+0x11c/0x220 [ 1543.598576] ? lock_acquire+0x170/0x3f0 [ 1543.602596] ? lock_downgrade+0x6e0/0x6e0 [ 1543.606790] tun_chr_write_iter+0xcf/0x180 [ 1543.611052] __vfs_write+0x44e/0x630 [ 1543.614871] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1543.620130] ? kernel_read+0x110/0x110 [ 1543.624046] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1543.629177] __kernel_write+0xf5/0x330 [ 1543.633773] write_pipe_buf+0x143/0x1b0 [ 1543.637758] ? default_file_splice_read+0x870/0x870 [ 1543.642784] ? __put_page+0xb9/0x2f0 [ 1543.646542] ? anon_pipe_buf_release+0x237/0x2e0 [ 1543.651332] __splice_from_pipe+0x332/0x740 [ 1543.655952] ? default_file_splice_read+0x870/0x870 [ 1543.661093] ? default_file_splice_read+0x870/0x870 [ 1543.666120] splice_from_pipe+0xc6/0x120 [ 1543.670187] ? splice_shrink_spd+0xb0/0xb0 [ 1543.674431] ? __inode_security_revalidate+0xcf/0x120 [ 1543.679767] ? security_file_permission+0x82/0x1e0 [ 1543.684708] default_file_splice_write+0x37/0x80 [ 1543.689503] ? generic_splice_sendpage+0x40/0x40 [ 1543.694598] SyS_splice+0xca0/0x1230 [ 1543.698674] ? SyS_write+0x14d/0x210 [ 1543.702382] ? compat_SyS_vmsplice+0x150/0x150 [ 1543.706965] ? SyS_clock_settime+0x1a0/0x1a0 [ 1543.711387] ? do_syscall_64+0x4c/0x640 [ 1543.715383] ? compat_SyS_vmsplice+0x150/0x150 [ 1543.719974] do_syscall_64+0x1d5/0x640 [ 1543.723874] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1543.729072] RIP: 0033:0x45ca29 [ 1543.732263] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1543.740074] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1543.747350] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1543.755098] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1543.762374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1543.769664] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:36 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') prctl$PR_SET_DUMPABLE(0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) prctl$PR_MCE_KILL_GET(0x22) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0xc) getsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000680)=""/4096, &(0x7f0000000080)=0x1000) 07:43:36 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) r3 = memfd_create(&(0x7f00000002c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000240)={0x40, 0x2, &(0x7f0000000140)="a69e5b9b1effe17f70e4e1e1c9a1aa184206def7a19aa23cca5ed577c1601241130a3ee6a0c67303ae9c36e0c266360c602d970cf36d34f0c3cfa7f4b123b877e482440b7eb673eb5a0c39b4b12bc5040c03e5049a39e7e534a164d776a62018f8a28b3af511d3fe56651a1ef20f7a4799e6d190df137d01c3e7ed0cf4cb1c6b9776be379d63d1f60e8518b73e311e9c8f079473ed5fc8bdd972e216d730c3fad56efe3067fe3003e071d5941a7cfeb0e69a5b2c97e10dc92025337bb245aa9d2091b34a66544c3ebc7562342aa8e53a7027a9c4439a9cbce6123efd88330d550a3aedae1b8610bcdb2158", {0x819c, 0x8, 0x30385056, 0x8, 0x2, 0x6, 0x2, 0xffff}}) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') 07:43:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x37c, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000a06010200000000000000000a00000a08000940000000060900020073797a32000000000900020073797a3000000000100008800c000780050015000600000096b6de8977b0f111c0a329475b0667a491d1503c8391e291cac3559c9c60d563aa0d639fe9d2c1451e7f41b5a793ca73cdb16f4d93bf72e2777193898a7dc9900451d3192e1169f733e46d4f27571513bc685263f529fcaba6c92b904b1cfc5e8f2ec99a9322d71ac88801835ec93152817d8c214d012700000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$netrom(r6, &(0x7f0000000000)={{0x3, @bcast, 0x5}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001380)='/dev/qat_adf_ctl\x00', 0x250140, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r3 = accept(r2, 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r5, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000013c0)={0xff7f, 0x7, 0x8002, 0x5, 0x7, 0x9, 0x2, 0x7, r5}, 0x20) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:36 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000000c0)=ANY=[@ANYRES16]) r1 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socket$rxrpc(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1d, 0xd73, 0x2, 0x2, 0x80, 0x1, 0x1, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000000)={{0x7, 0x3}, 'port0\x00', 0x40, 0x101051, 0x9, 0x7, 0x5, 0xfffffffd, 0x2, 0x0, 0x0, 0xd5}) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:36 executing program 4 (fault-call:11 fault-nth:29): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1544.410923] FAULT_INJECTION: forcing a failure. [ 1544.410923] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.465455] CPU: 1 PID: 22863 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1544.473384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1544.482744] Call Trace: [ 1544.485350] dump_stack+0x1b2/0x283 [ 1544.489079] should_fail.cold+0x10a/0x154 [ 1544.493295] should_failslab+0xd6/0x130 [ 1544.497364] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1544.502506] __kmalloc_node_track_caller+0x38/0x70 [ 1544.507447] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1544.512127] __alloc_skb+0xca/0x4c0 [ 1544.515763] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1544.520614] ? lock_downgrade+0x6e0/0x6e0 [ 1544.524825] alloc_skb_with_frags+0x85/0x500 [ 1544.529240] ? check_preemption_disabled+0x35/0x240 [ 1544.534271] ? perf_trace_lock+0x109/0x4b0 [ 1544.538525] sock_alloc_send_pskb+0x57b/0x6d0 [ 1544.543126] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1544.547929] ? sock_kzfree_s+0x50/0x50 [ 1544.551926] ? _copy_from_iter_full+0x1c7/0x680 [ 1544.556613] ? __lock_acquire+0x655/0x42a0 [ 1544.560866] tun_get_user+0x5d9/0x40c0 [ 1544.564769] ? tun_rx_batched.isra.0+0x740/0x740 [ 1544.569541] ? perf_trace_lock+0x109/0x4b0 [ 1544.573787] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1544.578723] ? check_preemption_disabled+0x35/0x240 [ 1544.583790] ? __tun_get+0x11c/0x220 [ 1544.587518] ? lock_acquire+0x170/0x3f0 [ 1544.591507] ? lock_downgrade+0x6e0/0x6e0 [ 1544.595674] tun_chr_write_iter+0xcf/0x180 [ 1544.599920] __vfs_write+0x44e/0x630 [ 1544.603998] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1544.609103] ? kernel_read+0x110/0x110 [ 1544.613073] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1544.618186] __kernel_write+0xf5/0x330 [ 1544.622148] write_pipe_buf+0x143/0x1b0 [ 1544.626114] ? default_file_splice_read+0x870/0x870 [ 1544.631151] ? __put_page+0xb9/0x2f0 [ 1544.634860] ? anon_pipe_buf_release+0x237/0x2e0 [ 1544.639605] __splice_from_pipe+0x332/0x740 [ 1544.643918] ? default_file_splice_read+0x870/0x870 [ 1544.649197] ? default_file_splice_read+0x870/0x870 [ 1544.654333] splice_from_pipe+0xc6/0x120 [ 1544.658571] ? splice_shrink_spd+0xb0/0xb0 [ 1544.662802] ? __inode_security_revalidate+0xcf/0x120 [ 1544.667993] ? security_file_permission+0x82/0x1e0 [ 1544.672928] default_file_splice_write+0x37/0x80 [ 1544.677704] ? generic_splice_sendpage+0x40/0x40 [ 1544.682698] SyS_splice+0xca0/0x1230 [ 1544.686503] ? SyS_write+0x14d/0x210 [ 1544.690305] ? compat_SyS_vmsplice+0x150/0x150 [ 1544.695245] ? SyS_clock_settime+0x1a0/0x1a0 [ 1544.699651] ? do_syscall_64+0x4c/0x640 [ 1544.703609] ? compat_SyS_vmsplice+0x150/0x150 [ 1544.708187] do_syscall_64+0x1d5/0x640 [ 1544.712076] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1544.717268] RIP: 0033:0x45ca29 [ 1544.720459] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1544.728151] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1544.735425] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1544.742691] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1544.749952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1544.757221] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:38 executing program 2: unshare(0x2e020000) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200800, 0x0) ftruncate(r1, 0x8) 07:43:38 executing program 0: unshare(0x2e020000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:38 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000100)={r6, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000000)={r6}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:38 executing program 4 (fault-call:11 fault-nth:30): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1546.543883] FAULT_INJECTION: forcing a failure. [ 1546.543883] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.560887] CPU: 0 PID: 22896 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1546.568803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1546.578184] Call Trace: [ 1546.580786] dump_stack+0x1b2/0x283 [ 1546.584426] should_fail.cold+0x10a/0x154 [ 1546.588675] should_failslab+0xd6/0x130 [ 1546.592658] kmem_cache_alloc_node+0x25f/0x400 [ 1546.597269] __alloc_skb+0x9a/0x4c0 [ 1546.600901] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1546.605745] ? lock_downgrade+0x6e0/0x6e0 [ 1546.609899] alloc_skb_with_frags+0x85/0x500 [ 1546.614318] ? check_preemption_disabled+0x35/0x240 [ 1546.619348] ? perf_trace_lock+0x109/0x4b0 [ 1546.623602] sock_alloc_send_pskb+0x57b/0x6d0 [ 1546.628117] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1546.632899] ? sock_kzfree_s+0x50/0x50 [ 1546.636803] ? _copy_from_iter_full+0x1c7/0x680 [ 1546.641483] ? __lock_acquire+0x655/0x42a0 [ 1546.645730] tun_get_user+0x5d9/0x40c0 [ 1546.649639] ? tun_rx_batched.isra.0+0x740/0x740 [ 1546.654421] ? perf_trace_lock+0x109/0x4b0 [ 1546.658676] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1546.663620] ? check_preemption_disabled+0x35/0x240 [ 1546.668656] ? __tun_get+0x11c/0x220 [ 1546.672398] ? lock_acquire+0x170/0x3f0 [ 1546.676401] ? lock_downgrade+0x6e0/0x6e0 [ 1546.680958] tun_chr_write_iter+0xcf/0x180 [ 1546.685227] __vfs_write+0x44e/0x630 [ 1546.688967] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1546.694111] ? kernel_read+0x110/0x110 [ 1546.698293] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1546.703432] __kernel_write+0xf5/0x330 [ 1546.707431] write_pipe_buf+0x143/0x1b0 [ 1546.711568] ? default_file_splice_read+0x870/0x870 [ 1546.716629] ? __put_page+0xb9/0x2f0 [ 1546.720355] ? anon_pipe_buf_release+0x237/0x2e0 [ 1546.726167] __splice_from_pipe+0x332/0x740 [ 1546.730505] ? default_file_splice_read+0x870/0x870 [ 1546.735534] ? default_file_splice_read+0x870/0x870 [ 1546.740594] splice_from_pipe+0xc6/0x120 [ 1546.744668] ? splice_shrink_spd+0xb0/0xb0 [ 1546.748916] ? __inode_security_revalidate+0xcf/0x120 [ 1546.754126] ? security_file_permission+0x82/0x1e0 [ 1546.759076] default_file_splice_write+0x37/0x80 [ 1546.763848] ? generic_splice_sendpage+0x40/0x40 [ 1546.768613] SyS_splice+0xca0/0x1230 [ 1546.772344] ? SyS_write+0x14d/0x210 [ 1546.776066] ? compat_SyS_vmsplice+0x150/0x150 [ 1546.780660] ? SyS_clock_settime+0x1a0/0x1a0 [ 1546.785093] ? do_syscall_64+0x4c/0x640 [ 1546.789175] ? compat_SyS_vmsplice+0x150/0x150 [ 1546.793783] do_syscall_64+0x1d5/0x640 [ 1546.797688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1546.802894] RIP: 0033:0x45ca29 [ 1546.806090] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1546.813814] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1546.821096] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1546.828375] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1546.835653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1546.842936] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:39 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$snddsp(r4, &(0x7f0000000680)="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", 0x1000) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:39 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000280)={r7, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000080)={r7, 0x36, "b610f6fb7ab6104e0aeb69b4068e45bc75f5959bc8f2e6fd3474bd5cd4800ce46ce84258e06b2f66dde15f6f5d3e71281616c970f2dc"}, &(0x7f00000000c0)=0x3e) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:39 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x30, r0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000240)={0xb578, 0x9, 0xbc4, 0x8, 0x2, [0x3ff, 0x2f258b34, 0x0, 0x8], [0x9, 0x8, 0x40, 0xa52], [0x5, 0x7, 0x0, 0x3], [0x9, 0x9, 0x9, 0xffffffff]}) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r7 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000080)={{0x1, @addr=0x9}, 0x8, 0x52e2, 0x7}) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:39 executing program 2: unshare(0x2e020000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000180)=""/208) clone(0x802102809efe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r3 = memfd_create(&(0x7f0000000480)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad=\xb5\xa5w\xe1\b\xe6\xefJG\xa7\x03\xda\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xff\x8f\xcc\x15\xa4}*A\xc0k\xf6U0\xd2\xf4\xdb\x00\x10\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00 \x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\b\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A\x02,\xfd\x8a\x9c=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\xba\xb0 \x88\x1b\xcc\x05I\xf1$\x1d\x1bR\x92R\xe1}\xc0\xea\xebe\x16jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xbd\x00\x91\xb5F\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0k\x9e\x9b0>S\x8a\x92P\xd6\xefL\x80O51\x19\xa8/;Z\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UaO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\xaa\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\x0f\x9f\xb5\x899bL\xefP\x02\x8b\xce\x04\xe8w#\xbb\xe5\xd0\x00\x00\x00\x00\x00\x00\x00\xa9\x01\x88\x8b\x8c\x12!p\xa8\"\x00\x00\x00\x00\xaa9\xf6\x8b\x82\xc3\xd9\x9a\xda\xce\xda\xd4\x91\xc4C\xd7\x98\xd4\t\xb6', 0x5) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:39 executing program 4 (fault-call:11 fault-nth:31): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:39 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRESHEX=r1, @ANYBLOB="5b66e303adf16c4aa8d32d279e7f3bc166319ff6013a3a095502afc97303d927255d06f264f52ec25725b2777a3710c384696fa96f41c339c180e5cbd8c9772171304d1eb63f94bd2959f6fe0efa14d67503d7e845ea58", @ANYRESOCT, @ANYRESHEX, @ANYRESDEC=r1, @ANYRES64, @ANYRESOCT], 0x1f3fc7b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1547.423685] FAULT_INJECTION: forcing a failure. [ 1547.423685] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.436028] CPU: 1 PID: 22949 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1547.443920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1547.453267] Call Trace: [ 1547.455857] dump_stack+0x1b2/0x283 [ 1547.459490] should_fail.cold+0x10a/0x154 [ 1547.463659] should_failslab+0xd6/0x130 [ 1547.467646] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1547.472781] __kmalloc_node_track_caller+0x38/0x70 [ 1547.477718] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1547.482574] __alloc_skb+0xca/0x4c0 [ 1547.486204] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1547.491051] ? lock_downgrade+0x6e0/0x6e0 [ 1547.495206] alloc_skb_with_frags+0x85/0x500 [ 1547.499699] ? check_preemption_disabled+0x35/0x240 [ 1547.504725] ? perf_trace_lock+0x109/0x4b0 [ 1547.509247] sock_alloc_send_pskb+0x57b/0x6d0 [ 1547.513782] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1547.518574] ? sock_kzfree_s+0x50/0x50 [ 1547.522469] ? _copy_from_iter_full+0x1c7/0x680 [ 1547.527160] ? __lock_acquire+0x655/0x42a0 [ 1547.531403] tun_get_user+0x5d9/0x40c0 [ 1547.535303] ? tun_rx_batched.isra.0+0x740/0x740 [ 1547.540059] ? perf_trace_lock+0x109/0x4b0 [ 1547.544297] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1547.549232] ? check_preemption_disabled+0x35/0x240 [ 1547.554263] ? __tun_get+0x11c/0x220 [ 1547.557982] ? lock_acquire+0x170/0x3f0 [ 1547.561959] ? lock_downgrade+0x6e0/0x6e0 [ 1547.566122] tun_chr_write_iter+0xcf/0x180 [ 1547.570361] __vfs_write+0x44e/0x630 [ 1547.574079] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1547.579187] ? kernel_read+0x110/0x110 [ 1547.583404] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1547.589289] __kernel_write+0xf5/0x330 [ 1547.593282] write_pipe_buf+0x143/0x1b0 [ 1547.597362] ? default_file_splice_read+0x870/0x870 [ 1547.602397] ? __put_page+0xb9/0x2f0 [ 1547.606168] ? anon_pipe_buf_release+0x237/0x2e0 [ 1547.610939] __splice_from_pipe+0x332/0x740 [ 1547.615283] ? default_file_splice_read+0x870/0x870 [ 1547.620506] ? default_file_splice_read+0x870/0x870 [ 1547.625534] splice_from_pipe+0xc6/0x120 [ 1547.629625] ? splice_shrink_spd+0xb0/0xb0 [ 1547.637981] ? __inode_security_revalidate+0xcf/0x120 [ 1547.643384] ? security_file_permission+0x82/0x1e0 [ 1547.648546] default_file_splice_write+0x37/0x80 [ 1547.653420] ? generic_splice_sendpage+0x40/0x40 [ 1547.658196] SyS_splice+0xca0/0x1230 [ 1547.663056] ? SyS_write+0x14d/0x210 [ 1547.667264] ? compat_SyS_vmsplice+0x150/0x150 [ 1547.671855] ? SyS_clock_settime+0x1a0/0x1a0 [ 1547.676275] ? do_syscall_64+0x4c/0x640 [ 1547.680739] ? compat_SyS_vmsplice+0x150/0x150 [ 1547.686028] do_syscall_64+0x1d5/0x640 [ 1547.690563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1547.696269] RIP: 0033:0x45ca29 [ 1547.699907] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1547.707710] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1547.714992] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1547.722263] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1547.729738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1547.737046] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:41 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x2, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0, {[0x8000000000000]}}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140c, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) dup3(r1, r2, 0x0) read(r1, &(0x7f0000000080)=""/116, 0x74) 07:43:41 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:41 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) personality(0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x3, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:41 executing program 4 (fault-call:11 fault-nth:32): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x2000, {0x0, 0x3, 0x6}, 0x2, r2, 0xee00, 0x2, 0x6, 0x20, 0x0, 0x9a, 0xfff, 0xffffffffffffff01, 0x3, 0x7, 0x1, 0x100, 0xfffffffffffffffd, 0x8, 0xff, 0x8}}, 0xa0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xfe08) read(r4, &(0x7f0000000380)=""/225, 0x900a453f) fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x1, r0}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1549.542127] FAULT_INJECTION: forcing a failure. [ 1549.542127] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.553873] CPU: 0 PID: 22995 Comm: syz-executor.4 Not tainted 4.14.181-syzkaller #0 [ 1549.561858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.571215] Call Trace: [ 1549.573814] dump_stack+0x1b2/0x283 [ 1549.577453] should_fail.cold+0x10a/0x154 [ 1549.581635] should_failslab+0xd6/0x130 [ 1549.585742] kmem_cache_alloc_node+0x25f/0x400 [ 1549.590384] __alloc_skb+0x9a/0x4c0 [ 1549.594026] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1549.599138] ? lock_downgrade+0x6e0/0x6e0 [ 1549.603299] alloc_skb_with_frags+0x85/0x500 [ 1549.607712] ? check_preemption_disabled+0x35/0x240 [ 1549.612743] ? perf_trace_lock+0x109/0x4b0 [ 1549.616986] sock_alloc_send_pskb+0x57b/0x6d0 [ 1549.621579] ? tun_rx_batched.isra.0+0x46c/0x740 [ 1549.626687] ? sock_kzfree_s+0x50/0x50 [ 1549.630588] ? _copy_from_iter_full+0x1c7/0x680 [ 1549.635269] ? __lock_acquire+0x655/0x42a0 [ 1549.639605] tun_get_user+0x5d9/0x40c0 [ 1549.643506] ? tun_rx_batched.isra.0+0x740/0x740 [ 1549.648554] ? perf_trace_lock+0x109/0x4b0 [ 1549.652829] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1549.657771] ? check_preemption_disabled+0x35/0x240 [ 1549.662798] ? __tun_get+0x11c/0x220 [ 1549.666522] ? lock_acquire+0x170/0x3f0 [ 1549.670594] ? lock_downgrade+0x6e0/0x6e0 [ 1549.674767] tun_chr_write_iter+0xcf/0x180 [ 1549.679012] __vfs_write+0x44e/0x630 [ 1549.682928] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1549.689056] ? kernel_read+0x110/0x110 [ 1549.692955] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1549.698212] __kernel_write+0xf5/0x330 [ 1549.702296] write_pipe_buf+0x143/0x1b0 [ 1549.707199] ? default_file_splice_read+0x870/0x870 [ 1549.712225] ? __put_page+0xb9/0x2f0 [ 1549.715949] ? anon_pipe_buf_release+0x237/0x2e0 [ 1549.720847] __splice_from_pipe+0x332/0x740 [ 1549.725310] ? default_file_splice_read+0x870/0x870 [ 1549.730321] ? default_file_splice_read+0x870/0x870 [ 1549.735436] splice_from_pipe+0xc6/0x120 [ 1549.739489] ? splice_shrink_spd+0xb0/0xb0 [ 1549.743846] ? __inode_security_revalidate+0xcf/0x120 [ 1549.749035] ? security_file_permission+0x82/0x1e0 [ 1549.753962] default_file_splice_write+0x37/0x80 [ 1549.758836] ? generic_splice_sendpage+0x40/0x40 [ 1549.764773] SyS_splice+0xca0/0x1230 [ 1549.768504] ? SyS_write+0x14d/0x210 [ 1549.772222] ? compat_SyS_vmsplice+0x150/0x150 [ 1549.776808] ? SyS_clock_settime+0x1a0/0x1a0 [ 1549.781404] ? do_syscall_64+0x4c/0x640 [ 1549.785486] ? compat_SyS_vmsplice+0x150/0x150 [ 1549.790661] do_syscall_64+0x1d5/0x640 [ 1549.794775] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1549.800248] RIP: 0033:0x45ca29 [ 1549.803559] RSP: 002b:00007f7b3f2e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1549.811366] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 1549.818697] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1549.825974] RBP: 000000000078bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1549.833338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1549.840612] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f7b3f2e36d4 07:43:42 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r3, 0x4c00, r6) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:42 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020500) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r3 = accept(r2, 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r5, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r5, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:42 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x820, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x2, 0x89, &(0x7f00000001c0)="330b888c2c69db6048db6ea686e66fe1d0bf0b746f7cb4c00764a1fa9f8944e857e3e044716081a0bb8bd78c47da5267922f59659460d774619f36394488baf9ba56152e7e5c0d109c673a0b0006e21405217e76e2f31dc4fcfab291b3dfe19bb4db3a8d41b40d5aa67c053b8cfcf537c4d4b785d4c9681ed6e1797b6e11abb37a8913d1c486b77045"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r4 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:42 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93\xb7\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xdf5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x15\x14W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x33, &(0x7f0000000080)={0xfffffffffffffffd, 0x8000000, 0x0, {[0x7fff]}}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000100)={0x3ff, 0x3, 0x2}) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:42 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)={0x3, 'dummy0\x00', {0x2}, 0x2}) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:42 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sysfs$1(0x1, &(0x7f0000000080)='fd\x00') 07:43:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x174, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a782ffa4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f14c82a1cef20d94c30e478947d190ab8393646d6c0b004d9246a8f6542614f2f03f76a9938fff364f69d06e07d3d818e0db72a147aed99f6c5719e4ba33c6c077c70a81aa0839b0c9e7b6e79148c0b0d4ff1a74653751762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de07549948ed7d897d1df0a387b5ea225e2aca5c9f1c9525d1dc263fd0a7bc2cf9032624d3901edefc7c2c507cd03e263fc024ae73f61c64d3c2ddbf4990f7f46cc4b2a4633615d7b9e34d85a15a03ccc0c329cec77c50b4ec964741d3ad616e9180a0230c784751f74bc1acd6cd3ea35868cfd076de95506d8c0008034d56415f3cf8678390625d08894fbfc9fb6169a5f901a5eba2ecf303ce5044170375e7ac1e70966c9018b5e5da088c20c82ac0f34444bb397944830be5a9985098f2080c359c37e75207da9cd8bb000000004000f466"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:44 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="0180fbc541bde806761baa0a7146807b000025ec4d3083e921bb5acefbc43e08b2046f894eb76dc9c952ae69d72c7042e4725d21c86e6415be6af61ffac3139ad912a32da20b89865e321358d058b1a7919406000000855dce2c87742831c8302c9ff740061b278309cc1648c65b16f65f323c0689127e540511e418d040696fc61b00"/140, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000280)={r6, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r6, 0x84, &(0x7f0000000080)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x16}, 0x3f}, @in6={0xa, 0x4e20, 0x8, @private0, 0x2}, @in6={0xa, 0x4e21, 0x8, @empty, 0x100}]}, &(0x7f00000001c0)=0x10) unshare(0x2e020400) r7 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r7, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:44 executing program 4 (fault-call:11 fault-nth:33): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:44 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f00000000c0)=0x6) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000080)=[0x3, 0x7]) 07:43:44 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x41c1, 0xa041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f00000000c0)=""/25) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$int_out(r7, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) splice(r8, 0x0, r1, 0x0, 0x2000000000000002, 0x0) 07:43:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = openat(r2, &(0x7f0000000340)='./file0\x00', 0x103000, 0x127) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat(r3, &(0x7f0000000380)='./file0\x00', 0x1a0, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={&(0x7f0000000000)="8b35642e73bceddb15fd89ea56f66e7d0df550c8b9c348b159ddc3e5fa71ac36116429ef20b87cc7fe11c89af24b0c4ecee74956f4b0f4cab0e6c81155e754af87f567f45bf672d5bbef98d20c12a3082e136f2026e1ca88fdb5e1340aceec7ac843d0cdea30562b394002f814f7064291184c01ba8dc8261e5bb7efcdb304a0ca930b5a6b812247719f1a1ffc786930074fa5d2c6269586d4a48060c5181712b8f362fae7ca5be84f125a5c35f652926385c1ad1c0b6f52c51bb545f2ea9bc97b79e6ec5be26f4d75b710d99dd6", &(0x7f0000000180)=""/86, &(0x7f0000000100)="caac87d4b54895b98cfebd93dcd77c8aca5544cb3dd2f6acba618ae4", &(0x7f0000000200)="abf5c3311a9ec879817b19a8278f5f54f210c4c293f35e82b4158484054281ee2e372abd218813069f45e8f97575ef2408dfd7710ebbb342d0d9d074eb0eea2dc42ab10ab7590edd6c64cb5d0bbfa6b2a633f330f193141c431ad3f838324d4e7241a9c58ad0de4b3d6056f6a54d00a02657e489fbf1ac0d8a4df99a52c04c733f5ba3a7618301bb52acecd7daf0d28d44cdfe3c9208198b9e1edfe768827e588c9aad500f7d569dfe370e1802b5b9eaf176bcd77cef13caed75131e8164a4b9c4eff400bf11e7ac48717e95b577e1998b3d31fbe4d81d1b0e3fabffc756", 0x5a42, r2, 0x4}, 0x38) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:44 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x20, 0x4, 0x3}, 0x2}}, 0x18) r3 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f00000000c0)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:44 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00') 07:43:44 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') setuid(0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:45 executing program 0: socket$rxrpc(0x21, 0x2, 0x2) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xb, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:45 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) mmap(&(0x7f0000009000/0x14000)=nil, 0x14000, 0x0, 0x4000010, r2, 0x90238000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:45 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/ip6_tables_targets\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:47 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x490300, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) 07:43:47 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:47 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:47 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x7d9480, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000300)=ANY=[], 0xfe08) read(r8, &(0x7f0000000380)=""/225, 0x900a453f) r9 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRES16=r5, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r9, @ANYBLOB="ede9f9491c9dd5593fdad29034fd62a8fca2c743464f774d0b2abc111bcd14c14568fdce92965806855c9147a863f9a4bde84fbeb2959836cb501aacf84c01540f2de73d0dfd8ed17f45cdf2b7746be82b6a426463cd6164b4a0954f0dc673265ba3b8fe169b29f6f9aa69952f3da114d6774e6017ff60149e641dbd08add7a72e18b8a505ca7d51e0ca4101699a622345d9bf82fc54708bdb36aaf5c6ebc4e72edde8c65007d96bfe3b901318d79b3327943f625ad970d56db25e0240f982ec4fd53445542a1874803f14099809a3ab51a76b981183ef4f47f0b0167e936c7cecb92b6bc95e1e6d786a7bf75d39b81acd23d64c03afe9db", @ANYRES16=r1, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESOCT=r6], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:47 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000f9ffffffffffffff08", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}}}, 0x24}, 0x8}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)=@canfd={{0x0, 0x1, 0x1}, 0x11, 0x0, 0x0, 0x0, "d29b9d2ef50da4f5acc93e3fcc30c415fdbc4cad2c40b28fff8d1edbfe32d8a0145665b4539324324c27eb11ef66d79eadf1cf8ac2b837f3aead4243720b9a95"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000000), &(0x7f0000000040)=0x4) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) ptrace$setopts(0x4200, r7, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:47 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) recvmmsg(r2, &(0x7f00000027c0)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f0000000280)=""/211, 0xd3}], 0x2, &(0x7f0000000380)=""/175, 0xaf}, 0x9}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/105, 0x69}, {&(0x7f0000000780)=""/47, 0x2f}, {&(0x7f00000007c0)=""/252, 0xfc}, {&(0x7f00000008c0)=""/92, 0x5c}, {&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/195, 0xc3}, {&(0x7f0000000b00)=""/3, 0x3}, {&(0x7f0000000b40)=""/71, 0x47}], 0x9, &(0x7f0000000c80)=""/201, 0xc9}, 0x446}, {{&(0x7f0000000d80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/20, 0x14}, {&(0x7f0000000e40)=""/31, 0x1f}], 0x2, &(0x7f0000000ec0)=""/68, 0x44}, 0xff}, {{&(0x7f0000000f40)=@hci, 0x80, &(0x7f0000001100)=[{&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f0000001040)=""/39, 0x27}, {&(0x7f0000001080)=""/127, 0x7f}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001140)=""/113, 0x71}, {&(0x7f00000011c0)=""/159, 0x9f}, {&(0x7f0000001280)=""/175, 0xaf}], 0x3, &(0x7f0000001380)=""/164, 0xa4}, 0x3}, {{&(0x7f0000001440)=@hci, 0x80, &(0x7f0000002680)=[{&(0x7f00000014c0)=""/164, 0xa4}, {&(0x7f0000001580)=""/48, 0x30}, {&(0x7f00000015c0)=""/180, 0xb4}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x4, &(0x7f00000026c0)=""/217, 0xd9}, 0x3}], 0x6, 0x10142, &(0x7f0000002940)) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000031c0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003180)={&(0x7f00000029c0)={0x7a4, 0x3f3, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1, 0x1, 0x38, [0xff, 0x5d3, 0x5, 0x8, 0xfffffff9, 0x0, 0x8, 0x3f, 0x7, 0x3, 0xf2, 0x400, 0x7, 0x9, 0x9, 0x8be, 0xea65, 0x1, 0x20, 0x6, 0x3, 0x1000, 0x20, 0xda0, 0x3, 0x99b2, 0x790, 0x10001, 0x4, 0x3, 0x20, 0xfffffffe, 0x7f, 0x800, 0x8000, 0x3, 0x80, 0x9, 0x8001, 0x81, 0x8, 0x85a, 0x1, 0x1f, 0xfffffe00, 0x2, 0x6, 0x200, 0x9, 0x4, 0x3252b672, 0xffffff04, 0x1f, 0x8, 0x20, 0x1000, 0x1, 0xe8d, 0x1, 0x4, 0x3, 0x3, 0x6235, 0x8], [0x7fffffff, 0xfffffff8, 0x20, 0x8000, 0x100, 0x6, 0x3f, 0x8001, 0x2, 0x10000, 0x3, 0xacd, 0xffffffff, 0xffffffff, 0x3, 0x8000, 0x2, 0x5, 0x80000000, 0x3ff, 0x677, 0x1, 0xffff, 0xff, 0x80000001, 0x1, 0x7ff, 0x3, 0x0, 0x3f, 0x8, 0x3, 0xffffffff, 0x80000000, 0x7, 0x0, 0x2, 0x32, 0x57d, 0x84b, 0x40, 0x4f5, 0x200, 0x2, 0x8, 0x5, 0xffff, 0x80000001, 0xd9d, 0xfff, 0xc4e, 0x0, 0x5, 0x5, 0xffff, 0x4, 0x2, 0x841, 0x80, 0x80, 0x1f, 0x8001, 0x6, 0x1], [0xffff, 0x6, 0xfff, 0x3, 0x3, 0x1000, 0x6, 0x2, 0x376, 0x400, 0x8, 0x0, 0x0, 0xe08, 0x1, 0x5, 0x6, 0xddc, 0x5, 0x3, 0x1, 0x5, 0x0, 0xfffffffb, 0x4, 0x3, 0xe9, 0x0, 0x3ff, 0x27, 0x4, 0x7, 0xff, 0x3f, 0x0, 0x8000, 0x8000, 0x24b7, 0x3, 0x61d7, 0x0, 0x3ff, 0xfffffffb, 0x7, 0x8000, 0x8, 0x3, 0xb5f, 0x4, 0x0, 0x4, 0xff, 0x614, 0x8, 0x7, 0x10000, 0x5, 0xe17, 0x1, 0x6, 0x3, 0x71f, 0x10001, 0x6], [0xabc, 0x6, 0x5, 0x1, 0xfffffffc, 0x1f1, 0x2, 0x5, 0x4, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x10001, 0x7, 0x8, 0x6, 0xb5f, 0x6, 0x5, 0x3, 0x3, 0xffff7fff, 0x7, 0x100, 0x3, 0x1ab6c55b, 0x1f, 0x6, 0x7fffffff, 0x200, 0x1, 0x7, 0x6, 0x9d8, 0x7fffffff, 0x2, 0xb07, 0x226, 0xfffff800, 0xaba4, 0x6b, 0xfffffff7, 0x7fffffff, 0x9, 0x4af, 0x2, 0x40, 0x1ff, 0x5, 0x90b, 0x1, 0x152, 0x80000000, 0x2, 0x10001, 0x6, 0x5, 0x0, 0x9, 0x20, 0x8001, 0x6, 0x61b], 0x382, ['task\x00', 'fd\x00', 'task\x00', '\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 'md5sumtrustedmd5sum.\x00', '\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 'fd\x00', 'fd\x00']}, [""]}, 0x7a4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x48010) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:47 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x10000000002) 07:43:47 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r3 = accept(r2, 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r5, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r5, 0xa6f}, 0x8) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 07:43:48 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x5878c3, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:48 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000080)=0x7, 0x4) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) read(0xffffffffffffffff, &(0x7f0000000380)=""/225, 0x900a453f) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 07:43:48 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socket$bt_bnep(0x1f, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:50 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup3(r4, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000080)) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000180)="e1c7b19bfd382ec4ee2fd69dbf2a1f09", 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:50 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@llc={0x4, {@llc={0x80, 0x2, "9b56", "c44e181d5b43125012f1e1f1030f540d21393a8190491e6b6031ac1f04328f1b0b0e3fade2e35c4ddb78d70eed70aa4aa1840e57e343bf162b6c4d49f9fff96811643d33e72a1eaf5271319a163ef6a994"}}}}}}, 0x67) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:50 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r3, 0x0, 0x0, 0x0) fcntl$addseals(r3, 0x409, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200d4}, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:50 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) fadvise64(r0, 0x10001, 0x7, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:51 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x88c82000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:51 executing program 0: unshare(0x2e020000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r6}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r7 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r7, 0x0) dup(r4) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:51 executing program 2: unshare(0x2e020000) clone(0x242000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='trusted\x00', &(0x7f0000000180)='task\x00') r1 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x2) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:51 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x810, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 07:43:51 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x802c0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0xe62, 0x7, 0x1, 'queue1\x00', 0x91}) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vxcan1\x00', 0x400}) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:51 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x18, 0x61, 0x27c5a56113d595fb, 0x14, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0x1c, 0xf4, 0x1, 0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@private1, @in6=@dev={0xfe, 0x80, [], 0x15}, 0xa, 0x4, 0x14}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x1}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0x3ff, @private2, 0x4}, @in={0x2, 0x4e23, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0xa0}}, 0x40004) unshare(0x2e020400) r2 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) signalfd4(r3, &(0x7f0000000200)={[0x6]}, 0x8, 0x800) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:53 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:53 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000680)={0x7, @sdr={0x36314d59, 0x9}}) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000200)={0x0, 0xe3, 0x810bee4185a9055a, 0x11, &(0x7f0000650000/0x4000)=nil, 0xffffffff}) r8 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x44, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x20004004) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:53 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x5, "ba88"}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8, 0x200}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xd, "9a15", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x0, 0x7, 0x0, 0x5, 0x7], 0x4, 0x51938f3962f8691}, {0x3, [0x4, 0x1, 0x0, 0x4, 0x0, 0x1], 0x6, 0x2}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x1}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0xfd, 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:54 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0xc0, 0x453, 0x0, 0x0, 0x0, "db2fd25647ed5b151121c88f040dc60447fbc463caaeab6434e5b0a2b80e164120346f79168c198bb6aac034763f1af548adbeaff2f2010a282492931f78610115dda26140f7d097f0fc52051e62f8a75845f278826415e891abfb9092728d05d494308f433add0dafefac53a9cdac52fb54139128c754bc81780d149d700f71e953e0c996c8e7fcc72cf79d8c0ef1bf70600c518130b91d4f0fdbe9d5037890d0505f2c7bbd54329ef41f8723"}, 0xc0}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x0, 0x0, 0x0, @local, @mcast2}}}}}, 0x3e) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x18100, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 07:43:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000300)=ANY=[], 0xfe08) read(r6, &(0x7f0000000380)=""/225, 0x900a453f) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000010008, 0x0) 07:43:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) tkill(r3, 0x13) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r4) keyctl$negate(0xd, 0x0, 0xef1, r4) ptrace$cont(0x7, r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', 0x3}, 0x18) 07:43:54 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)=[{0x0, 0x0, &(0x7f0000005880)=[{&(0x7f0000000380)="d864d4d7341ff5952b1e4b328d4dbb4e2c2c31b55f0027c2be00a2ebc0e9405679aeb753b93469b9d27996", 0x2b}, {&(0x7f00000003c0)="335489840c47b601d3928ee9e57b4bb664edfaccf1f6c3046037dae78fad8c673197bee9f29da6cc552d4a9fbb328797d962fd181d761e9a386123e1f0e7063b428ecce4bae66c59204b2e9d84ac9ba23e4fc6867c45e06fd8aa30972c837440f1405840ab6d696e56ae88c54cf12c36d5999d4ff6382bcc9eeff77d913584c4f6dc4c9b01a9e016eb4e99e7f570d175680d0e3b3931ae58cf926cc95b5b27038ae0c25643d7d226ec3ce771c4a45997b310553751d04ebc69e4c0db8c7cfc091647f0de3f1761e48331880b515b1205d01431d65d00972f79804302c99feda2c7118d19", 0xe4}, {&(0x7f0000000680)="72e3515937ffb425f697c89dbc8df709ca7c4ef5909e8c51feb35a9a88ba808c16bc026c5b19e2652d0078365d7e080da9218c2ee8510b15a2a503e9bb419bcdccf048f1c87f028bc44ccc1fc5ab39cf3503eef61d499d8b8df3fb83972d85bbe9836fc4cdfea28d5bb0e60469b7f17930490c12c400d6014f186293151d2037ecbb02ed76f7de09f9407d1b32959b798e7637e769e7c268d08a1b327acb7621b890a1dcadef5188c03028f4f750f3bd13a6e5c97d30bbe2a816a5556ad4658801e128e4bed40a2b8676c0aa5a6d46e3679e251d589cf7c945579378de1d5cdbcec6975fd3fa1d2c47ca8b673380c77ec83b6eeaa5c37348c5b77f8cf9bf5534a7be4e47231d44b1c738875fc424934e01f3f36553cc0b364eea6d1134c26c7ba00e4f8225e652754fa8d8c7caa04b07dfe3cf55e065942849b187b10fc253df42c816215a079c3ea3ef615116e7725144cd180baf2522ee4cad8da2c81a20ae05e4ac4108ba58ab50e46caa3beae7ba25a256e95ada0387c1af3a6a10b16df24dc3d7f5f7404c8d653d132f850ce125982496e97c2383463b90fe670dd03b67cfbcc1d6a39c6e5a413388344ff1e9115a1ab483cd94f68ccb4ffd0daeddbc4cde5fd4824e29cc5d20f7dc2bd1b0b5d460ac11bf1141484b1cc6cf0156c7d7b43a1527eb694ac82e9fdff4e36f1648297abdbd14f1097ee22324172768dc60de6916d555df1694e9b0d2c5bbc62b6dad04392a18a27f45483ba8fadda39bf7ba3b3dda6529f825a3ea5f3fa463051128e585ce2a0fa2e35b8b9799b707e201308a106cdba73b779af85ee35d0e0f598259c20c18ebf9f43f05b47c7ab6e2d6e4349627500a644a1886144b4a30bf23eb2b53d93ce0940b575eaa7ef564bb76fd76270fb1033d40308739e697e918be1613d9f1bf470356ee326826ce7021d9ae15e1155e697faf479207afc412479f716bbdb2de204027fc4d3db61f61d5acd395cade81816f22513db15366c4a056ed96eb729883252b1b75828bf249f2e8a190639987b7ef4a418b9ae20297f140652b72fd90d22bb299b8ba116eaee63701ba1b9a6b0442913f124b180e775c9a74844fe052869af83dff552830902bb36e8e2c1ee8ecadabcbbefc52544be97f5e58605a330121c16afa7dd81dc2bfe1dfef7de4a2242dce2a2517fecc38cf60c96bf8fa129e1a833c5178eadd1c64440040a8092f362faabc778d14419e4a31d8d828fc7a1c169a9903f326800d9c3bc4f97ad6ff22320a5b0037714995afc256e0457def1698658ae20eeaf5593df800df2afa4bc6e342f9dd94ba3db5e2721e7b2eedc5838b6dfbf520aa78de33f5a55617ffbb9979eb77e0b9e7f10a488fd176ebb3395b84f6e301771c63183192a4b06ee169d9cfb2905988b111fe2b1780c5264c16ab3a3585d28901efd2d3590f22ec48a02d4185f4cc41ef615f98f7911c6e9f67fffacf5c8e1059c6eb34a979d359d22f7c52f71934dc81fae04500141ba0ec2f2a35f8c8928efda91b229eb9747f4bc47dca4f614aee6047340be95b9cad91d5aca30ff14e3d3f67a998adcae0404ed9283303340f1734b0088a11483a6bc0acae7b77e664716bb8dd96046c16b28d257241b985f8429889861ec52149c8a4e6a1058e96f399ef782b96df4d664c21242b8e325ee8c56cf905b3bf51c3eb43e544bb2247ae5a0e71208cc7a7b4a37ef829cea4f310416ada38021e21f83053df4fa4d14a215eae4cad814605f8859db7769cb57e1ce70f057cd748a67da12d286d2fbde5f980572232d7d92d62db85b5955a82c88d824e14377244c4ccd4cb69e0543dd231836051360c6b8c5cfaef21d7214c0c0de2761d664221406445f15554a76e6d9cbfcecbecc8e69077b428a31f747683627490949b5b88c92b71101eef3063081c5b5d0f2e6c0da376371896183de3223d674bb6c4440d3219c093d4742170038a3847c4dcbcf9a0755953ad59594636e2b6c5b6a15cf55dcd71e68f4634acb403d0605a4967fdb49e2e6bc9147030b4adf26627478c604b46605ebf3eafcb84d7d2a3895d49b400facc1b7915ef7799d5c29badbc51659fcfb11d9a0fc467a7e636c1777774c6189bcf2f76125affd18293a744fb70d7264b7675b44fdc26978d06dd694275d728d078edf40caf299b79b4bd0d05a5f5555b4fa00841035677e837fb2c482c179bdbcc8f64e3cccc1d8c18756b9ac5dde1780f344ba6ce054d842a468f4ff9e6d1ae45afcb240738c7f64ed0ccf60449acb6c3cad3de55fa490d64646367f46baab574123d5f75242f490bbcbda725fe2911169e1891e79a7232962e37ea6ebee08bebef0f266c3ba5df0c32280adcd0144061887de25121d8c5e060e1d940166adc193564599695f6a36418946632c29a623004176d24617ff1ec5910c0f556408c943a87f342e3da9c0c83ab136f92ee6cba78caf48dd5db0b407a7843c1be7b525dd690dbc84960ea7ec047953c9510e140b5d17ba0f0f36b720cd3dadbbd3d736c9aa042813a0e5df900e31c02c79b14135d32af2ff7d7f58825dd99cc4caaf8da47cad7e5f666b85212332e674e10cb2facdf09b417ee7c3b6422ece0cad66715c6abe75b4c2135932fc36697a06473dc6d1dfbe2ed32474d7003a4d032ab883b79602e601d88cb5b799bd5acb9387f81def2929d4755b3aa5cf2ca13b25a240137753addf4a854a9b4957a0cae22267d4044b795d9d764add71ff0f16c47c96905a8f258d4844d5675fb3d620942dced382594bc9eb1510073460073d539d17bc71c5451469fe63da31e54ce2870012068aea964456e12e4d160680d0f0748bf67d1233bc3b792d1f71cd4391e8cec39ec1dc4877d4d304ad909af93f1343e4c0aca41ac559de5d19a545f3a27049ed22cd9500d0612e100835d2cd003c1672f8d722127c9cc9a9035e12ffe6c1c5b1674578f3f8cdd9d7aca89a7f47feadffba5be3908859a82237f6093c407154cdcca16870ef2d92712fd72383ec071dc60d07acc247d67e7055a75a89a268efb2844ba6385d805c0c687c1c8ed4795040fe6c1bf5ebad46e2815f6b8a8f42b69584ddd433f2a78d29b38038f61dd5c68d649654cf05cd025357ace23399d230b933ce3fdeda2e2e8b1b9dcf0a80dbfb7ee2a979ab9ece8bd0ebe1b6cfe9ce74f6f935804eec3793515758e8c13afb45bf12f8f1ae409247a450cdb3c38215068d13d492245148898f2b2d15deba3faa5229d45b35a7d20b149df3f3b712d5465426478eea32b468a3ee15b4ab67bb498d85a1f1b34e8a21e65ac96cdbebf6f7be0f981fff702d40d150879a2ee7abf7a32a6501fd8a0765c5ec25fc63d04612a95cc215f29fcf00c8ff75a3c50027b82e77d0c98c21d4fd328f5197500d9d4853a9280a9c4fc72ef0ce3f442f5451e6843f31c9f5aeb9158d2fab62816fd13c5b0eeef75d64d3610d34b02d7827e5c40300335399060600c025e9e9a2fc55038d6f344483923a41d95391e9e56e5265e85f46b441a766d3d614c8f89aae18c4195e1bd35e20e9f921a01882e1e59c0e987e5cd35f8971823e9aaef9a3a35d5319c35e724f4bb6ed25264fdcca880eaba6e7930a2f7c961de0deef033662d7fe8dd473102520ccf21258fe0b211aaffcf2c5fb9c9344212842e5d362972267cd40187038361a2fb86efc514a3ddc5072fe3b11dbdc3ae94a50532ddb2c17a67f866506bd79c26d0c1366771f3b87243ad355f0eceb4c7e1c2a6e356956455a04daec0cd1a9ed4ff50568522ea79c1400412acb4a77291960324ee13f3ae12a035dd9a825c2c38890b225ca2aba800dd0e6a6f28f8fb71cf5a8f34dec6de98cb380a468b432c6988730a7497dc5ba0a2b00950c068c5a00aa9780be2b8c4e4e04fa34058f01d203634c523147cd03fe59b2757a01befb67dc8a710b930234ac3193665290c607169b35bed395078969dab7a0281d781c4e0a44d2088366acc8c7ef752761e44dab21398eade984026e56d1275e1ebee3ac9dedf40fbdf4ef9fa6f628463a88dae7727f9bce949d826826d0490a2e88d851d4093cb024dc52e2ed86d2dd463d14c478758d68fc955bc208995ac04c655bdd719a076a3e2200cd78511ae4db1fafb5220a4022d0c1018ed79a7cddc010241f365fced53e1aae83d20fe94acabaa469eac0c9e91016d6e8cd3dc2dba5bfca395e7ce8222e0b0092b73db8cce52f4ec7d5e51ea702fc8591ab2b517de4d617b3db06823ea97b52f26dc438af984653890168d6c4dd8fee34d2342c0dfb3dcae79082f7c4c2b7ae404958a16cd776926c65013aae73baf7f8af31c6c9eb96dc07e6b12fa886816c8cf739fbf4abbfa25e276dd6bbfde1c902b127362969194b217146027738879cd677a4ecfaac3f98ecce3df686f1a380fe3815430ba5c3fa5d161d2e857247fae581fa3ebb596a4fb586fa49098abceafe89d529dcfcc2c332b5475480af5f7d5a4fdd0c7ae56d225defca98028b58d20db03e5ca7782f30c7f807dda2ba0338decee00ab513da3fec8e32b109130a7b21820d21b51705a3eeca3deea50527cd466f32448045781cd64cc4f3f76da52f3b760d3e95a8319d5ae2442a87fd48469a6c87383327d2260cc94368b0e6459f6343889f7316c15fc3bb505a05ffcea9f192abdc51c0cec66ba9c64d127f52b58f26f04b20ec8e839815684f170c6d47bb8953aa7b0ca23f63388e0aad7e309b879d8c45f27105c05cf5a81bf2484c2fddfce52cb53b4b2cae7dd3874a444c85f688ed1efeb9a79775774f498999264fb281ae67d3d1acea8592d4e0b38cfbb1d5ad32125c3365b85a0a5902cc702775a2edfefc9bb13a6df46c33e53e14a1cdc43b673b2b29d919c03be3da45f77af888f3d88497204316b34783d672404c7b5fbf07fa294dfc3c13e5bae2d5e565ed68b854ea67f23bca1c5457a6db3a60f9c5efc9f280e5a1459e70542f22297e72a79c90e219a547e6bf5532670b590ec72e24e964f8435bf15c6c881896cb94d971632cc35a2dcb3b3a8485397a2cd6a7772f557772018af814d881f87b1d7fe56cccdfbd30502b56598d240f521391fef2e6ead19f5114660a69cacca428d122f94bd62bde38d49ec1b5dc6ce9722671020228f327e30622bd2165984a01f28ccf5f3a49f6655c040c86a1edcd44912efef45868536aada4d136b28d6744e988a90f9926ce0be5c3dfb7d114f0be393a26da141865a4fc6bef3a7ebb2dc5b18835792861e75ac2b5e80e227acbf97879209e36e42a5b2aa02cc0660948ba4b220d49fdc343938db1b30e3ec47d82c064673dd231d73ac57e7f53b8d8463aa7bb39a2fc44d7fe080f25590866aa8afb7c22e5e9486a48d61feec722e5211e81ed960e3fae88d283387f9f1d912ba146b65b8e94e1ea5fc1a9f578732a3e91ea2d16a963d5ccea2e5144d9cc8956204cbb6b79fb756561ed7648ada7bbfcaa5a2c6b8a1f1df97177212f5dd27bb2e9b8346681db4942af88985a121fd26cb82c1803adee7ab3e6a961dc737e88079cb771b3cfaa6b3674f8e42964d5c8fa2a8c4ca8529ed364f59a00dd6f316ffb97d0612635558ba7c3cc32c977d3d35d3cee07371bf6c953a0c19ad9b2c1b90f6a4ba8112298172b8ef2483d2747bc13e2393afacf061ab5c745a03301b11996446c10df3f6c59f6a94bd7bc0c010b3494f87342562a6de311a8b9eab348f6fcf7f87bf6a0ee177ea107c83b09235e5e257374600b6a7078bd5f8957629d95256d89e19c9", 0x1000}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="eee61377b035f496737e39b80ed2d44ccdb7b9382c1f092de022799da26441cf0333e60132a2faeedd83c1e7d570f053abf59aac8b4469033fc7cb8bc86f0c58db1fad4bf569e9b3fe4f1cb21034eabc3727ba61cd0ad9d4db29aad411d7b9e6a005d9d21f86b2bbe266c714d651b6c5a4e95afc1468ba2202c31d427673b480c6a24adf730e8831a4376ddaccce20af7c10c129934f8bada01952dc5b83d01fd191eefcfe658180739e6629ae1e0fa554085fa13a57862d8164d18c028b525fc008a8b5c3e3fd4b7ac66be9b3c1d7296a360a5a2f93e7bdda70af3cd4e54f4c9c4056ae5baeeddfad9231f99a4aa3f57f85d1e6697dc1", 0xf7}, {&(0x7f0000002780)="de3f52d35c0b3118ef99fcda181c636964a18f1345dcdf896da7b955019d2da9aaff56795c4f84ee2c6aed82ef231715bb8459d5b216607b8110618acac71a229b9f9a24c9ef37fd4910375ce26cf82665c6fa983f4943cce84c91174142b878326ef0e009909299bfa05f8019d97aec805e60ff3ae20b07117d846ed6ce5b420bc224ba88a01c4889087cb29c7956bd8602e69e20551d1cafe57d1113296b7f0a9a5938a87f98f1e230d14e6b7bde3706bd490afeb1672791b63439036df3bae3916150fc432017d2416ca33bd72217b7de67318ec063f12a97eb1e6668fb25ea849868e769769ffd8c090e63886593ff78dd7bf726", 0xf6}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="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", 0x1000}, {&(0x7f0000004880)="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", 0x1000}], 0x9, 0x0, 0x0, 0x14}, {0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f0000005940)="0b6f1d3f20e2353887498707e65fe9e7", 0x10}, {&(0x7f0000005980)="edd84f04da71369fab1b3cabbae07eadca4ab22b3733aaf08179099034b9e4ab1c39db33186eba1f68aef0d73a7c7e8ff26b3a3448d12011f959e3336b3ce6700173232632a41cb4563187ddb648", 0x4e}, {&(0x7f0000005a00)="e4a9137a694e323f09d1dcb30f34b7b70ffe676e9d995b577c2ce51a99f02bf7d2ae2701240e034013b52fb9bcc94b908606facf53ed3a299d4f1d9cd315a47c6cb98ef35d6fbd26827ea0b320d40cdfc11a579434d0eaee296499ac40586c112c548aaedd72219bbc0a4d8082962c497d33d6cd0dd50b9397e2af8a80a45c908ee49f5d6369eb9bee71ee25b4c35d049a4fffb99320fe46fc59119600f1d81aa7cb681984c6502a97994a61379e2d4bd9bdd878fafd669d0ed43d871be21fabfb0af8dc86a7993acc5eb329968dbb80893a0550ce640da324a0ebc8137207978a04f4a11875f044", 0xe8}], 0x3, &(0x7f0000009000)=ANY=[@ANYBLOB="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"], 0xe0, 0x40000}, {0x0, 0x0, &(0x7f0000005e40)=[{&(0x7f0000005c40)="f803799d65aad942e16c57eb81a24411287b4366cbbb773969659cc8dee556a5ce5fbb9680e4cce771b74bde715033c77449319772580d3c2d17541c11889f7028570c69acef3fc06b6ecfda3ae383a8879bbf2ce0fe3da837563d557943e7dd2672a7ee561d8b5c840dada6da1a31c0645e3c0dc1935f599485fc29b1d3cdc38c644cc6a48b79dc14fbf60d1815713c6667a5fcafb8c2edacff3476120d6c75e63dc4167c14f67ee922d578f2f13b9ae80bdb0822", 0xb5}, {&(0x7f0000005d00)="bfd4795dc9cf3b16ef6c6b9f375259714f02eba321c214e14fa63bb9e27793d06c36beb6697bb97fd2de6268baea04cb5ce62ea10395a1604fa220ab8d2c5d117a44535871dc149f684135113e1e25bea9c0dc67c02c67d2fdc9248b96bf8d0dad1e53c7ecf4c66a44cc98f7bcfc4355f0b272e8b1c38e6a2037adeed689b6a99a80ec0295814f9a3612e28defee85f256c7088013e437c7724c6610aac0a46e7a28381a6a", 0xa5}, {&(0x7f0000008f80)="78db89fa557d4e5b440b6be1d2e6fc76d084e16415d89c2b10a4e1ba859c358854982e27fbebf8f905d5de693bdd2757726ad76e616195c75c979222579549470a733cb18f479b71772da39106a1f10cd349a7afb26a85e5a49de6337c8c403b547c2bda4e1e59523cc0c65177719aa3307333bbc9cfeca4d287a119ee", 0x7d}], 0x3, &(0x7f0000005e80)=[@assoc={0x18, 0x117, 0x4, 0xfff}], 0x18, 0x4801}, {0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000005ec0)="f5f273ea218dcfa7b11e072d4fb2cd49da8eb65beffce0094080b62655ce5d1c3a2fa27e996d4385c42fa4b5bf7d446e28159bf53267ec33950ddb67bfdc9e4805e4ecbdd7e6dbfddfda44614357cf401847d68f3c01d1221528e853c2d65dc9502e95c9adb1992fcbece9cbbb840285dad113b9bdaed212f9bb4254b6cdb6b8c1e0d349c7288ccbd68c1a6249e1c00ee35c83530ab863a9d28630a17f082725105af1eff2da4e4faf7fd3845da02201362c71cc06da3e", 0xb7}, {&(0x7f0000005f80)="9f1cafcdefd2c7b5821cd4ee7e187e7a38fdcd3dc709f25244c04dae4ca4999089ed6ead78edd839e97724453427087c39d74643ab019fc895b92f5f37e654ff46535919ddf8d08cfd2cebceda6cf0216f0210990533daca6a65db5c27b7b28d26292d90578c1e53eb7f2a2b12cf76ac20ee78af3fac1f26d2c441ae4e932bffe9872c524eb0a5e7cc0470ece6be12f8759552c3a8fa2f3485f05278472aa00086d18da1684a856b9f476b51a039634b392771e89406892d9556f6148397f9ef78808a4892afa42d9900", 0xca}, {&(0x7f0000006080)="16de91b3fe51f922a66b34c8850d5692ac03847af0ecff8b5a", 0x19}], 0x3, &(0x7f0000006100)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30, 0x80}, {0x0, 0x0, &(0x7f00000061c0)=[{&(0x7f0000006140)="010e9c296e47db8cf057b6ad6cc4f599fe2834dd32975403d1644f9c60df4dd66a69d7aed40cca5c8236a13dc8b885d866a67ec2b6a224554c9da691e0eb9a38db0a0898", 0x44}], 0x1, &(0x7f0000006200)=[@op={0x18}], 0x18, 0x80}, {0x0, 0x0, &(0x7f0000008780)=[{&(0x7f0000006240)="cddcdaae", 0x4}, {&(0x7f0000006280)="216c957eaad0c0fde7f21b987b34de68744886e2944de4a563f0c4cf4243a967e9be65531134c040c1bfc19ba8dccfa040777823a638bec52e6af69e421798f4191c9b7b9deca21ea67d2220f948a72dd5845aea43d93bc68e444b5ae1ba1a718ff5ce04cf352cab2fc33a9a47c79ea537fecfb7bac53f23cb679bb7af23baf872dbef42288a57f2a06ce853718747e5bd47bc40a3a2655f9b1aa67b68c2a407d5f5edcd4bab82e388b56d596dad86e24b034787e96e3c28058a5f025072efc17bc250b6ea15b17c5e7c8f9c3bdbb6c3", 0xd0}, {&(0x7f0000006380)="784d3431281682c02c08276d69388e008cb7d9b3a694ffa39c4c256565483b5adc403509fef1c68d4a8b0bfaad60a38ac6520aa890f3f24bf55928ee949e5e349f71fc15814b953ec0310cbdcbd621c174bbcd365ccaa825ebd8bf7c81ad2d6a66f3dac97a6f21f6a8efa82322fa595570f43335eab1fd45628f63869b04b222ce56685708f903a4d9d2866ed15b65dce70997c4bbf1", 0x96}, {&(0x7f0000006440)="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", 0x1000}, {&(0x7f0000007440)="69b035853c35afd818b4ecdb510a9813d26ad6feee8aa21083eac95de52c3045c1752dc850", 0x25}, {&(0x7f0000007480)="ee77c795dea5cc7617b2db6592c5bcbacb8b913fc68da86839742f463f482cd711747785f401897b46c610371a308bb1d8c6065557d8960f3650a06ed0d2605038b95cbc5d7e097da34447ce4d5f6cc0de5da30ade8e58431cc7be7f294cde38149cb92fc411115a094d1f79746313e26a4b4ce22226e71c24829d4a4258efa23f1c2e99a28f0ad58ec7b8e81c7a4dbdba4e5473866860f999ed5ed2b643a2a84ffeba5cc147237af64e8468607910f528e77a2a48aeff9363b366623f6b5e799cfac28f3d089845075932e9af1bf6093905b20ae29ea32a56000d0e92", 0xdd}, {&(0x7f0000007580)="9b8eb0b76fee9e19789f1aba79a10ddec484943b4bb8dab9d34d39c0134583b8a2a0449201665ecfbc74316e3452716fce1662aa05bc488134d69eef3c1abe80702158321938d23ccd4e0bb4ba0c85d25212fdc9ec7970ad550558740a052582b3d7544768d81c60bd1f771883faf19a0b69996e0f06da65b4dc88829cb165c09a2282c3e4beb637c56607b466357141a8283984bf07a4c94955987c6f387745fb47ab44c3384eebfb416f7d33900f4fc3f5b2afb1ea16b672e4327e0d97dae63a8f9ee35ca6ae9f2443848eebc8aa102324e7dbdf8286", 0xd7}, {&(0x7f0000007680)="a4ec582a2987f8c12830311982dc1286618a0e6043fe00b9cef6909d9ffa2e4d7d8fea115f2e399eaa55e04dc4d8abcce0d314efb115d67cd1fa0f06f03d23f184d31c714829ebe287dda8c9477f834b494f7c2b7a2b4279ef5d504206b274d5ab693c050b29ce6a40903e07b8abe03c47d5e1f994b74bedddc633be5d3ced03d447ea6ae49e863eee4fd3858d43172c0347feac16a96d7d353a73981dded6ebe7c872e3d8e011d3ff7814dc7cf21790411a48596c304b2b6148508d27efacf5ad46fc930c83b520ad2e854882ea8f5a8cb2acfae9500b029d031d5a47853c9caf404f94e1480920b20f2dba68bafbb9b27fde7957b943de997d71b4eacb66e3c2aedac901bfacdd54acecf0dc8f7456a518506b0d93d244a34b571936a65fb0d0a3e3fe02831b2f5271869b722dc1e6369a0a38ce1a7c8d1231be40465dc6099e9716b697011390d993413281e78ba759e54d2c677111650dcf8ba75cab33e9ae88bbdba5172605092c66e8870d0ca7bf5a85330f452e8074232ee1310eabed4bda6169d12f45fca54cb5d2d8d5db07bd4de8f749a9221a7a3908ae3e609151ed178d8265b849b10f36a0d167da5308591b1ae353a6f6747e05345d5db1c9b67f7e3507d9dc52a35e7a8023c9f53eb7a9685382655e95b3e99aa7f6f5d8f0e8ce96b8d27d9d285f4905db39bb04a5b3b4323a402fecb2a28ec21608201d97833c4e304339f1dbc6a27e3b28ecb0326e9729e34c0aaae7e66113b391ba26e50cd31551c8b009db7e886783a60432e7ce2d0434f24dc579cdde035b9d52e411f4654432e41e09a91b706ed86ddf6ba14a978a5fc1c7bb25fb6cb915c859b9133094b11076b45f323a963ee90e846f319574bde8fedaa5d0f5fc9ac906e3b65b8a37a96be46148e4d9d65570f2baddda8cc05fc9137ea8ac16f6b453a60ffcc760dbd9be3121348baaf82202502ec2acdaa0694307ada832390f6078a684dcaffe729621260c21113704bc0cec083eed108b6178c9be24ca2f6a9239de5fb6f812ff93d23721ec9d8402bd2034390c04f32fcd43ce7bea1a5d9abc9ef91891f08c7c2716122141c0b11aa39e92fb38add89e84a89d74851c3d0ff30b631799a5dfb594bcf0cfbfca9514e65b367c4a8071bf7f0f3b18bc0b7982a5c1cb2b41ce970e7d98153b57e62bdd0cbec4574d9ec47344bd899d62e84398e223c338454e64f872546180749879a759a9f157ce10b948e41d1d0a87a3d585ed571fb5e41f023857bbeb81f5d4236683353c33a59d922541e13affded5f70b9495b65080e77923d7166015923886aa38e7d58d9ba32046280625a23299987984ca5efb62ac5a635b44e81ed4ae3b66754900b491846f59f7ca306b3ba2865a339e3dfbb42c39eaedca49f90320707c1f6411b43bbeb55fe88b1ce0440617bd0b6b5e95cb5df10bbc4fa987c59c2a933b8e06d36c9a49a8970a6ab917b53eb64f00fc44c4ee2c57d38b817ac6297ab79016d55856514f480817224f6573b32fbcdc500e6c324f0878528dd8401c547f5ddf7dd0d1f583ca49bdc802edf974edf315dfe1eed1db13a488f77b78288ac2d30a10736ab3e58ddcbe5f0b675af98c5bea63183ddae3ce9aadce26e5052b3c09935c519cb24d066d4a09b0fac3b326c2208821459903d657250044a9f94665e4027422f1cb7f038298dd1b3a8da53fbf00418ea1cb38d2569fba85d56d30d762924ecd2cf720174c5a1e8defcaaad5307b2cb7101bbc18c5dc2b78501578dbca25591bd540ec98b30149f1a61a1725cfc5730d7b9b998f1e19ad506ceeff39c05b9a2141a6fe5a4ec3fd51b9feab8a0ce212e2836a0ce0c9bd178bca4ebafac33c083b31d57a8ecf9d4aa645f6930cf16e768b506851e21b40380eece9767050f1165d125f611c4c46cd77f29eb6101d57f70ec05d71aae05cdf09c29f14188b8610178fc76f5fbb41fc7d97b5387dce3622aa194a697a4acc8d1fd5fd6fe0e89166ad98af9a63ded5c58a325e87d1fed5bf9d1f34c1ca9f8286609626a1bfe58778d6c00a0c4894e0c3622ced912889a73aba7056c4f157e41851b4b335fee9b1580f9e5a141df074a94128abf21d2e824732ed2f3078d237dc146212302d0b6cafd155a241fdfa00db094e47200d708176d9024e63c4ae1416db2a2cc54f0ca4530eb19ce1c29644bce0ea046883031e57fccd9b095a9f36e2d100f56421d30d96a467f2c404aafa29532d51a8ed990137bd676bc0675819964dc6b572b3710323b14a06c8396e37207c1503a681dcaf86e1bb046a1e6bf5cd92141c32f19e232b64a90a0608b54a16f6be0156641888cad405bc1f43eb3cbcc3a7126dc893a38f78fb689371916c1bf292892d2cbc39a0d2e0e7b712b56bad06a686dde5b07ba59092a3fe0b88678573590b1394d4c46867a79b1db1d08c5b3b8bb6af65339a1ba56e56e4a1afb6ef80acad4090e84dc995ea8229aecabe9a8f4754e7fcb18bd4e4e53b359dc2dbe8d6d71539f34e948ef56b58789823fa44850395ad040fe5a368a58152e65c8b305169cf6b84504e33f4d9ea6f386150c9914d1adccb1652ec84f3eeb355b4bec4d29baacb949d00c5a7c0230b8ae0d6737969a62c7313f21c0cfd53037369a20a3c68deda4278e4119e4de495e6531b878d6b143d66dd76d0c887ba5fb8e268478791bfa73fd4b106afceb5eacfc5cdd6e14479fb19a021c3fca97f4aeee035e201b93a1f5f37092fdfe14c4baeb1c97a08db08fa7d1ed396b3324203045982e3a0a55d96fb3da88a65ee044ddf68677048136e249f1be4dcf82f16fbd8f3cd09f3f1c4337d9c564434f0d7d02e6d3dd5c57e1b8e28224ffb624585e607839049ccedcf25e6d17029f319a705d51f483c7ffc78d51f7ac66a4eff78a00d79e65d707295be36ac4a9f14be6972aacb75dde4059fce5536a85dd24fee075fac0b92f23c40380a4d5e85dab32366868d90d226e4ccd8d7014cd21a490121058abce0c1c089b39cf589cc1e5b6117b288807e35692d2de7e6ccf2c23b2fa62b2b0ffb7192d398408534739e649114feefc43a477df5e17b4c6b566ea293b995c9ef200432ed66951ad7de2a6869e7a3077782a9b72cee90625abb79e5a985b9e5d246900b8289d72ca5b552b79c606ffa2715f8bdd74f351f690c3370f40c022a7e5e2f4969d23c27e6b9e1b44e5ae615af90b0065e8cc7202bcf3f9d8348629b892f684eab484b61c221db4afd979b733097f053cbb5d6627701bc9717b38e3da5bc968b100daae4e32d11ea1d297199d522e92722faf1d1c7ef0d6aa20b2261baf68992452fb7a2003e4855789cd21d479ada46243ce99621436a15e8c029627667aa3b1ebf266b8f423d72c29a4500cf41e3576d8ec38199f1719fae48743eb8d1e704d4b27e351ac0ccadaa67087cf5a1488c6e9eae9372b9668c17e7c9bcb397d5f2498a7e7b11121692ad1d9a6b3d6889aa5e607a8836e4dc7e6bdd514512b4eb88916e677573f9085d7b90d9d56c5fb1a449e9674efd6d3c0c165542d741afa6b7641623e72518dbe95bc4d2cf0160a2a84582725eebe36361fe3c3a1bf8b04aeb25bec4d14f0ab08ce831fa2b16910b704828661ef875541d4e01f11e57d13c4deac7f37fecddf0c0e4f71bf6adedd004afaf298fc0db5c27e5f51c3ea3c913ad5b9f964715fce0e53bd1785f377f74a4206e52069d6283cd3b7f2062661488aa6c0b0e5abf155c121bbee0729ef56423113d39ecd5de41b513cf132b5e40b47815a43a0d21adb0db125813ea1b9dd686d329e92793ed10bab40913140fe7dd88c479ec0c184c6c8af39d745a8fd97ba2ca208bca4d2b5b17b3b3a8564cff29135efb560354543f3e961e66d1c3471d18b67955336836353704a6bbe8d0def1853c8a6f9cc19bd1ce2114440711892c9c99df638e3d94ba6fa3f08ec1f005928f0fda9d4a3d154bcd49a144b29ea26777d9b6201f8cc9f05912a217cc72a69d8ef920550bd34a2df17dbdfb18344f8e149d20e65c8c204de5cce7229a54dd3639d7ecd71048a18faa82cb0bcccf53cf723a22c0c2165499632e9d6c028f9fce1fec6bd0152878ac8065d6f351fa5767545f436d855c7bad74c6aafb852f34817431bb211c1ae6c85ede8468e84e4767d673067602fd2f1853e634b9cee0a42f1cb68acce965db42885786275baeea2e02c5ad0f0e4f8362554b1cffeac239159a61f18b1b0c8a9e1eb2f9b477982f5697a2227deff4c6f4ee860b5c1ea3ab4cf2cb34ae6ff435e3df9f0d23b089196b5f24eb1de2552828e9b5ead1f89ee77b7626175b75a15426688d3d5ccb297ab0f1f08962d32e1994b7ab9ae75666892af9e5402b931895276be9eb77842b244ae678616e527810574346c0943dc7da07f22bc1070b746809a8a99fb723faf7867bbc494ac2f4ab038ee7bde6047d193ff530fef410cdc7e1819528c982949a0f1748538ac98b7c95fa8256f54a2236a4521b52c359624c3c916be2a0a972ff3830245a4ae1f7770ead54fbc20bb161f5c3750a4e8bfedd1453245f94f14e5449508b0990694ce9a87d0877e98e6f37949b0dd308ce24ab967e132b8f9ee0265d26d79bde60f94e40b2edc52412b84ca86b3cdc309e9da5a207469af578bc7a321f1cb45b415c04f097e9b321339867a22fd811f7352fc1b21b862a4561d11a894696b2e2a8a1fc6cda1c3594a8ca538d0eec468db7286e582ad5116caa9e84a2e0733a7494c94ecd2b12a4d348631caa8770e8fd2fee4ade78588bc7a5c6f477a0d28f50459f2fd7ac993760a8288d8696565a9487d83f784c2f2c6f85a6e59019ac511d81d9bd20f323acf43b29322909379e5e5e13b86d13b87d6e2999b04b427202af4f79b03109798d7cf586a9390f1dfb6b93838721907860c7915f81d430e536cc65e0974143f0916223901c7336bc5b1eb9e1f96a0d54fbc8e3e5d78bf3de7a59644ad1205c280eb1bed2619b8ee2f9b8f947c1ad1e3656ae725a1f231b72b2df2dceb5f8893b0068d51ceb96e9a9e89dc11d9f8c471e110ed01dc66968dde82047b89117fd388615079be7b4eb3822cdee33401b1ed3d0ad2cd820ea2f316a36827d1d5cdf3532300f56ea766e1522aa68c9ad2d6c3935555d61ce7cce738eca5357163394632a83668d426a9db72d04f199c69865e9f6038a22d87e771fb82ec2a16cf724e71683d60fd1de765ad8e43616002809de9a3120607419a26aa5f1d66e6bfcb4d34cbb3604a1a37703790d24b88258dba831b077ec0d24f65967bd5f3f8715094d5f6444ab9f76042fda46992cc118d76bb914f7be9f34bc894725a93677f4ed634945eb1a8a29a746a2d3bcb186638b3ec9b823bd0b91bfe92ddbb070556f021af96260d450e29926c03ddd0be3081ce8cff1b629663c22f23a51eaaac51c94bf08a07d07b161763ce6b744f34e0f2a29c824f52ef80d8c861683c63d73f208e3f8e26579818c260c6109d3272024a3792aaaec8a890a92227064076db945171f5a69eec404fd55df6bc3f9150a32babea98b55801688015099d6a6ee06a0b49a7d9ecdddb0e76abead705631f996cc3553c1215ab2b151b0ce6cae84e42c3aaeb2e2943d0afb898a68d5df214de454409bf2812b7b41750653bfad548f2ff21209d9d90473a37a50edef959fb8d34535bce50b2a3cb822554c5b1f574cb43c8460f43d29e7a96b5ae7a53961a38bac6ad272df9b65cc9ba9f6f14d6ce28fdd19bbbe3ecdf71baeba54c05f3791e5e863e2", 0x1000}, {&(0x7f0000008680)="a880c8cff3261d744d26f8ae4bf282d39d9df97e10f333e315d2719087eb855593a540f0954a011613ab3839da86f656c986f0863e10ca88eb92295f926b3d859c9dfed8ec8fd7881fa960a4e200c7d82072b37bc03181a6fa0063292e2a86b42e6cdb3d00b27c8b2c086a40d4b0263c3501c0231d8809e60924738448aa77eec7e018d5f42fee748dd8ccff6563180cd020c6745a37355bb2516570040f4462b9d86f1854bb2df554e2487fc4017fc39618f8a30b445974ecf419e81693fcb282eac3337eb0910196dcbb5cb992f4dc08b212fa3a8372207f5693d7b58055b142", 0xe1}], 0x9, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000008880)=[{&(0x7f0000008840)="0976803edcd015b71aa9d0c5bd380eca32aa4bf1ed741678b3ffe64d9b3347c727366158adaf", 0x26}], 0x1, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000008d00)=[{&(0x7f00000088c0)="21075a2640a3b929aad70236bad57205107e3aece2c451fb887a9fe901f1fe4402e889701d62ee801ff7eeac22c1f23f8d6835c3bf16c99bbb913c913096982a2d144364eeccaadc46c38fbf6bc9ab313816a4a8c1f444a6cb9b57313265c9de1f4ac188d7a6e4c67cd811086c67ad24f87beded7adec8560e983152f7a951eda116634237d861a5eea0ca70c0daf2d449600eb8dadb4ed037280ea1f10a1982964c97699279b1325f14a08f9787e371ad", 0xb1}, {&(0x7f0000008980)="70a3d5e18b9863110f1ddbeda68e5a63e167e908564cba0545ba49bd5fadcc137be62be06188b298faeba734f2c2b4e324d5656e39ffb7d041e8a3371def6c3d62060d52b7ba92d1f02dd25172197b03fcfd34e49f93caa9f2a7ff6b98ca72b50ee5dc1bcd35836d082db50e6bdd1ae3e2d412bede1857b8a4c030cb3b1d9743c4ddc1261205df518fad83d4e80e3005b6e5333ee8e18aeadd22186bc8cb0dc174e1ff8df218341f", 0xa8}, {&(0x7f0000008a40)="01c4dd57953e0cf65bb976d3910bb95c20a8a63a48c7e7716cb10e01719ad7a433c19579c6d909b65176b7f9d534f870290e13cade036959089fef04f49fea61a703b53b4cb88c58d9fd3f924f75a1", 0x4f}, {&(0x7f0000008ac0)="980dbb861a82973c848824d741fed2388db2c29d9f92496e646562767236e7bdc754cebd189c45bba7b22b0955feac77371ce4683714213444d0315dfb6a6bca0bba58ee682ed95a2e199fe6d4e455b908b2a0bc12970fe99376ee8a8321af5a252c763e806f5564f627a15e72fcb1ae22de8401cdf9807926947c9311a4354d48ad2f9bfc7ee3839c506683d76a7cbc2891aebb78dda873ad382718b6e4e52d96bed31a433713cc0d733cac1fd43a7322f14e642e0baa", 0xb7}, {&(0x7f0000008b80)="eff5ba5c607fffca3a5a8f087ed55860d48309fd5e08311658aab56890639fbb24328d17329bf75938dca3a571e2b249296bcd229e3e5277b8abae459fcb2eae70bd4a1c99bea75dfd40fd33237454", 0x4f}, {&(0x7f0000008c00)="3e8051a07920e5626ae1ff704e8cf48c8566f64d267b2ca165f6a0e2a0b65c0cc860d7fe210a8ca71fbd8ae685187205fc2a470c85f0f6c0b6074b4943e5c23c767e01b762744dd19f9b8eeefbbeb026ca4591efa7b1224491f322a74ca5850c6570c83db5880ddd2888c6a11efb6c5ba82f5b5e7b365a6b2cad5b092cbf8e673b4696f7012bd104006ab8e33a6c914e260e886b2966f4b4c9cb9463067f2954eb0756fea89abad14f28d7a796b666e3ac8b6c05", 0xb4}, {&(0x7f0000008cc0)}], 0x7, &(0x7f0000008d80), 0x0, 0x4}], 0x8, 0x40000) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x1}}, 0x18) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000080)=0x5b0, 0x4) 07:43:54 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000080)=0xce) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/netlink\x00') r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) ptrace$cont(0x7, r1, 0x0, 0x0) 07:43:54 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDMKTONE(r3, 0x4b30, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r5) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:56 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0xfe66) read(r3, &(0x7f0000000380)=""/225, 0x900a453f) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000180)=0x101, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1, 0x8, 0x6, 0x2}, {0x7, 0x18, 0x1, 0xf15}, {0xc2, 0x1, 0x6, 0xbe8b}, {0x7, 0x1, 0x81, 0x1f}, {0x25, 0x80, 0x19, 0x5}, {0x200, 0x3, 0x1, 0x3}]}, 0x10) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x800000004001fc) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioprio_set$pid(0x1, r4, 0x4) 07:43:56 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x4, 0x5, 0x4, 0xe000, 0x3f, {}, {0x2, 0xe, 0x0, 0x3, 0x2, 0x4, "74e44b38"}, 0x1, 0x3, @userptr=0x81, 0x9, 0x0, 0xffffffffffffffff}) r3 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00df05e5ff0000", @ANYRESOCT, @ANYBLOB="0f00030000000b00e0ff0a000600050006800000"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffc62, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'TIPC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x5c}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:56 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x130, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x61}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)={0x8f, 0x3, 0x4, 0x2210032, 0x5, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x2, 0x6d, 0x20, "7c01edf2"}, 0x7, 0x4, @planes=&(0x7f00000003c0)={0x3, 0x951, @fd, 0x8}, 0x0, 0x0, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}}, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r9, 0xc, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:56 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:57 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x100000f, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) r6 = dup2(r3, r5) sendto$ax25(r6, &(0x7f0000000180)="922292d9ae1a9a2b5d25307b53420eaace90936c8f75dd647dba9a35ad601d24134dcaa0d525fb723bf435a001caadcfd0f66ff91f179d97c5e57914fa41d7ac8f31c2e09406fca83c3010fa407edc17e004545b3e0e099b87eb0bd36f26d4fd7784dec6d92d84b904f0643c54963f7055c91c01f4487c23340fba0e4c235121df326ff18716336cc23fb54759691d7afe7ac9efadacf8e62f492ac47aadaedf7732c6ca42849200735afd2d52d40256f1a0ce3594644246fcee217642398e32b963fbe9d8d26891419485afba4589c6a2325e9bb6aedacb29ce3facb08a007432cb", 0xe2, 0x10, &(0x7f0000000280)={{0x3, @null}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null]}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$rose(r9, 0x104, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:43:57 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x80000, 0x4) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:57 executing program 2: unshare(0x2e020000) r0 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='fd\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r1) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r2) r3 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="ca7e9c75ca1777273c5ce7c6f68b032e2b64e93aa1d566f0fdd10a466084721642a9ddba548676dd", 0x28, r2) keyctl$instantiate(0xc, r0, &(0x7f0000000180)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'systemem1'}, 0x1f, r3) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x8f18e23e98e02ad2) r4 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000300)=0x80, 0x800) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) fallocate(r5, 0x2, 0x3ff, 0x1000) 07:43:57 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='net/nfsfs\x00') 07:43:57 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RREADDIR(r3, &(0x7f0000000180)={0xe4, 0x29, 0x2, {0x401, [{{0x20, 0x2, 0x2}, 0xffffffffffffffff, 0x1, 0x7, './file0'}, {{0x80, 0x3}, 0x1ab, 0x1, 0x7, './file0'}, {{0x10, 0x2, 0x7}, 0x100000000, 0x9, 0x7, './file0'}, {{0x1, 0x1, 0x8}, 0x2, 0x81, 0x7, './file0'}, {{0x0, 0x3, 0x6}, 0x5, 0x7c, 0x7, './file0'}, {{0x4, 0x1}, 0x9, 0x4, 0x7, './file0'}, {{0x40, 0x3}, 0xff, 0x0, 0x7, './file0'}]}}, 0xe4) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:57 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) fcntl$dupfd(r2, 0x406, r0) prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000200)=0x4) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') recvfrom(r1, &(0x7f0000000080)=""/118, 0x76, 0xc0000023, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x5, 0x9, "11654fdf6c2ae4f60941d58aeda3374d01384124eac3ac5cdf503e58fa32e003534c5c3059ff54f987feea09bc916d27f233dd543295d2e785cf4a16076a4c", 0x3c}, 0x80) 07:43:59 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x400, 0x0, 0x81, 0x80, 0x8}, 0xc) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:59 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r0, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000180)=@v2={0x3, 0x1, 0x14, 0x200, 0x12, "238cc89f05774667bf0a301ee717268ab239"}, 0x1b, 0x0) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x2000) mmap$snddsp(&(0x7f000056d000/0x2000)=nil, 0x2000, 0x2, 0x30, r2, 0x8000) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000001c0)=[0x4, 0x4], 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:43:59 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) sendmsg(r6, &(0x7f00000006c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast2}, 0x3, 0x1, 0x4, 0x3}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="64e2d54c9cd9edef855e53722052a342d9a8a999524ea916462c3cf5464f1ce78fdcec04f7c1cd349f34878276e3eb5fc361b010621fd980b0b8c8c83bb902", 0x3f}, {&(0x7f0000000240)="d778eacdae40fc27eca49ca0ab1e9789963caac4edbe532bdd0d5705bc0264a6fbce66681c2483a9706fef28206bda37ac1751e727d06235388a050208267b", 0x3f}, {&(0x7f0000000280)="9508c72216d77437451255447aed6618ec392891d78d71ab4c9425c9323ca65bf39f5e7afb2a7dd6a660704d4fdeaf768e732eea496e6e769744551fd79d03d03d27db61a67d29ac15584a769b5413d72b9c94f78a8eccd2278b7a5c4a129a13bfdac091916295fb2d3510496081c149419534af02e372dd7896e6d15300cb512d19e6f5c9887f64442fd82c0abf32d3b901006d04f2e21c52673104406b127d4b1ca23328149129df42b7f879b54503d4f56555b0cd49dacbe8d4a6141b842ea1b0d3c6032f36ef6d8c5ae0f69378a88179cc26199713c610c69b4da6855ec4ca3acbe350c2a9e80ee0abe41f4a2c52c590d4993559", 0xf6}], 0x3, &(0x7f00000003c0)=[{0x70, 0x109, 0x6, "a47348b048604d7aa03cf662e5a1001aa65442816d494f510a0d9d3f1c3de21163bd43dfa66121f694440a0912cbd1e7a4a7fcb6b4070cead86d01c7574f7e9bd4b6f48e561c442320c8df0d84a577ee0ffdd9b32e1a6241803b445d"}, {0xb0, 0x100, 0x2, "6e222a58a56433a07bd6bed70a0238be7968de60272271c8b0525f04f152425bbbe73b76c7f6fb3ea960bafbbbcc244b8eb52eb46cec4e18546b753321d912ab96249f60b4c7199c85f5296aea9db5464f59991b8c00ea3fd6f448ab314e8dfbb992fef137f06aaee639eb37fa45af2773ccbec2cbe015826f6952856d093419b30875f54f1fb013735112108cb8ef382ac83bc10b4e231492c574"}, {0x48, 0x10b, 0x4, "d0afc14cff0d5d3c11eb016261b3e0136f4db2504117cd40e61d0ef56de894a3d9e9e12ba0648e9b5136ac1e235b3a3fd9707b"}, {0x88, 0x116, 0x3, "c4101919193e764ffd09ee7e9458246b9ff256d5a38d6c9a04e77211f9406fa7bb6da25d4a9f66f37ab9b5c44b18c1375567fe0057d3fff6d2e955e1a9992ec7b8bd0f9eb0e4f79b9bcd7268e987b0dbbfd97a9833221a0b07382567e27d95045182c84318ebac4cf60300f4009d25f26eb1fbc886f45d17"}, {0xf0, 0x10c, 0x0, "d6427f7486f62b1e0ec624e28be6febd881d8495db0373b65e89df00a0d67df59e991783dd6e4567895c9b4ab749e108cc6acdb5a67926a1b69731f02241f0060f231879e875411797a7864b91bbe3ff62725f9413033d932c7f785b43574759bcf1c77f775aaee107f7e3a942136ef268a424ac0ef12737845f17570242a566929f004f822bc474ac6aece041fb845dbb8c989a1bc346ba36dee1d3c4a796553b77a3a812ee4769df5a48917ab458adbf9a2db0c9b1be995c266c0e557c5f7110cb28bba39dcea009e9b5840634ba8566ed2f7fcb51905cc8842eaa"}, {0x18, 0x0, 0x101, "e0eb538145be1640"}], 0x2f8}, 0x44005) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:43:59 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000040)=0x101, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:43:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:43:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x63) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:00 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$tipc(r3, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r4, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x1, [{0x8001, 0x7, 0x2, [], 0x3000}]}) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:00 executing program 0: unshare(0x2e020000) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x7, &(0x7f0000000780)=[{&(0x7f0000000180)="52e40f79b7443e748c7670320ce5960797f45b1aed503f11194e99d613149fb669bea28c273b9ccc0300df0314ea90979ff17d796f5e0b0f25d0ac081656514183a28fc2dab5f9788a99fb5a344f20a772753539ffa8925c79c6ba8a2b749921352aaf8de05dc8f3b8cc4a0c322385d6026d4dc99aa42397", 0x78, 0x9}, {&(0x7f0000000200)="0d2a717ffc4b9e71adf64712af324264635ab7ee543149e8cef9b4e01d64938bc1dc7dba729d0052f9d1b6b8f1c4905cb8245b0944e9f89fb80bb4c9bdda75ed8f41eab464a057fd2196821aa81bb2dae023b62974a1254f4a0343a6279a7b", 0x5f, 0x7}, {&(0x7f0000000280)="39e4daeac835faad0247d57d7977a1d119bb8dbf34eaea47d0a899b9896d5e24", 0x20, 0x2}, {&(0x7f00000002c0)="820c920fd2ee6432d4f81194789e8be7ac24f1653c25e1ee27a0c3484cf67d420d994b8e68aaa2d192a04b5b2c5250f6a66f3d6ca0976b3589beac622103a7999a2d2dd0177b3ecba99614e4d6463753aed7fd325f1e02a90f1a27f889e969968c584f04f1783018a8c2441b3c663cb12aa064f7a6441d5bf2619daf060d378bd30f8903bc9d429ac0f72fdbf04c67b16838c6f6b9fd27a15a703944903a26d171e885ec98e3973126237ef36de4f0ac5b26e9939ef214fed1b083be34a4", 0xbe, 0x9}, {&(0x7f0000000380)="549dcfe56f6074b687b4127f420532dcda09426a467e74fd2900f48bd7c5a1965a834111afd406785e0d35b0b7885a09a9938f9a650ddb6d1b6ad1b244eca5e65f22d59c8436998ca470fdd84a186d6e65e62b3d8c5cff717845239a46d31cd2c2a9e378775c766952c5ed8b7dbd65d8a1ee10f62cbb5250e9fcce405b465d42a616a5e941f22b6f370965b4efa57fb527f4f510e70ba15b4779443845de9426ba39eff94e2c41", 0xa7, 0x5}, {&(0x7f0000000440)="b9c293045854458f481c1c69519b", 0xe, 0x100000001}, {&(0x7f0000000680)="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", 0xfe, 0x7}], 0x1, &(0x7f0000000840)={[{@rescan_uuid_tree='rescan_uuid_tree'}], [{@hash='hash'}, {@dont_appraise='dont_appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x80000001}}, {@hash='hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x38, 0x34, 0x32, 0x66, 0x30, 0x61], 0x2d, [0x62, 0x32, 0x65, 0x65], 0x2d, [0x32, 0x31, 0x64, 0x65], 0x2d, [0x64, 0x62, 0x32, 0x65], 0x2d, [0x35, 0x53, 0x65, 0x66, 0x32, 0x39, 0x63, 0x39]}}}, {@obj_user={'obj_user', 0x3d, '\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC'}}, {@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000a80)={0xe575, 0x3, 0x7, 0x0, 0x0, [{{r4}, 0x10000}, {{r1}, 0x401}, {{r2}, 0x358}, {{}, 0x6}, {{r3}, 0x10001}, {{r2}, 0x2}, {{r1}, 0xfffffffffffffffa}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$phonet(r3, &(0x7f0000000080)="cf6f496f2419", 0x6, 0x20004000, 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000080)) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r3 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400000a) ioctl$SG_GET_SG_TABLESIZE(r6, 0x227f, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getsockopt$ax25_int(r9, 0x101, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:00 executing program 0: unshare(0x2e020000) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:00 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0}) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) accept4$ax25(r2, &(0x7f0000000080)={{0x3, @default}, [@default, @rose, @default, @bcast, @remote, @rose, @netrom, @default]}, &(0x7f0000000100)=0x48, 0x80800) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0]}) 07:44:00 executing program 0: unshare(0x10040380) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) rt_sigaction(0xb, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0, {[0x7fff]}}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:00 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x430400, 0x14) unshare(0x42000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000380)}) r3 = fcntl$dupfd(r0, 0x0, r2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r4 = memfd_create(&(0x7f00000001c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5Q\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r4, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x500, 0x120) rt_sigaction(0x107, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000140)='pagemap\x00') 07:44:00 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f0000000380)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gnoF\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\x15\xea\x80{\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-2\b\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\t\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x1eN\x18\xde\x1d\xbc\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZCX[\x1b\x8fAj\xbf\xb3\xf6\f\xe5$\x90\x14\xffv\xc97\xfc\xc7\x82\x8b[\x02\xc6\xd6\xaf0~\xfc\xfazn\xbe\xa85V\xf8P \xffb\x82tx\n3\xd1\xf3\xc3\xd2I@4\xfd\x12]\xbe\xa2\xcd{m\xc1\n\xbe\x14\xbb\xa2c>\xe2 fJ\xc4\xe6\xeb\xb1', 0x7) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r3, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:01 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{0x7, 0x80}, {0x5, 0x7f}, {0x3, 0x7}, {0x7ff, 0x4}, {0x3}, {0x9f, 0x401}, {0x0, 0x9}, {0x4, 0x4}, {0x6, 0x8}]}) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000180)={0x20, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:03 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{0x0, 0x200, 0x0, 0x0, 0x0, 0x74d5}, {0x801, 0x1, 0x80000000, 0x7fff, 0x0, 0xfffffffffffffffd}]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000100)={r6, 0x1}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000000c0)={r6, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x2000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) 07:44:03 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r2, 0x4c01) unshare(0x2e020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000080)={&(0x7f000033f000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) r6 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r6, 0x0) clone(0xd260000, &(0x7f0000000180)="bd65adfde869210aefb82a4797c8795ea32a13f49483768b15bf3c33ae4395fd8deaec882125474646376969ceb9e3268c821b1c5d894d50bf35b14125c63927a98f7ba824324a1db222db8e02e95bcb5c281f1b254a54bc8b4d8c323b87853d4365193b80cf7a57321fb7d70afd16bbe04e37cdee3d328ff580450958d9c95d5a540a3540a6e17aab0e27c73011241438a8a573483a57f55a6a92373c412f3e5ff3534da492e55965106057850b7cc05553f304247e9dccb7", &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280)="47a55054d27055e19f0f3bd816814d511ea298494354919a6c7236e992192c9cb0cf56553c5afd91648f815ea8e5fbd82c6eff5350f8ead03d9b1c52be063798c939f7aefeb4161b7a99dbf1034a215bb95736aafac4252979c58253") rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r5) close(r2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESOCT=r5, @ANYRES32, @ANYRESDEC, @ANYRES16], 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = dup3(r9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VIDIOC_ENCODER_CMD(r10, 0xc028564d, &(0x7f00000000c0)={0x0, 0x1, [0x100, 0x5, 0x3, 0x400, 0x5, 0x2, 0x7ff, 0x5]}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x3, 0x1000, "03077e", 0x7, 0x2}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000040)=0x7ff, 0x4) r8 = dup(r4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1d}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ptrace$setopts(0x4206, r3, 0xfffffffffffffffc, 0x100000) tkill(r3, 0x12) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) ptrace$cont(0x7, r3, 0x0, 0x0) 07:44:03 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x200) r0 = memfd_create(&(0x7f0000000180)='\x06\xfa\x00\x01/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\b\xf8\xfa\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4|\xa8`\xed;|\x83\x02\xca\x8d\xcf\x1b\xc8\x9e\x9aKg\x05\x00!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\xd4o7\xf6\xb10\x03\x00Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000000080)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x80, 0x0) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000080)=0x200, 0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x6, 0x1, 0x7ae5}) ptrace$setopts(0x4206, r0, 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x3305, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:03 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x2000400200) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000080)) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x12) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)=0x3) 07:44:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x8, 0xa, 0x4, 0x20000000, 0x7fff, {}, {0x1, 0x2, 0x5, 0x2, 0x4, 0x3f, "00ff0300"}, 0x5, 0x3, @offset=0x101, 0x7, 0x0, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0xc00) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000180)={0xffffffff}, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x60}) r6 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x12) ptrace$cont(0x7, r6, 0x0, 0x0) 07:44:03 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:03 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = socket$inet_sctp(0x2, 0x801, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x45) sendmsg(r0, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="b2", 0xff04}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000700), 0x8) r2 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:03 executing program 2: unshare(0x2e020000) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs(r3, &(0x7f00000000c0)='timers\x00') pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) 07:44:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:06 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x100000e, 0x12, r0, 0x18a00000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:06 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x3000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r2, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10, 0x80000) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x88a8}, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f0000000140)={0x6, 0xa, 0x4, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:06 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x15, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x69ea, 0x1, 0x10001}) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) 07:44:06 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x40000000) r0 = memfd_create(&(0x7f0000000180)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7hr\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\x00\x00\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14x\xef_\x05U\xef\xe52\xad\xb2\x92R\xe1}\xc0\xea\xeb\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\x0e2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\\\x8c\xa3]\xb7\xbfcZ-B\xfd1y+r\x91\x9f\xa3M\x89\vLLE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\xaa\x02\xc3R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xd4\xedLY\x12\xd4g\xf2\x85\xd5\xb6G\xa8\xe7\x97B\xaa\nQ\xc5r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x00\x00\x00\x00\x00\x00\x00l\xd9bs\xb5\xc6\t\xdbm\xc2\x10\xc3J\x14\xf2\xb2\x00\x8cS', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair(0x1e, 0x1, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000380)=0xe) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000080)) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000003c0)={0x8001, 0x3, 0x9, 0x3ff, 0x16, "d41e3004fc168b9f6798adeb5406314f30fa5c"}) 07:44:06 executing program 2: unshare(0x2e020000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400)='wireguard\x00') r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x402002, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x8057, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x14, r4, 0x917, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r5 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r5, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1573.899334] IPVS: ftp: loaded support on port[0] = 21 07:44:06 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x6, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}}, 0x2400889d) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000200)={&(0x7f0000000100)=""/237, 0xed}) [ 1574.150833] IPVS: ftp: loaded support on port[0] = 21 07:44:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000080)={0x71eb, 0x1, 0x4, 0x80000, 0x5, {0x0, 0xea60}, {0x1, 0x2, 0x9, 0xd3, 0x7, 0x8b, "a51e3ac8"}, 0x3, 0x1, @userptr=0x1, 0x80000000, 0x0, r3}) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000100)=0xbc9) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x26020400) r6 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r6, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:06 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='schedstat\x00') 07:44:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:06 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = gettid() syz_open_procfs(r1, &(0x7f00000000c0)='net/connector\x00') 07:44:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:09 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:09 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1ff, @mcast1, 0x8}, r5}}, 0x30) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:09 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x4000}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x3, 0x101, 0xfff, 0x0, "a39c05467e0cc847"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000010008, 0x0) 07:44:09 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f00000001c0)={0x6, 0x1000}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:09 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xe13, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:09 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x9bfa5000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:09 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @any, 0x2}, 0xa) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:09 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x400, 0x0, 0x81, 0x80, 0x8}, 0xc) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:09 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f00005c5000/0x1000)=nil, 0x1000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statx(r4, &(0x7f00000000c0)='./file0\x00', 0x100, 0x2, &(0x7f0000000280)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000180)=""/237) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x1}) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x81, @none, 0x9}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$nl_generic(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x30, 0x200, 0x70bd29, 0x25dfdbfd, {0x1c}, [@typed={0x8, 0x73, 0x0, 0x0, @uid=r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0xfe66) read(r3, &(0x7f0000000380)=""/225, 0x900a453f) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000180)=0x101, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1, 0x8, 0x6, 0x2}, {0x7, 0x18, 0x1, 0xf15}, {0xc2, 0x1, 0x6, 0xbe8b}, {0x7, 0x1, 0x81, 0x1f}, {0x25, 0x80, 0x19, 0x5}, {0x200, 0x3, 0x1, 0x3}]}, 0x10) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x800000004001fc) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioprio_set$pid(0x1, r4, 0x4) 07:44:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[], 0xfe66) read(r3, &(0x7f0000000380)=""/225, 0x900a453f) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000180)=0x101, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1, 0x8, 0x6, 0x2}, {0x7, 0x18, 0x1, 0xf15}, {0xc2, 0x1, 0x6, 0xbe8b}, {0x7, 0x1, 0x81, 0x1f}, {0x25, 0x80, 0x19, 0x5}, {0x200, 0x3, 0x1, 0x3}]}, 0x10) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x800000004001fc) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioprio_set$pid(0x1, r4, 0x4) 07:44:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:12 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x100000001, 0x6, &(0x7f0000000780)=[{&(0x7f0000000cc0)="e73d94b3fa9820526ae9ba54218095f116b2f2bd04c6139e60f186858156a8a175c1913f4318ed86755a34eb45801dd2f41ecdfda78f56486298e06aecf235f632963fe89dfb8f6ebc2dfdf5fcac425fbfa1c9d74a3f6347fbd2c15c522b24cc3bd9b8ecdbe8d2043aabb16ced00863ce7bb8c6f9fed5190b3e815d0d7a26a2a0fa72f58ad759ce2b2", 0x89, 0x7}, {&(0x7f0000000180)="66f35093f53bcb07d34b29a47f1a174610a7d927cb29da6ddb9e3352290b74ebc524ea119d710db5316b5522afc2b5d3384dc426f65c4a9cbedd9e75845c96887edec50b30205c486e4c46327961bb8a5971c98570c127c7649a5ca52936ef8091d07ee093db44f0", 0x68, 0x9d}, {&(0x7f0000000680)="e4cd208149498c2df919e316d41728c5225f5513ecdda2684ed0f0d7d61d370a318c6e38871f5cb504bc17d14e0fd0ef9204d8d8b9dc5dce99", 0x39, 0x6a35}, {&(0x7f0000000240)="ba5e1559d9727ba88efa1d0cd8f8e7343de83eb5ddff332378941bb547ef922cfcbd9aca83eb6636c0d31d79829ec2d0631e3d7a7b5d902465c1ae6cc9e41eac1682c0f508554359ab15", 0x4a}, {&(0x7f00000002c0)="6c2d7fb66ad6f7da45b8d70e5117445188b59418eb4b12b832a615ef1d81009a3ca504ed6e7f1b75dccc4a535b5e86017a15018486418f62e2f389b3407b3dacc4ed5a09e4bdf2828afabe8a6c4141f97deccf14825c7fa1d3c5c026ed91c9720a84d6a54b1be9f69b0fa45d80531b5d705c0a35c6b4f55c614811c2b6f7d4f40b4775d4cbc94f2254bcccae71c017b91868efd5ed6e8b84692812fa8462d419a1a740146b2073d00a61d20f8617a1917abf57eb5522589220b6690d2cd4a443a000fc576887cef1209d98d2e0a3", 0xce, 0x9}, {&(0x7f00000003c0)="b8a1db7f03eb35ec1f73d0df50e116c7a2abb020fc6ec27ef89a4a5b88b77bc137ebc771ed3c41ebd82bf03ca953c0e9ddb3c1d43c2e4e3f377dc7c1c3ce04c8a1857f1c72b4ecccb215be76a9dc4fe507591b194ab80909e62ce7cab91d00341c3c7af88858637df3245d13597552fc38fc04c8d5431ca97c4744801016fe88ffd5389331d3e555961baed51c1f213e8dd06a66f8afd2c45f977ea375d9f9540ed1bc2fe9d4ca53dc9db71c4dfb7fba224b7ddb40ebcf2729dddf252ca4bd431810819cb6785708e38a9c29d990b63987ca31ae9f18938c55e0b5ad7deb30f2", 0xe0, 0x7}], 0x4020, &(0x7f0000000100)={[], [{@subj_user={'subj_user', 0x3d, '.\xd4\xc9fV4\xaf,\x1ec\xeb\t\x9b\xb5\xbc\xe8\xd1\x90\xfa\x00'}}, {@subj_user={'subj_user'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000008c0)={"eedf643ebacbd7345d66009ee8851505d6c1db4f0f9d49c011348dfc90b594879825cc438b6c839fd7dc196c5d9cbb5aaa1f08303be89e8bf916496749f00c477840465294f4a34d093d00e0170e86140299dc68eac52533d4ed78adc43e769446fd7084607d54b7e6a8cb9915053547c7269ca2ad4acb3a8928d1c7e1f9ed464933268ae441359f5697899257398704a43de8704756fec1b01ef4036b35ac6a9f5e14d57f3100b20305b0cc7087e5dcda8b6410d6ff5f24a6a92a51e8e21c22f8bb1732f499a30f6284ccf69e0660297555a9a9e2cdb1cbe5805da75b15710592f8a95afc53a9ee563c17237b7982993aa9a14550f2da06dd343a5d40786c16e2bc79d005b7bf123b02fa47ee8ed5e22c9eded1794f14da373479d9486ea13c06fe864b35d883fcacd46ab0c0491a8f0e57f07ae311ada32dec27f8f116ad45d998df4388ad948bdfe1e8b7c11a7552aef25c4caa009e2499fac2ef1a0d5c59db5bafe334715ed1368127264d839df82d5baae9cd1165488914e7545fc6c60054db7d14ef032d10b78e6b7d6ac927a8a8ac5a3de6581b4176bc9a674004a863ace5f8a9ea8db7a32411ff7e272cd3f127ff46084ec3b5849c619ea55b27797cc00de2ff05630e4593ac6efab6dabeb6c584062037687ff063cce0a6c7f2464bea687401303968ef6132994fafc990417229154ff3241a271d92984406579d17d26340b2e2e9dd7870726d39e5410be3c9d32e7e1e87e7d5ea9a221c8a15bd36f53083749dab41751854603acf37d36f0840024a42a085ce7940898c33505651f17f525c776fedf23fb8169b028933cf5c33f4f55c19dccda633c2c89288946432123016178135fb8b9a99aa753012321ab6aabf807e326f06c37eb7dce10a351dfa9f365650b13d24a28045f01a2170205c0bb8fd8d8e262600f6b46d77119fe8eefeee328aa6257f779cb275c619abfc884ee26f0fc08c919dbec3bc9dc019ee9784a786a27b9b2c68fbb4ab906e40a25cb0904ad09e976d65744ff3a32007e9eb0fea626d07d588ed5e38df4ff7ea89d3d8bb572ffb180e563505845c332f9f87fe9481f3d61d2dce5e08cceb3378a3367316b2420e84229bc3561c0163039fe1062217c1964a5ab791c022ea3e338b9fd965424f7726f576fbbc50403c6668b19bff9eeb8fdc0a91640406b6ea90fb93c5a34e5276cb26791556146ea0158cd603f9ad1c2b17d0a07ab056676bc00310e3aa662c5c6d300473e119166d1931a002e097047bde4370743f00f671198d0d74834804f3de294c9a715c9e60fa09ffa0936691196d070fb8b7cee3c9bf91453aa9efd0af3f1f4266b7bfd11ff406ac6c8254cde1f70db8c30c475a96ee75998151b9ecea04af13bc5a7a7191c21c20709f9377e05525d8e2df191b4bc8b34329f6437dae7e9122549f3c88b2a3"}) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f0000000140)="7b5424ccbbcbb0e9a08d1410e020c241f8534666072c414439023473cb3dd9c532ce1ef3dd6ca007d1a70c0cc41e24f8ad93da55e22b5bd1e5d3993890bbd963c44c9dc784b5c64a2d0e2c2536a24c6baef9262b5b1bab381645a1a344e44d30fd96b0412f9b06ae28baf3979c016cd22b596e3fd6ac", 0x76}, {&(0x7f0000000200)="8ed8b9daf72d38b842dbb26e1d24bfbbadf1cddd34e01e9122c08d25dcf5977c36ce7488ff36435b3c85bbea7a632e87f5a6628db96d89ac5c2dac07a098cdc63f18d337060b705cb9fa543a6e11fd04449525f48603f47b387a55111bb732a1abee086aaf392a110600ec133421f56331bb9ca06c8f709ed74ba63b4fd350b94c141a23762552d83966b91ee73ba53207564e7b5eebc0fed289cf01024a09b34df549590b8ee6716f96adc3d66fbc8d22a05c635a7ea4d1b2402b81fd21216abe36", 0xc2}, {&(0x7f0000000300)="f3d5764973379a8a288f85416c97a0a37006729fc07170716253d0e7123500819f38033aac9fe3cee4df4f8c6ff896096aaafbfef9c97e3283b9944abe214ae69fce4ee9f2fdd070a39085ad3ed4d657aed4980a0b7b9ea741348c8250f5955c0bdd9702a593d02b686d4a95639689e54b3ee9a6c5fa37a62d8e309764c734c3794943bea53bdbed95c488862660122fbe541cc3a5e631e9f9fe924a23f9bc6808f8622010cf6f0df13d056601b36ecaa1b3f3bb659e4f8679db6435697da33fd791f50ed37d19cf11799c117dc8c8bcf4b2999f44a295499c8d430034356b040cc8982ffd9dba8fb5fa36ed19b01f2699d8d34c", 0xf4}, {&(0x7f0000000400)="f0c7019e365ced5d2b154bee7e961e1d8afa4d9d2e28975364794ea1592f6b281b95bf9e9a1fd6a1ec19eb5b966c7c3d215b02e1e5f8f355c2c2978b4aa1b3cb25131ee284ff3b356fcf9c781af2d6361f3a5461a157833f", 0x58}, {&(0x7f0000000480)="62283ed5292c4288641ee6ce8fafba722036d2903164f26f43b9a88798e2c7bad7bd2d00af7c647fb2ec38a77bd61548d49ae7f5963d545648232e00c8a096a5a3b2fe7ce72bdb5853604001", 0x4c}, {&(0x7f0000000500)="7697f876140356a8b5ab8318012e9c87991a22ae36ac64a56e73d3da8ab3a40efdef78774f18b3b500d00a97f63611c984ed23bbda1db19dd7b9b4e5b4cfd42c516b93f37f11a647a1d2d82629bb6ef9870113850eb971c256a525f5845f5950abdfd438e9b679", 0x67}, {&(0x7f0000000040)="59d3fc59ec9bb3233924d26df0dab499b1484c0e79b6518808124d5363c1c7c6f5e99a348cad18bee4666d7e882b0e50d62f52", 0x33}], 0x7, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'vlan0\x00', {0x7, 0x0, @broadcast}}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000006c0)=r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05aa4f5089d6aefe280010000000140001966f242a50dad3f12512109d7a70267bfc"], 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[], 0x24}}, 0x80) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000800)=""/102, 0x66}], 0x2, 0x8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:44:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0xa0000, 0x0) setns(r7, 0x20000000) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, &(0x7f00000000c0)={0x0, 0x0, [0x40, 0x10001, 0x7, 0x1, 0xffffffff, 0xfffffc01, 0x8000000, 0x6]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xfffffffffffffffc) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000008004500005c0000000000119078ac1414aae0000001000000000048907803000000000000003e84b1833196b392a5d6b7eb4d4f490d5423c46e00000000e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041236456d28aab3088124976d4676ee67c04131524f5bf3c1cb07ef4690427a61048a949370326f1f85c00a221"], 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket$inet6_udp(0xa, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:12 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'team0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="301f0000ef186acc0f1edc5d3b94059b02dacc2a8447be81bac1728dfd3fdc1eb1ff9381ce0ef7278cc33434f04a26663781bc37cf19a9a1d41b22", @ANYRES16=r5, @ANYBLOB="000426bd7000fbdbdf250900000008003a003703000008003a001a0200000a000900ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) 07:44:12 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x3) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x35, 0x5, 0xb7, "227d5db7cc7ab8e5ffc5157a4b064faa", "0b65e9c833a783499cd2eb38d7f898ef897d15c86b02790f5aa4c78c94597fbb"}, 0x35, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:12 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00df05e5ff0000", @ANYRESOCT, @ANYBLOB="0f00030000000b00e00100000000000000800000"], 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffc62, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000306000000fedbdf2506000000080007000000000014000600fe8000000000000000000000000000bb09000100544950430000000008000700ac1414aa08000c000300000008000c0002000000080007000a010100"], 0x5c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000cdef91d5d13e684d522ed10dc7763209db8c4f80477c391fb2ffb23748abf670e20034435fa0d30ab2684623ca80dc25b28b158edd6bae3393e2df01c02a291db6ef2012724869f55b4f", @ANYRES16=r3, @ANYBLOB="04022abd7000fcdbdf250300000008000800ac1414bb14000600fe8800000000000000000000000001011400060000000000000000000000ffff0a010101080004000200000008000800ac1414aa"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc4) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCL_SELLOADLUT(r6, 0x541c, &(0x7f0000000080)={0x5, 0x8f, 0x3, 0x20, 0x7f}) 07:44:12 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000080)={0x8, 0xe7036773, 0xffffffff, 0x80000000, 0x1, @discrete={0x9, 0x7}}) r3 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r4 = semget$private(0x0, 0x4, 0x0) semop(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f00000000c0)=[0x2, 0x8, 0x9, 0x81]) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:12 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x68, "f333c05ed9c7343702475ae1271ef86027bdb6197d84bf2d3b1683b79c4fedbabd360cc99c6c832e2543a831aba6b644ca61c5ab49fc3bfffea45a1c53a582f2dfe96f9af834e44767df2159ecc85c71ceb0f15076233d77ec95e6e7e2f490ed256e4a3c00638e74"}, &(0x7f0000000080)=0x70) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0xff55, 0x5, 0x2, 0xffffffff, 0x20000, 0x1, 0x0, 0x2, r3}, 0x20) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000200)={0x4, 0x6, &(0x7f0000000100)=[0x7, 0x401, 0x9, 0x81, 0x0, 0x6], &(0x7f0000000180)=[0xc8c4, 0x7f, 0x6, 0x653, 0x2, 0x3, 0x0, 0xffff, 0x3], &(0x7f00000001c0)=[0x9]}) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:12 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f00000193c0)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:15 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000783000/0x3000)=nil, 0x3000, 0xd, 0x10, r0, 0x3a55a000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_RM_MAP(r7, 0x4028641b, &(0x7f0000000040)={&(0x7f0000a05000/0x3000)=nil, 0x51, 0x0, 0x5, &(0x7f0000801000/0x1000)=nil, 0x8}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000f9ffffffffffffff08", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}}}, 0x24}, 0x8}, 0x0) sendto(r6, &(0x7f0000000200)="f063a385e496fd8484a90174e4a26ee2cec97070721e6b42aa1cf6739447f8166a1c81e15cbaa04effb5ad9e9dddebdace59e3db6565dfa60e3a9675d8b2f856df68bfdb7737be38a3de6343275c6fb6a8ad82e4dd9b46279d73828ac2e89d65877bd86da364bfd7be7d1c57e5ae4f64fafb3e78de8825ac66fd568eb1c00e90057ba187ee3aecfdc3f6317c17ab2c55ac22c409980abc36daa3da462c82b5f622968401356daf64bf0c469b21eb582cd16826b74f53fa3eb85de426f5e0259a4a1b7af18a011616133dc6c6df9ac37be59adadc753ea5cfe341c37bbec759781a29ec6b008324bf692df2ad9850f7eb31", 0xf1, 0x4008000, &(0x7f0000000140)=@xdp={0x2c, 0x2, 0x0, 0x8}, 0x80) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES64, @ANYRES64], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:44:15 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000002c0)={0x7, 0x270, &(0x7f00000001c0)="80207a67539d4dad29301b03811ba66f6d97c03756c1af57de0629e41bef5f6ee7939333fe24e91862649e9c17fe14", &(0x7f0000000200)="432e5e49730542a972cd3936875f8030d6fdbe539d3b6463d40fd2444027ef113c5d996d766dde3778d4cff12c2ec8ab3cf196101325b78b6ef8105f509bb06b46324f04e1f3c6a4245fa5a188e7b948aa881f3d28cd2a3b4930ea2742bc5cac33620f5223a96402323c28edd9be81ceb0904f2f7fb48fc7cec47481cb5dc8ad5dc24b9b78720f5a00b0cc7a1dccd4f95051fc", 0x2f, 0x93}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) prctl$PR_GET_TSC(0x19, &(0x7f0000000300)) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:15 executing program 0: unshare(0x2e020000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000080)=0x40) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r3 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000080)={0x0, "e184edc3b8ce2f107b7ce2d94cd411c429f15a4d0f1f1b8ebc396c5492d35768", 0x3, 0x40, 0x3f, 0xfffffff9, 0x2, 0x4, 0x8, 0x5}) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f00005c5000/0x1000)=nil, 0x1000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statx(r4, &(0x7f00000000c0)='./file0\x00', 0x100, 0x2, &(0x7f0000000280)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000180)=""/237) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x1}) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 3: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x4, 0x5, 0x4, 0xe000, 0x3f, {}, {0x2, 0xe, 0x0, 0x3, 0x2, 0x4, "74e44b38"}, 0x1, 0x3, @userptr=0x81, 0x9, 0x0, 0xffffffffffffffff}) r3 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00df05e5ff0000", @ANYRESOCT, @ANYBLOB="0f00030000000b00e0ff0a000600050006800000"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffc62, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'TIPC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x5c}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r5, &(0x7f0000000080)='sched\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:15 executing program 2: unshare(0x2e020000) r0 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='fd\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r1) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r2) r3 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="ca7e9c75ca1777273c5ce7c6f68b032e2b64e93aa1d566f0fdd10a466084721642a9ddba548676dd", 0x28, r2) keyctl$instantiate(0xc, r0, &(0x7f0000000180)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'systemem1'}, 0x1f, r3) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x8f18e23e98e02ad2) r4 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r4, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000300)=0x80, 0x800) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) fallocate(r5, 0x2, 0x3ff, 0x1000) 07:44:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f00000193c0)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:18 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) mq_getsetattr(r1, &(0x7f00000000c0)={0x100000001, 0x5, 0x8, 0x100000000}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:18 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000680)={0x7, @sdr={0x36314d59, 0x9}}) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000200)={0x0, 0xe3, 0x810bee4185a9055a, 0x11, &(0x7f0000650000/0x4000)=nil, 0xffffffff}) r8 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x44, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x20004004) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:18 executing program 3: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000080)=0x7, 0x4) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) read(0xffffffffffffffff, &(0x7f0000000380)=""/225, 0x900a453f) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 07:44:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) flistxattr(r8, &(0x7f00000001c0)=""/220, 0xdc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:18 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getpeername$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:44:18 executing program 0: unshare(0x2e020000) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xfe08) read(r0, &(0x7f0000000380)=""/225, 0x900a453f) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f00000000c0)=[0xfffffff7], &(0x7f0000000100), &(0x7f0000000200)=[0x71c44c94, 0x9, 0xffffff81, 0x0, 0x400, 0x54], &(0x7f00000001c0), 0x0, 0xff}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unlinkat(r4, &(0x7f0000000080)='./file0\x00', 0x0) unshare(0x2e020400) r5 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r5, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:18 executing program 3: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f00000000c0)=0x6) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000080)=[0x3, 0x7]) 07:44:18 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x2, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0, {[0x8000000000000]}}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140c, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) dup3(r1, r2, 0x0) read(r1, &(0x7f0000000080)=""/116, 0x74) 07:44:18 executing program 3: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f00000000c0)=0x6) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000080)=[0x3, 0x7]) 07:44:18 executing program 2: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x2, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0, {[0x8000000000000]}}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140c, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) dup3(r1, r2, 0x0) read(r1, &(0x7f0000000080)=""/116, 0x74) 07:44:18 executing program 0: unshare(0x66040280) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e22, 0x10000, @private0, 0x4}}, 0x8, 0x4}, &(0x7f0000000180)=0x90) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) fcntl$setown(r3, 0x8, r4) 07:44:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f00000193c0)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:21 executing program 3: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='attr/current\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:21 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:21 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xb1\xc4\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0GgPZC\x00\x00\x00\x00\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000100)={0x0, &(0x7f0000000180)="24e6931c3bb7d9eed29d744b297e254b08cdae5763001d02e785993c8cc3b9adc2ed125399f0f6a35fc8b25b77fe34f1cf48196748ce4597d1230b4618eeed775c522959004aa143ce7873430e0b4c6a01f44dd9aa44a594f64996e649533269c292", 0x62}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x4, &(0x7f0000000200)={0xfffffffffffffffd, 0x88000002, 0x0, {[0x400010000000000]}}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000002c0)=0x2c) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x20880, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f0000000240)={0xf5e, 0x4}) 07:44:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000008004500005c0000000000119078ac1414aae0000001000000000048907803000000000000003e84b1833196b392a5d6b7eb4d4f490d5423c46e00000000e718b4e8c9c7f20265c60000000030ea4bad65dd61449c616e6e1fa6e3bb9041383e42d8d881ce2738599c8748657b786fccc8245acf4b2bec21fa0942fc15b6f2f9167e8f1b809f6806da28b673bfc53dfd0e5b13d656f6aa46e07452fea3a6cfa24e36d69584c3"], 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup3(r6, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f00000000c0)=0x1, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:21 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1588.949523] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1588.998151] FAULT_INJECTION: forcing a failure. [ 1588.998151] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.010068] CPU: 0 PID: 23911 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1589.018129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.027508] Call Trace: [ 1589.030124] dump_stack+0x1b2/0x283 [ 1589.033790] should_fail.cold+0x10a/0x154 [ 1589.038037] should_failslab+0xd6/0x130 [ 1589.042009] kmem_cache_alloc_node+0x54/0x400 [ 1589.046507] __alloc_skb+0x9a/0x4c0 [ 1589.050143] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1589.055158] ? perf_trace_lock+0x109/0x4b0 [ 1589.059385] ? deref_stack_reg+0x8a/0xc0 [ 1589.063450] __pskb_copy_fclone+0xff/0xc80 [ 1589.067773] ? nf_ip6_route+0x9a/0xe0 [ 1589.071566] nf_dup_ipv6+0x10b/0x6f0 [ 1589.075326] ? addrtype_mt_checkentry_v1+0x1e0/0x1e0 [ 1589.080519] ? nf_send_unreach6+0x3c0/0x3c0 [ 1589.084852] ? __local_bh_enable_ip+0xc1/0x160 [ 1589.089618] ? ip6t_do_table+0xa8f/0x1730 [ 1589.094299] tee_tg6+0x109/0x160 07:44:21 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) 07:44:21 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_procfs(r1, &(0x7f0000000080)='children\x00') [ 1589.097670] ip6t_do_table+0x9ed/0x1730 [ 1589.101673] ? __save_stack_trace+0x7b/0xd0 [ 1589.106198] ? ip6t_alloc_initial_table+0x660/0x660 [ 1589.111216] ? ip6table_mangle_hook+0xb1/0x6d0 [ 1589.116226] nf_hook_slow+0xb0/0x1a0 [ 1589.119948] __ip6_local_out+0x3e2/0x780 [ 1589.124010] ? ip6_find_1stfragopt+0x250/0x250 [ 1589.128772] ? icmpv6_send+0x1a0/0x1a0 [ 1589.132754] ? ip6_output+0x660/0x660 [ 1589.136609] ip6_local_out+0x25/0x170 [ 1589.140414] ip6_send_skb+0x9b/0x2f0 [ 1589.144215] udp_v6_send_skb+0x4e8/0xe80 [ 1589.148296] udp_v6_push_pending_frames+0x211/0x310 [ 1589.153320] ? udp_v6_send_skb+0xe80/0xe80 [ 1589.157650] ? ip_reply_glue_bits+0xa0/0xa0 [ 1589.162334] udpv6_sendmsg+0x1a1b/0x2610 [ 1589.166563] ? ip_reply_glue_bits+0xa0/0xa0 [ 1589.170898] ? udp_v6_flush_pending_frames+0xd0/0xd0 [ 1589.176039] ? rw_copy_check_uvector+0x1ee/0x290 [ 1589.181877] ? sock_has_perm+0x1c0/0x230 [ 1589.186348] ? selinux_tun_dev_create+0xc0/0xc0 [ 1589.191209] ? dup_iter+0x240/0x240 [ 1589.194858] ? inet_sendmsg+0x116/0x4d0 07:44:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xba, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a782ffa4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f14c82a1cef20d94c30e478947d190ab8393646d6c0b004d9246a8f6542614f2f03f76a9938fff364f69d06e07d3d818e0db72a147aed99f6c5719e4ba33c6c077c70a81aa0839b0c9e7b6e79148c0b0d4ff1a74653751762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de07549948ed7d897d1df0a387b5ea225e2aca5c9f1c9525d1"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1589.198848] inet_sendmsg+0x116/0x4d0 [ 1589.202664] ? inet_recvmsg+0x4c0/0x4c0 [ 1589.206658] sock_sendmsg+0xb5/0x100 [ 1589.210383] ___sys_sendmsg+0x70a/0x840 [ 1589.214453] ? copy_msghdr_from_user+0x380/0x380 [ 1589.219229] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1589.224313] ? lock_downgrade+0x6e0/0x6e0 [ 1589.228557] ? check_preemption_disabled+0x35/0x240 [ 1589.233859] ? __fget+0x1ff/0x360 [ 1589.237446] ? lock_acquire+0x170/0x3f0 [ 1589.241421] ? lock_downgrade+0x6e0/0x6e0 [ 1589.245592] ? __fget+0x226/0x360 [ 1589.249050] ? __fget_light+0x199/0x1f0 [ 1589.253042] ? sockfd_lookup_light+0xb2/0x160 [ 1589.257540] __sys_sendmsg+0xa3/0x120 [ 1589.261339] ? SyS_shutdown+0x160/0x160 [ 1589.265342] ? wait_for_completion_io+0x10/0x10 [ 1589.270017] ? SyS_read+0x210/0x210 [ 1589.273638] ? SyS_clock_settime+0x1a0/0x1a0 [ 1589.278053] SyS_sendmsg+0x27/0x40 [ 1589.281859] ? __sys_sendmsg+0x120/0x120 [ 1589.286007] do_syscall_64+0x1d5/0x640 [ 1589.290170] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1589.295482] RIP: 0033:0x45ca29 [ 1589.298663] RSP: 002b:00007fa597f9cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1589.306379] RAX: ffffffffffffffda RBX: 0000000000500d00 RCX: 000000000045ca29 [ 1589.313683] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1589.320954] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1589.328239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1589.335532] R13: 00000000000009fb R14: 00000000004ccd39 R15: 00007fa597f9d6d4 07:44:21 executing program 2 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:21 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000000c0)={0x9b0000, 0x3f, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a0904, 0x9, [], @ptr=0x80}}) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000100)=0x4ca, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self\x00', 0x40400, 0x0) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000200)={0x0, 0x34, 0x2, 0x800, 0x5, [{0x3f, 0x10001, 0x7, [], 0x104}, {0x29e4, 0xffffffffffffff7f, 0x6, [], 0x8}, {0x2cb1, 0x2, 0x8000, [], 0x180}, {0x81, 0x1, 0x401, [], 0x6}, {0x1f, 0xffffffff, 0x603e, [], 0x270c}]}) 07:44:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000300)=ANY=[], 0xfe08) read(r8, &(0x7f0000000380)=""/225, 0x900a453f) r9 = dup3(r8, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18) r11 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x6, 0x0, 0x84) [ 1589.509810] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1589.550159] FAULT_INJECTION: forcing a failure. [ 1589.550159] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.561455] CPU: 1 PID: 23933 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1589.569344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.578704] Call Trace: [ 1589.581478] dump_stack+0x1b2/0x283 [ 1589.585204] should_fail.cold+0x10a/0x154 [ 1589.589362] should_failslab+0xd6/0x130 [ 1589.593340] kmem_cache_alloc_node_trace+0x58/0x400 [ 1589.598546] __kmalloc_node_track_caller+0x38/0x70 [ 1589.603488] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1589.608163] __alloc_skb+0xca/0x4c0 [ 1589.612415] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1589.617269] ? perf_trace_lock+0x109/0x4b0 [ 1589.621596] ? deref_stack_reg+0x8a/0xc0 [ 1589.625664] __pskb_copy_fclone+0xff/0xc80 [ 1589.629907] ? nf_ip6_route+0x9a/0xe0 [ 1589.633715] nf_dup_ipv6+0x10b/0x6f0 [ 1589.637438] ? addrtype_mt_checkentry_v1+0x1e0/0x1e0 [ 1589.642555] ? nf_send_unreach6+0x3c0/0x3c0 [ 1589.647416] ? __local_bh_enable_ip+0xc1/0x160 [ 1589.652096] ? ip6t_do_table+0xa8f/0x1730 [ 1589.656423] tee_tg6+0x109/0x160 [ 1589.659795] ip6t_do_table+0x9ed/0x1730 [ 1589.663788] ? perf_trace_lock_acquire+0x400/0x4b0 [ 1589.668714] ? check_preemption_disabled+0x35/0x240 [ 1589.673740] ? ip6t_alloc_initial_table+0x660/0x660 [ 1589.678777] ? ip6table_mangle_hook+0xb1/0x6d0 [ 1589.683923] nf_hook_slow+0xb0/0x1a0 [ 1589.688049] __ip6_local_out+0x3e2/0x780 [ 1589.692146] ? ip6_find_1stfragopt+0x250/0x250 [ 1589.697174] ? icmpv6_send+0x1a0/0x1a0 [ 1589.701161] ? ip6_output+0x660/0x660 [ 1589.705087] ip6_local_out+0x25/0x170 [ 1589.708893] ip6_send_skb+0x9b/0x2f0 [ 1589.712697] udp_v6_send_skb+0x4e8/0xe80 [ 1589.716777] udp_v6_push_pending_frames+0x211/0x310 [ 1589.721796] ? udp_v6_send_skb+0xe80/0xe80 [ 1589.726060] ? ip_reply_glue_bits+0xa0/0xa0 [ 1589.730398] udpv6_sendmsg+0x1a1b/0x2610 [ 1589.734831] ? ip_reply_glue_bits+0xa0/0xa0 [ 1589.739182] ? udp_v6_flush_pending_frames+0xd0/0xd0 [ 1589.744298] ? rw_copy_check_uvector+0x1ee/0x290 [ 1589.749079] ? sock_has_perm+0x1c0/0x230 [ 1589.753153] ? selinux_tun_dev_create+0xc0/0xc0 [ 1589.757833] ? dup_iter+0x240/0x240 [ 1589.761482] ? inet_sendmsg+0x116/0x4d0 [ 1589.765457] inet_sendmsg+0x116/0x4d0 [ 1589.769292] ? inet_recvmsg+0x4c0/0x4c0 [ 1589.773270] sock_sendmsg+0xb5/0x100 [ 1589.777080] ___sys_sendmsg+0x70a/0x840 [ 1589.781153] ? copy_msghdr_from_user+0x380/0x380 [ 1589.786367] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1589.792170] ? lock_downgrade+0x6e0/0x6e0 [ 1589.796344] ? check_preemption_disabled+0x35/0x240 [ 1589.801367] ? __fget+0x1ff/0x360 [ 1589.804876] ? lock_acquire+0x170/0x3f0 [ 1589.808944] ? lock_downgrade+0x6e0/0x6e0 [ 1589.813102] ? __fget+0x226/0x360 [ 1589.816565] ? __fget_light+0x199/0x1f0 [ 1589.820543] ? sockfd_lookup_light+0xb2/0x160 [ 1589.825044] __sys_sendmsg+0xa3/0x120 [ 1589.828851] ? SyS_shutdown+0x160/0x160 [ 1589.832837] ? wait_for_completion_io+0x10/0x10 [ 1589.837513] ? SyS_read+0x210/0x210 [ 1589.841675] ? SyS_clock_settime+0x1a0/0x1a0 [ 1589.846084] SyS_sendmsg+0x27/0x40 [ 1589.849625] ? __sys_sendmsg+0x120/0x120 [ 1589.853695] do_syscall_64+0x1d5/0x640 [ 1589.857594] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1589.862782] RIP: 0033:0x45ca29 [ 1589.865975] RSP: 002b:00007fa597fbdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1589.873716] RAX: ffffffffffffffda RBX: 0000000000500d00 RCX: 000000000045ca29 [ 1589.881076] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1589.888352] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 07:44:22 executing program 2 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1589.896151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1589.903454] R13: 00000000000009fb R14: 00000000004ccd39 R15: 00007fa597fbe6d4 07:44:22 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000080)={0xfff, 0xe, 0xe, "f83ae1ae3c21d90977d681e79cce4184b80b2cef55cd519a0c50ea714ffc17be958a7c991b3f4cb25d816f2c9bb8e779e3df39c9e527f0ecfeae25c3", 0x1c, "651800bc407492f0386d7fa4e577ca8612df2363b137e3204f29eb93e120cc14fa77f64d8cfe65225dab99457d476a6612bcf602070d9953dc3c3d60", 0x30}) 07:44:22 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) write$binfmt_script(r9, &(0x7f0000000300)=ANY=[], 0xfe08) read(r9, &(0x7f0000000380)=""/225, 0x900a453f) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r10, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0x4, 0x8000, 0x9, 0x0, 0x0, [{{r1}, 0xfffffffffffff000}, {{r5}}, {{r7}, 0x1}, {{r9}, 0x5}, {{r10}, 0x7}, {{r0}, 0x2800000000000000}, {{r0}, 0x9}, {{r0}, 0x2}, {{r0}, 0x8d5}]}) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) 07:44:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) bind$tipc(r5, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x4e21, @local}}) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@void, @void, @ipv4=@udp={{0x16, 0x4, 0x1, 0x7, 0x14a, 0x66, 0x0, 0x2, 0x11, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, {[@cipso={0x86, 0x43, 0xfffffffffffffffe, [{0x5, 0x10, "abd926c1e77f3b76c0b2f5003177"}, {0x6, 0x12, "ed4a054342232201884292f7b1f16260"}, {0x7, 0x9, "ce912c923842c4"}, {0x5, 0x12, "28eaafdaeee6d20887475ae39a67b18a"}]}]}}, {0x4e20, 0x4e23, 0xf2, 0x0, @opaque="599d3b9d94ae1e1516d5f32686f66f1b632f7162cd4b61f9689f3028226665287f04e0936af6d0ac55be741477a6c7cbc537f44260c7e82de0205be117fc7c9506fae9f684d16902102fb12e0ec6ed6a314f545c48779e14624f6c1b60818bab896041d217fcfc0a1abc43dfa1febc9c31343d3c34b38abfd4a425da61ecf27327424938e4ab59e2e6e405d712f6914eefccac2b10bd761155c971808a105f3f410b19bf32a0fbc5681fcfebc9db49e05c9bcdea06e91a9f642bbfe4f0c28b1ad0ca05a219fdbb34b9f9139cbbfd1ba9c0a3409d506240449961108fa35d81b67b8a9539073260c7bd61"}}}, 0x14a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r6, 0x0, 0x0, 0x0) fsetxattr(r6, &(0x7f00000000c0)=@random={'os2.', '/dev/net/tun\x00'}, &(0x7f00000001c0)='/dev/net/tun\x00', 0xd, 0x2) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:22 executing program 0: unshare(0x54bf64f867cf21b6) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1590.046401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1590.095962] FAULT_INJECTION: forcing a failure. [ 1590.095962] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.107638] CPU: 0 PID: 23963 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1590.115607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.124971] Call Trace: [ 1590.127566] dump_stack+0x1b2/0x283 [ 1590.131229] should_fail.cold+0x10a/0x154 [ 1590.135644] should_failslab+0xd6/0x130 [ 1590.139628] kmem_cache_alloc+0x40/0x3c0 [ 1590.143689] ? ipv6_sysctl_rtcache_flush+0x100/0x100 [ 1590.148796] dst_alloc+0xe4/0x170 [ 1590.152289] __ip6_dst_alloc+0x2e/0x50 [ 1590.156214] ip6_rt_cache_alloc+0x111/0x650 [ 1590.160551] ip6_pol_route+0x1442/0x1db0 [ 1590.164718] ? ip6_pol_route_lookup+0x9f0/0x9f0 [ 1590.169485] ? memset+0x20/0x40 [ 1590.172775] ? ip6_pol_route_input+0x70/0x70 [ 1590.177389] fib6_rule_lookup+0x17d/0x3e0 [ 1590.181744] ? fib6_rules_seq_read+0x20/0x20 [ 1590.186417] ? copy_skb_header+0x1c/0x2a0 [ 1590.190772] ? __pskb_copy_fclone+0x8e2/0xc80 [ 1590.195281] ip6_route_output_flags+0x250/0x2d0 [ 1590.199961] nf_dup_ipv6+0x3c8/0x6f0 [ 1590.203777] ? nf_send_unreach6+0x3c0/0x3c0 [ 1590.208095] ? ip6t_do_table+0xa8f/0x1730 [ 1590.212255] tee_tg6+0x109/0x160 [ 1590.215624] ip6t_do_table+0x9ed/0x1730 [ 1590.219780] ? __save_stack_trace+0x7b/0xd0 [ 1590.224307] ? ip6t_alloc_initial_table+0x660/0x660 [ 1590.229412] ? ip6table_mangle_hook+0xb1/0x6d0 [ 1590.234026] nf_hook_slow+0xb0/0x1a0 [ 1590.237733] __ip6_local_out+0x3e2/0x780 [ 1590.241802] ? ip6_find_1stfragopt+0x250/0x250 [ 1590.246398] ? icmpv6_send+0x1a0/0x1a0 [ 1590.250463] ? ip6_output+0x660/0x660 [ 1590.254366] ip6_local_out+0x25/0x170 [ 1590.258160] ip6_send_skb+0x9b/0x2f0 [ 1590.262037] udp_v6_send_skb+0x4e8/0xe80 [ 1590.266108] udp_v6_push_pending_frames+0x211/0x310 [ 1590.271129] ? udp_v6_send_skb+0xe80/0xe80 [ 1590.275483] ? ip_reply_glue_bits+0xa0/0xa0 [ 1590.279845] udpv6_sendmsg+0x1a1b/0x2610 [ 1590.284350] ? ip_reply_glue_bits+0xa0/0xa0 [ 1590.289308] ? udp_v6_flush_pending_frames+0xd0/0xd0 [ 1590.294498] ? rw_copy_check_uvector+0x1ee/0x290 [ 1590.299275] ? sock_has_perm+0x1c0/0x230 [ 1590.303436] ? selinux_tun_dev_create+0xc0/0xc0 [ 1590.308196] ? dup_iter+0x240/0x240 [ 1590.311827] ? inet_sendmsg+0x116/0x4d0 [ 1590.315807] inet_sendmsg+0x116/0x4d0 [ 1590.319677] ? inet_recvmsg+0x4c0/0x4c0 [ 1590.323641] sock_sendmsg+0xb5/0x100 [ 1590.327357] ___sys_sendmsg+0x70a/0x840 [ 1590.331331] ? copy_msghdr_from_user+0x380/0x380 [ 1590.336083] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1590.341010] ? lock_downgrade+0x6e0/0x6e0 [ 1590.345167] ? check_preemption_disabled+0x35/0x240 [ 1590.350283] ? __fget+0x1ff/0x360 [ 1590.353743] ? lock_acquire+0x170/0x3f0 [ 1590.357712] ? lock_downgrade+0x6e0/0x6e0 [ 1590.361862] ? __fget+0x226/0x360 [ 1590.365414] ? __fget_light+0x199/0x1f0 [ 1590.369589] ? sockfd_lookup_light+0xb2/0x160 [ 1590.374187] __sys_sendmsg+0xa3/0x120 [ 1590.379219] ? SyS_shutdown+0x160/0x160 [ 1590.383425] ? wait_for_completion_io+0x10/0x10 [ 1590.388378] ? SyS_read+0x210/0x210 [ 1590.392012] ? SyS_clock_settime+0x1a0/0x1a0 07:44:22 executing program 3: r0 = socket$kcm(0x2, 0x9, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) [ 1590.396605] SyS_sendmsg+0x27/0x40 [ 1590.400184] ? __sys_sendmsg+0x120/0x120 [ 1590.404294] do_syscall_64+0x1d5/0x640 [ 1590.408183] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1590.413393] RIP: 0033:0x45ca29 [ 1590.416606] RSP: 002b:00007fa597f9cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1590.424325] RAX: ffffffffffffffda RBX: 0000000000500d00 RCX: 000000000045ca29 [ 1590.431774] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1590.439213] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1590.446585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1590.454028] R13: 00000000000009fb R14: 00000000004ccd39 R15: 00007fa597f9d6d4 07:44:22 executing program 2 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c746572000000000000acc0fb38000000000000000000000000000000000e00000004000000d80300001802000000000000000000000000000000000000080300000803000008030000080300000803000004000000000000000000000000000000000000000000ffffac1414aa00000000000000000000ffffe00000010000000000000000000000000000000000000000000000000000000000000000697064647030000000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff00000001480100000000000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280061646472747970650000000000000000000000000000000000000000000102008000000000004800544545000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb69703665727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000001bde5b2ce443e91f21000000000080000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000f200000000000000000000be000000000000000000000000ff020000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006c61706230000000000000000000000076786361000000000000df00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f000000000001060550000000000000000000000000000000000480054454500000000000000000000000001000000000000000000e7ffffff01ac1e00010000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:22 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000200), 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000240)={0xa20000, 0x8, 0x7, r9, 0x0, &(0x7f0000000140)={0x9e0905, 0x2, [], @string=&(0x7f00000000c0)=0x14}}) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', {0x7, 0x4e23, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x46800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x796d1af177fe148a) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 1590.615994] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xba, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a782ffa4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f14c82a1cef20d94c30e478947d190ab8393646d6c0b004d9246a8f6542614f2f03f76a9938fff364f69d06e07d3d818e0db72a147aed99f6c5719e4ba33c6c077c70a81aa0839b0c9e7b6e79148c0b0d4ff1a74653751762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de07549948ed7d897d1df0a387b5ea225e2aca5c9f1c9525d1"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:24 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000280)={r8, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x6}, 0x8) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) 07:44:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000008004500005c0000000000119078ac1414aae0000001000000000048907803000000000000003e84b1833196b392a5d6b7eb4d4f490d5423c46e00000000e718b4e8c987f20265c60df2cd4630ea4bad65d561449c616e6e1fa6e3bb9041"], 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:24 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10500, 0x42) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3ff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x48853) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$SIOCGIFHWADDR(r8, 0x8927, &(0x7f00000002c0)) 07:44:24 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r6 = socket$inet(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={0x0, 0x36, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r5, 0x31905e13403123b7, 0x0, 0x0, {0xb, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) tee(r4, r9, 0x1, 0x3) 07:44:24 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ocfs2_control\x00', 0x40000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680)='NLBL_CIPSOv4\x00') setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000300)=0x5, 0x4) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000a80)={&(0x7f0000000640), 0xc, &(0x7f0000000a40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="200001f97000fddbdf250300000004000c80"], 0x18}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd2a, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}}, 0x14) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x154, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x4}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d0521c9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c0aa864}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ca619b8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75d1b829}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69755cd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d16683}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d27541a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e035127}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ea2c0c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x668a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x148bb9a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b7cd30b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd16b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38af99cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b49}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1489253b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7369d0a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b5c21aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4103}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x6603f00bca192f16) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:24 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x210241, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 07:44:25 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='SEG6\x00', r4}, 0x10) clock_getres(0x6, &(0x7f0000000140)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') 07:44:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in=@remote, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x1444, 0x1e, 0x100, 0x70bd2c, 0x25dfdbfd, {0x19}, [@generic="ff43dd6dff", @typed={0xc, 0x52, 0x0, 0x0, @u64=0xd435}, @generic="15054d174165ca8289207311ef7e52dcd31f9d2957962e003f765ddcd4fe5c9662179afbe5744d79480e47fdf49970bb", @generic="ba6fec16ded0b7c63f10f3ce1047033541ce203843dc70e29ba1ff5e4ebb05ba08ad", @nested={0x1c7, 0x78, 0x0, 0x1, [@typed={0x4, 0x5f}, @typed={0x8, 0x31, 0x0, 0x0, @u32=0x61}, @generic="864c8d23dd2100197a45e922db23c4b03932afaf5cd2c19215c4fabbd2bedb338dfc7f3416d9bebbaba6f76d71036c4250e66c9d0f270ac3a4fc51a90480b4f419043067f5639a672feb803f8f1883ed48fbadbd578886e3b63df1b4a9a0d288a494e7de5afed5decd4a30f1697774eb824a0effd2936a0b5c68edaa6fb6ec1a2b3ffef666f2fc8f6c15f8b55acdc47ce7bd73603cd23f727688f229c46bc24dc46c41fba0d5f3e4aa38134092d87db214e02534431f849bc92161c19356e0fa03df508e3c5eef7c5a4db9670137", @generic="031a4b88c0b66e534f01fbe0158b7969bf842f521482ed95fac288121822e0a67b71c0bfa006dc294dcd300a64138248ebebe4bd92a29958c40be40c1e49ea3af4b2ecfb9b57e7fb8e23e6cb3cb0980e9fa0bcf23d105ca16e77d0a98acdc6ac284ba07f94d5bd3870ece5", @generic="9cb68206f3212ad115990911e3cba6b7560960884c899596c7a420c2b063e65f8eab9a966d46da24229b92a717687fa56eb8d70ad3", @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x5161cc9c}, @typed={0x4, 0x3e}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@broadcast}, @generic="1fa29cde5936c1a85e703bd360772bc49032c9512e83b257be92349e62420118d5ad7c770438fc47720ba65880", @typed={0x8, 0x4a, 0x0, 0x0, @u32}]}, @generic="1792161a5e5254f84b71cec0e5a87a397ba261e60e39e91423274166a1c5425ca4035ad8fb9c62595f98d5feb31c664c207cc2d2253f77c8c99630224419f7b553164cb3250e350521efced6cdde7aeb6ba139ebd6d02ccaef05ce5d9a60d535bfe9f7e9afb1f877c07972636487743ea29684666d89af110c8d439ed3279698c05b49f23f076d39e6964e7ad643b3336b370c20ad3e7396e33099014619aec22df5a43ff42aa9384675", @nested={0x23, 0x42, 0x0, 0x1, [@typed={0x4, 0x86}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x7f, 0x0, 0x0, @fd=r5}, @generic="751bca7eed54db638a2c4f"]}, @nested={0x1133, 0x1c, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @generic="23e688b107f14465e7091cd874b5b6f2982bf3725166fc356da335a47bb5a2307523434381a088bf30eb60e2c39f6a1fe656aa7bbe64788edb01f0d342e740b931cbadf648b4873cb25c506b859e336d719ac58bbc5d799d66bdf6f8bdfcba7a0beb045fe05666d56f5c8adc6d4b535201be1163457a530f1693b7fb4b8f26295690a87f758420736567cba73ff419e7422d80296a944d2d015e3c835871a1b09a19451f6933946911d195c498004a730330ddb562c1bf8dbd17a4fc9b42966083991f2284d08b33e2c03aeb54b6231cdb22bfa36762978feb7e95d8595b70df1c82731b10a02e84f228f8237f32f88c7c2b7c2c27db9b6d7892d771d10c219750ad30215e5d565205ce9d33954dd84c33f8dc47d66de3862ac94ac6b53a5e00f1216a4fcfb83a158bdbcd9d8d4178764e4695670133a8d9717362c553c3f80ac175f8b0f4e67aa6e8b38ded89a914ae34f5e19da066e8d890d1170cbbc1dbfc24f3630304c2dab5fb7b60b3ebde25a63aa5a53ccd7ccd1512b22c018eda3c94571a08c4c9583c7f60786f14f7f2371330a7dea0cf9aba293b94775fc36a3ed7d20c10877e375024be66df72e3c4685a1e17e50900cc587ed3abd0645856cbffea30a6496c1b0cb2e944593112cb165d3ced40a9def7b44ea3e627db9eb9ebe413ec40ac0e10a7549adac3254b80c113c9e17f6941c74e2dbb540293a848ede14ccd7d602e5140dfca77852bf7aeead7cb1f0d86e7854e204c88987d600ce79c264de373c9833b3b1caf530077c3443dbd2babfb5b44d305947930a900176ec76ef18f465691c9f9cb0410a7a0eaa134f20989a8ed914f3841e9543c8884e43794bda7e98ee5cbd0e2aca98cc171b374281766b46901f747583120dc688e0e9aca7de926dd553cfd007394efa1f8fa23eb0296c72942e71880504cb1fb38ac68dedd9d275557d66d858b00fdfef7d8af729797cde5f8d5b7e1b45e9d6f9e3e74452376c56067a1c7db5e873eafaca9cdbdfc94ebc3bf2b2345a13fa5c138f56cede56db62dfe6a1ab66f8d66cfb7a12d119315ab415c3da8b2d75e1c96ec305b2d0f01e89cd6315fff51189a94f2bbf0122983e022eddffef66e74206e8e0e6e71ea41925772b831e08774ed348429c3bee6f14bd6601226b9b187ac5be7a360c03146bc9c89c9c62d8c9cafdbf9a4ebf3ea1db721f1fe428ba376e2b4c281f1e2222be70544e45406de1ce98a60d0182f70047d57716cf69a2c735fc72071a4959267356da417832325cead1ee1045de15fe5ea5a852fad716339e7b39a03bb99e3b28bada3e8cfcb0e3ed55a10e6e15ec07a3e8d3e30673e9d98bcbed9f3fca3d59b9c8fbfadd03242684a7b9445781aea6044422d7db47907601618ec4100e8c6c05e44003e8b9bb5b63797f84b2513cc853d50e827a6af2dce50d10d8f733a221b94e29180fc0f924a42e0fe474e73121901b4f455040bd0b571f160f1a621b972effb2fa0c8424fa086eb84eb4a5cb29320890cc15c17086212a620683caffe93ff5c7db5ad017dd6d32d1cfb6c423f9a8883eab7851a302044f8c8dbf0b9714b4b0861d1c9b910ce6d909e9a4c10f0a9136d536430dd9f5c7df672fdf76513e4cd0092ad88a5ed2dea220b5e2fd0418ec27a40a9acfd53cecfc58da9724e70a63b7c247efab2820bdad154cef5c5238ca01cfddb2ab81f4ac6593f487b9e06a90924590e1214e729592d724d1b14098a049e87070502521fd1d88a2e0ff603103d9a7e2b7d270ef7010f13102d027e8de9a02c18bfdce766b16f44612a02b1f3da942755ad32af2bcd47a9bc020bd2ef008db84862b16e2fb9e11f738c72e9d7796955bc3063930e641e9a2dafa2b5a536af2652e66a82f462bfe1f0d82fc968c11ef42677cca46f31ca474e7acfc5a9d45c9a2568845f996dc05d78287b4328375eb54ab6d633cbb437b3b9ee1a3c516e39e75fc7382e313cfc9f0d0c3752820085268445b7528c90011f35bbdd565fba2e13b8673a2d9a88d2c56c1e6016fe2a4b4406d7399903a9c96a789c5d6c28c72d7b660a9d2865bf9c5345b118f10a91e40051e209d509d5272a5778eca283007b904fa93f8746f17a9f17e3ae7b3ff7a9b60b2a2ad1003db2dde80f6fdbee6bc3c92b9de160f6aa9b12cea910b5093b8d89fbe3cd1bbdc1c25625c0ea7df08018c58f934aca6beaa63ba660d8a66f7fbf3a887ba519b8ab4d26988d76d22e1aa7e6093538c3a92751609b15756313e936eeb2ee9b20ba8c5a0a0604a4b507b9a9469bd5a59bf4403f5abb889deb5a8c66dc9634facea27a6c07aceb3a9545dc2cb3ba55868ca5bc142959dba78d2b4c9ddab0a217d9b41dc1e7e969becb720c0c47839c4d1a6433b06a5ce5ba7156bb37e3c0bae41101c7a5cd32af5efb9f821402c9210759defb72a45a310da8b83029fe45201b6c96f65e37a056a1c10478e548302f816552ff472421bc8bd07084932819f5966c7269fdd8cfe7253c3db9385262087ef9a0c6cb5b4f378015176b8f42c3dd1fec3ac7fe6a0794cc9d55253868b3b40318e217010ad1c4c6938714d927d8a37b7424995cf457ba6962ab0d07c63f8acec4ea91367c368e91870fc898d264314430c5b83a618d9d94034db4154fad8ed602d22ad0bb3409b598909ce0fef3cd85d1683ceafc5cc65b8cebe744af3f47a22a878399df931fd5120eae32e8e41de895f1c35742d8fc904cc3db73f0c01a240b3b73feb1c01933268c910133bf4f40bc4b2f7bfee52caa6446b2565d4b441a7e7fc1251ef5aef28632fd375fb9a055d20e16af2c92746d5f16f21889c67d4e4ca992956b43d8a824c28a9e6a8de8810ef6541f7de0ff12eb8b9f984c8f542331f5452f69f72ffe236689fe3f299ba281a36a3043f8ada4a9dd44e6f54c610685abd71b441c1f85d72e39268a4bbd890ced09415883be674a9402a529d0172bc2659e3973d80535a95a54c313f16a5ccf029c6e1e8ba6697ff3d391c47045923ada61ca090b9e539d3eda3d11327baa93c39480f67b1e87a519a96170923d97f1bb0f78915c346dca0cab21cd2be5605bd5d5aa326d0af1042cb6943c1e1de092bc4223f2584e5fa436faca25de5b3ade98967e04b664cf3adf36d89c0865ea35fd8b893687821705f1ac8fec924613bcf9ebc9d20a304338635fb1f1b43f2cfa8e233f09083a0199abb4ccc92bdd5703696a797fd502a31b31cfd12106db02e641a7bf7b629b7069a7c2825806746624f99b126118552b9da57b8bc86130f5817d160e8b7506555cd906432b1567ce9c7b0a0ebb9abde1894f148257b9cd23dc0c352e63140f8ed7cf272abf1e67839e2c6377085bfd41736393a6251b6f63fc95cdf8be560cbc81eb821555a18f31cc02d9ccd19dd73ba8c37643f0c635938cabc49f52bb42b20eb9f2d039130eb1bc8a1803cf4bc69718d713716158f9aa4aec0c51e0c0fe9201ccc488f86d634da54af6a4b190ec51ad584c4978b4b55d0d086952b30e6bfd5fd6c034cb698e365271e887e6fde20f02ec355ccf3435709b3f93cb5df1e04252e69548960e9dd51ebde66518059886c5751fa48ce44fe99277671c3998082830ad3202907146984e15bda6a4a80dffb71bfd20ce9d20f2e5e51fb9080f0bdc5e9bdcda4468b60303972d43a1ffe3656c4ef28f09a964b4772e1176529343e2a313ee7e10403bdb19312bb20f6227fa1a776773ba13419978e35bcc6e385920a8fc61d3d0c1bef10766c611f16bfab599c5d17761b7a715dda41d1de8f122af69e1e9008ead50418096ec1d2210228c46105f1ca1503fd0175ac38bdbd5816ff16c9b2762cbb4c8ace75b2add872a7e85d45e89f83dff9d280614ffaf4fe3899087955e7bf35e4921a1895fced1951016083830c709017ff262e979e41a6aad1bad0e0387b495904670e9c53867e3e46e087bd167b3ee2f9160e1d8bd67653dbcbf3f4483e81e2e8128f56cd29e6842086685ce0bf55b7b96da9ff32e26bf12f063abeab214b0dcebd1aff2c43953433fbd4ccd8f8495b09226d7364bdb017d11201bbbbbe600671de2a8904b54375f1373e51085eb43211dc1f0a715aad390a1dcf9bf7a2e7a669214f6bce5c363f6c52387293401b7406e1d755187f7c1568fa009fc8dc9854490e7b2d9b8a6d2acff7e6440ba5bd12d4eb5c55032329ffa5b6e3b1e3b08d4ddfd7ad2cce6d816f4d28513c143d22fb15e7ae01981ea43ab6908e9b32b886fcc9f02d2e69c868a8b4d06cb8624b186ebf4e641dc1a1084a4ca09d97144d5bbbd090a65b9c5aab182842f1f6f5c815ee07d52c1ca8537fae4b13391743fca01947987049369aab912950909b7f939452c37ea7ba87a3e9bc719c99b5137992caeed7e6185f11136c2ff26c07a1ee8854b1c7f9d0ce4a47ba52ad406e3db2c59b36e788cf03ce362c7f230c5a7a00acf93de85fee229537d670c45767681cb849237da68944f22aa8aac9ffdc85c9a20604cb1cdffccf1a0c191a1fecc92ea04bad89c6017506a5d2da5822f12a5f17dfc72a15d056dfb8876c0edfc7480f637eb5e7968d4b25a2cb971c2e2f5327da24dc15847400440f9bff03358e38201c33718248cd1857b9fdd713a804b6bd39d4c70bd20bad7bf36f46d3607593474f30781e00464ed3d9ccbb429257bc284a6d318cd95418e4619a3ef2057823b10490ac7d87d9e52b0b57fb90fbd8ab23e682a9a8e87b3e24d34499a2b6785ab588267cdc14a497a104fb2d051f9625b39181e10d7f8469f5bbe526f0e2a472eb378cbbc0644d573c789eaada6a66d97ca5ceb1450514a57a1211f863275498fbf3950bcd4f1d180919685ce9214816bdc471a6cd6ce96bb0e359aee5789afdd0d770c31fba492381f35df7ede6f8d51289b96e1afd2abf252e86f4dc03eeaf9a6599bde1b32a959a45a9ce9a5fd8160c31754ac4e217d7f86ebce966b815c23ace33461b7152d046736bee3785d8de53a4132548e7513c946d22f7d7a370d15f0172e332396d860aa6c3572d177c2b505a241bc463036968d37f839ef4861849662a34eea997c1aa53aec2802e19a546bc2a885a7f2fe88965b1f87a3c3e812210a082d6d75243a6cd9814f65b18b363143764e0f9d6559ffb519bbaac23e3717f622287691bdf051de43818f7e86c88c93f61d7ed1ca0d6eac3b1e3e1ae538985ed67219e3baf510b4b62890ea6e82d5eb713b377d6c0f1c59af4e69e44c1b988b3599ce5bbfa8f1d035c1aed1a8976259938bce078837b4c560b485c14abaabdc0a0f6e9f0e8f5419db9f1368def5c8393820ddfd5bfcd60c67e25f1c7f4de4564e2f15e370a02911976d9433def6440c2fe62fb6e11ea428c860e145ef78e9f51aceb5a5c67e277377b2ad8dddff93ed8ad0912804d4e9202d236f45f8b8ecf000bb251be390c247a8ba1ce47ade26e323fb952a9dbc13642b2081e6649b18a2dacc127977792873cc5a07ee2ebbb06d7bc54d284de4706046b857bfe5002a38c55752738ba2f6ca6a43e12584c2deea0ff0beb71f030af4ce63d912b99712975bcf9a1d237ac3ee654adbc8cd24a0c3f965facdc50829594fe18f1595c7043db8328580f87d5ecf290048cb3f8534b69b0c9114fb1b66434043ebf6ff5b102d1599d0a47b4fc09f73065af258141697f05a60b9f7b0b074a00d155cf89d2f19f50d12af7eec925cdaf9f6e1875b95ffc224feab9e7fd6c400eff64410eb6d513e2b8ac1ef015483a7a7cf6f97171380d6c9a06097186696", @typed={0x4, 0x25}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x38, 0x0, 0x0, @fd=r7}, @generic="fc4b2e2b79d7fb16519e582f5f8f7d46bf37837efa71467f959ec9cbd7dc005796d40515653e65bace5eb704cac9a901c0323e8480521cdeaf31fb786252a990660dc963ecc01e0e4c37e679bf640092169c08578216f18b047ebcab556566f48c57ff2e62c2337b0723a9eee05d6f45c5c46833dcf8e4", @generic="791b3489de7ca46bb380e456dd1c311ffb45ca4b148ff55758b9e365c70931904d609f8a22a6c20fd5ece7ac21ec1460a00eb06acccf6c82aa99317a6b60b8c84704364dc874a89b4b35ac47f8a1b0cd5f9a90982b95de4238dbc815976b58d90856b97e79171e22f44c52d4dc446d5039588bf5b1ed317d407bbe55fc6d1e24d8f4e1952f498355fa148870724f8a13"]}]}, 0x1444}, 0x1, 0x0, 0x0, 0xc000}, 0x2) unshare(0x2e020400) r8 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r8, 0x0) rt_sigaction(0x100009, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:25 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) r1 = semget$private(0x0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fdatasync(r4) semop(r1, &(0x7f0000000080)=[{0x4, 0x0, 0xc00}, {0x4, 0xfffc}], 0x2) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f0000000000)=""/36) socket$caif_seqpacket(0x25, 0x5, 0x3) 07:44:25 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000280)={r7, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000080)=r7, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:25 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0x3ff, 0x3}}) 07:44:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xba, &(0x7f00000193c0)="f7f249b9740c9e57f43d26a782ffa4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f14c82a1cef20d94c30e478947d190ab8393646d6c0b004d9246a8f6542614f2f03f76a9938fff364f69d06e07d3d818e0db72a147aed99f6c5719e4ba33c6c077c70a81aa0839b0c9e7b6e79148c0b0d4ff1a74653751762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e69de07549948ed7d897d1df0a387b5ea225e2aca5c9f1c9525d1"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:27 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x4000003) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) restart_syscall() 07:44:27 executing program 0: unshare(0x2e020000) clone(0x80210a001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:27 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = perf_event_open(&(0x7f0000000140)={0x92cf023acc5ee79, 0x70, 0x2, 0x8, 0x80, 0x7, 0x0, 0xd8547a6, 0x80c45, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x3, 0x3}, 0x1000, 0x2, 0x4, 0x7, 0x2be, 0x1, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) write$binfmt_misc(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="e42ab29f1503358813c4ebc191ece68be078cc159d3f5ff6d02873627b9c", @ANYRESOCT, @ANYRESOCT], 0xfcfa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x80000010008, 0x0) 07:44:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000f9ffffffffffffff08", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}}}, 0x24}, 0x8}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00', r6}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000021c0)={@mcast2, 0x0}, &(0x7f0000002200)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002240)={0xb44, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x70a}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x8000, 0x5, 0x15, 0x6c3}, {0x20, 0x1, 0x7f, 0x5eb7}, {0x0, 0x0, 0x4, 0x8}, {0x4, 0x9, 0xff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0xb44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048081) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES64=r3, @ANYRES32], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:27 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3, 0x10000, 0x85, 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r2}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x8000, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000f9ffffffffffffff08", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}}}, 0x24}, 0x8}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x49, r8}) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c746572000000000000acc0fb38000000000000000000000000000000000e00000004000000d80300001802000000000000000000000000000000000000080300000803000008030000080300000803000004000000000000000000000000000000000000000000ffffac1414aa00000000000000000000ffffe00000010000000000000000000000000000000000000000000000000000000000000000697064647030000000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff00000001480100000000000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280061646472747970650000000000000000000000000000000000000000000102008000000000004800544545000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb69703665727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000001bde5b2ce443e91f21000000000080000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000f200000000000000000000be000000000000000000000000ff020000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006c61706230000000000000000000000076786361000000000000df00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f000000000001060550000000000000000000000000000000000480054454500000000000000000000000001000000000000000000e7ffffff01ac1e00010000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:27 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x15, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}}, 0x20044000) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:27 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x1000000000000000, 0x100000, 0x5, 0x1, 0x18}) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = accept(r1, 0x0, 0x0) close(r5) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000001c0)={0x81, 0x7, 0xfff, 0x8}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000280)={r7, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r7}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}}, &(0x7f0000000180)) [ 1595.489962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:44:27 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000080)) prctl$PR_SET_DUMPABLE(0x4, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000180)="edee600f6e9c4f32bdc0969905d35db78a017789d9352e15f7c297d36f5380ec48b5aa33603646b9a893bc1bb67ccaf0cd3b096b420d59538509371005600096e91957295beec8cde6902a13819aa3554d99084e6f903e19d16d2c94c0a26ade315f7c0ea6e5814d2725d2e5f4aa176b842168a90b282b1f7a424d8ce9640ab05d010d23712e971ce4f4b7dee957586fa645b73cfede45073db56d7acc50a9d9c45a57458d85c0c121f14516545036d042b6f627f3832f3a79048de4954ee59a179199dbe7856a8c67be45543e9b4df81a8ddb35f08b227bc6151c6d954630eafe1da95cbe3fec4c9dacb1550198783aa5f3", 0xf2) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@null=' \x00', 0xd, 'veth0_to_bond\x00'}) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x6, 0x0, 0x84) [ 1595.539316] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1595.567354] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:27 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1595.614780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1595.630437] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:44:27 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @rand_addr=0x64010101}, {0x6, @broadcast}, 0x4, {0x2, 0x4e20, @local}, 'vxcan1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1595.749440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1595.763657] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:30 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x100000d, 0x11, r2, 0xffffd000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:30 executing program 3: r0 = socket$kcm(0x2, 0x8, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) 07:44:30 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x801, &(0x7f0000000080)=0x0) r3 = socket(0x23, 0x5, 0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0}]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r4, 0x0, 0x0, 0x0) r5 = socket(0x3, 0x80000, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_submit(r2, 0x3, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x7fff, r1, &(0x7f0000000000)="40adfbc24be240e8701f02d020d95dce59e3796d4a58a44299a94c25587734e5dff9fc2eaccf152255fdaddac2c17356adc33dcede5c340366414c3f286fef398ada941aec15efb0088c0682995bbe2f4846928af45b58524e415fdf3227ab4e1fab536c7caba1bcec254d04244f2a8d82e4fbaa94d96dafdb48e49278df21e6e140e4e4ea314edfad8dc863c2bbe038383e82496b229eb813dcbaa4a926188f15fb", 0xa2, 0xab1, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xfffb, r4, &(0x7f0000000140), 0x0, 0x1b3f}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x412, r5, &(0x7f00000001c0)="e474ce6375424009e66945132ffb5980f6814a7b82ef4ad2abc997c10412e5cc9be073c793cead3d0e1dc7f1b034172558674be7edefac24b6a2a3bb7e", 0x3d, 0x1ff, 0x0, 0x2, r8}]) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c746572000000000000acc0fb38000000000000000000000000000000000e00000004000000d80300001802000000000000000000000000000000000000080300000803000008030000080300000803000004000000000000000000000000000000000000000000ffffac1414aa00000000000000000000ffffe00000010000000000000000000000000000000000000000000000000000000000000000697064647030000000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff00000001480100000000000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280061646472747970650000000000000000000000000000000000000000000102008000000000004800544545000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb69703665727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000001bde5b2ce443e91f21000000000080000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000f200000000000000000000be000000000000000000000000ff020000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006c61706230000000000000000000000076786361000000000000df00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f000000000001060550000000000000000000000000000000000480054454500000000000000000000000001000000000000000000e7ffffff01ac1e00010000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x117, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000000c0), 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) pread64(r5, &(0x7f0000000400)=""/160, 0xa0, 0x2) r7 = socket$unix(0x1, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @gre={{0xc, 0x4, 0x0, 0x12, 0x22e, 0x68, 0x0, 0x4, 0x2f, 0x0, @broadcast, @empty, {[@rr={0x7, 0xb, 0xcd, [@multicast1, @broadcast]}, @timestamp={0x44, 0x10, 0xb, 0x0, 0xf, [0x68fb, 0x7ff, 0x1]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xaf, 0x0, [0x2], "5a0747aa4e22caf060f55185a3eabc73c27a6abe2b3dea652f1cdb5f09688285f993e8675d2d9891c0cc25620175c9cd188295ae5ece034a7e0e3c846d89a833516c272aa95d6554dfdc829ad558a5b7a78b7ce966de6632c2e38d970b74a8cf1b73bcf0c0676654145feac9ac1819cd2800361f268dc4d70bf47b755f3d8841819d33b78e33b0bcb6ca808eaa296b0e7320682f5d1ed1ddd848d386e2e2d9b96bae03a0640b19d76ddb76377856df"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x2], "db859febe18e4754c595752c8a562b8b9606eb927a34eef4cef7e0970064e0231495d8e6fb2ec78c956088b30b63d2a92232d946c4812ac9ef10821101b0fd4a1e02ac765652348a5fc8b651d44ec1c9972eaa99f2a44ea88bfca54fd5bfc4cf0998e5f5f4e721e994f95b9feebf8fdb9886d9d1d6360f46439e0d75c406d46c05a97521b893"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "aef273ac0001e13a6eebbcfd6c15950cb047f2a9815e4018fc54f76e5424d41739b203c2edc8f5da88a18f3e9d9987b9a87ce12936d29e3aeb4ee02f263de3d9b69f4c93aa133135cbade1fa50accbbd91159bfec34339cbedb979d1489872f967844dfb9908184b538062041a"}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x37, 0x0, 0x1, 0x2, 0x1, 0x2}}}, {0x8, 0x22eb, 0x3ff, {{0x7, 0x2, 0x80, 0x2, 0x0, 0x3, 0x0, 0x6}, 0x2, {0x1, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "539e302bd047ee9cf445b7586a6536266bc00d78"}}}}}}}, 0x240) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:30 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000001e80)=ANY=[@ANYBLOB="a00b0000", @ANYRES16=r8, @ANYBLOB="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"], 0xba0}, 0x1, 0x0, 0x0, 0x20004000}, 0x400c841) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/ttyprintk\x00', 0x8541, 0x0) write$binfmt_script(r10, &(0x7f0000000e00)={'#! ', './file0', [{0x20, '#+)#'}, {0x20, '\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, {0x20, 'syzkaller1\x00'}, {0x20, '/dev/net/tun\x00'}, {0x20, 'wireguard\x00'}, {0x20, '!#wlan1eth0'}, {0x20, 'wireguard\x00'}], 0xa, "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"}, 0x106d) [ 1598.488596] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:30 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x14, r4, 0x917, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4090) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) unshare(0x2e020400) r8 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r8, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:30 executing program 3: socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000100)={@caif=@dbg={0x25, 0x6, 0x1}, {&(0x7f0000000040)=""/103, 0x67}, &(0x7f00000000c0), 0x40}, 0xa0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6, 0x0, 0x0) [ 1598.559911] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:30 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') syz_open_dev$ptys(0xc, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000080)={{0x4}, 0x10}, 0x10) 07:44:30 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)={0x6f8, 0x2, 0x4, 0x80000000, 0x0, {}, {0x1, 0x1, 0x9, 0x4, 0x9, 0x0, "cd7a70d8"}, 0xfffffffd, 0x2, @fd, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x84) 07:44:31 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/unix\x00') [ 1598.775861] [U] #! ./file0 #+)# Ñs(™ö͉”MA=ÉWcT“Â…¬¤ [ 1598.788448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1598.848804] [U] ²&· cp“l .Û·z ÄÀø¿•‹EæLv³?›¾Ù˜ÙzštØw·ƒ¸ÛØe" è¼0bb‚ZSþ÷’E†ùߊë0ª¾®8ìÅt¦í79Ífí^Ö$:=ÚÏÇUƒú ÉÖTÆ욈ÄÒsIQtʆH’~AÞ# †Pax8ÐP[Q˜7ÕÓcêÄS¹·5‚ LÂÚäqŽâÈ<§‚}ã2û^M‹‹Ñ 07:44:31 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0xffffffff}) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) 07:44:31 executing program 3: socket$kcm(0x2, 0x1, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xfe08) read(r2, &(0x7f0000000380)=""/225, 0x900a453f) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xfe08) read(r4, &(0x7f0000000380)=""/225, 0x900a453f) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) [ 1598.950402] [U] RYXµE¿,Á•÷¸ý¥USÒÆÅä”è$ò6±«ËHrZ¨¹šHÒà›Ž\ˆ¯-½ÚÙPÑö³ÙVÓ‚0´ä%ø%³¶8hhÇG-uì®z)Á/ÐúÚ‚ú6ƒÙvy|½õÃy=ªjÕ#·“ácã€jÔÍ^2R<ãˆH/©­µ,ÕhñeBêsLÚ¾g=ã›XÇëìùˆl¢ˆ×=#©EþÕÝÖf÷ÆÀŽ [ 1598.998726] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1599.012104] [U] ZŠÚùc3rXqÏP1S;ùËÒ݉ýVÓ”}ÿ [ 1599.023217] [U] ¾TöcsÒÞÎç1é‡Óê._îÞÆκ`¸UïÐþ²FM?ö,I_pÉ”‚Ó¥ycüŽëü>=øÞ¥³rÕ¾1% SdxüV0Ée¡ŒùYÅ|¦çc>ð÷ÛD:ÅNÐ3áí®ñ ÜJɹ9°8¬´yúÜv 07:44:31 executing program 0: unshare(0x2e020000) clone(0x2150080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000080)={0x8, {0x1, 0x0, 0x0, 0x8}}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000200)=ANY=[@ANYBLOB="040000005a9aea8f8141560000003469df76eecf0b2ceb9838a63c6ea9914a7ba85663b7cf34aa7e023f223f462b886aec256280d51114e768afd85582810993122d9aa01ea9f775bfde5e10ff791fecb3b7ef2ca90898c48add40c775d9bc8c3a2c01debcad620139a8301f15bf90bbf1d1f33d5ee41fd56995d556b007c158b8a20a41e16b406ac74e2ee80aff3eb0a519fb73c9d8886cf82925f7d4eca4e7a68a0a0d71cadb5b7f55e705cd698db6028e1c301900b6302983c95d5cdbda22419d8c259890a14f2d0d9b191e0ed21314fd9f536d09b69c975983440f097942a77bbb88fffa97f2dd0e53723dd8961ba09621d90a7700"/261]) socket$bt_rfcomm(0x1f, 0x3, 0x3) unshare(0x2e020400) r3 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\t1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000071f000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x13f71000) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000100)={0x1, 0x1, 0x7, 0x6, 0xfffffff9, 0x49, 0x7fff}) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1599.045669] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1599.048319] [U] GFëˆ%ò2`‘ú¼xMS«íþÖw2¬ù¹œ|îà–Úcñ¦2dì»â [ 1599.061374] [U] Öߟ´ïÀ—fSõ¹ÉÓ0­ëeD–á¥^½»4zjQ$èÉ"©ú•óäÁôÛ¹m¯ÇÍ—H [ 1599.068990] [U] ˆ7|¬ÕGLˆƒ_mÕi"‚WO;dŒq_¶U}­©Û+¨_úað« [ 1599.097241] [U] ‹p=®óÓ-Õ7›¦Z«2“¸a¾VwSåwÔãÅ$21¦ÑÖêzíݬ•7ûykKCOóé1ˬ&Ïœ:²íþ;Ù&sì„[$S —†-ÑÅ%ânžÅil0|`¼¿''Ãe ke#½„_ÌK‘\ !ž“ð¥p«âEX•Ú8ªÝÝ°5íæñw7q×¢ÇJ [ 1599.162770] [U] ¾…¤®­¯b 5–%l ŽD™ [ 1599.176355] [U] Ðk0zK [ 1599.190795] [U] rðÄʇÁ`Ê·]t+‰Ô42áÏD@”Ä“uê±' qF}B¹d­:~Ÿ+Òõ8ÇõÖ¬™8Õ [ 1599.197963] [U] –Hc_†½ …ç÷×!zo*£7ÁÂy‚‹å¢»ßË [ 1599.210788] [U] ƒtò÷gðö Ö_Âö|™:¿tÜô½^‚3I$¯©8ª‹ÚÖ× ð¼¨CªóÃdü‡Àðö¯Ò>xóF_G°(ZÅpïéçûÕì [ 1599.219145] [U] 9ÏÔùÜw¥Á´—”èA [ 1599.235554] [U] œR›\ÝÏ) çJÎÞ`€Ã+¾W”~Øâsx [ 1599.250801] [U] ²«Õ [ 1599.253081] [U] vµ‘B¨Ž$Ø-¢iöŽ”!xÑAæbóñç°!xߎ¤›uˆðÿB½Õ7õl–K}Cí|·pú¥:œÇXš²r%y ëlzI*‰懦ç^hŽW£ [ 1599.290399] [U] YЛuŒéJÑÔÀ=Í/ÜWÐNw{ëRu¾x;%îÃMë [ 1599.303778] [U] BÏ•I<²’ÀÚI)s•‰`M²ÏÐÄRÓGqàºu,QÊí°(ZØ¡›>ûÉê¸ÜC‘v [ 1599.345993] [U] é$«Š¡½Eš®ó$ãGâ ï‰e­¸FM [ 1599.350190] [U] ‚[ö<ào%‘ ·Ô—l˜üKæ;ïû´~š› [ 1599.396601] [U] aüö¯® [ 1599.399759] [U] q”í–!×Ño^g#Å ãG²ÌŒyÿ5­sY‹Ä¼5Õ°•p“º;M•¡Lê)c-t-¸Ê¬gÓr2纯q¢ÊÄqúŒ28yoOZîˆLÐ [ 1599.431146] [U] ŸØƒÑ×nÅoHIl}¶}ïT@3G× ¹¹¸,- [ 1599.435695] [U] …OšŸ(TE§¨ê‹„q^HHë [ 1599.439682] [U] ˆðÆ2a~ð :5Éa{$®*gg'Leϧ&Ý­ì¯%ÑðŸ59&ÐÙ¯$J—GMØ}Ó”ˆMXø3yýͲªŸ°G’ [ 1599.480786] [U] ¢áHÕn¼|ågÒ˜ªo£‹gaݼÕam¡»ã4ªòŽTÖã7.;Áu×õu¶‡® [ 1599.487510] [U] S…àö H*I [ 1599.490281] [U] š‚ ¯‰áÿÄ/ÙŽÇis·êwbiÜ#A­À(¸Bq]馅ò„Ääá#ŒÓ%p™ì4Ê_­ jÂþû!R$’dÝ12‰ëÇñ®˜ÄLº¼ßüúq#8G"v!«:ÛÇj ³Õ÷ÿº·èJîÿr½ÿ^XNùÍDæ§%¡!¬PâexöCü@¦…žV¼šg†Gšà@³y¶Q±ø % tU¹½þMŠ·ŒDE—(_MµYsílÚXÖ8b^ [ 1599.550078] [U] Læ–Lµ°`s…YÈ#Üð[ªÅ±K¦3hÄWHHGÄû9ȳÁ:~´úžïIåLZÏ9ö”(Ò,Ü/Õšºf*yÃ+Õ ñ· M—Ü+$uYokhýs=ðʺòM¼¦Ø“4»ãY§‰ñú)ÖY_Ÿ„Ï™§$êq:&÷Ó«¶Â¸M *ÇÓÕÕðò#Æ|f$³oHá,Ò©êì/:’¥Æ [ 1599.597332] [U] ÿ|š#%wY©@4MÏ}\×â] æg“´/[Å’Ø»™þ¥#˜¿ÍM¶ú_²CŸ“5Ä©ü!Ùœ04NNߥ÷ŸÈ˜ùÆGdå8¡·{tÆ9R£TºI]ÅÓÌF [ 1599.625364] [U] ¼S™fõâeD~JU>šáüäúz¬!X”î¿°o”)Êඥa®é¤†ë³Ó(A¾üi´Q [ 1599.650767] [U] É)±„ø'±¼@Ð%sþǫ|u–pày ˜š¥‘œÖ® 0†šÇŽÀÐHÍIBx‡’…žf˜g™‰‘ùgÖŲoËÏzU ÇÚì-àzAn!¶T];l¬Gw]·Õµ!÷²æŠ*Ò±½Föêš°ûº^\eA¨ûŽVq¢£Íñ{IT±Æ@Ô™Ã@*à+c‚TËI¹EëKëMòäÙ£nEäBH«púSºlbÀ|åøÿLP [ 1599.690748] [U] ä«× ÓÃÕ2 èteaoÿç€èVZž¹\9~# Ê0d¢ï¥¹g{+Š9™Ê [ 1599.696869] [U] ¥agµN×U ^flçAÓï=Š´†_U$߶ioÅÿy¤ˆXçW5T˜S†ÕÓ7C t Q± [ 1599.713418] [U] Ë‹>¼ [ 1599.719258] [U] ?Î [ 1599.725987] [U] !a.höhô‚ÔXUB [ 1599.729145] [U] Ç6È*ç2“ÑwÒù#Ÿ5œ¡(€%"픲õ‡ [ 1599.733296] [U] »&¢ûÛ’øù2壭ˆF/‰ÊAÌ8/}m‘L(?ú‰x<Ð%û\ÛÏU£Hwá‘ WŒq£§Q@GéCR KãûÕ±²¿—9÷í˜y¬žŽ7 [ 1599.743181] [U] 1ƒ´˜†!…š»Î/wå ÈlÞZ  [ 1599.783229] [U] R*?ž [ 1599.788080] [U] ´)4xø1ã¼™³£À'¿xNÎb£ªÏºŽÔpëî¶RjöLîÇo97ºa&$µOífüM´ú£0ôl¼³Þ»ZÔë6ÏySKí³6IOÔ [ 1599.834660] [U] ª»xI÷ÇnášZ¤v¨{"ŽRò°$pÓiN,$žçãµÿËÒú æn=Õ˜nUó§ÊÝH¬²P§Ùym1ÁA¹}˜_Ó%Ï(Ù’,P.6³ïKJÓå°ó“ûÖdºYäŸjŒÒ&ÃYÓCà¦ÔÉ'á½þ#GÈDœI"p¸–—VÌit{8m`óq=Ýë]ê­¸‚ãšy yÇz§E.Œ!DÒá wX{>#»ÈúC [ 1599.880781] [U] Y œÜ 07:44:33 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f00000007c0)=""/4096, &(0x7f0000000040)=0x1000) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @loopback}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000017c0)=ANY=[@ANYBLOB="66696c746572000000000000acc0fb38000000000000000000000000000000000e00000004000000d80300001802000000000000000000000000000000000000080300000803000008030000080300000803000004000800000000000000000000000000000000000000ffffac1414aa00000000000000000000ffffe00000010000000000000000000000000000000000000000000000000000000000000000697064647030000000000000000000007369743000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff00000001480100000000000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280061646472747970650000000000000000000000000000000000000000000102008000000000004800544545000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb69703665727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000001bde5b2ce443e91f21000000000080000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000ed000000000000ed45000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000f200000000000000000000be000000000000000000000000ff020000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006c61706230000000000000000000000076786361000000000000df00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f000000000001060550000000000000000000000000000000000480054454500000000000000000000000001000000000000000000e7ffffff01ac1e00010000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff43a9c72733cfd15b2ffe867f4a0461196bff1f7d877d30542de6997fc16bc010379504a5cd83410c2863750e92a51dfcf11a0fc4f2c8936c1bb9db973a983343b80a2a2f216a3db8db0c20a021ec9faeb76d31a4c5ce81c1e520925b02f7a5104b9cca0ad01d752f41715aeedff55a3f70516e3640955fe032c0ca0d30d6f6407722c652cfe55a7026c100413f7e7c7e3d16c683425455c10a942c4bc00ccf95a13d23f13b4a52d6ffe0941026d9b63bdb7a9bb82694f0acc93d8bde19ded5804abb745a0591c633273160ffe1944bd954ee6ca5bd9cbeed4cc510f44fd90cdf285515071c35d36a022fd7336f5319f6fb61d7"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x202000, 0x90) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) 07:44:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fstat(0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) 07:44:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x117, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f00000000c0)={0x400, 0x1, 0x8, 0x8001, 0x1000, 0x6}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:33 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fcntl$getflags(r1, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r6, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={r6, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x0, 0x4) 07:44:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfe08) read(0xffffffffffffffff, &(0x7f0000000380)=""/225, 0x900a453f) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007500)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)="67b1779f8125cf53ecc4479476bc0b93c84a86f1d3f9cff7a1c54246f6311bec663326099aa9e27e1a85d9d64cdc7c21e81b38b0ff1f407d94e0d01a20d819d3ebd0b0bbfa221dfb0482ecd0bf90db35e9d91d8aed79df7c9a01a28664dc9088d0ca6fbcc1d79336f0ca8f84052041d05a79a51a1d667d0fc72730cfe90b4aafa2d5ea02935e2fa8b2c7a1e766fe3b57bd07b42773d3e622c9763a40d0cc459fe33ea64211191f27fdcd938d2c4eb6f73a6403e3fb9a4fd5d7c8733ef2e0694d9ebaff3c5d0fb6c5cf75d5fcdbe558a53f37a631c64490cd60efd1bbcae501a92201d6dc7d2d0fc699d6d2f2", 0xec}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="c0d941911c82c0ef7302284a6d7fc525b2db94e670ad8f948bb27b6f349ccbd1e9921a53e8cdac11db9c4d62e79c0147fffafe30afdbb37f45628174f35cf8e02d50a2c4eb3addd07ed1cf3a73ff116daf09bfa60a", 0x55}], 0x3, &(0x7f0000001480)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x4000}, {&(0x7f0000001500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001580)="3e3ea043fdcb7673f7f4240d3bd87af4dd4ea8342efe9dd99bae08edc5181c7f518a0be6c4a8faa0ab94aaad4287dc53c948c7a4f290ffb5d3db8dcc3a81e140eae36526fecc963cf426391fbff86138d1bc72690e4dfa1681cb6761f95b69f68d82d7465b3b401c514c0a8056e1ff6a7f4ae6335518111aae513f854cea6dfceef6184b209e35151f3dca9d27e0c11c8eb9ba", 0x93}, {&(0x7f0000001640)="5bdca9e30bc91bd04a279c773f989259fe6a32bbcc4faf7eff078fbd1dc6c215b6e96c04e551b4e00066d0e626b896e6a18a1e1668fee88a16393cc8dfd68069c6440c3f929d61fdaa32b6d91c48e5bee034063831bf443b805479134849b8d14b6064712a7077d051b99af766c379ff04d4d28318ad9d18d0e7d16d772a8095e46adc3b4624f842c300f86a82313efa946a4588e897d47579d36971f507ed5ec671381d9b685082bbea4b228471d015216929b92bc11be67cdf4fd8da5fdb058e6a93f40572004e7126e21da4847e30e76e03", 0xd3}], 0x2, &(0x7f0000001940)=[@rights={{0x2c, 0x1, 0x1, [r4, r2, r1, r2, r0, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x108, 0x4014}, {&(0x7f0000001a80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001b00)="45ae934f4dfa3b7386b53b05e3a0c5def3cae5a99cce4a6efc52cc8f1cbf7d12d8e9139519b976acd241feb7d94627154a7fad29ca2bd072bd9a585c193384f4771d13b63c14bd1c006c925411a62be8611887c8b4dcd262d09e119b0bd4cb31d546156e46559ed9b380effecafa6e4c77671da82fdcdade673463a39932ed61", 0x80}, {&(0x7f0000001b80)="5229dddbce990dab0d398dff85fd1f1dda6806aeb35cdd89422d1181a2284822671547ce91094c4fa11c1fa01198ca93b3ceb5ff91cc", 0x36}, {&(0x7f0000001bc0)="ba88da1f7b202d4408630850090f3b5406bcbfa77237df21105df2c67268ec0aa97bbb7e8473a7c437629631fffd7b227fa0d7f633047c582a7c8d2cc755145e05df517e6d5d362f5ad227f0959c26efbc3b4ac68bd19e2ab88686eb7d1d199af04735451d8be34a102ed98457ba0b6204b70f00fe094caa1ca2a3704e8c18090e059b625753bc3d0d31016228a2dc5a3748f6784c987ee932c9cfd006011a3b28583e1a404c39", 0xa7}, {&(0x7f0000001c80)="50f9fb50b42ff7be435018b544abf31b8abc272d2138030e75754afeb6c62474bbfd41777fff102b7dd5bf60247979ef608365a3f5bf8ab685db2fce8284ba6d99dc3608cede3b5d4854fcd960453a9b2db8a5a7aa3f0942d82ffad1016e9ce9ff341c7f7e8306a43033e91a34a5f74d9661175cd295acad142a0015f90a39ea79043f953e7bacfe458865c552fdd2ea7839c1e48125d15f6ed3097c69db22bb6b5cf5aff939c6c00bebf005451964e5619876ced1b7e535d320bfdc5e3588c0d7a1c599de467b8db4ab8ac324b3c19b8f918bcfc9d2bf9b2965eab2d3b588", 0xdf}, {&(0x7f0000001d80)="959a3c5b18c99a5d23043794b9050d9c4821bbd0f6a1c83c27e0e8cbe46d3d55", 0x20}, {&(0x7f0000001dc0)="fddcee3632e4", 0x6}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="d4fdf63d085d5894fbe14207e78a8d8a0534c23c4300994742d3785dc77fd50bbb5037ebfd6f91300b95ecfc62a8a9f2571debc391fee8a3920b47573ce4882a569c2ebc7c31effb091c78d083c29580b9e86089d860e036cf21594f9e667bb5eb30bc173a18178880f7891924601e2422c9dbc076620dfa8ae5eb1674c9ca40ff5a7e1e02ba17d58286adf2561185730f382bed6cf5964fe2b777c0d1803452d6523568315b638c0f60f26b3417b3aa804fe284e5d8", 0xb6}, {&(0x7f0000002ec0)="c9ead4c5c45c7cb0439683e1b075e866e4d5dc698201e235a62267ac5f6f882012899bed9759994ff80cdef3aaf63fee1052a01db703b38b1ab7fa16ef7398fa49ddf2e7bbe59927ed853687db6aa0ecb4ac8df1192696fa00a7191bbb23faac0b970c63469ca6dce5e6aa85ebe6678fda01128b17cea5ee15e32009c86b7ea53fbed19a18f3a04e2f120ff4cccbe44998e592e5883e235d71e55bda8224e230e45ae96d3852d5fe30c0176b01c29f307e9d47f699f6f063b40a03cec8921555ae45804dbe335fdc03734e57edfa19e223716b315993d7a40b39f99280c85ff4b6a9a8c0acb064b058b41862418ffa5d9e5d", 0xf2}], 0x9, &(0x7f00000031c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r1, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, {&(0x7f0000003300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003700)=[{&(0x7f0000003380)="5d523995887f8888b3f128bd113375", 0xf}, {&(0x7f00000033c0)="187d57a83bf8b84e6ce3b11e8cb39b06d930949e6721c697329deeddefc8a59bdbd73364d32a3ad67d3dfab8199b00331a882c84de4b248b32735630a8b0947183e742842462a676754be00789f775670963c3b33ed1f72732edf01c84abd465029e69f925a9c39a6a6a77902b3c44e34bd5bb1ce9cbeb6e6791c34c0f8b4fd791e6df8df1ab9bea857eb25d2a5a8c65eb3b5701bcacf734c21289efec6a887fee0b6b", 0xa3}, {&(0x7f0000003480)="c121aa26e64c2f4dd4086298adecb8e7b09c95c6222fc7d1d61b644b25df957bcb1873815ef4bd", 0x27}, {&(0x7f00000034c0)="71e71df4e79d23dee664e5794ac90aa7496fa059b422772a901f826ff452e89ab700af6e33ec6e4a0dd4bd8ae05879401d2b47", 0x33}, {&(0x7f0000003500)="8d1feb0899dcb14ea12aed8719adea", 0xf}, {&(0x7f0000003540)="317148772b56d6fb07b12d255b46de74ab5256bce67ad0123f27bf89e703f68120f73bbc5c1a23b31b66194922619db981660111569021db5850503ed20d7604e9c7227913157328d8d85339ff6b3af4c2e86db380a558a0aec2652e74cd7bf1e6be", 0x62}, {&(0x7f00000035c0)="4b189932103ff0291a0d417025ae4869a5159423e79316d20be5a76a426b4dd99b0a43626fb2f6e90d4257d58b6e4036246060f3ae46e721002e64794eafbba860638c7c8da2647df4f29f5e39004d5c40992bd6caf85d29eb25042a2553615dbcdecc8caa89d22961354c5f2ef353976feadaae2f40cbbfedd8c174924d61e89b4cda82287e2a676b31948131a71106510ce66cadd4909985e6c1723211d4bffda95cf9ad073a3d3c2ea33d6dae20806f75ee986ff441926a306bce8ca9d7082ee4cf38a452e4c3dec36ed82b7f3dcbba6c5d48a4e5a1d1d552c6779299763465333a59aff88c368b5be2e89ae6ae", 0xef}, {&(0x7f00000036c0)="4d586c76ba5bc5026c91b1c55c7b26403478e2263858afa4f92ee1", 0x1b}], 0x8, 0x0, 0x0, 0x48814}, {&(0x7f0000003780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000003800)="a72623f0c7e0357544c6a8f2eb0b8963ff5da7", 0x13}], 0x1, &(0x7f0000003bc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140, 0x4000}, {&(0x7f0000003d00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003d80)="ecaae001f70c8d2181eb28f109b974f454bad58aeef8436515cbcef38497baff753421ac23905ecab1eabff7561626fb4be0fa8ff1bba683844212b052dd891aa3e07c7b46572bc673edb505c0a407266bfaed3ab7a5bf5ce934e4d824", 0x5d}], 0x1, &(0x7f0000003f00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x24000014}, {&(0x7f0000003f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000003fc0)="897fad1b86260fc36e4dc592188cf2e7ee304472971c1970be61d134616d627f87d4e37d8cfe77b4e6680b4a2e972c5394d60997cad38c4a64a7c29832", 0x3d}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000)="dd67d562a000415344bb56fbd656c56d6219533d5cb550fc10d8901ae3e978ef87aa45effec40f9e9ca88c2ddc3451f4", 0x30}, {&(0x7f0000005040)="4fe1f69593b0eaeffaf8bbb4f1f1a6c56c218d4585749f8da2e25d5569c01983b1ca24165ea0420ceb53a169004f61feba73d84361279de167e1cf0e4a19877a273bb79173c13e92fb8021e3a8b17e2bf492c42bc1d5eb4e4ea73bc9b25d2460a8802f5ded3fe9854abc4d8cb50614c4e0d3439028af816eb5d31ecfb99254f596010ecef884fb5586db08f2558b01a89f12732318592f5bd0c33e36930016a51bb77ae642adc9613dcbd23e489942cf45b5", 0xb2}, {&(0x7f0000005100)="ecb67dd04a430a896c5acf93bdf918bec678e0534b40f3528b6bd1e7657e9c2957bd656d394716408716d74c1a320b863d80b8a3088eee8faa6f961873a856c8d33b6c1a20ed36a0a4340c36b447112a144c54cf9f383e39dc6a3a1a1bc6a551f669e4a2d492b6254e17047395b18ee0", 0x70}], 0x5, &(0x7f0000005200)=ANY=[@ANYBLOB="10000000000000fd0000000001000000"], 0x10, 0x80}, {&(0x7f0000005240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005880)=[{&(0x7f00000052c0)="dab0c62dbf080bd51f2b15", 0xb}, {&(0x7f0000005300)="75ffd2b5d7a8e38b3e869ba2b1c9d44e85b19180a05be149c71671c607c1897bd65c71f197b731193ada87241ae46ebeee76558fe8af7a03c385d8f61c3e7b28748860a32eff1e0e3aa123897a8206a1fec0a5857e527651b877497f9b6ca0f4abfefba5aff571b390bbd1a1500554bf7131aedd5d7dfbfd9feb91b82c582c8a38afcdf7f3f8a56732c4d3be4a2f16e0c4f825e62470bb3818f0c877d53412f12850f99ccb55fdf673fc28417b1e2d0e659115cdc7a080e4d3efe3d99e708a36e0826403c48bcea020747f87abcc21abff238dc4c3ddc9e63945761e627faa69c3938c2479a574d704d39b4e9a76838cd4", 0xf1}, {&(0x7f0000005400)="6c29685bbcbfa38dc5d9e329b111b5209fc5f2cea7a87dab59f231c4e6771f8404b89e791fee718a9caa85883f765857edc2", 0x32}, {&(0x7f0000005440)="3bb6ff68e91fdfe59676f4a261db4878db1c94106e86d7be3dd753495c87bd65eb22ba5dfe0e8a728d10dbca69b6b081fbe0b685faa4e949af3ed07a1117a2138d6398cd42a869a709225b4e3025cea1cfa557eb0d53e174774673be31c18b264e6d006eff77fb43ca04c38df506735fb7c029452638083650facd8536e3df51722023479973498529679eb783cfe33921c58a7f47f16c57ffd4e4137d24d655c0a661a9e9b395bf4ddc34968284e75ee7ec5fdaf70d15fe8b8f5fac295c66109003db8c9cc6c0aa4aaa647094d87f", 0xcf}, {&(0x7f0000005540)="53f1a204721c7fb8594bdfd1be248ffb0fa8e5c619c95545c256540c04f9bbf4d17af92a6ffdc3e2599f207e43cb1658552d703d3bad8e8e5dcb82737707c6da552b30510588c4c542a7ad218a127686118dc130", 0x54}, {&(0x7f00000055c0)="ee9d8008659392841638b7d0ef848a4542e783aef5f5371d9d91805948299bdb2fdf2c5b5adeb984546b5a57be7ec618faba137f4a5fa828f4c03b59cb4157c9072f2238358411ff448a3fea28eb84a46e32c2ac04401583403aac4cc736c9dcd57920fc889c579af1bc8fe88d1e4880cf17942836609f0bc3168fd406629e05dc31610f7bc4c2e679d3b9d573ec448d45d02c3ceab7ab31a6", 0x99}, {&(0x7f0000005680)="d8d10d2371b3cf68617557d808d8109f8def11a3e675b96e8b4b7c8684cf721fb16a03314c7ffaccc4a5ae07689a7f321ca79b2e590a4d24f42d787842a09e9ca52a938b87a6376907b7894135bad4d7da00cf3ab308023f5a784ba21474cbafbc254e4bf7316b1009dd4ab6044beb71eae12198b98d6273d70c3b0f30702ae894d5fba9ca47a0212814e3a9a8393b05e1889ff4321da114822a1a6f83bd547937a3153c0c9d1cefc8c23bc5bc042ec1318a7f2f1d508baaf59a6f33b9a2884d749b79947f399c795d863cf53ac535503610e507ad4f8a379e9b2aba33bffe385234286adc1d47b9f7d72f4562ae23e2", 0xf0}, {&(0x7f0000005780)="e4789a62229ba1132fe7e7d331d1b7b64850d3c632af4a6f6c5aec5dc7f90e2107f1f7e9b247b3e778fc4f7283e8131879429df98951c56d42100316638b0869d7155ffd1fa219665568128333c8dbf57862f08cd20b531465d71c97abb1a3b522ea34cf94d017488c1cc1579b98844a799e249ddbbeb8ba9ff60617cf22d8a506a543113dcf2d6d45c5ac31b28ab437675a0fe26f77d0c830e1ab6955589298de036a681f65f32b3cfed5aa78408f162e51fe9f148c89f0f4c4afeda67fbf67da7fb44b3d7ada39c1d74ac55ed114236dcd9e59f13e881e866c", 0xda}], 0x8, &(0x7f0000005e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x128, 0x20008005}, {&(0x7f0000005f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000073c0)=[{&(0x7f0000006000)="c7fc70c59fdb33118af1c88725c7e8de66aed9fc5b7dd50d23b2bd6ba47b6e394b90bc073c71dd9e577445d9ff710ba53ea1afbf342fc08b78d897c9dd309ddfaa86040c50b743eb576e8288167abc96d1d277aa2b14078a174668277c3228585ec0a27e0eea1a53f8159c92552279ab85196ed79eb47c6b3a8cccaa3e45af6851e4e21f02a894d297ae433bef180cbd1e2314554fdaeb23b98021367df9cb1764482dfc", 0xa4}, {&(0x7f00000060c0)="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", 0x1000}, {&(0x7f00000070c0)="771aed484c4b0ca791c60b17676b473842da19d3a0fc45139aee0918a11f3d4aa6cb73068687da7ac4c1e8d987967acc70691eaae8ce8603cbf088e48a6834b8fa32aea14f2e2f0f086848806e3ce62f7605e6f9773c26d07dfe7db02f5a2dd629484fdc60f2087a65839b0241b3f33f098158ee40d1e8607336ea0267c7aebef6b02ac3c97c88246a7654e099b4fab4b3fcd0d007c9703069c9fdd329ab4b6bbe68c81d85aab0538d6e4e54feaf92c42a978d21a3f251c1adb8bcec82e34602e37c11adbd97bcc2524dbf18095c3e9e96db9cdadda7839f4bd7", 0xda}, {&(0x7f00000071c0)="23cd58d7838ce5992dc9844e25b64243ce31e5a58cde0a38e4aa1ab49aed3aa43add7b9772212282f334968ae5e9d65e010bac3bfa942c971d7e64b7e6c80cf87db855b4280821f2809a5bce63866691fa174894be338d651138e57f2ea37508f53e", 0x62}, {&(0x7f0000007240)="fd509be3e5daca862e7cb27045425b4008bf9f1e91c45c4c599021f1b8e126f8b6ed52685b39abbdff19e5fa533cab7d9d8c2655279fe4d272f7534933a768712f34b53b0bc9", 0x46}, {&(0x7f00000072c0)="08d6b0e8066834433870045162ec9ce9c21e5aed9a99daa2b5b127fac246aba0fa3b4c03a47f5bdf65a8cd2b44af2565ac2610b976be1d6b09b266f93c6ad5fe3e46dbeca9c2e92e1faf4087391fffa44e3c5b48dfcda7e0ecd000bf82b8029fede8cac713724e16722c0294a6de31523cd87a981a6a375d1a0b21e33a45909cda2e0ed20eb3f199a3d9fa59d9e5202dd9e1b4514beec88bf00708e37cf3d8e003bbc8c8a1ded17fb589691983aaa53455ea79a127eabe72d47ddcfabbfdfbaa14f617a23561", 0xc6}], 0x6, &(0x7f0000007480)=[@rights={{0x28, 0x1, 0x1, [r2, r2, r4, r2, 0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5]}}], 0x50, 0x20008804}], 0x9, 0x8045) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:44:33 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000001b00)=0x8) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r2, 0x0, 0x0, 0x0) flistxattr(r2, &(0x7f0000000080), 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', &(0x7f00000001c0)='mime_type\x00', 0xa, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfe08) read(0xffffffffffffffff, &(0x7f0000000380)=""/225, 0x900a453f) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x2, @local, 0x40}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000280)="5cae6375fa94aaf25bbf90e28cd7663700fd28f7d83ce4b03055a30f2af674970f55c284e3ed84e6791c90fe5ab84683139eb8afc01eabfefc0f230b20b4672467d5dc62ee0f3f3fa541d098631658090b906be60b9220c95830492c00676274d7ba254b5630ad3c4c4f5e606f56aefdc5acc5e2d1538637fc38e51f866e14820f6c230c5f7409bb9f3bd4231d9b94a756c747ddc50957d76c3a5eaf753d1b07ff6006032c85d88ba8e8e82f", 0xac}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000440)="8987b39b3d480ed778e2bcaaa9f79296c80880fae31e8a554bfc4222b907378f572db9273b54dd6ee195b84a517797d0bf1e1db2652869a9c4094ff2fcde0f163db0d51deecaad9ce0a87897ed459ce260f070741e8f826351c242738bb34d301584771efdc1daa5b25e686a2d85d7bd58", 0x71}, {&(0x7f0000000680)="114da62e105470c32cdc008913a0c7642f37fd150f00b8043eb72551a3a3e8c6a26328742db997d2adddca2acd108d9c7c2be03f6e3565e4a0b73336e5eaa97069d8563d6d0b95c5a2372a80bebd1ee4f4c1996417bba7cf444fb39cd002909fef269d0038981c259ec87f0924d1c09e6f66af5bc4ead0a5", 0x78}, {&(0x7f0000000700)="0da1aae8625d15afd6c5389898b0156178bd35669736f65d79d3e1cb4d84e9a82cd4fd5e6dc1899e3f85b52f0c090a66e945c6cd2dbfc6efdddb82f97b07d88ea6a4da3c264b47b351789d34f31e759432656775e5fa43ed72009b758950ab534c3145b03523f1f632746c5061801c12f8de8d64c13eef8d958d5407e42f93bd10b1090796262b547c311948115bd94ccb1b5a8300d6f949f0415fa92fdd9f1ba33a166f0b88d6fbd5a47e3c72c06b33cb1865e18ea5ff2fc2b7aa7190c04a22a0578c7458d34dcc1cd616208ff3ac0d7ff16eb76f12582131764b77b8bfd68286ea8b0815e1988df912ff1a29a42f009c9ac9e3fe423a3fb924b63024b4219ab209e97c2f6890abee2e779b06a50584975a62b14abe07d8c80fca4aed36596de797a50130585f2967f14d820bd52a4513ad1e2a0127d43d4fe28dc2f9325ae8b396457c841cfcdfdcb171c999b460121427315befe711cead44cf7cb1f280dbc08d6c328537e1f705e51dd63231151cddd4e4e1ee7d32c96f153117fa5812b3db005f8848dfc944d892d076c0eb6722153d6b3142ea04993511e9639989f2a90bea390de9283fa20df99152a50dedb5595410345dd53572dc7d1d152ab85c4e93bc89d9001d28628185f91efc440e7a3724ceab7119aef37e7a3f814d14ca6965395ce7c8bcb8863285e60ea394c05f9626b2ef374cdfad9cf9ca0459e1ca80a33f828f86626aaf6c73bc89de017e4c68c39785f85a49d01a23935b3bbed83b698103d31b23154546d4a58fec2461da2ba4b68af5f2f2c34123991dc65a88c716163ebe1a27c4d576e8feb360c2b2640d8457e3ebebcc58a4c6821733450d6db3bf0f94b80496e893e6dd672dc753f998f6f303697c945bcbe6b06a5a1cda41f0da3252a2771b714e24443d2004befbf8a1ce8c470fcfa61f5a8b4b7d99790dc6ef79927d899e5512d246dd810e1e250e725f1e072c16b2a2a96f1aa351613ae69f0445584fcc67e748cd7e9647cb552c21204a18efaabdefd58ddd4e8f011f2b412c65d19c6d2a2497c351dc26619685bfbd5cbec105a8c7922f15ec42b0639aac95be780d48b4521b363dc4c41596990920113585912d6616e44d4a28231ea3f537ef59462665a63043224fe7cb572dd83972e5734446bb914c5d4fc3a7e7c4b6adcb6b8d7fecd5413dc2c2f55a2561dff93d0154677df92c182268825c646df601864c7c96bb861b6189bc39c9a4c815715a52c0dd5ff85e30ca9e86343b903ef7245cc8a6fc4c1869bb3f8561edee0e05347977b56b54dce73d707bec72923e1d52a944efab58902325ffddac8e35f74b69798f574b9ae14ff7cf02e9dfb27aa5e556e8241b97bf80a24cb86d3e0eca80f3c28a183c7d1960c7d7a8faa6558ca9692ae133834fc04b4ec9b5b2175c97726e4fd636a33b0efb5ddacfd06c81becca785fe6413a259e4d523d9f809b8aae1f393ad8024316f3161f62112a95222e2212f5de713b35f35e19158a25a4372a0a9090739a5e0e6b191371a5030918ac0022f9df977cca2a0eff20f233d0e77a6e4184a3b1ce6a04597a48c76fe64e46f7f9f6c03d3f0b6b6f724e6cfc527057cfae1954cb1de19769c4895753326cbe98c7d680523339dee1defff6160e047c8ed164f8ce71fe6362f16c84c77042dcc1f5b3d4c2b53529047ff22dffaf7e921093d769d9372dba7576a0c4b5f4d448b036d1077eb3177497dbf23fb82d5a67e0e61ea44ef02472adabe26f95e19411c236bdefc6660c15781cc96a4f3482419f178f98852dddb0bc8e843c37906d629eff8ed2b497681eb7d6cf8f5dfdfe0ddd3d49bb007bd127387268413dea9bdf039426015676dffeec7a8c1763fca726dfa10d91ad6e8403d83719377ce9c6fd7724677315e3da3378eb898b0d5f04fe77ec43446c109fcb78c32a373beeaa3361ef260ff8d371dde0a5bb9220f0785f5a40431996aead403001f470472ba5ff5d54008faf3e2223cc68413eca20c5f3eceffc2afc0b57ffb3de197e726168d12337a953b62285da9f82571eeae57fd6ace74c3bb46586c75f8ca5c864df0f8706e85d43123afd365649034b11375be9edec34b6f6f4a6242e704f35f8cc0cdcadad607e791086b036a602014e86d1f75969a2049504348fec7fcb90837316676c23667a5e0e301000ba694d1f871513fa37f5039c62ac579bb7f56d7a85985c533bcf8b747c73db5bf4094c321a929b0b2c35b9c9281cec7c570a368cccb74db97dc435d6a96348e063823aad4650ede27487d1b6d6c3800115e88053194bdf66c7c2848e91aeed1db662bad2b69cb97cacc728530fd687ed52b6e627432eaa62402ec444cca1fb59559c2a248e55a08fedc7aaedad994b473e0d5447e2dcc616d6cf9397b62556fed4d04d4f59dbd722b7eb6b121036ef44d859b705392c77d093a7796abfc0f6399de9921ae526df25203d286103d2670adf90668d7df5e4b1c47c96ea30c397f31e765533fd389bae02963ef06773e9b1932ac9818163a3fd1d3e64b9ca3d390fee9dcb3ff20536fb439d3fb17bc8b586b18f2f31e3dfd55adb4f63c6a3e744338de7bd8ad4ed893271e01e7ba8ff11873e639f2dc62c64c1b90c0c2fd54d84f935b1496b0f0e466549164963a46a2fd7649fc9cb1ab8ffed71574c691ef57b56c0a5367e5127291ca082d2f06fb8e75f85f790956e95905da2ae2daf230eb302796a1ad2de79fe5b6fe1dc32d8c07a22628d1903eb7bdcc4f760ed8ec7e10226c0c90aa34cd144b26a2b3bb43781ae2a290c0c3bf99d4db648b7d43e93ee1785006a7ab78d8876c823bd3e28080000f83e1e30cdb0d4842335bfec5683379ecf5c0e6a974361d2c4bdef6892323077761c8cf8b6acde6bc357665c518642037c08b215bef168008b3948f2da40918cb5a5a6f29a4f891c2f5896bf7aaeb21f0e9a0c90668dddcdb19f8246586cc805c472c3d08997b19b36a2f0592ef26925b7894fa225ffcd85ce73cda100545539f4c4c644bc81766a79dbb36447a3c47aea30a1bf40e03ea337d274e3af156681335c2e2fbc16ad8a64ec2c075f643b04eb58d239bb27f990bc835c7755bc1f8b1a0caff6d79a1c336c1fa5b875a611b0edb4ad2a5f64d96e415cc917b44247e2280f511c23ff2c381c84eeb9cd5314af548cd3eec2c8a309ea8d611ae4151bdb6a4be691cdd627fac6e6e7f20aca036956945832bf23616461fad09d99ffce7edccca0565d640988a99441872ec7992f5c4659dc429273f113beb2887c886586ebc5cfb74edb7948a422b2a3a2ab36cb2a9f47c1e7c11eae4c5c70f7b34d05ccee9ef08a0e5c628f823e267c772bf4cb144ac7f7ddc2235fadccd1e0c0a2ec1ac8e252c1338993ba930ce8877b3d8d551882800646c1c861be171b64e010594b2c796fd3a320b5998e87464b978659aa1f2b19b8f4999fdffc44faa7b04e75b2434ef7ffffe78ccb59c89f7c5c933108c0db461b05e5e0817c8259096cefc5e9158d7e78450864c6dfa8992226b9cdaeb2cd35cf6d5b2838e8af57ef19863a74255c2d694d5858f0ac88ab104df2c82e44d456c96037c4736aa8b32acadb3435dbe3ad6c2e3af0365bd2e85f557b01f54f95d753933eb8cbe2d4cff5bea075b348684285c5dfd03a39db82f11c5aaffa9756307734c752316c5160dabbb2ac3f0938d00582cc5541e3fc38d78afaebd518fd0987dd703f374d6196c8bea7a36ad7a1337ea4ac3df6a71429236712a658237af801c29b9a1ee3dbffb2c80cca330acf852a45cfede7ba54c68613922f67e53909c66170ee772900cdaea86f8c2e1cd2fb9350a634c682ecae199a19743d4b82f11dffcd6d5b3f17699fc0b1cd35cd971002ac7c506a5d3ff6a0bd215ab029b73ccf5873bbaca9548c38379d3af10ae0ece1e61ad58d1504a6a753549b25dd0785e89136f91583f90000cc5d7de22ae4cb3e638c6b3093006138c0dc8c21ea791e0cc0f7a9418324eaaca1ad6d29f490b1fb52bf76c540d18e9d58c35fda402c47055e78e9bab7aae6770638261a367de7fe4d5cc2192854536b94cf1c02c3516b9f38e420c74cb499d2c75979b891b94366fbe708e8cb8ee8c59057d6ffb1317d7601189d41a5699c95bbdca9921de32236dd3bd43e41968fa25e0ed7e4d242817cfb647e3a443b5c89d3195f1e06e5c31822c40060a55f8d34caad3aa068d4dad9658405d29354dd7ebc86343d1f9e4424979378005817aed4cd5e06e5b84d9d56d474de0e7168a4d6b1067c7729899adfe01e0d3a23ef9013ce91374a2c14a9e18b85ead1d20fac56f5c906de64c4f785d02e0242ee13755c940d563ebd710fc124440de7b2ec19ce1896c591bf68f1530535be78ea1c4711566f5c2ff73a602f567af85f64a8b09813933775267d85846db779864362bb2469de566aee9d47583601d02cb1eb7f1e36d8f4e7f670cd89da292a8c9a2513ff4dd94eb95e791ce695a4a2ebbd8b849776060b1f67f3c73355d152d72d385aa8e05bc730e85e5a670e2f7d409fa2713b550a3dd11db258143940a652368d02d784beee780b007d909851fb4dc24c283bec7e1802419c537f75938abce6cc88348162de57b8079016b021b26bdc47da66e1878111a54d77d316c26c985347feb878e07e51b0335ffc50de85364ae19e48835abf442d27b7fa87c05c7dce802946706a06526155e2f7434d79316a57b3360e613313c5dd83ac3d74be5b17b99cc6ef6346ff58ec3859c6c0d267dd76548ebe81605700d42c563a2c080d541b4003ecbeb9048cac5626cb56dd0d8f43638771d7b0715fb9dbaad4a142633d13144ffac2faef61047d8e81737aada184c1c5acbb03435a00646fa60c79f3cd4c18ed6ac5d05b4baf0915ac3f9c0a7203af60d11665fdbed05c97c3c048a594e30e060a611d0132894180f86a07f316c05fda30fe6780315e676977913ab6dcbb01c883b36dc943bf02649812d53016835244012af4fc4aea3e7d52946ff3f26bea3875b97c636436ba633794fca0c3bfd1c1d1d7fe7547735b72c0613f3a95c82658e5bdfb1828f7f11d8e9da2ffc29c0ee5cca4a715e0b57a8a8abb4dc159193c80941556fb61632458211b733fb3bc804ddd6bea7088f3cc2867c3faf6476d9a131fe5db8c7bbab5b7dc250dea1d006245dcf38d2dd974322644cda9bb2104aff794d8167de26f8afffed289055f56e13cd6c064aa58525782b44ffc64c9f896283508dafa7dba3fbada9e5bde9c8dd43c70a24b06c8d13366dd15c5df7d3d38093f3781549af62882a9a3fcfa81140144eeff590371f0031bba22f692183acfada37fa7b5f94e34fd0e2a8cf842615287de9ed2d5cd0af25845eaea0268712c429fd86bed5a95413caccfd50f9673a74f42a39a8a15cc4af3a3ede7233dc6975670c0400975b503f3c4bbbf0176be0402c70dc04ca48c7776a1094a99bc5ad08058ab0c5f1d80cc3abc3d172a1933801e1825370c48e9464b2a8da3d687a274f93e4bbd9aa3d8e02cf6ecfa45d7d5a61d7dcf3a08a423b54d782892cc6a3656d2bfe345fe73bc7b7563be0f1412d44abe68d7fbdc4b660bb864bd2da0beec2dc0901dbfbd9680ac1e4396a7c9db1e7744a9956febdeaa0079e6e2abbfe9ec91c0eb39b6c7b32ef80ecdaa235522d0c4b9e0ffa8e10e6690fd23fc073a1d95540c17d9eeca17ef8e848f24c09826e9f07c58b6b2f1c66daddaf9781e5a346b4ebd4dbefa1e84d6209e97d1f56c1617d20d5905c61abda73d150ce", 0x1000}, {&(0x7f0000001700)="2a489a1a06fb4cd03574d435dbbd10df38d90c844e8507157ed1e8b850f728bcc888697c634c703fbb6e11f898639511d0eaed1bb4da747394c0e1ecf1c211986036bf5d784889b32f34c8dd0173e6786597446c12cb1051e0f5ba08e2617801dfe3e9bdb68e76300a53133db2b186558692c238756f936a3fe36f630a18f682d4f54dec3bfc36d4f6fce3cd3e7ece16d3f3a0b2c8a9e48a162b913e24e8cf", 0x9f}, {&(0x7f00000017c0)="1873a8521db969451ec9ee4ccb8b05c227ec47857804be5453cdc67654459c2d85991f76d9b4089669fcfbcf16680fec22acc7c84371c6f6242c48b898a90bd02257523a130bc062888795556aad81897bf6f9", 0x53}, {&(0x7f0000001840)="fb83cfdb45da172994e211134ea6a6100d639e6b909efe68df3e968a1096326cd16730766444df938c32b4437fca", 0x2e}, {&(0x7f0000001880)="cea2cb61207b4ed1f005536990a941eee1f270a7388a1d249414eba173af1ec8a88baee942bc79d2d42bea9620eae578de6f06bc74a6c3e1dbff517113636ba21f3206c3d379e4e220105999bb58bef781bd24d25b4c4c038f974ce83b606b77028e33357db989bad5d6cf40abc0c4685bae8ba77ce6493d2386856ea253221918faff0ec8464c4ed82af56749dd5ff4be1da0521b126ff073ed2520a66db4cb75aa8fadb7b7818947131218dd3a9015c41cb4cfd5da042becf62488c3a2ac7c88db5d97c4564a90801bbcad51f8fdacc701f6b1505408769d982e9165068e1e7b70aa7d7b2c4436e080200eddb68d7a1c36dd2b0340d8be", 0xf8}, {&(0x7f0000001b40)="6d1b", 0x2}], 0xa, &(0x7f0000001a40)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14}}], 0x48}, 0x20000000) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0x6feac2b8, @multicast}) 07:44:33 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x39, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x4, 0x0}, 0x0, 0x8, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:34 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:34 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x107000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r6, 0x0) setreuid(r4, r6) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1602.113251] audit: type=1400 audit(1590306274.414:129): avc: denied { execute } for pid=24241 comm="syz-executor.0" path="pipe:[199360]" dev="pipefs" ino=199360 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 07:44:34 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:34 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:34 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="ef39ec3cd1ddd5a1f1dee93c3e31f973015219c1eab8ded5ae15945bbef8"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:34 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7ae, 0x200000) r2 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x44, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x74}}, 0x4000844) 07:44:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x117, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:36 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x81) r5 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000080)) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xfffffffffffffffc) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f00000001c0)=0x80008) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @local, @void, {@x25={0x805, {0x0, 0x3, 0xf, "97498ed1cb9593968f00dff020fffd86c244e0affcf4a9aeb1b687580c71168b26679d8153d5ebf6c245e8366c8c3db519d157fbde579dc3f145b51c57e94d1a00db1d6fcb0439aa29f43a94f9f7364dd18afe8d2dbafe0a53d1"}}}}}, 0x6f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000200)) 07:44:36 executing program 3: r0 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f00000001c0)=0x8, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000000)={0x8, 0x0, [{0x6, 0x0, 0x0, 0x0, @msi={0x8, 0x100, 0x401, 0x2}}, {0x7, 0x4, 0x0, 0x0, @msi={0x5, 0x7ff, 0xa43b, 0x9}}, {0x23dc, 0x4, 0x0, 0x0, @sint={0x27, 0x4}}, {0x7fffffff, 0x1, 0x0, 0x0, @irqchip={0x3, 0x3}}, {0x7fffffff, 0x2, 0x0, 0x0, @irqchip={0x1, 0x1ff}}, {0x8, 0x4, 0x0, 0x0, @irqchip={0xa13d, 0xa1c}}, {0x10000, 0x3, 0x0, 0x0, @msi={0x0, 0x2, 0x8, 0x80000000}}, {0x1000005, 0x3, 0x0, 0x0, @msi={0x1, 0x3, 0x5, 0xfffffffa}}]}) 07:44:36 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) close(r2) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = dup3(0xffffffffffffffff, r3, 0x80000) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000100)={0x7ff, 0x100, "cf162548088ad820c67d60231e92b571463bff98a62551578956eb03d01bf859", 0x0, 0x3, 0x7, 0x2, 0x1a3}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={r7, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r7, @in={{0x2, 0x4e21, @private=0xa010102}}, 0xe26, 0x68a}, 0x90) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:36 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'bond_slave_0\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffe, &(0x7f0000000200)="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") ptrace$cont(0x20, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x9e1c, 0x5d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0xff, 0x1}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'ip6gre0\x00', {0x7, 0x1000, @local}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000000) [ 1604.529400] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:36 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000080)=0x3) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:36 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000100)={0x7, {{0xa, 0x4e20, 0x80000000, @remote, 0xffff7ce6}}, {{0xa, 0x4e22, 0x80, @private2={0xfc, 0x2, [], 0x1}, 0x7ff}}}, 0x108) [ 1604.601411] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:36 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000), 0x4) [ 1604.719373] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000)=0x3ff, 0x4) socket$kcm(0x2, 0x7, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0xfe08) read(r4, &(0x7f0000000140)=""/225, 0xe1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x6, 0x0, 0x44) 07:44:37 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000080)={0x10000003}) r5 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r5, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:37 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x9}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1604.771461] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1604.862564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1604.901076] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x146, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:39 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x240, 0x128, 0x240, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@dev={0xfe, 0x80, [], 0xc}, @empty, [0xff, 0xff, 0xffffffff, 0xffffffff], [0x0, 0xff000000, 0xffffffff, 0xffffff00], 'erspan0\x00', 'gretap0\x00', {}, {}, 0x0, 0xf6, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x4, 0x8], 0x96, 0x4, 0x1}}, @common=@inet=@set1={{0x28, 'set\x00'}, {{0x1, 0x2, 0x1}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x84, 0x4, 0x1}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x80, 0x7, 0x0, [0x7, 0x1, 0xfff7, 0xcf, 0x100, 0x1, 0x0, 0x8001, 0x4923, 0x4, 0xfff, 0x0, 0x3, 0x4, 0x3, 0x5]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x5e, 0x7, 0x0, 0xc0, 0x0, @empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0x0, 0xff], 0x182c, 0xa0}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x0, 0x1}, {0xffffffffffffffff, 0x4, 0x4}, 0x0, 0xff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 07:44:39 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) accept4$alg(r2, 0x0, 0x0, 0x0) dup(r2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:39 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)=0x8410224) 07:44:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffeffffffff, 0x23041) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x9, 0x22, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_sec_ctx={0xc, 0x18, 0xff, 0x35, 0x53, "9455d9c722e06f9355ae9196859e7e47ed09de14a71ebeb0ff1d11a82a3f3fdd78aa22c6de7677f46fa11b590a063cd0f339b7072fd38d43dfef91b5553a44d0c166b5f72df2d5d4cf8be5a3c0fd74dfa389ec"}, @sadb_lifetime={0x4, 0x3, 0x2, 0x7, 0x0, 0x28}, @sadb_sa={0x2, 0x1, 0x4d6, 0xff, 0x4, 0x28, 0x2, 0x40000001}, @sadb_lifetime={0x4, 0x4, 0x1, 0x8000000, 0x100000001, 0x200}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}, @sadb_address={0x3, 0x17, 0x3c, 0x80, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@loopback, 0x8, 0x10}]}, 0x110}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x60469, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0xffffffffffffffff, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000010008, 0x0) 07:44:39 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="148c2afceb26aaaaaaaaaaaa817eba0008004500005c0000000000119078ac1414aae0000001000000000048907803000000000000003e84b1833196b392a5d6b7eb4d4f490d5423c46e00000000e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"], 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:39 executing program 0: unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r0 = memfd_create(&(0x7f00000004c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\xee\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\x98\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x00\x00\xf1I\x151W\x00\x00\x00\x00\x91\xb57\xd6\x8b/\t\xc6C\xb8\x18\xbc\xad\xff\xf4=wg\x9a\b\xf7\x0f\xd5\xa1rY\xd7P\xd2\xa0kO51\x19\xa8/;Z\xa0\xe4[y\x9f\xf6i\x9f\xa3M\x89\v1LE\x00\x00\x00\xdd2i}\xf25\x9f\xdb\x1f4UAO\xe4\xbf\xab\x9a\x8d\xf0\x13S\xf0\x88\x02\xc3\x9b\xc7\x81\xb5\xb10R\xd6Q6yO\n\x7f\xdc\xea\xa7\xe7qX2F\xbb\x813mtYn\n\xdae\xb4\xa8\xe7\x97B\xaa\nQ\xc4r\b\x9cM\xf9\x9b\xb1\x82\xb2\xb9\xda\x03\x8a\xd1\xf5\x93\x1b\xc6\x13\x9b\xe8w#\xbb\xe5\xd0\x8c\x01\xa0Gg\xd3\xe9\xce\x03\x80PZC', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xd, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) splice(r1, &(0x7f0000000080)=0x400, r0, &(0x7f00000000c0)=0x3, 0x5, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') [ 1607.569375] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:39 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f00000000c0)={r9, 0x3}) r10 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r10, 0x4010ae74, &(0x7f0000000000)={0x5, 0x6, 0xc777}) 07:44:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xfffffffffffffffc) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f00000001c0)=0x80008) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @local, @void, {@x25={0x805, {0x0, 0x3, 0xf, "97498ed1cb9593968f00dff020fffd86c244e0affcf4a9aeb1b687580c71168b26679d8153d5ebf6c245e8366c8c3db519d157fbde579dc3f145b51c57e94d1a00db1d6fcb0439aa29f43a94f9f7364dd18afe8d2dbafe0a53d1"}}}}}, 0x6f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000200)) [ 1607.632039] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:40 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, [], 0x1}, 0x1f}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1607.745244] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:40 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000000)) 07:44:40 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xfe08) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000280)=0x5, 0x4) read(r2, &(0x7f0000000380)=""/225, 0x900a453f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) sendto$inet6(r0, 0x0, 0xffffffffffffff23, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local, 0x1ff}, 0xffffff29) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xc87, 0x181003) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c746572000000000000acc0fb38000000000000000000000000000000000e00000004000000d80300001802000000000000000000000000000000000000080300000803000008030000080300000803000004000000000000000000000000000000000000000000ffffac1414aa00000000000000000000ffffe00000010000000000000000000000000000000000000000000000000000000000000000697064647030000000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff00000001480100000000000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280061646472747970650000000000000000000000000000000000000000000102008000000000004800544545000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb69703665727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000001bde5b2ce443e91f21000000000080000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000f200000000000000000000be000000000000000000000000ff020000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006c61706230000000000000000000000076786361000000000000df00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f000000000001060550000000000000000000000000000000000480054454500000000000000000000000001000000000000000000e7ffffff01ac1e00010000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x820420, 0x0) [ 1607.785651] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x146, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:42 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) lseek(r2, 0x10000, 0x2) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:42 executing program 3: socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x11) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x17cb) 07:44:42 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000040)) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 07:44:42 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000000c0)={0x6, 'bridge_slave_1\x00', {0x9}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3e84b1833196b392a5d6b7eb4d4f490d5423c46e00", "e718b4e8c987f20265c60df2cd4630ea4bad65dd61449c616e6e1fa6e3bb9041"}}}}}}}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000200)) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f00000001c0)=0x8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 07:44:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xfffffffffffffffc) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f00000001c0)=0x80008) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @local, @void, {@x25={0x805, {0x0, 0x3, 0xf, "97498ed1cb9593968f00dff020fffd86c244e0affcf4a9aeb1b687580c71168b26679d8153d5ebf6c245e8366c8c3db519d157fbde579dc3f145b51c57e94d1a00db1d6fcb0439aa29f43a94f9f7364dd18afe8d2dbafe0a53d1"}}}}}, 0x6f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000200)) [ 1610.622836] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:42 executing program 3: r0 = socket$kcm(0x2, 0x7, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) 07:44:43 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/50) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0407060200482582"], 0x8, 0x2) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1610.679705] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:43 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0x4, @remote, 0xfff}, {0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, [], 0x1}, 0x1000}, 0x1fc, [0x81, 0x1, 0x101, 0x1bd, 0x8, 0x3, 0xa0, 0x360]}, 0x5c) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080), &(0x7f0000000180)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c746572000000000000acc0fb38000000000000000000000000000000000e00000004000000d80300001802000000000000000000000000000000000000080300000803000008030000080300000803000004000000000000000000000000000000000000000000ffffac1414aa00000000000000000000ffffe00000010000000000000000000000000000000000000000000000000000000000000000697064647030000000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff00000001480100000000000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280061646472747970650000000000000000000000000000000000000000000102008000000000004800544545000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb69703665727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000001bde5b2ce443e91f21000000000080000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000f200000000000000000000be000000000000000000000000ff020000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006c61706230000000000000000000000076786361000000000000df00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f000000000001060550000000000000000000000000000000000480054454500000000000000000000000001000000000000000000e7ffffff01ac1e00010000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:43 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r3, &(0x7f0000000000)="25b8995ed9f90c619f6d00392349964869a8b18f35a61f0b287dcf5c8ca754fffb0284c9228d8f2aae9f2845451eb4a13ed89e20539555e2709d3550777788504348cdaef7dd8febea572e5a3ffce3c4106e0e0fc734a24cf50465596e38263eb35b6b515cc42fe1979b1da3f7af24d9ea587b4b11a0e5bddde8ed00f02a556a2b48bce397f63b712ff60d207834d16efad19b88b400aed3998bf8e9b829f19a5e5f9256a114be5936e511", 0xab, 0x40, &(0x7f00000000c0)={0xa, 0x4e24, 0xd76a, @private0={0xfc, 0x0, [], 0x1}, 0x3}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) 07:44:43 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1610.872708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1610.910484] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:43 executing program 3: socketpair$unix(0x1, 0x295ca3be14c34b75, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={@remote={[], 0x2}, 0x7, 'macvtap0\x00'}) r4 = socket$kcm(0x2, 0x7, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x745ce5ad) setsockopt$sock_attach_bpf(r4, 0x84, 0x6, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$TIPC_MCAST_BROADCAST(r7, 0x10f, 0x85) 07:44:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x146, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:44:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000040)=0x8) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f0000000000)={0xa, 0x4f20, 0x0, @loopback}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$inet6(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x800) 07:44:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@remote={[], 0x3}, 0xd, 'veth1_virt_wifi\x00'}) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000000)={0x8080000000000000, 0x100000, 0x80000000, 0x4, 0x20}) setsockopt$sock_attach_bpf(r3, 0x84, 0x6, 0x0, 0x84) 07:44:45 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000000c0)={0x8, 0x5, 0x9}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x40, 0x0, 0x0, 0x0, "1261ec1d67a1a9b7bcf7dd127bbcaa8c04bf5ffa8b61e3c6665683266c0f52ec6ea44cbf9ff3fdc4d099718bf882bf47374ec29ff3c834f069c04ba6d6cbba14"}}}}}, 0x5a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:44:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xfffffffffffffffc) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f00000001c0)=0x80008) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @local, @void, {@x25={0x805, {0x0, 0x3, 0xf, "97498ed1cb9593968f00dff020fffd86c244e0affcf4a9aeb1b687580c71168b26679d8153d5ebf6c245e8366c8c3db519d157fbde579dc3f145b51c57e94d1a00db1d6fcb0439aa29f43a94f9f7364dd18afe8d2dbafe0a53d1"}}}}}, 0x6f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000200)) 07:44:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0xfff, 0x81, 0x400, 0xbad, 0x40, 0x5, 0x3, 0x8}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000010008, 0x0) 07:44:46 executing program 3: r0 = socket$kcm(0x2, 0x4, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) [ 1613.759554] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:46 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0x4f1d, 0x0, @local, 0xfffff000}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_CREATE2(r4, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x78, 0x1400, 0x2, 0x8, 0x7a, 0x2, "ca501bfbbdf38a06dbb8f216a55852d8235d640c29c8dce41e69f80db09bd13fdeb5a0da33c84ccb2c0793d9e939610e76cca800891b70dfc9b39c929f5208c3c52a34818afd7b566adcf3aa44c7c3d0eee9b8689e2d3aa83764c2bcf7c997e9302a93127d934c79b3b699248b1cf1984c811cfd10f80809"}}, 0x190) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_ASSIGN_PCI_DEVICE(r7, 0x8040ae69, &(0x7f0000000040)={0xd8, 0x0, 0x2, 0xf40404c4efbfdb2e, 0x20}) [ 1613.807475] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:46 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x24) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r7, 0x6}, &(0x7f00000000c0)=0x8) [ 1613.916952] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:46 executing program 3: r0 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x8000, @ipv4={[], [], @broadcast}, 0x3}, {0xa, 0x4e22, 0x208, @private0={0xfc, 0x0, [], 0x1}, 0xa9}, 0x25ee, [0x7fffffff, 0x7ffffff8, 0x0, 0x3, 0x23, 0x5, 0x2000007, 0x7]}, 0x5c) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) r1 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xa000) [ 1613.964740] ip6_tables: ip6tables: counters copy to user failed while replacing table 07:44:46 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5d996982a655b7e1, &(0x7f00000000c0)={0xa, 0xf20, 0x0, @local, 0x9}, 0x43) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xa36, 0x2800) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=ANY=[], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc000, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 07:44:46 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x84) [ 1614.096495] ================================================================== [ 1614.104282] BUG: KASAN: use-after-free in _decode_session6+0xe0a/0x1250 [ 1614.111048] Read of size 1 at addr ffff88808c192ff0 by task syz-executor.2/24536 [ 1614.118587] [ 1614.120230] CPU: 1 PID: 24536 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1614.128114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1614.137569] Call Trace: [ 1614.140175] dump_stack+0x1b2/0x283 [ 1614.143813] ? _decode_session6+0xe0a/0x1250 [ 1614.148228] print_address_description.cold+0x54/0x1dc [ 1614.153547] ? _decode_session6+0xe0a/0x1250 [ 1614.157967] kasan_report.cold+0xa9/0x2b9 [ 1614.162126] _decode_session6+0xe0a/0x1250 [ 1614.166456] ? xfrm_policy_get_afinfo+0x18/0x1e0 [ 1614.171220] ? check_preemption_disabled+0x35/0x240 [ 1614.176333] ? rcu_is_watching+0x11/0xb0 [ 1614.180412] __xfrm_decode_session+0x5a/0x110 [ 1614.184925] icmpv6_route_lookup+0x27a/0x3c0 [ 1614.189547] ? icmpv6_getfrag+0x160/0x160 [ 1614.193711] ? fib6_rule_lookup+0x1cc/0x3e0 [ 1614.198045] ? fib6_rules_seq_read+0x20/0x20 [ 1614.202556] ? ip6_route_output_flags+0x258/0x2d0 [ 1614.207411] icmp6_send+0x1162/0x1ee0 [ 1614.211231] ? icmpv6_push_pending_frames+0x520/0x520 [ 1614.216431] ? trace_hardirqs_on+0x10/0x10 [ 1614.220665] ? perf_trace_lock+0x109/0x4b0 [ 1614.224926] ? inet6_unregister_icmp_sender+0x40/0x40 [ 1614.230117] ? check_preemption_disabled+0x35/0x240 [ 1614.235139] ? icmpv6_push_pending_frames+0x520/0x520 [ 1614.240333] ? icmpv6_send+0xa6/0x1a0 [ 1614.244138] icmpv6_send+0xa6/0x1a0 [ 1614.247765] ip6_link_failure+0x24/0x410 [ 1614.251858] ? ip6_redirect_no_header+0x350/0x350 [ 1614.256704] ip6_tnl_xmit+0x3dd/0x2ee0 [ 1614.260632] ? ip6_tnl_parm_to_user+0x4d0/0x4d0 [ 1614.265300] ? __skb_flow_dissect+0x509/0x3580 [ 1614.269892] ? trace_hardirqs_on+0x10/0x10 [ 1614.274126] ? ipv6_ext_hdr+0x41/0x50 [ 1614.277929] ? ip6_tnl_parse_tlv_enc_lim+0x3e4/0x500 [ 1614.283039] ? ip6_tnl_start_xmit+0x73f/0x1ae0 [ 1614.287637] ip6_tnl_start_xmit+0x73f/0x1ae0 [ 1614.292053] ? ip6_tnl_update+0x6d0/0x6d0 [ 1614.296226] dev_hard_start_xmit+0x186/0x880 [ 1614.300713] sch_direct_xmit+0x256/0x4f0 [ 1614.304808] ? dev_deactivate_queue.constprop.0+0x150/0x150 [ 1614.310524] __qdisc_run+0x24e/0xdb0 [ 1614.314239] ? ip6_finish_output2+0x1071/0x21b0 [ 1614.318918] __dev_queue_xmit+0x1558/0x25a0 [ 1614.323255] ? netdev_pick_tx+0x2e0/0x2e0 [ 1614.327399] ? __neigh_create+0x1004/0x1980 [ 1614.331724] ? __local_bh_enable_ip+0xc1/0x160 [ 1614.336308] ? __neigh_create+0xaba/0x1980 [ 1614.340552] ? ip6_finish_output2+0x1e2/0x21b0 [ 1614.345133] ? check_preemption_disabled+0x35/0x240 [ 1614.350154] ? ip6_finish_output2+0x1114/0x21b0 [ 1614.354823] ip6_finish_output2+0x1114/0x21b0 [ 1614.359322] ? perf_trace_lock+0x109/0x4b0 [ 1614.363565] ? ip6_forward_finish+0x470/0x470 [ 1614.368100] ? lock_acquire+0x170/0x3f0 [ 1614.372107] ? lock_downgrade+0x6e0/0x6e0 [ 1614.376261] ? ip6_finish_output+0x702/0xaf0 [ 1614.380669] ip6_finish_output+0x702/0xaf0 [ 1614.384907] ip6_output+0x1c5/0x660 [ 1614.388544] ? ip6_finish_output+0xaf0/0xaf0 [ 1614.392966] ? ip6_fragment+0x2e70/0x2e70 [ 1614.397227] ? ip6_output+0x660/0x660 [ 1614.401034] ip6_local_out+0x93/0x170 [ 1614.404838] ip6_send_skb+0x9b/0x2f0 [ 1614.408557] udp_v6_send_skb+0x4e8/0xe80 [ 1614.412634] udp_v6_push_pending_frames+0x211/0x310 [ 1614.417666] ? udp_v6_send_skb+0xe80/0xe80 [ 1614.421920] ? ip_reply_glue_bits+0xa0/0xa0 [ 1614.426257] udpv6_sendmsg+0x1a1b/0x2610 [ 1614.430322] ? ip_reply_glue_bits+0xa0/0xa0 [ 1614.434657] ? udp_v6_flush_pending_frames+0xd0/0xd0 [ 1614.440024] ? plist_add+0x2d1/0x490 [ 1614.443747] ? rw_copy_check_uvector+0x1ee/0x290 [ 1614.448514] ? sock_has_perm+0x1c0/0x230 [ 1614.452584] ? selinux_tun_dev_create+0xc0/0xc0 [ 1614.457293] ? dup_iter+0x240/0x240 [ 1614.460937] ? inet_sendmsg+0x116/0x4d0 [ 1614.464914] inet_sendmsg+0x116/0x4d0 [ 1614.468713] ? inet_recvmsg+0x4c0/0x4c0 [ 1614.472697] sock_sendmsg+0xb5/0x100 [ 1614.476411] ___sys_sendmsg+0x70a/0x840 [ 1614.480402] ? copy_msghdr_from_user+0x380/0x380 [ 1614.485170] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1614.490101] ? check_preemption_disabled+0x35/0x240 [ 1614.495121] ? __fget+0x1ff/0x360 [ 1614.498579] ? lock_acquire+0x170/0x3f0 [ 1614.502579] ? lock_downgrade+0x6e0/0x6e0 [ 1614.506735] ? __fget+0x226/0x360 [ 1614.510194] ? __fget_light+0x199/0x1f0 [ 1614.514168] ? sockfd_lookup_light+0xb2/0x160 [ 1614.518667] __sys_sendmsg+0xa3/0x120 [ 1614.522470] ? SyS_shutdown+0x160/0x160 [ 1614.526458] ? SyS_clock_gettime+0xf5/0x180 [ 1614.530780] ? SyS_clock_settime+0x1a0/0x1a0 [ 1614.535194] SyS_sendmsg+0x27/0x40 [ 1614.538743] ? __sys_sendmsg+0x120/0x120 [ 1614.542805] do_syscall_64+0x1d5/0x640 [ 1614.546710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1614.553991] RIP: 0033:0x45ca29 [ 1614.557178] RSP: 002b:00007fa597fbdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1614.564919] RAX: ffffffffffffffda RBX: 0000000000500d00 RCX: 000000000045ca29 [ 1614.572193] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1614.579465] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1614.586738] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1614.594014] R13: 00000000000009fb R14: 00000000004ccd39 R15: 00007fa597fbe6d4 [ 1614.601331] [ 1614.602959] Allocated by task 3644: [ 1614.606610] kasan_kmalloc.part.0+0x4f/0xd0 [ 1614.610941] kmem_cache_alloc+0x124/0x3c0 [ 1614.615133] getname_flags+0xc8/0x550 [ 1614.618942] user_path_at_empty+0x2a/0x50 [ 1614.623093] SyS_faccessat+0x21b/0x680 [ 1614.626982] do_syscall_64+0x1d5/0x640 [ 1614.631304] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1614.636699] [ 1614.638343] Freed by task 3644: [ 1614.641631] kasan_slab_free+0xaf/0x190 [ 1614.645614] kmem_cache_free+0x7c/0x2b0 [ 1614.649592] putname+0xcd/0x110 [ 1614.652965] filename_lookup+0x23a/0x380 [ 1614.657036] SyS_faccessat+0x21b/0x680 [ 1614.660934] do_syscall_64+0x1d5/0x640 [ 1614.664832] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1614.670015] [ 1614.671673] The buggy address belongs to the object at ffff88808c192300 [ 1614.671673] which belongs to the cache names_cache of size 4096 [ 1614.684599] The buggy address is located 3312 bytes inside of [ 1614.684599] 4096-byte region [ffff88808c192300, ffff88808c193300) [ 1614.696653] The buggy address belongs to the page: [ 1614.701594] page:ffffea0002306480 count:1 mapcount:0 mapping:ffff88808c192300 index:0x0 compound_mapcount: 0 [ 1614.711575] flags: 0xfffe0000008100(slab|head) [ 1614.716203] raw: 00fffe0000008100 ffff88808c192300 0000000000000000 0000000100000001 [ 1614.724096] raw: ffffea0002120620 ffffea00023fba20 ffff8880aa9dacc0 0000000000000000 [ 1614.731978] page dumped because: kasan: bad access detected [ 1614.737776] [ 1614.739429] Memory state around the buggy address: [ 1614.744369] ffff88808c192e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1614.751728] ffff88808c192f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1614.759212] >ffff88808c192f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1614.766571] ^ [ 1614.773588] ffff88808c193000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1614.780954] ffff88808c193080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1614.788341] ================================================================== [ 1614.795727] Disabling lock debugging due to kernel taint [ 1614.801271] Kernel panic - not syncing: panic_on_warn set ... [ 1614.801271] [ 1614.808641] CPU: 1 PID: 24536 Comm: syz-executor.2 Tainted: G B 4.14.181-syzkaller #0 [ 1614.817734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1614.827093] Call Trace: [ 1614.829686] dump_stack+0x1b2/0x283 [ 1614.833315] panic+0x1f9/0x42d [ 1614.836509] ? add_taint.cold+0x16/0x16 [ 1614.840490] ? _decode_session6+0xe0a/0x1250 [ 1614.844897] kasan_end_report+0x43/0x49 [ 1614.848871] kasan_report.cold+0x12f/0x2b9 [ 1614.853108] _decode_session6+0xe0a/0x1250 [ 1614.857341] ? xfrm_policy_get_afinfo+0x18/0x1e0 [ 1614.862533] ? check_preemption_disabled+0x35/0x240 [ 1614.867557] ? rcu_is_watching+0x11/0xb0 [ 1614.871633] __xfrm_decode_session+0x5a/0x110 [ 1614.876206] icmpv6_route_lookup+0x27a/0x3c0 [ 1614.880620] ? icmpv6_getfrag+0x160/0x160 [ 1614.884789] ? fib6_rule_lookup+0x1cc/0x3e0 [ 1614.889113] ? fib6_rules_seq_read+0x20/0x20 [ 1614.893568] ? ip6_route_output_flags+0x258/0x2d0 [ 1614.898429] icmp6_send+0x1162/0x1ee0 [ 1614.902235] ? icmpv6_push_pending_frames+0x520/0x520 [ 1614.907410] ? trace_hardirqs_on+0x10/0x10 [ 1614.911625] ? perf_trace_lock+0x109/0x4b0 [ 1614.915848] ? inet6_unregister_icmp_sender+0x40/0x40 [ 1614.921014] ? check_preemption_disabled+0x35/0x240 [ 1614.926009] ? icmpv6_push_pending_frames+0x520/0x520 [ 1614.931179] ? icmpv6_send+0xa6/0x1a0 [ 1614.934961] icmpv6_send+0xa6/0x1a0 [ 1614.938589] ip6_link_failure+0x24/0x410 [ 1614.942644] ? ip6_redirect_no_header+0x350/0x350 [ 1614.947464] ip6_tnl_xmit+0x3dd/0x2ee0 [ 1614.951353] ? ip6_tnl_parm_to_user+0x4d0/0x4d0 [ 1614.956009] ? __skb_flow_dissect+0x509/0x3580 [ 1614.960602] ? trace_hardirqs_on+0x10/0x10 [ 1614.964821] ? ipv6_ext_hdr+0x41/0x50 [ 1614.968602] ? ip6_tnl_parse_tlv_enc_lim+0x3e4/0x500 [ 1614.973723] ? ip6_tnl_start_xmit+0x73f/0x1ae0 [ 1614.978294] ip6_tnl_start_xmit+0x73f/0x1ae0 [ 1614.982685] ? ip6_tnl_update+0x6d0/0x6d0 [ 1614.986836] dev_hard_start_xmit+0x186/0x880 [ 1614.991225] sch_direct_xmit+0x256/0x4f0 [ 1614.995276] ? dev_deactivate_queue.constprop.0+0x150/0x150 [ 1615.000968] __qdisc_run+0x24e/0xdb0 [ 1615.004835] ? ip6_finish_output2+0x1071/0x21b0 [ 1615.009528] __dev_queue_xmit+0x1558/0x25a0 [ 1615.013849] ? netdev_pick_tx+0x2e0/0x2e0 [ 1615.018083] ? __neigh_create+0x1004/0x1980 [ 1615.022402] ? __local_bh_enable_ip+0xc1/0x160 [ 1615.026970] ? __neigh_create+0xaba/0x1980 [ 1615.031214] ? ip6_finish_output2+0x1e2/0x21b0 [ 1615.035773] ? check_preemption_disabled+0x35/0x240 [ 1615.040770] ? ip6_finish_output2+0x1114/0x21b0 [ 1615.045416] ip6_finish_output2+0x1114/0x21b0 [ 1615.049906] ? perf_trace_lock+0x109/0x4b0 [ 1615.054152] ? ip6_forward_finish+0x470/0x470 [ 1615.058637] ? lock_acquire+0x170/0x3f0 [ 1615.062629] ? lock_downgrade+0x6e0/0x6e0 [ 1615.066781] ? ip6_finish_output+0x702/0xaf0 [ 1615.071191] ip6_finish_output+0x702/0xaf0 [ 1615.075436] ip6_output+0x1c5/0x660 [ 1615.079048] ? ip6_finish_output+0xaf0/0xaf0 [ 1615.083478] ? ip6_fragment+0x2e70/0x2e70 [ 1615.087612] ? ip6_output+0x660/0x660 [ 1615.091431] ip6_local_out+0x93/0x170 [ 1615.095211] ip6_send_skb+0x9b/0x2f0 [ 1615.098904] udp_v6_send_skb+0x4e8/0xe80 [ 1615.102953] udp_v6_push_pending_frames+0x211/0x310 [ 1615.108065] ? udp_v6_send_skb+0xe80/0xe80 [ 1615.112279] ? ip_reply_glue_bits+0xa0/0xa0 [ 1615.116600] udpv6_sendmsg+0x1a1b/0x2610 [ 1615.120641] ? ip_reply_glue_bits+0xa0/0xa0 [ 1615.124944] ? udp_v6_flush_pending_frames+0xd0/0xd0 [ 1615.130025] ? plist_add+0x2d1/0x490 [ 1615.133723] ? rw_copy_check_uvector+0x1ee/0x290 [ 1615.138460] ? sock_has_perm+0x1c0/0x230 [ 1615.142500] ? selinux_tun_dev_create+0xc0/0xc0 [ 1615.147171] ? dup_iter+0x240/0x240 [ 1615.150797] ? inet_sendmsg+0x116/0x4d0 [ 1615.154751] inet_sendmsg+0x116/0x4d0 [ 1615.158554] ? inet_recvmsg+0x4c0/0x4c0 [ 1615.162507] sock_sendmsg+0xb5/0x100 [ 1615.166207] ___sys_sendmsg+0x70a/0x840 [ 1615.170176] ? copy_msghdr_from_user+0x380/0x380 [ 1615.174928] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1615.179873] ? check_preemption_disabled+0x35/0x240 [ 1615.184888] ? __fget+0x1ff/0x360 [ 1615.188350] ? lock_acquire+0x170/0x3f0 [ 1615.192311] ? lock_downgrade+0x6e0/0x6e0 [ 1615.196448] ? __fget+0x226/0x360 [ 1615.199915] ? __fget_light+0x199/0x1f0 [ 1615.203884] ? sockfd_lookup_light+0xb2/0x160 [ 1615.208374] __sys_sendmsg+0xa3/0x120 [ 1615.212155] ? SyS_shutdown+0x160/0x160 [ 1615.216131] ? SyS_clock_gettime+0xf5/0x180 [ 1615.220431] ? SyS_clock_settime+0x1a0/0x1a0 [ 1615.224818] SyS_sendmsg+0x27/0x40 [ 1615.228336] ? __sys_sendmsg+0x120/0x120 [ 1615.232375] do_syscall_64+0x1d5/0x640 [ 1615.236272] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1615.241613] RIP: 0033:0x45ca29 [ 1615.244796] RSP: 002b:00007fa597fbdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1615.252498] RAX: ffffffffffffffda RBX: 0000000000500d00 RCX: 000000000045ca29 [ 1615.261585] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1615.268833] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1615.276111] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1615.283392] R13: 00000000000009fb R14: 00000000004ccd39 R15: 00007fa597fbe6d4 [ 1615.292085] Kernel Offset: disabled [ 1615.295732] Rebooting in 86400 seconds..