, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000049c66a2de76bb10db2259df950de9600db7a37d84f4081f0851cbf7fdc261c8c3eb500072f23ca7bee31a10a74c240af3701c74b3a09db1f45ea8fe6c2ba2b30052a8a6bd998bebc9f8a022e7b448a8ce4587c72c678879e8395476d02c55010ac4bed802cca77acc8035f81726601364f4f64e0c50b6e483892bfa66703785c192bbf635d427cef636301ffce0f07b66b20f0a3000000", @ANYRES16=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) bind$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x1e) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) 19:27:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:54 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:54 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 511.365964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50761 sclass=netlink_route_socket pid=31850 comm=syz-executor.5 [ 511.376947] FAULT_INJECTION: forcing a failure. [ 511.376947] name failslab, interval 1, probability 0, space 0, times 0 [ 511.406704] CPU: 0 PID: 31853 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 511.414602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.423940] Call Trace: [ 511.426518] dump_stack+0x1b2/0x283 [ 511.430130] should_fail.cold+0x10a/0x154 [ 511.434259] should_failslab+0xd6/0x130 [ 511.438212] kmem_cache_alloc_trace+0x47/0x3d0 [ 511.442780] sctp_add_bind_addr+0x6c/0x350 [ 511.447057] sctp_copy_local_addr_list+0x2ae/0x400 [ 511.451972] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 511.456715] sctp_bind_addr_copy+0xde/0x430 [ 511.461022] sctp_sendmsg+0x1c15/0x2cd0 [ 511.464984] ? sctp_id2assoc+0x210/0x210 [ 511.469024] ? rw_copy_check_uvector+0x18a/0x2b0 [ 511.473761] ? rw_copy_check_uvector+0x18f/0x2b0 [ 511.478507] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 511.483246] ? retint_kernel+0x2d/0x2d [ 511.487118] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 511.492124] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 511.496860] ? check_preemption_disabled+0x35/0x240 [ 511.501858] ? retint_kernel+0x2d/0x2d [ 511.505728] ? inet_recvmsg+0x4d0/0x4d0 [ 511.509691] inet_sendmsg+0x11a/0x4e0 [ 511.513472] ? inet_recvmsg+0x4d0/0x4d0 [ 511.517428] sock_sendmsg+0xb5/0x100 [ 511.521135] ___sys_sendmsg+0x6c8/0x800 [ 511.525087] ? get_pid_task+0x91/0x130 [ 511.529039] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 511.533774] ? lock_downgrade+0x740/0x740 [ 511.537920] ? __fget+0x1fe/0x360 [ 511.541391] ? lock_acquire+0x170/0x3f0 [ 511.545349] ? lock_downgrade+0x740/0x740 [ 511.549497] ? __fget+0x225/0x360 [ 511.552945] ? __fdget+0x196/0x1f0 [ 511.556507] ? sockfd_lookup_light+0xb2/0x160 [ 511.561003] __sys_sendmsg+0xa3/0x120 [ 511.564796] ? SyS_shutdown+0x160/0x160 [ 511.568758] ? wait_for_completion_io+0x10/0x10 [ 511.573428] ? SyS_read+0x210/0x210 [ 511.577048] ? SyS_clock_settime+0x1a0/0x1a0 [ 511.581444] SyS_sendmsg+0x27/0x40 [ 511.584968] ? __sys_sendmsg+0x120/0x120 [ 511.589024] do_syscall_64+0x1d5/0x640 [ 511.592914] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 511.598095] RIP: 0033:0x45d4d9 19:27:54 executing program 2: open(0x0, 0x151042, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 511.601266] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.608958] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 511.616210] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 511.623460] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 511.630808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000044 [ 511.638055] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:27:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r3, 0x3}}, 0x10) r4 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r4, 0x0, 0x0) 19:27:54 executing program 2: open(0x0, 0x151042, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:27:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) wait4(0x0, &(0x7f0000000000), 0x1000000, &(0x7f0000000040)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000001140)={0x0, 0x8001, 0x1000, &(0x7f0000000140)="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"}) 19:27:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:54 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:54 executing program 1 (fault-call:4 fault-nth:69): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:27:54 executing program 2: open(0x0, 0x151042, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:27:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:54 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:54 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:27:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400002, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x1, 0x41715, "b3064c5767dc84999c5cc4a4ce23d06bf2c010fb1fa5cc74", {0xfffffffb, 0x200}, 0x7fffffff}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa0, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3f}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x48094) [ 511.878505] FAULT_INJECTION: forcing a failure. [ 511.878505] name failslab, interval 1, probability 0, space 0, times 0 [ 511.917253] CPU: 0 PID: 31888 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 511.925246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.934591] Call Trace: [ 511.937180] dump_stack+0x1b2/0x283 [ 511.940811] should_fail.cold+0x10a/0x154 [ 511.944963] should_failslab+0xd6/0x130 [ 511.949006] kmem_cache_alloc_trace+0x47/0x3d0 [ 511.953592] sctp_add_bind_addr+0x6c/0x350 [ 511.957831] sctp_copy_local_addr_list+0x2ae/0x400 [ 511.962766] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 511.967532] sctp_bind_addr_copy+0xde/0x430 [ 511.971854] sctp_sendmsg+0x1c15/0x2cd0 19:27:55 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) [ 511.975838] ? sctp_id2assoc+0x210/0x210 [ 511.979896] ? rw_copy_check_uvector+0x106/0x2b0 [ 511.985260] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 511.990099] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 511.994861] ? selinux_socket_getpeername+0x260/0x260 [ 512.000053] ? dup_iter+0x240/0x240 [ 512.003688] ? kernel_recvmsg+0x210/0x210 [ 512.007845] inet_sendmsg+0x11a/0x4e0 [ 512.011642] ? security_socket_sendmsg+0x83/0xb0 [ 512.016397] ? inet_recvmsg+0x4d0/0x4d0 [ 512.020372] sock_sendmsg+0xb5/0x100 [ 512.024085] ___sys_sendmsg+0x6c8/0x800 [ 512.028057] ? get_pid_task+0x91/0x130 [ 512.031942] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 512.036737] ? lock_downgrade+0x740/0x740 [ 512.040889] ? __fget+0x1fe/0x360 [ 512.044339] ? retint_kernel+0x2d/0x2d [ 512.048227] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 512.053232] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 512.057973] ? sockfd_lookup_light+0xb2/0x160 [ 512.062452] __sys_sendmsg+0xa3/0x120 [ 512.066230] ? SyS_shutdown+0x160/0x160 [ 512.070183] ? wait_for_completion_io+0x10/0x10 [ 512.074832] ? SyS_read+0x210/0x210 [ 512.078435] ? SyS_clock_settime+0x1a0/0x1a0 [ 512.082820] SyS_sendmsg+0x27/0x40 [ 512.086338] ? __sys_sendmsg+0x120/0x120 [ 512.090375] do_syscall_64+0x1d5/0x640 [ 512.094244] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 512.099408] RIP: 0033:0x45d4d9 [ 512.102574] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.110264] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 512.117509] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 512.124759] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 512.132003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000045 [ 512.139246] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:27:55 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:55 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 19:27:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = gettid() r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0x10001) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x1, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000000c0)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$peek(0x2, r1, &(0x7f0000000000)) 19:27:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:55 executing program 1 (fault-call:4 fault-nth:70): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:27:55 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:55 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 19:27:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:55 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$TCXONC(r2, 0x540a, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000040)) [ 512.747408] FAULT_INJECTION: forcing a failure. [ 512.747408] name failslab, interval 1, probability 0, space 0, times 0 19:27:55 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 19:27:55 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x52a) [ 512.790238] CPU: 1 PID: 31929 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 512.798138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.807496] Call Trace: [ 512.807514] dump_stack+0x1b2/0x283 19:27:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus/file0\x00', 0x20080, 0x128) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYBLOB="0000000020000d000000965f4b708dd143630e773bb010a49a1c00627ac6673d37696c5a8ea931fb6e65f26117a6749a97d15699bc9bd161c4f2040000009d43e4defe07f8e77bf65cce2b585733df6e1cd5eef465b8932c8210e5b78c32a4bbe52eb2bb77d6c0ab02704f9f84652c340a864c88c0a9f81d"], 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x98, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x77}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xde6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xd000}, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000000)={{0x6, 0x7f}, 'port1\x00', 0x0, 0x141000, 0xaca2, 0x0, 0x2a, 0x5, 0x8001, 0x0, 0x1, 0x81}) ioctl$TCXONC(r0, 0x540a, 0x0) [ 512.807537] should_fail.cold+0x10a/0x154 19:27:56 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 19:27:56 executing program 1 (fault-call:4 fault-nth:71): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:27:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, 0x0, 0x0) [ 512.807553] should_failslab+0xd6/0x130 [ 512.807564] kmem_cache_alloc_trace+0x47/0x3d0 [ 512.807579] sctp_add_bind_addr+0x6c/0x350 19:27:56 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2b0480, 0x0) ioctl$FIOCLEX(r0, 0x5451) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r7}, 0xc) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r7, 0x342, 0x10}, 0xc) poll(&(0x7f0000000080)=[{r8, 0x50}], 0x1, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r3, 0x0, 0x0) [ 512.807594] sctp_copy_local_addr_list+0x2ae/0x400 [ 512.807612] ? sctp_inet_bind_verify+0x1c0/0x1c0 19:27:56 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 19:27:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, 0x0, 0x0) 19:27:56 executing program 1 (fault-call:4 fault-nth:72): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 512.807632] sctp_bind_addr_copy+0xde/0x430 [ 512.807647] sctp_sendmsg+0x1c15/0x2cd0 [ 512.807671] ? sctp_id2assoc+0x210/0x210 [ 512.807686] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 512.807704] ? selinux_socket_getpeername+0x260/0x260 19:27:56 executing program 2 (fault-call:2 fault-nth:0): open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 512.807715] ? dup_iter+0x240/0x240 [ 512.807734] ? kernel_recvmsg+0x210/0x210 [ 512.807746] inet_sendmsg+0x11a/0x4e0 [ 512.807754] ? security_socket_sendmsg+0x83/0xb0 [ 512.807762] ? inet_recvmsg+0x4d0/0x4d0 [ 512.807772] sock_sendmsg+0xb5/0x100 [ 512.807783] ___sys_sendmsg+0x6c8/0x800 [ 512.807792] ? get_pid_task+0x91/0x130 [ 512.807801] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 512.807814] ? lock_downgrade+0x740/0x740 [ 512.807831] ? __fget+0x1fe/0x360 [ 512.807843] ? lock_acquire+0x170/0x3f0 [ 512.807853] ? lock_downgrade+0x740/0x740 [ 512.807867] ? __fget+0x225/0x360 [ 512.807881] ? __fdget+0x196/0x1f0 [ 512.807892] ? sockfd_lookup_light+0xb2/0x160 [ 512.807902] __sys_sendmsg+0xa3/0x120 [ 512.807911] ? SyS_shutdown+0x160/0x160 [ 512.807921] ? wait_for_completion_io+0x10/0x10 [ 512.807938] ? SyS_read+0x210/0x210 [ 512.807947] ? SyS_clock_settime+0x1a0/0x1a0 [ 512.807957] SyS_sendmsg+0x27/0x40 [ 512.807963] ? __sys_sendmsg+0x120/0x120 [ 512.807974] do_syscall_64+0x1d5/0x640 [ 512.807990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 512.807997] RIP: 0033:0x45d4d9 [ 512.808002] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.808012] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 512.808017] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 512.808022] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 512.808027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000046 [ 512.808032] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c [ 512.966262] FAULT_INJECTION: forcing a failure. [ 512.966262] name failslab, interval 1, probability 0, space 0, times 0 [ 512.966274] CPU: 1 PID: 31955 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 512.966280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.966283] Call Trace: [ 512.966298] dump_stack+0x1b2/0x283 [ 512.966315] should_fail.cold+0x10a/0x154 [ 512.966331] should_failslab+0xd6/0x130 [ 512.966342] kmem_cache_alloc_trace+0x47/0x3d0 [ 512.966358] sctp_add_bind_addr+0x6c/0x350 [ 512.966375] sctp_copy_local_addr_list+0x2ae/0x400 [ 512.966390] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 512.966408] sctp_bind_addr_copy+0xde/0x430 [ 512.966422] sctp_sendmsg+0x1c15/0x2cd0 [ 512.966452] ? sctp_id2assoc+0x210/0x210 [ 512.966467] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 512.966488] ? selinux_socket_getpeername+0x260/0x260 [ 512.966499] ? dup_iter+0x240/0x240 [ 512.966525] ? kernel_recvmsg+0x210/0x210 [ 512.966539] inet_sendmsg+0x11a/0x4e0 [ 512.966548] ? security_socket_sendmsg+0x83/0xb0 [ 512.966556] ? inet_recvmsg+0x4d0/0x4d0 [ 512.966567] sock_sendmsg+0xb5/0x100 [ 512.966578] ___sys_sendmsg+0x6c8/0x800 [ 512.966587] ? get_pid_task+0x91/0x130 [ 512.966598] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 512.966611] ? lock_downgrade+0x740/0x740 [ 512.966628] ? __fget+0x1fe/0x360 [ 512.966640] ? lock_acquire+0x170/0x3f0 [ 512.966650] ? lock_downgrade+0x740/0x740 [ 512.966666] ? __fget+0x225/0x360 [ 512.966681] ? __fdget+0x196/0x1f0 [ 512.966692] ? sockfd_lookup_light+0xb2/0x160 [ 512.966702] __sys_sendmsg+0xa3/0x120 [ 512.966710] ? SyS_shutdown+0x160/0x160 [ 512.966721] ? wait_for_completion_io+0x10/0x10 [ 512.966738] ? SyS_read+0x210/0x210 [ 512.966747] ? SyS_clock_settime+0x1a0/0x1a0 [ 512.966758] SyS_sendmsg+0x27/0x40 [ 512.966765] ? __sys_sendmsg+0x120/0x120 [ 512.966776] do_syscall_64+0x1d5/0x640 [ 512.966792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 512.966800] RIP: 0033:0x45d4d9 [ 512.966805] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.966814] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 512.966820] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 512.966825] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 512.966830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000047 [ 512.966836] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c [ 513.065794] FAULT_INJECTION: forcing a failure. [ 513.065794] name failslab, interval 1, probability 0, space 0, times 0 [ 513.065807] CPU: 1 PID: 31966 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 513.065813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.065817] Call Trace: [ 513.065831] dump_stack+0x1b2/0x283 [ 513.065849] should_fail.cold+0x10a/0x154 [ 513.065865] should_failslab+0xd6/0x130 [ 513.065877] kmem_cache_alloc_trace+0x47/0x3d0 [ 513.065891] sctp_add_bind_addr+0x6c/0x350 [ 513.065905] sctp_copy_local_addr_list+0x2ae/0x400 [ 513.065919] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 513.065938] sctp_bind_addr_copy+0xde/0x430 [ 513.065952] sctp_sendmsg+0x1c15/0x2cd0 [ 513.065975] ? sctp_id2assoc+0x210/0x210 [ 513.065990] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 513.066009] ? selinux_socket_getpeername+0x260/0x260 [ 513.066020] ? dup_iter+0x240/0x240 [ 513.066039] ? kernel_recvmsg+0x210/0x210 [ 513.066051] inet_sendmsg+0x11a/0x4e0 [ 513.066059] ? security_socket_sendmsg+0x83/0xb0 [ 513.066068] ? inet_recvmsg+0x4d0/0x4d0 [ 513.066079] sock_sendmsg+0xb5/0x100 [ 513.066090] ___sys_sendmsg+0x6c8/0x800 [ 513.066100] ? get_pid_task+0x91/0x130 [ 513.066110] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 513.066123] ? lock_downgrade+0x740/0x740 [ 513.066140] ? __fget+0x1fe/0x360 [ 513.066153] ? lock_acquire+0x170/0x3f0 [ 513.066163] ? lock_downgrade+0x740/0x740 [ 513.066178] ? __fget+0x225/0x360 [ 513.066194] ? __fdget+0x196/0x1f0 [ 513.066205] ? sockfd_lookup_light+0xb2/0x160 [ 513.066216] __sys_sendmsg+0xa3/0x120 [ 513.066225] ? SyS_shutdown+0x160/0x160 [ 513.066236] ? wait_for_completion_io+0x10/0x10 [ 513.066254] ? SyS_read+0x210/0x210 [ 513.066263] ? SyS_clock_settime+0x1a0/0x1a0 [ 513.066274] SyS_sendmsg+0x27/0x40 [ 513.066281] ? __sys_sendmsg+0x120/0x120 [ 513.066291] do_syscall_64+0x1d5/0x640 [ 513.066308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 513.066315] RIP: 0033:0x45d4d9 [ 513.066320] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.066330] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 513.066336] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 513.066341] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 19:27:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400002, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000000c0)={0x1, 0x2000}) 19:27:56 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) tee(r0, r1, 0x5, 0xd) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:27:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, 0x0, 0x0) 19:27:56 executing program 1 (fault-call:4 fault-nth:73): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:27:56 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 513.066347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000048 [ 513.066352] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:27:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:56 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xdc, 0x5, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5461a222}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59ac8fa8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc3b29bd}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd2d3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40b5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xbff7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x48407}, 0x20040000) [ 513.822113] FAULT_INJECTION: forcing a failure. [ 513.822113] name failslab, interval 1, probability 0, space 0, times 0 [ 513.857031] CPU: 0 PID: 31985 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 513.864937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.874313] Call Trace: [ 513.876898] dump_stack+0x1b2/0x283 [ 513.880526] should_fail.cold+0x10a/0x154 [ 513.884680] should_failslab+0xd6/0x130 [ 513.888655] kmem_cache_alloc_trace+0x47/0x3d0 [ 513.893241] sctp_add_bind_addr+0x6c/0x350 [ 513.897476] sctp_copy_local_addr_list+0x2ae/0x400 [ 513.902404] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 513.907169] sctp_bind_addr_copy+0xde/0x430 [ 513.911496] sctp_sendmsg+0x1c15/0x2cd0 [ 513.915480] ? sctp_id2assoc+0x210/0x210 19:27:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x2, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r6, 0x29, 0x7, 0x80, 0x7f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x8000, 0x7, 0x7, 0x4}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x4000000000010046) write$P9_RUNLINKAT(r7, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) [ 513.919539] ? rw_copy_check_uvector+0x175/0x2b0 [ 513.924302] ? __sanitizer_cov_trace_pc+0x3a/0x50 [ 513.929145] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 513.933909] ? selinux_socket_getpeername+0x260/0x260 [ 513.939096] ? dup_iter+0x240/0x240 [ 513.942737] ? kernel_recvmsg+0x210/0x210 [ 513.942749] inet_sendmsg+0x11a/0x4e0 [ 513.942757] ? security_socket_sendmsg+0x83/0xb0 [ 513.942765] ? inet_recvmsg+0x4d0/0x4d0 [ 513.942775] sock_sendmsg+0xb5/0x100 [ 513.942785] ___sys_sendmsg+0x6c8/0x800 19:27:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x1}, {0x0, 0x0, 0x0, 0x0, 0x13}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) [ 513.942794] ? get_pid_task+0x91/0x130 [ 513.942803] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 513.942816] ? lock_downgrade+0x740/0x740 [ 513.942833] ? __fget+0x1fe/0x360 19:27:57 executing program 2: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xe2, "cc269d4634e4b62d5f025d7adf4dd9c40d0b5e5b6b35aa9149ef615678ab547af357338a2b3375dfeed0110f35892cd2132e7f648b827428dd67bbe877359e14d7565e0b4b86a8910294d727dd4609c2e33f1f280048f4abec683d5601072c36bf5959795659a2362d6d14ba21c968ff344999e96950b08128d33fde1bf7907267634bb738bc6b9f24f18698ca5c64fafad9ae87b1033c4abef7bb2811893d7a0ed5393e129816983a257949639efdc8fe02ab3952c165c1064de53e331b09e729b08084639c15dd7c2fc9bfeb9d3cf69327590d0f04ec615055c8728d9eac78a16d"}, &(0x7f0000000180)=0xea) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 513.942845] ? retint_kernel+0x2d/0x2d [ 513.942856] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 513.942867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 513.942879] ? retint_kernel+0x2d/0x2d [ 513.942890] ? __sys_sendmsg+0x8a/0x120 [ 513.942900] __sys_sendmsg+0xa3/0x120 [ 513.942909] ? SyS_shutdown+0x160/0x160 [ 513.942918] ? wait_for_completion_io+0x10/0x10 [ 513.942933] ? SyS_read+0x210/0x210 [ 513.942943] SyS_sendmsg+0x27/0x40 [ 513.942949] ? __sys_sendmsg+0x120/0x120 [ 513.942958] do_syscall_64+0x1d5/0x640 [ 513.942973] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 513.942980] RIP: 0033:0x45d4d9 [ 513.942985] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.942994] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 513.942999] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 513.943004] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 513.943009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000049 [ 513.943014] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:27:57 executing program 1 (fault-call:4 fault-nth:74): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:27:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0x1) 19:27:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:57 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 19:27:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000090601010000000000000000000007800900a7019dacd031268c0000"], 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) move_pages(r2, 0x8, &(0x7f0000000040)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair(0x5, 0x6, 0x31b, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x8, 0x0, 0x6, 0xfff, 'syz1\x00', 0x1}, 0x2, 0x20000018, 0x9, r2, 0x5, 0x2, 'syz0\x00', &(0x7f00000003c0)=['veth0_macvtap\x00', '+\x00', ']!/[\x00', '#\x00', '!\x00'], 0x19, [], [0x7, 0x8, 0x5, 0x401]}) ioctl$TCXONC(r3, 0x540a, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x464, 0x310, 0x70bd26, 0x25dfdbfc, "87eeac1f01efd3d49e39aa884c327b7aace4e82cc49ffcacd81f631e072ffe5dd3da97cf1104d907f764113ba5b4aecd6d96f07ebb04ffe064746bf9c566c43b8ff7989329c02688e3", ["", "", ""]}, 0x5c}}, 0x40044) [ 514.081393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:27:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) membarrier(0x8, 0x0) [ 514.259058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 514.282461] FAULT_INJECTION: forcing a failure. [ 514.282461] name failslab, interval 1, probability 0, space 0, times 0 [ 514.301668] CPU: 1 PID: 32038 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 19:27:57 executing program 2: open(&(0x7f0000000040)='./bus\x00', 0x54180, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:27:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) [ 514.309567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.318917] Call Trace: [ 514.318931] dump_stack+0x1b2/0x283 [ 514.318943] should_fail.cold+0x10a/0x154 [ 514.318954] should_failslab+0xd6/0x130 [ 514.318962] kmem_cache_alloc_trace+0x47/0x3d0 [ 514.318973] sctp_add_bind_addr+0x6c/0x350 [ 514.318984] sctp_copy_local_addr_list+0x2ae/0x400 [ 514.318994] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 514.319006] sctp_bind_addr_copy+0xde/0x430 [ 514.319016] sctp_sendmsg+0x1c15/0x2cd0 [ 514.319031] ? sctp_id2assoc+0x210/0x210 [ 514.319038] ? rw_copy_check_uvector+0xd4/0x2b0 [ 514.319045] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 514.319052] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 514.319061] ? retint_kernel+0x2d/0x2d [ 514.319073] ? selinux_socket_getpeername+0x260/0x260 [ 514.319084] ? check_preemption_disabled+0x35/0x240 [ 514.319098] inet_sendmsg+0x11a/0x4e0 [ 514.319104] ? security_socket_sendmsg+0x83/0xb0 [ 514.319109] ? inet_recvmsg+0x4d0/0x4d0 [ 514.319118] sock_sendmsg+0xb5/0x100 [ 514.319126] ___sys_sendmsg+0x6c8/0x800 [ 514.319132] ? get_pid_task+0x91/0x130 [ 514.319139] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 514.319148] ? lock_downgrade+0x740/0x740 [ 514.319157] ? retint_kernel+0x2d/0x2d [ 514.319165] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 514.319174] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 514.319183] ? check_preemption_disabled+0x35/0x240 [ 514.319189] ? retint_kernel+0x2d/0x2d [ 514.319201] ? sockfd_lookup_light+0x6b/0x160 [ 514.319208] ? sockfd_lookup_light+0x8a/0x160 [ 514.319215] ? sockfd_lookup_light+0xb2/0x160 [ 514.319223] __sys_sendmsg+0xa3/0x120 [ 514.319228] ? SyS_shutdown+0x160/0x160 [ 514.319235] ? wait_for_completion_io+0x10/0x10 [ 514.319246] ? SyS_read+0x210/0x210 [ 514.319254] ? SyS_clock_settime+0x1a0/0x1a0 [ 514.319261] SyS_sendmsg+0x27/0x40 [ 514.319266] ? __sys_sendmsg+0x120/0x120 [ 514.319272] do_syscall_64+0x1d5/0x640 [ 514.319283] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 514.319288] RIP: 0033:0x45d4d9 [ 514.319292] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.319299] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 514.319303] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 514.319307] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 514.319310] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004a [ 514.319314] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:27:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{}, {0x0, 0x0, 0xe3eb}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendfile(r1, r2, 0x0, 0x3) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x8, 0x6c8, 0x2, 0x0, 0x1, 0x1}) 19:27:57 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:run_init_exec_t:s0\x00', 0x25, 0x1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:27:57 executing program 1 (fault-call:4 fault-nth:75): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:27:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x6) ioctl$KDMKTONE(r1, 0x4b30, 0xffffffff) ioctl$TCXONC(r0, 0x540a, 0x1) 19:27:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r4, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) close(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r7}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r7, 0xfffffe01}, 0x8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x4000000000010046) ioctl$VHOST_SET_VRING_NUM(r8, 0x4008af10, &(0x7f0000000000)={0x1, 0x8000}) [ 514.836533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:27:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 19:27:58 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="039b3400000c08000200d97e608b6832a7ff27743f940d8687ce7705faf79cb276bc1b300d8c7e8b95adc90000000000000000"], 0xa) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0xffffad10}) 19:27:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) [ 514.886543] FAULT_INJECTION: forcing a failure. [ 514.886543] name failslab, interval 1, probability 0, space 0, times 0 [ 514.944961] CPU: 1 PID: 32073 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 514.952864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.965087] Call Trace: [ 514.965103] dump_stack+0x1b2/0x283 [ 514.965120] should_fail.cold+0x10a/0x154 [ 514.965137] should_failslab+0xd6/0x130 [ 514.965151] kmem_cache_alloc_trace+0x47/0x3d0 [ 514.965168] sctp_add_bind_addr+0x6c/0x350 [ 514.965183] sctp_copy_local_addr_list+0x2ae/0x400 [ 514.965195] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 514.997930] sctp_bind_addr_copy+0xde/0x430 [ 515.002271] sctp_sendmsg+0x1c15/0x2cd0 [ 515.002293] ? sctp_id2assoc+0x210/0x210 [ 515.010299] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 515.015078] ? selinux_socket_getpeername+0x260/0x260 [ 515.015091] ? dup_iter+0x240/0x240 [ 515.015109] ? kernel_recvmsg+0x210/0x210 [ 515.028021] inet_sendmsg+0x11a/0x4e0 [ 515.031815] ? security_socket_sendmsg+0x83/0xb0 [ 515.036569] ? inet_recvmsg+0x4d0/0x4d0 [ 515.040543] sock_sendmsg+0xb5/0x100 19:27:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000140)={r5, 0x9, 0x3, "b2bc67e0"}) nanosleep(&(0x7f0000000100)={0x0, 0x3938700}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0x10) [ 515.044258] ___sys_sendmsg+0x6c8/0x800 [ 515.048226] ? get_pid_task+0x91/0x130 [ 515.052112] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 515.057907] ? lock_downgrade+0x740/0x740 [ 515.062058] ? __fget+0x1fe/0x360 [ 515.065510] ? lock_acquire+0x170/0x3f0 [ 515.069483] ? lock_downgrade+0x740/0x740 [ 515.073634] ? __fget+0x225/0x360 [ 515.077098] ? __fdget+0x196/0x1f0 [ 515.080639] ? sockfd_lookup_light+0xb2/0x160 [ 515.085132] __sys_sendmsg+0xa3/0x120 [ 515.088928] ? SyS_shutdown+0x160/0x160 [ 515.092899] ? wait_for_completion_io+0x10/0x10 [ 515.097581] ? SyS_read+0x210/0x210 [ 515.101206] ? SyS_clock_settime+0x1a0/0x1a0 [ 515.105614] SyS_sendmsg+0x27/0x40 [ 515.109149] ? __sys_sendmsg+0x120/0x120 [ 515.113209] do_syscall_64+0x1d5/0x640 [ 515.117099] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 515.122290] RIP: 0033:0x45d4d9 [ 515.125479] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.133182] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 19:27:58 executing program 4 (fault-call:5 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 515.140448] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 515.147714] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 515.154978] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004b [ 515.162242] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:27:58 executing program 1 (fault-call:4 fault-nth:76): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:27:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x6c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001214000126bd7000fcd9df2508004b001300000008004f0004000000080001000200000008004b00130000000800010001000000080015000000000008004f0002000000d8a2fcc02aa9c70583946c943f0d1d7f70345031f89af768d93f6d626a49393148d740d28b8b8df788a35d4a9b461dc6390f4b5df31da4db3952a4093c0fa78e89e97bc3ca86c1c2"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040081) write$evdev(r0, &(0x7f0000000140)=[{{}, 0x0, 0x0, 0x400}, {{}, 0x12}], 0x30) 19:27:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x7, 0x0, {0x0, 0x100000000000001}, {0x4b}, @const={0x6, {0x1f, 0x4, 0x1, 0x100}}}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x80, 0x800) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="00fffe0a6ab346d4ceef9bf87f77851b981cdb69799ef5f3ffc047611c59ed191e234d06c9", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000020000000000000000000000000000005881743e3868f0c21ce4eb5a6005812496c6592c899bcc6346b456b4f42f63c781edddfb55ec940cd513d0a59275a9fbd896e7af080eebf331c85237d1d6dafd7ad411294a2ceb30330a1b8e61f4ddc2e7f6a594963780fec774ef4a729663321d", @ANYRES32=r5], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, [0xda, 0x8, 0x5, 0x3, 0x2, 0x6, 0x8, 0x7, 0x1, 0x1, 0x1, 0xfffffffffffffffa, 0x0, 0x5a98]}, &(0x7f00000002c0)=0x100) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r7}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000300)={r7, 0x4}, &(0x7f0000000380)=0x8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x4000000000010046) ioctl$SNAPSHOT_FREE(r1, 0x3305) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) pause() [ 515.292253] FAULT_INJECTION: forcing a failure. [ 515.292253] name failslab, interval 1, probability 0, space 0, times 0 [ 515.325647] CPU: 1 PID: 32107 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 19:27:58 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x50200, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[], 0x48}}, 0x5c000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x140, 0x0, 0xc07, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x41}, 0x84) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000080)={0x8, 0x6, 0x5, 0x17}) [ 515.333552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.342899] Call Trace: [ 515.345499] dump_stack+0x1b2/0x283 [ 515.349134] should_fail.cold+0x10a/0x154 [ 515.353287] should_failslab+0xd6/0x130 [ 515.357269] kmem_cache_alloc_trace+0x47/0x3d0 [ 515.361857] sctp_add_bind_addr+0x6c/0x350 [ 515.366100] sctp_copy_local_addr_list+0x2ae/0x400 [ 515.371042] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 515.375812] sctp_bind_addr_copy+0xde/0x430 [ 515.380131] sctp_sendmsg+0x1c15/0x2cd0 [ 515.384114] ? sctp_id2assoc+0x210/0x210 [ 515.388186] ? rw_copy_check_uvector+0x1dd/0x2b0 19:27:58 executing program 5: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14956bdccf485761b97af1520000a733eead75000906010100000000000000000000000077994f9d9c3c6d26"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r3 = fcntl$dupfd(r0, 0xe09, r2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffeffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) [ 515.392938] ? selinux_socket_getpeername+0x260/0x260 [ 515.398122] ? dup_iter+0x240/0x240 [ 515.401754] ? kernel_recvmsg+0x210/0x210 [ 515.405909] inet_sendmsg+0x11a/0x4e0 [ 515.405919] ? security_socket_sendmsg+0x83/0xb0 [ 515.405926] ? inet_recvmsg+0x4d0/0x4d0 [ 515.405937] sock_sendmsg+0xb5/0x100 [ 515.405948] ___sys_sendmsg+0x6c8/0x800 [ 515.405956] ? get_pid_task+0x91/0x130 [ 515.405965] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 515.405978] ? lock_downgrade+0x740/0x740 [ 515.405994] ? __fget+0x1fe/0x360 19:27:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket(0xa, 0x1, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x240, 0x4) ioctl$KDMKTONE(r4, 0x4b30, 0x2) close(r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={r6, 0xbd, "12a275e7f6d35a07000ae603394250371080d0b084325f028a093d8cc2cde2e848b1a2d09d8b30a1cfd3222275af680793473d8bbda065f49b3217368cd54245126e701b45c9b3d5b063d926a4eba4df8564ad4df8c3d3e373a4fc241c39008326a25bbed700ed7bf7fa83f7e3049fe5cd09212e71861db5c89d31eea301473d665f9d48af94bf3f25ee9f187d835b91e260bd2fc7772546d79d39c20b6baa8da8c99dff8fd644478a5540acc308916c125a89084bf27ee5554111f863"}, &(0x7f0000000140)=0xc5) ioctl$TCXONC(r0, 0x540a, 0x0) [ 515.406005] ? lock_acquire+0x170/0x3f0 [ 515.406015] ? lock_downgrade+0x740/0x740 [ 515.406030] ? __fget+0x225/0x360 [ 515.406045] ? __fdget+0x196/0x1f0 [ 515.406056] ? sockfd_lookup_light+0xb2/0x160 [ 515.406067] __sys_sendmsg+0xa3/0x120 [ 515.406076] ? SyS_shutdown+0x160/0x160 [ 515.406087] ? wait_for_completion_io+0x10/0x10 [ 515.406105] ? SyS_read+0x210/0x210 [ 515.406113] ? SyS_clock_settime+0x1a0/0x1a0 [ 515.406123] SyS_sendmsg+0x27/0x40 [ 515.485958] ? __sys_sendmsg+0x120/0x120 [ 515.490021] do_syscall_64+0x1d5/0x640 [ 515.493918] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 515.499099] RIP: 0033:0x45d4d9 [ 515.502276] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.509983] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 515.517248] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 515.524510] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 515.531775] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004c [ 515.539050] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:27:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xcd, "fba6082a10da6fc5981ad41fa6221c6631467ac6a4d7963763ed224847d625709b491a0403ad1bb692f0d370def8cb10ab5ad0032bac06c0955ac09752732b29ee08801abef3ec18aa09d00e3fd478b4e89acc589ef68838dda6a6af3cdfddfd1a2ef0be80c36c714d11e470dc12187d7aabccb42094584a3cb00609f3dca5bbf14d2fae0ddd4b03e7bf8e6af64f7d0913b0d845e9f83812bb4a4b3f98aa19494e956fb9b52c7c32dd5c4c0eb72f0cfefaff317ef2cb88934a6f3641e20bf3b5f95ca94df29fc712f040142667"}, &(0x7f0000000100)=0xd5) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r5, 0x5}, &(0x7f0000000180)=0x8) 19:27:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000000)={{0x4, 0x0, @identifier="4bcd57d905a61b56c4b634911afbf0e5"}}) 19:27:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000001c0)={0xe1e, 0x3, 0x4, {0xa, @sliced={0x5, [0xfff7, 0x4, 0x9, 0xfff9, 0x40, 0x1, 0x9, 0x1, 0x6, 0x4, 0x6, 0x58d, 0xc2b, 0x7, 0x2d, 0x5, 0x1000, 0x200, 0x8000, 0xffff, 0x3c97, 0x2a, 0xb90, 0x4, 0x6, 0xa, 0xff, 0x3, 0x8001, 0x7, 0x4, 0x7d, 0x8020, 0x1, 0x58, 0xfd0c, 0x0, 0x54de, 0x5, 0xa26, 0x1, 0x1ff, 0xf01, 0xe52, 0xb166, 0x8a6e, 0xbc5], 0x80000001}}, 0x8af7}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x4000000000010046) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r6, &(0x7f0000000140)=[{{r7, r8/1000+60000}, 0x0, 0x1}, {{0x77359400}, 0x12, 0x8, 0x1}, {{r9, r10/1000+10000}, 0x12, 0x1, 0x3}], 0x48) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) socket$inet_udplite(0x2, 0x2, 0x88) 19:27:58 executing program 1 (fault-call:4 fault-nth:77): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 515.751197] FAULT_INJECTION: forcing a failure. [ 515.751197] name failslab, interval 1, probability 0, space 0, times 0 [ 515.766944] CPU: 1 PID: 32139 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 515.774834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.784180] Call Trace: [ 515.786768] dump_stack+0x1b2/0x283 [ 515.790401] should_fail.cold+0x10a/0x154 [ 515.794552] should_failslab+0xd6/0x130 [ 515.798515] kmem_cache_alloc_trace+0x47/0x3d0 [ 515.803171] sctp_add_bind_addr+0x6c/0x350 [ 515.807386] sctp_copy_local_addr_list+0x2ae/0x400 [ 515.812295] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 515.817032] sctp_bind_addr_copy+0xde/0x430 [ 515.821331] sctp_sendmsg+0x1c15/0x2cd0 [ 515.825303] ? sctp_id2assoc+0x210/0x210 [ 515.829343] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 515.834082] ? selinux_socket_getpeername+0x260/0x260 [ 515.839256] ? dup_iter+0x240/0x240 [ 515.842865] ? kernel_recvmsg+0x210/0x210 [ 515.846991] inet_sendmsg+0x11a/0x4e0 [ 515.850764] ? security_socket_sendmsg+0x83/0xb0 [ 515.855494] ? inet_recvmsg+0x4d0/0x4d0 [ 515.859445] sock_sendmsg+0xb5/0x100 [ 515.863137] ___sys_sendmsg+0x6c8/0x800 [ 515.867088] ? get_pid_task+0x91/0x130 [ 515.870950] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 515.875685] ? lock_downgrade+0x740/0x740 [ 515.879833] ? __fget+0x1fe/0x360 [ 515.883265] ? lock_acquire+0x170/0x3f0 [ 515.887227] ? lock_downgrade+0x740/0x740 [ 515.891358] ? __fget+0x225/0x360 [ 515.894801] ? __fdget+0x196/0x1f0 [ 515.898438] ? sockfd_lookup_light+0xb2/0x160 [ 515.902909] __sys_sendmsg+0xa3/0x120 [ 515.906686] ? SyS_shutdown+0x160/0x160 [ 515.910639] ? wait_for_completion_io+0x10/0x10 [ 515.915290] ? SyS_read+0x210/0x210 [ 515.918982] ? SyS_clock_settime+0x1a0/0x1a0 [ 515.923459] SyS_sendmsg+0x27/0x40 [ 515.926972] ? __sys_sendmsg+0x120/0x120 [ 515.931010] do_syscall_64+0x1d5/0x640 [ 515.934880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 515.940054] RIP: 0033:0x45d4d9 [ 515.943219] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:27:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) inotify_init1(0x80000) ioctl$TCXONC(r0, 0x540a, 0x0) [ 515.950904] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 515.958150] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 515.965397] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 515.972654] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004d [ 515.979902] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:27:59 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x1000}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x3f, 0x7}) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1ffe000000000000, 0x438541) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x2, 0x400, 0x3, 0x0, 0x0, "3889c3dd487c1d6799b1ddd099968df13fc0a8", 0xb93, 0x9}) ioctl$TCXONC(r3, 0x540a, 0x0) 19:27:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x7, &(0x7f0000000140)=0x4) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f00000001c0)={0x28c}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x0, 0x2}]}) write$evdev(r0, &(0x7f0000000100)=[{}, {}], 0x30) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x20000) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) 19:27:59 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x400, 0xffffffff, 0x9, 0x8, 0xe, "9799497231ef0fb43985724373ba2f2a051fb2"}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400800, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x42, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r3, 0x1f, 0x0, 0x3, &(0x7f0000000140)=[0x0], 0x1}, 0x20) clock_gettime(0x4, &(0x7f0000000000)) 19:27:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f0000000080)}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x7) r3 = open(&(0x7f0000000040)='./bus\x00', 0x208000, 0x42) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xd3b) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000240)={0x2, 0x3}) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4004805) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x6, 0xffff7fff, 0x1, 0x4, 0x5, "ec143b63a779674e70df38e6b4998b0bd70bf2"}) 19:27:59 executing program 1 (fault-call:4 fault-nth:78): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:27:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x764f, 0xc580) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000040)=[{{r1, r2/1000+10000}, 0x0, 0x0, 0x3}, {{0x0, 0x2710}, 0x12}], 0x30) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000180000100ffffff7f000900010200000068814890fcd9f695288beb58bd1c3526d762f50cc5b2530d69f3087b408133d059fb3958771c04f73fc556440d587ce497176b6e97a3d08bd8ba0878542026cefdc123f7b454de1f759d955777128f76297d805c3cfebd076bb026544cf1ac1ad90c7233fd4ab065ecaca45c31a8e9318c5f27021d7b7a99150ab0dcfd662833dbd6914c4b513011a968ad631f2e5c2e515f22152361f3d0dcb76eb4687334"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c1e00002c00270d0000000000000000000000006998eccc5aa9ebb662dc608c1c96807b747cc2ab405d71", @ANYRES32=r4, @ANYBLOB="00000000000000000e0000000c0001007463696e646578000c000200080001001b240000"], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYBLOB="f0f3f17cf04d7ae7bcb2cce5e2861f5160f9be9b7f1e35e3fbbb08453a18f1d00df3fd3bb1b0ef2242162033b8d89d400e06f334daf99613f33a78ea61b479d8556108c83d465df5a8a50d1113462555d7e616d8c67ab133e6f290d4f66177a817120661fe992ce39cf1e2873eac6723cde430fe5b52e535b37872fc3d2e43a1b6b34792268ecdd1d962c7f2ac6158b7a58863fe17f146a84d3a44259203565d571f5f95082f4e65b9f06ba59fb9edf0dbbdff53c0109764bb", @ANYRES32=r0], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="38030000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250a0000001c0001800800000002000000080001009c5d85bcb0e5671f9e5173c08f4fe389b54dd89bbcd1e44b4d01a4dcc3b178b56877114f63d155a1036e1af0fed26d1710cbe9520ed624ab608ce5e81ec26793", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="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"], 0x338}, 0x1, 0x0, 0x0, 0x4}, 0x40804) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r8, 0x0, 0x4000000000010046) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) 19:27:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x200, 0x100000000000001}, {0x4b, 0x682a}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:27:59 executing program 5: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 516.666315] FAULT_INJECTION: forcing a failure. [ 516.666315] name failslab, interval 1, probability 0, space 0, times 0 [ 516.675192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 516.697029] CPU: 0 PID: 32191 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 516.704923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.714267] Call Trace: [ 516.716852] dump_stack+0x1b2/0x283 [ 516.720480] should_fail.cold+0x10a/0x154 [ 516.724631] should_failslab+0xd6/0x130 [ 516.728603] kmem_cache_alloc_trace+0x47/0x3d0 [ 516.733194] sctp_add_bind_addr+0x6c/0x350 [ 516.737431] sctp_copy_local_addr_list+0x2ae/0x400 [ 516.742365] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 516.747122] sctp_bind_addr_copy+0xde/0x430 [ 516.751444] sctp_sendmsg+0x1c15/0x2cd0 [ 516.755599] ? sctp_id2assoc+0x210/0x210 [ 516.759656] ? rw_copy_check_uvector+0xc8/0x2b0 [ 516.764322] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 516.769163] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 516.773927] ? selinux_socket_getpeername+0x260/0x260 [ 516.779110] ? dup_iter+0x240/0x240 [ 516.782737] ? kernel_recvmsg+0x210/0x210 [ 516.786896] inet_sendmsg+0x11a/0x4e0 [ 516.790688] ? security_socket_sendmsg+0x83/0xb0 [ 516.795436] ? inet_recvmsg+0x4d0/0x4d0 [ 516.799404] sock_sendmsg+0xb5/0x100 [ 516.803116] ___sys_sendmsg+0x6c8/0x800 [ 516.807081] ? get_pid_task+0x91/0x130 [ 516.810960] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 516.815713] ? lock_downgrade+0x740/0x740 [ 516.819860] ? __fget+0x1fe/0x360 [ 516.823308] ? lock_acquire+0x170/0x3f0 [ 516.827276] ? lock_downgrade+0x740/0x740 [ 516.831423] ? __fget+0x225/0x360 [ 516.834876] ? __fdget+0x196/0x1f0 [ 516.838411] ? sockfd_lookup_light+0xb2/0x160 [ 516.842901] __sys_sendmsg+0xa3/0x120 [ 516.846692] ? SyS_shutdown+0x160/0x160 [ 516.850663] ? wait_for_completion_io+0x10/0x10 [ 516.855331] ? SyS_read+0x210/0x210 [ 516.858950] ? SyS_clock_settime+0x1a0/0x1a0 [ 516.863355] SyS_sendmsg+0x27/0x40 [ 516.866888] ? __sys_sendmsg+0x120/0x120 [ 516.870946] do_syscall_64+0x1d5/0x640 [ 516.874833] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 516.880014] RIP: 0033:0x45d4d9 [ 516.883197] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.890901] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 516.898163] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 516.905423] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 19:27:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = socket(0x11, 0x800000003, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth1_virt_wifi\x00', &(0x7f0000000780)=@ethtool_dump={0x3f, 0xc286, 0xfb92, 0x1000, "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"}}) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="0f57bdd77c74f550653a4ab7924e7e538e955420a15a6179bae861dec1fe4a5a50521b3a1fb00631801a862917550ac83abc1a052c99adb8b766f15e0a326a7d08c20d5f49289accbd5df2cd6c9e33483e463412e833e8886ecb3ce4d7b95bb96cff86ad5b49ed718d61b02fb31cd2431c19e7d1b24057173e0637ba0712a559af9aff2e644709eab3ef570c4d85bda7421ebb33d5d4dacd0f79ba11810e21473585f935ddf26379d6b4ac646509c5271073", @ANYRES16=r7, @ANYBLOB="000429bd7000fddbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000900000006001600010000000500120001000000060011000400000008000b003f000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000800000006001600c1ff00000500120001000000060011000500000008000b0000000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000400000006001600018000000500120001000000060011000300000008000b0040000000"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x4004004) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xfffffff9}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000010000000000000000000000000000000000000000006e000000fef14ea36be9be07e7cb03e3608027f3653922693910cb02a3eb173bb9d0fc63f337ce4b379517f33c364dd9529aca822d524320c3725804207b8c9899034f45aa80459f20f34908ab560b839413c9a754add9eaf202a67f6bb9790291d01c430e7c8d05a85fc9f44718b946d8f6"], &(0x7f00000001c0)=0x92) r8 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r8, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r8, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r8, 0x0, 0x0) 19:27:59 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0xfc, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x3f}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xffc1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x40}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x4004004) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f8, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) [ 516.912685] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004e [ 516.919947] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c [ 516.962526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 516.985706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:28:00 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) 19:28:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x240080, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_iso={0x0, {0x2}, 0x6, 0x0, &(0x7f0000000100)="e492eef06b6db0a364b8873bc6ef95e419e59ddc64b01989bec5d52d000f2a70cc317112dff25212cbe3d4f394978e46dd002fca24f8defc6e6a5c68a271ab4b15", 0x41, 0x6, 0x1f, 0x44, 0x0, 0x9, &(0x7f0000000180), [{0x1, 0x800, 0x3}, {0x400, 0x61, 0x10001}, {0x1, 0x80, 0x6}, {0xea2, 0x118c, 0x6}, {0x0, 0x9, 0x6}, {0x21011a8, 0x77835c0b, 0x3}, {0x10000, 0x9, 0x9}, {0x5, 0x400, 0x6}, {0x8, 0x5, 0x437}, {0xc0, 0x400, 0xc}, {0x55a2, 0x1, 0x84}, {0x0, 0x1ff, 0x777}, {0x300, 0x1, 0x4}, {0x6, 0x400, 0x40}, {0x7d1b, 0x7, 0x1}, {0x2, 0x3, 0x6}, {0x9, 0x7, 0x591a74d8}, {0xfffffff7, 0x1}, {0xff, 0x1, 0x1000}, {0x4, 0x7, 0x3}, {0x1, 0x1, 0x7f}, {0x2, 0x41c, 0x80}, {0x7, 0xfde, 0x6}, {0x101, 0x2, 0x1}, {0xffffffff, 0x6, 0x8000}, {0x7, 0x4, 0x9}, {0x2, 0x1, 0x3}, {0x8001, 0x0, 0x7ff}, {0x8a, 0x1, 0x9}, {0x2, 0x9, 0x3}, {0xeeb4, 0x9, 0x10001}, {0x5, 0x9f61, 0x101}, {0x1, 0x3ff, 0x9}, {0xcc6, 0x3d7d, 0x2f}, {0x6, 0x7ff, 0x5}, {0x4, 0x8001, 0x9}, {0x1, 0x4, 0x9}, {0xfe, 0x9, 0x4}, {0x1437, 0x6, 0xfffffff8}, {0x1f, 0x4, 0x6}, {0x621e, 0x101, 0x1}, {0x200, 0x9, 0x8}, {0x3, 0x4, 0x40}, {0x5, 0xff, 0xb6}, {0xffff0001, 0x8}, {0x81, 0x400, 0x7}, {0x8, 0x5, 0x8}, {0x2, 0x3, 0x7f}, {0x0, 0x4000, 0x40}, {0xf9a0, 0xffffffff}, {0xe0b, 0x3, 0x9}, {0x1, 0x5, 0x30a}, {0x0, 0x7, 0x1}, {0x20, 0x2, 0xffff}, {0x8000, 0x1, 0x5}, {0xe4, 0xff, 0x10001}, {0x5, 0x5, 0xffffffff}, {0x9, 0xc4, 0x6}, {0x9, 0x1, 0xb13}, {0x2, 0xfffffff9, 0x1ff}, {0x7, 0x4, 0x8001}, {0x39e, 0xbd, 0x6}, {0x3, 0x5ea, 0x8001}, {0x1, 0x7, 0x5}, {0x2a, 0xfffffffa, 0x7fff}, {0x7fff, 0x1, 0x9}, {0x668d3ba7, 0x4, 0x8}, {0x0, 0x5, 0x8}]}) 19:28:00 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@remote, [0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xff000000, 0xffffff00, 0x0, 0xff], @ipv6=@loopback, [0xffffff00, 0xff, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x12}, [0x0, 0xffffffff, 0xff000000, 0xff], 0x401, 0x80000000, 0x4, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x5b, 0x100}, 0x1, 0x0, 0x4e24, 0x4e20, 0x4e22, 0x4e23}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x3, 0x4}, {0x4, 0x5, 0x1}, 0x80, 0x5}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xffffff00, 'vlan1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x32, 0x0, 0x30}, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x463270477f200531, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x0) 19:28:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @ramp={0x3, 0xec5, {0x4, 0xa777, 0x19, 0x9}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:00 executing program 1 (fault-call:4 fault-nth:79): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x2c800) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140)) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r6, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}}, &(0x7f00000002c0)=0x84) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x1}, {{}, 0x11, 0x0, 0x40000000}], 0x30) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r8 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x4000000000010046) ioctl$UI_SET_PROPBIT(r8, 0x4004556e, 0x14) [ 517.235949] FAULT_INJECTION: forcing a failure. [ 517.235949] name failslab, interval 1, probability 0, space 0, times 0 [ 517.267656] CPU: 1 PID: 32228 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 517.275562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 19:28:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 517.284929] Call Trace: [ 517.287524] dump_stack+0x1b2/0x283 [ 517.291156] should_fail.cold+0x10a/0x154 [ 517.295314] should_failslab+0xd6/0x130 [ 517.299293] kmem_cache_alloc_trace+0x47/0x3d0 [ 517.303879] sctp_add_bind_addr+0x6c/0x350 [ 517.308118] sctp_copy_local_addr_list+0x2ae/0x400 [ 517.313053] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 517.317816] sctp_bind_addr_copy+0xde/0x430 [ 517.322138] sctp_sendmsg+0x1c15/0x2cd0 [ 517.326117] ? sctp_id2assoc+0x210/0x210 [ 517.330177] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 517.334931] ? selinux_socket_getpeername+0x260/0x260 [ 517.341248] ? dup_iter+0x240/0x240 [ 517.344873] ? kernel_recvmsg+0x210/0x210 [ 517.349017] inet_sendmsg+0x11a/0x4e0 [ 517.352814] ? security_socket_sendmsg+0x83/0xb0 [ 517.357570] ? inet_recvmsg+0x4d0/0x4d0 [ 517.361547] sock_sendmsg+0xb5/0x100 [ 517.365362] ___sys_sendmsg+0x6c8/0x800 [ 517.369340] ? get_pid_task+0x91/0x130 [ 517.373230] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 517.377998] ? lock_downgrade+0x740/0x740 [ 517.382147] ? __fget+0x1fe/0x360 [ 517.385598] ? lock_acquire+0x170/0x3f0 [ 517.389572] ? lock_downgrade+0x740/0x740 [ 517.393722] ? __fget+0x225/0x360 [ 517.397180] ? __fdget+0x196/0x1f0 [ 517.400716] ? sockfd_lookup_light+0xb2/0x160 [ 517.405212] __sys_sendmsg+0xa3/0x120 [ 517.409010] ? SyS_shutdown+0x160/0x160 [ 517.412983] ? wait_for_completion_io+0x10/0x10 [ 517.417661] ? SyS_read+0x210/0x210 [ 517.421289] ? SyS_clock_settime+0x1a0/0x1a0 [ 517.425698] SyS_sendmsg+0x27/0x40 [ 517.429232] ? __sys_sendmsg+0x120/0x120 [ 517.433294] do_syscall_64+0x1d5/0x640 [ 517.437231] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 517.442510] RIP: 0033:0x45d4d9 [ 517.445706] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.453413] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 517.460784] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 517.468047] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 517.475311] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004f 19:28:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mbind(&(0x7f0000038000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x7fff, 0x8, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xdd, 0x2) [ 517.482577] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000200)=0x3) r3 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='-&*%@}&^)D)%\x00', 0xfffffffffffffffb) keyctl$get_security(0x11, r3, &(0x7f0000000180)=""/78, 0x4e) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss={0x2, 0x7}, @timestamp, @mss={0x2, 0x3ff}, @timestamp], 0x5) 19:28:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0xf, 0x4) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x3, 0x1ff, 0x1, 0xe249, 0x3f, "a7d293ccc323380cf15298623e5af350fb8c54", 0x9, 0x2}) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000002880)={0x155, 0x6, &(0x7f0000007dc0)}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendto(r3, &(0x7f00000081c0)="00a7217035c99714958c63d808e02c0ba6f628b569033f225989a1ad968eb27cdd8519179e7faa5aa8e8cde18e983534bc8d242331d3c0804f095af817f06fe57c0b4b3b9a22f44eeb0db14a197e8671fae9709388dc0af23d70f1e0ac4ed7ecd8b399dfc548e1f8333ca344df581c1c3592fd89943faca3570fee9eda16d136e1343675bc4f56115416cc875a8a8e3078736a2b21e25cd52a1768e61958f8ca73c7d2770e0cd967dd", 0xa9, 0x48040, &(0x7f00000028c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000700)={0x4, 0x1, {0x3, 0x2, 0x6, 0x1}, 0x2}) recvmmsg(r2, &(0x7f0000007b40)=[{{&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/149, 0x95}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/211, 0xd3}], 0x5, &(0x7f0000000600)=""/83, 0x53}, 0x1}, {{&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000008380)=""/142, 0x8e}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/144, 0x90}, {&(0x7f0000000900)=""/147, 0x93}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000000a80)=""/163, 0xa3}, {&(0x7f0000000b40)=""/184, 0xb8}], 0x7, &(0x7f0000000c80)=""/65, 0x41}, 0x1ca}, {{&(0x7f0000000d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000d80)=""/21, 0x15}, {&(0x7f0000000dc0)=""/26, 0x1a}, {&(0x7f0000000e00)=""/97, 0x61}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x4, &(0x7f0000001ec0)=""/209, 0xd1}, 0xcdd}, {{&(0x7f0000001fc0)=@phonet, 0x80, &(0x7f0000002200)=[{&(0x7f0000002040)=""/50, 0x32}, {&(0x7f0000002080)=""/81, 0x51}, {&(0x7f0000002100)=""/237, 0xed}], 0x3, &(0x7f0000002240)=""/117, 0x75}, 0x3}, {{&(0x7f00000022c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002340)=""/246, 0xf6}, {&(0x7f00000039c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=""/22, 0x16}, 0x1}, {{&(0x7f00000024c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000079c0)=[{&(0x7f0000002540)=""/35, 0x23}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f0000002580)=""/55, 0x37}, {&(0x7f00000025c0)=""/205, 0xcd}, {&(0x7f00000026c0)=""/165, 0xa5}, {&(0x7f0000002780)=""/65, 0x41}, {&(0x7f00000069c0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/195, 0xc3}], 0x9, &(0x7f0000007a80)=""/190, 0xbe}, 0xff}], 0x6, 0x40, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002840)='/dev/null\x00', 0x400200, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000008280)={0x3, [0x2, 0x80, 0x9], [{0x9, 0x2, 0x0, 0x1, 0x1}, {0x3b, 0x2, 0x1, 0x1}, {0x0, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xfffffff7, 0xcb1, 0x0, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}, {0x8000, 0x8}, {0x7000, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x7, 0x0, 0x0, 0x1}, {0x692, 0x9, 0x0, 0x0, 0x1}, {0x7ff, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xffff7386, 0x5, 0x0, 0x1, 0x0, 0x1}], 0x7}) write(r2, 0x0, 0x0) 19:28:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 19:28:00 executing program 1 (fault-call:4 fault-nth:80): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{{0x0, 0xea60}}, {}], 0x30) 19:28:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) fcntl$setsig(r0, 0xa, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x480, 0x3f4, 0x10, 0x70bd29, 0x25dfdbfe, {0x1, 0x0, 0x1d, [0x0, 0x20, 0xffff4be4, 0x4, 0x9000, 0x0, 0x5, 0x0, 0xffffffff, 0x23, 0x7f, 0xe50, 0x7fff, 0x9, 0x4, 0x0, 0x38, 0x5, 0xfffffffd, 0x400, 0x8, 0x5, 0x0, 0xa74, 0x6, 0x3, 0x3f, 0x9, 0x400, 0x3, 0x5, 0x81, 0x9, 0x10000, 0x5, 0x401, 0x1, 0x4, 0x52, 0x80000000, 0x9, 0x8, 0x10000, 0x7a1f, 0xdc, 0x8000, 0x8001, 0x1f, 0x4, 0x2, 0x2, 0x2, 0x3, 0x6, 0x6, 0x3f, 0x1, 0x6fc, 0xffffffff, 0x19fb, 0x6, 0x80000001, 0x0, 0x7fff], [0x5, 0x3, 0x2, 0x7f, 0x20, 0x3, 0xfffffffe, 0x80000001, 0x6, 0xffffff80, 0xd4, 0xf8, 0x97, 0xffffffff, 0xfffffffc, 0xfffffffb, 0x83f4, 0xb357, 0x3f, 0x9, 0x3, 0x3c42, 0xff9, 0x1e0, 0xffffffc1, 0x4, 0x3f, 0x1, 0x400, 0xfffffc01, 0x200, 0x2, 0xff, 0x9, 0x0, 0x5, 0xfffffff9, 0x80000001, 0xd954, 0x6, 0x6, 0x9, 0x8, 0x8, 0x200, 0x0, 0xffffffff, 0x4, 0x401, 0x3, 0x2, 0x8, 0x5f, 0x1, 0x82, 0x3c7, 0x9, 0x1ff, 0x9, 0x9, 0x66b3924a, 0x8, 0x6, 0x1f], [0x7fffffff, 0x3c, 0x8001, 0x3, 0x9000, 0x2, 0x7, 0xfffffff5, 0x0, 0x7, 0xb711, 0x3, 0xa3c, 0x100, 0x3ff, 0x1000, 0x8, 0x5, 0x3f, 0x1ff, 0x3, 0xbe1c, 0x2, 0x7, 0x5, 0xff, 0x4, 0x8, 0x6, 0x401, 0x8, 0xed90, 0x4, 0x6, 0x20, 0x16, 0x14, 0xb1, 0x7, 0xfffff000, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x22bf, 0x4, 0x5, 0x1, 0x202, 0x6, 0x7, 0x81, 0x2, 0x0, 0xaf, 0x0, 0x4, 0xb826, 0x4, 0x7, 0x8f, 0x578, 0x1], [0x1000, 0x7, 0x8, 0x3, 0x5, 0x953, 0x2, 0x4, 0x4, 0x7, 0x7, 0x4, 0x2, 0xbdf, 0x5, 0x6, 0x0, 0x3, 0x100, 0x1, 0x7fffffff, 0xbc87, 0x10001, 0x2, 0x5, 0x3, 0x3, 0x80, 0x4, 0x1, 0x401, 0x2e6a, 0x7, 0xf104, 0x9, 0xfffffff7, 0xffffff00, 0x2, 0x5, 0xfff, 0x1, 0x40, 0x4, 0x400, 0x43b1, 0x8000, 0x6, 0xe000000, 0x9, 0x8, 0x1, 0x1, 0x80000000, 0x7, 0x0, 0x8, 0xdb27, 0x3, 0x1, 0x9, 0xfffffff7, 0x1, 0xe410, 0x7ff], 0x60, ['/dev/input/event#\x00', '/dev/input/event#\x00', '{!*\x00', '^\x00', '/dev/input/event#\x00', '/dev/input/event#\x00', '/dev/input/event#\x00']}, [""]}, 0x480}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000040) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="4f000000e65b617f26cbe2e34d7de21d9100f447078bb37482d78841e8d4c595354858583d9048c32c22144b432e8d0bf932d5ca000000000000c6386c993e310000178663", @ANYRES16=r3, @ANYBLOB="23090000000000000000010000000500070000e300000800090000000000060002000100000008000a00fcffffff08001700ce47a2d74d89372d6696c66bd0c9579b6e3688f1f7d0d1f34538155a7f712923d54b5bcdfdb2d4dc7a1430cb7701000000000000006585a5d1a5f280d091f4d8316ec64bb9d1c789fa0f472872b568f580f809cd2b604e6a5c917ee49474892f458ebc50a7", @ANYRES32, @ANYBLOB="57fe3f8e6d3dcc4607582d2a38d52c70d5456ff712b75e141543cc51d6dda6ee309d76cfc5d419aef59d036bfe299bd7a78bbd6ac844cb9883e3b102000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38fbdd41637e00ffff", @ANYRES16=r3, @ANYBLOB="020027bd7000ffdbdf2506000000080009000300000014001f00fc0000000000000000000000000000010600020001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) [ 517.809262] FAULT_INJECTION: forcing a failure. [ 517.809262] name failslab, interval 1, probability 0, space 0, times 0 [ 517.847380] CPU: 0 PID: 32268 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 517.855297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.864652] Call Trace: [ 517.867246] dump_stack+0x1b2/0x283 [ 517.870890] should_fail.cold+0x10a/0x154 [ 517.875047] should_failslab+0xd6/0x130 [ 517.879125] kmem_cache_alloc_trace+0x47/0x3d0 [ 517.883717] sctp_add_bind_addr+0x6c/0x350 [ 517.887963] sctp_copy_local_addr_list+0x2ae/0x400 [ 517.892905] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 517.897667] ? sctp_v6_is_any+0xa/0x60 [ 517.901647] sctp_bind_addr_copy+0xde/0x430 [ 517.905971] sctp_sendmsg+0x1c15/0x2cd0 19:28:01 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r2, &(0x7f0000000a00)=[{{&(0x7f0000000040)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000002240)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x2c}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, '\\![-a+!\'&#)-)\x81!:*\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) 19:28:01 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000009060101000000000000000000000000050001000600000004000730000000cc38507b86000000000000000000a348297578aedaf96d4dbbc8ca0f4db64001cf9403d849ec27d0"], 0x2c}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = open(&(0x7f0000000180)='./bus\x00', 0x155042, 0x100) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000040)=0x5) [ 517.909970] ? check_preemption_disabled+0x35/0x240 [ 517.914982] ? sctp_id2assoc+0x210/0x210 [ 517.919058] ? selinux_socket_sendmsg+0xd3/0x260 [ 517.923818] ? selinux_socket_getpeername+0x260/0x260 [ 517.929010] ? dup_iter+0x240/0x240 [ 517.932647] ? kernel_recvmsg+0x210/0x210 [ 517.936800] inet_sendmsg+0x11a/0x4e0 [ 517.940598] ? security_socket_sendmsg+0x83/0xb0 [ 517.945362] ? inet_recvmsg+0x4d0/0x4d0 [ 517.949341] sock_sendmsg+0xb5/0x100 [ 517.953069] ___sys_sendmsg+0x6c8/0x800 19:28:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYBLOB="0000000020000d000000965f4b708dd143630e773bb010a49a1c00627ac6673d37696c5a8ea931fb6e65f26117a6749a97d15699bc9bd161c4f2040000009d43e4defe07f8e77bf65cce2b585733df6e1cd5eef465b8932c8210e5b78c32a4bbe52eb2bb77d6c0ab02704f9f84652c340a864c88c0a9f81d"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8119}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x8000) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000008c0)=r6) sendmsg$sock(r1, &(0x7f0000000700)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x3, @empty, 'bridge0\x00'}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="651a235c0d777f0e63f2880c651a4b9ad33c61436445868a2d614da8afd55b089b67627007d3e22faa866da96f00de75399ec54fb51b417900a289e153eecb1dd160020e975f4659cb1417caf41422", 0x4f}, {&(0x7f0000000140)="02bc6a7cdaecc2fca12a4b2ce1869f14b379383fc6039541266c4056a96859913025290e27c7c49fc74a39aef3f1cddfb5a2bd2aa95ffc0bb11e538fa947a52018861181b32c9976abf219968267a1afea4f2a46a7203c1c8a0443e50da130099cf7a8384dd08c3903da426419121eecd55ff545aa93a5be63c466fd4e5e624b1d830cd8eff4ce9282d7d58e2a8a2e", 0x8f}, {&(0x7f0000000200)="09697193a63cdea2b51f0a2fda50e40a0d47e160299224d68e27a5ca5e119368117e703916b2aa41a70c152404d85bdbe14c122dca183c8bd233e1ff", 0x3c}, {&(0x7f0000000300)="2fb6bd2842785bd2d128bbe1a20994b11356b7151cdad3893d0a2fb29de34a43f6e7d248975a41559264d362e5e5e23668d808bcbcc3fec3d3a99f0dffe0a47e021340d6e4dfa25700c9b87132b7f4f48310a514108166941071eda29e750d56d615bcf7fef81736b218f296716197c2173781ef49309bb03204f051211175c331c6e20b6040cc7f190fa92f025d62095508209c1104b255d15cf1ed9ff445bf478d", 0xa2}, {&(0x7f0000000240)="a031c9c75635abcc0ad3f36b3c66224a92a7cc5bb2f7ed3e1c837dfbe024a05dc4429e936c5239f8d61a0684704d2e04353a3d9983ec8a5b4640fcf05753fda29a30a66b3d98d6c0be61cc3813a1d298357096f56b06ccb42adab61ccd869c9d4d74d289be", 0x65}, {&(0x7f00000003c0)="7908effb08d18922e27f", 0xa}, {&(0x7f0000000400)="99a4e5", 0x3}, {&(0x7f0000000440)="eac3ef1cbccdc45f8e3a84a1de6189d7903487ff98ad96d34a6bf123c700083f43e058161fae4c0a29edf43ae03b42e8e34799cb04452c4a07d524c10c9a1965fb57f3d4be97ef0f04115062dc3d3a5c0bf15736f7a182f889a0e41067d164a659767ddbbb5e4866a447268488b014322daea0cecd5ce1f7cb46f130ce1710db4294ce2431532a1e962706594630246ae856b59fea04677b03754a2679abc075b196", 0xa2}, {&(0x7f0000000500)="5544c61fea5c3e935f35098e7c945139d37034b72aeebadba8c16a31ca17", 0x1e}, {&(0x7f0000000540)="bf3e807f908eba65e238a528a42489db9d0be8d057aaf4ad93c0c17ebe347856", 0x20}], 0xa, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x79}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}], 0xc0}, 0x41) sysfs$2(0x2, 0x2, &(0x7f0000000000)=""/64) write(r2, 0x0, 0x0) [ 517.957050] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 517.961810] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 517.966579] ? check_preemption_disabled+0x35/0x240 [ 517.971597] ? retint_kernel+0x2d/0x2d [ 517.975487] ? __fget+0x1fe/0x360 [ 517.978943] ? lock_acquire+0x170/0x3f0 [ 517.981488] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 517.982918] ? lock_downgrade+0x740/0x740 [ 517.982936] ? __fget+0x225/0x360 [ 517.982952] ? __fdget+0x196/0x1f0 [ 517.982962] ? sockfd_lookup_light+0xb2/0x160 19:28:01 executing program 2: unshare(0x40600) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) [ 517.982973] __sys_sendmsg+0xa3/0x120 [ 518.010738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.011053] ? SyS_shutdown+0x160/0x160 [ 518.011066] ? wait_for_completion_io+0x10/0x10 [ 518.011082] ? SyS_read+0x210/0x210 [ 518.031880] ? SyS_clock_settime+0x1a0/0x1a0 [ 518.036287] SyS_sendmsg+0x27/0x40 [ 518.036497] audit: type=1800 audit(1597865280.961:21): pid=32281 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=15895 res=0 [ 518.039811] ? __sys_sendmsg+0x120/0x120 [ 518.039823] do_syscall_64+0x1d5/0x640 [ 518.039838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 518.072677] RIP: 0033:0x45d4d9 [ 518.075866] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.083584] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 518.090849] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 518.098114] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 19:28:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {{}, 0x1f, 0x0, 0x2}], 0x30) 19:28:01 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r4, &(0x7f0000000100)=[{}, {{}, 0x1, 0x0, 0x4000000}], 0x30) [ 518.105384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000050 [ 518.112653] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:01 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x6001, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0xe0, 0x7f}, 0x0, 0x4, 0xffff, {0x7}, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x16, 0x5, 0x400, 0xfff, 0x7ff, 0x1, 0x7}) ioctl$TCXONC(r0, 0x540a, 0x0) 19:28:01 executing program 1 (fault-call:4 fault-nth:81): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{}, {0x0, 0x0, 0x0, 0x1}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 518.248415] FAULT_INJECTION: forcing a failure. [ 518.248415] name failslab, interval 1, probability 0, space 0, times 0 19:28:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x80) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x72, "e1ef9a83a323b34664cba6bf49bc2989295628b64e01b782bd02d024cd2b96342260f312dd9aab5031ebee5a50bae434a07ee2ee86c815a1c843ae6783f1dcbab2e6c0c94eb4d6a21022df15e23d0ad39a9d53f09dc4083d044e39b65caa8866c46574c4cb9035a6a917b4756b7bcaa77a25"}, &(0x7f0000000180)=0x7a) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x5}, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 19:28:01 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x18041, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000001c0)=""/51) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000200)=0x60, 0x800) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x21c500, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$SNDCTL_TMR_METRONOME(r4, 0x40045407) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000180)) [ 518.292195] CPU: 1 PID: 32308 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 518.300112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.309478] Call Trace: [ 518.309499] dump_stack+0x1b2/0x283 [ 518.309517] should_fail.cold+0x10a/0x154 [ 518.319954] should_failslab+0xd6/0x130 [ 518.323943] kmem_cache_alloc_trace+0x47/0x3d0 [ 518.328554] sctp_add_bind_addr+0x6c/0x350 [ 518.328572] sctp_copy_local_addr_list+0x2ae/0x400 [ 518.328583] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 518.328599] sctp_bind_addr_copy+0xde/0x430 [ 518.346793] sctp_sendmsg+0x1c15/0x2cd0 [ 518.346812] ? sctp_id2assoc+0x210/0x210 [ 518.346825] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 518.346843] ? selinux_socket_getpeername+0x260/0x260 [ 518.346855] ? dup_iter+0x240/0x240 [ 518.346874] ? kernel_recvmsg+0x210/0x210 [ 518.346886] inet_sendmsg+0x11a/0x4e0 [ 518.346894] ? security_socket_sendmsg+0x83/0xb0 19:28:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2a0000, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x22359601) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 518.346903] ? inet_recvmsg+0x4d0/0x4d0 [ 518.346914] sock_sendmsg+0xb5/0x100 [ 518.346925] ___sys_sendmsg+0x6c8/0x800 [ 518.346935] ? get_pid_task+0x91/0x130 [ 518.346945] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 518.346958] ? lock_downgrade+0x740/0x740 [ 518.346976] ? __fget+0x1fe/0x360 [ 518.346988] ? lock_acquire+0x170/0x3f0 [ 518.346997] ? lock_downgrade+0x740/0x740 [ 518.347013] ? __fget+0x225/0x360 [ 518.347027] ? __fdget+0x196/0x1f0 [ 518.347038] ? sockfd_lookup_light+0xb2/0x160 [ 518.347049] __sys_sendmsg+0xa3/0x120 [ 518.347058] ? SyS_shutdown+0x160/0x160 [ 518.347069] ? wait_for_completion_io+0x10/0x10 [ 518.347086] ? SyS_read+0x210/0x210 [ 518.347097] ? SyS_clock_settime+0x1a0/0x1a0 [ 518.347108] SyS_sendmsg+0x27/0x40 [ 518.347115] ? __sys_sendmsg+0x120/0x120 [ 518.347125] do_syscall_64+0x1d5/0x640 [ 518.347142] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 518.347151] RIP: 0033:0x45d4d9 [ 518.347155] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.347165] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 518.347171] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 518.347176] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 518.347181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000051 [ 518.347186] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:01 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={@any, 0x4, 0x3f, 0x1, 0x4, 0x4, "a7e848a442820a3d7dbfa104990ae1be288765de8f9e861e88a279108bacb376097a6aabd1b73cda5d6942fc6279f64b92cf70fb2019f5aea8e81be49a16ffa67e4a94066113167240d16060592bb07b30f2dbf3c1479a232d1e2dfc74629876cd95685a2b8f6e49818cf3f07c139bbfdb9ceef765e809c14a37aee5a6d088b4"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1, 0x0, 0x0, 0x80000}, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1f) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) pwrite64(r7, &(0x7f00000000c0)="112b8f5056c86339a651a4bbbe4ef1ad7b4deb8908de7135f27e501b2dde450dd211fe82", 0x24, 0x8) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000040)={0x6, 0x7, 0x4, 0xe000, 0x997, {}, {0x0, 0x0, 0x6, 0x36, 0x4, 0x3f, "874f535d"}, 0x7, 0x1, @planes=&(0x7f0000000000)={0x401, 0xb, @userptr=0x2, 0x7}, 0x80, 0x0, r3}) write(r4, 0x0, 0x0) 19:28:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1002, 0x2a001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{}, {0x0, 0x0, 0x0, 0x100}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000180)={0x54, 0x8001, 0x2, {0x9, 0x8}, {0x7, 0x7f}, @period={0x58, 0x800, 0x1, 0x2, 0x4, {0xe000, 0x2, 0x3f, 0x7}, 0x1, &(0x7f0000000140)=[0xfff]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f00000001c0)=0x3f) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) write$sequencer(r2, &(0x7f0000000080)=[@t={0x106, 0x4, 0xf7, 0xf1}], 0x8) 19:28:01 executing program 1 (fault-call:4 fault-nth:82): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = signalfd4(r0, &(0x7f0000000080)={[0x20]}, 0x8, 0x81800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000ce06800ed57774d389884ed6e2ae358138d396021fb80f9edd951bc0e9dd32b3a4b4dd3b82e1f697049ff2791f582478835254ec39dcc050a725b18893d2ac4325c57f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e24, 0x4, @remote, 0x5}}, 0xc0, 0x1, 0xfffffff9, 0x8, 0x5ddaa827ccb24156, 0x1d1}, &(0x7f0000000240)=0x9c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, {0x0, 0x100000000000001}, {0x4b}, @cond=[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:01 executing program 5: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 518.825769] FAULT_INJECTION: forcing a failure. [ 518.825769] name failslab, interval 1, probability 0, space 0, times 0 [ 518.853356] CPU: 0 PID: 32346 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 518.861254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.870611] Call Trace: [ 518.873201] dump_stack+0x1b2/0x283 [ 518.876837] should_fail.cold+0x10a/0x154 [ 518.880999] should_failslab+0xd6/0x130 [ 518.885015] kmem_cache_alloc_trace+0x47/0x3d0 [ 518.889603] sctp_add_bind_addr+0x6c/0x350 [ 518.893842] sctp_copy_local_addr_list+0x2ae/0x400 [ 518.898775] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 518.903533] ? sctp_bind_addr_copy+0xc7/0x430 [ 518.908137] sctp_bind_addr_copy+0xde/0x430 [ 518.912461] sctp_sendmsg+0x1c15/0x2cd0 [ 518.916441] ? sctp_id2assoc+0x210/0x210 [ 518.920499] ? rw_copy_check_uvector+0x18a/0x2b0 [ 518.925251] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 518.930192] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 518.934952] ? selinux_socket_getpeername+0x260/0x260 [ 518.940151] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 518.945166] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 518.949924] ? retint_kernel+0x2d/0x2d [ 518.953811] inet_sendmsg+0x11a/0x4e0 [ 518.957613] ? security_socket_sendmsg+0x83/0xb0 [ 518.962368] ? inet_recvmsg+0x4d0/0x4d0 [ 518.966432] sock_sendmsg+0xb5/0x100 [ 518.970146] ___sys_sendmsg+0x6c8/0x800 19:28:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) [ 518.974114] ? get_pid_task+0x91/0x130 [ 518.977995] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 518.982752] ? lock_downgrade+0x740/0x740 [ 518.986901] ? __fget+0x1fe/0x360 [ 518.990352] ? lock_acquire+0x170/0x3f0 [ 518.994322] ? lock_downgrade+0x740/0x740 [ 518.998482] ? __fget+0x225/0x360 [ 518.998496] ? __fdget+0x196/0x1f0 [ 518.998509] ? sockfd_lookup_light+0xb2/0x160 [ 518.998520] __sys_sendmsg+0xa3/0x120 [ 518.998528] ? SyS_shutdown+0x160/0x160 [ 518.998538] ? check_preemption_disabled+0x35/0x240 19:28:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x4000, 0x100000000000001}, {0xc72}, @cond=[{0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x4}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r3 = dup(r0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x7429, 0x4, 0x4, {0x1, @sliced={0x8, [0x80, 0x1, 0x57c, 0x7fff, 0x2, 0x70, 0x8, 0x8298, 0x8001, 0x9, 0x1f, 0x7, 0x2, 0x2, 0x2c, 0x3, 0x0, 0x8000, 0x3, 0x4, 0x1, 0x2d, 0x7, 0x2229, 0x5, 0x2, 0x9, 0x9, 0x2, 0x1, 0x20, 0x9, 0x1, 0x3b8, 0x100, 0x0, 0xd, 0x3667, 0x8, 0x1000, 0x1, 0x7a6, 0x7ff, 0x2, 0x1, 0x3, 0x8, 0x5], 0x400}}, 0xfffffff9}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000080)=0x8, 0x4) [ 518.998558] ? SyS_shutdown+0x160/0x160 [ 518.998568] SyS_sendmsg+0x27/0x40 [ 518.998580] ? __sys_sendmsg+0x120/0x120 [ 518.998590] do_syscall_64+0x1d5/0x640 19:28:02 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0xffffffff, 0x0, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FIONCLEX(r4, 0x5450) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000240)={r3, 0x64}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x32, r3}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) [ 518.998607] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 518.998616] RIP: 0033:0x45d4d9 [ 518.998621] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.998631] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 19:28:02 executing program 2: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000000c0)=0x5d06) r0 = open(&(0x7f0000000040)='./bus\x00', 0x208401, 0x81) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x1c0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$CHAR_RAW_DISCARD(r0, 0x1277, &(0x7f0000000080)=0x3) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1c4) [ 518.998636] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 518.998641] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 19:28:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000140)=0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000080)=0xe1) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:02 executing program 1 (fault-call:4 fault-nth:83): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 518.998646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000052 [ 518.998651] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c [ 519.373506] FAULT_INJECTION: forcing a failure. [ 519.373506] name failslab, interval 1, probability 0, space 0, times 0 [ 519.400178] CPU: 0 PID: 32380 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 519.408083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.417431] Call Trace: [ 519.420018] dump_stack+0x1b2/0x283 [ 519.423655] should_fail.cold+0x10a/0x154 [ 519.427812] should_failslab+0xd6/0x130 [ 519.431790] kmem_cache_alloc_trace+0x47/0x3d0 [ 519.436375] sctp_add_bind_addr+0x6c/0x350 [ 519.440636] sctp_copy_local_addr_list+0x2ae/0x400 [ 519.445580] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 519.450336] ? sctp_get_af_specific+0x1e/0x50 [ 519.454829] ? sctp_get_af_specific+0x25/0x50 [ 519.459325] sctp_bind_addr_copy+0xde/0x430 [ 519.463650] sctp_sendmsg+0x1c15/0x2cd0 [ 519.467636] ? sctp_id2assoc+0x210/0x210 [ 519.471696] ? rw_copy_check_uvector+0x106/0x2b0 [ 519.476451] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 519.481297] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 519.486064] ? selinux_socket_getpeername+0x260/0x260 [ 519.491253] ? dup_iter+0x240/0x240 [ 519.494890] ? kernel_recvmsg+0x210/0x210 [ 519.499036] inet_sendmsg+0x11a/0x4e0 [ 519.502920] ? security_socket_sendmsg+0x83/0xb0 [ 519.507672] ? inet_recvmsg+0x4d0/0x4d0 [ 519.511646] sock_sendmsg+0xb5/0x100 [ 519.515363] ___sys_sendmsg+0x6c8/0x800 [ 519.519333] ? get_pid_task+0x91/0x130 [ 519.523223] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 519.528105] ? lock_downgrade+0x740/0x740 [ 519.532256] ? retint_kernel+0x2d/0x2d [ 519.536153] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 519.542304] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 519.547061] ? check_preemption_disabled+0x35/0x240 [ 519.552072] ? retint_kernel+0x2d/0x2d [ 519.555965] ? sockfd_lookup_light+0xc5/0x160 [ 519.560456] ? sockfd_lookup_light+0xe1/0x160 [ 519.564948] ? sockfd_lookup_light+0xb2/0x160 [ 519.569437] __sys_sendmsg+0xa3/0x120 [ 519.573231] ? SyS_shutdown+0x160/0x160 [ 519.577205] ? wait_for_completion_io+0x10/0x10 [ 519.581881] ? SyS_read+0x210/0x210 [ 519.585503] ? SyS_clock_settime+0x1a0/0x1a0 [ 519.590134] SyS_sendmsg+0x27/0x40 [ 519.593665] ? __sys_sendmsg+0x120/0x120 [ 519.597724] do_syscall_64+0x1d5/0x640 [ 519.601616] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 519.606800] RIP: 0033:0x45d4d9 [ 519.609979] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:28:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) 19:28:02 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x101000, 0x3a) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 519.617688] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 519.624953] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 519.632217] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 519.639481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000053 [ 519.646745] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {{}, 0x0, 0x0, 0x84}], 0x30) 19:28:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r2, 0x0, 0x0) 19:28:02 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r4, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 19:28:02 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) getresgid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff8, 0x7, &(0x7f00000006c0)=[{&(0x7f00000001c0)="b75cf3ea5bc222295e235eeeba59c68821f2ee13af982cf2f87c66addd67a291e35b2f2a3c69a54e912aca01ac81f0374f566659d96800c96558b42890b82567cd913bd74e3508bf1ec1469eaa56aaab8bcc475de676e6dcf3f52ef2528210dcc4c218910d12edc0024bd9e6ab9bb95beca8810ef7e7cba76d7c4a604981bfa8b41d518d3c3c3dc300b8e27bd592649ccd32369f140007cd8cef0e3bd1f34e084d802fa343b3f50a4d7db989f284eb293c327385b553ec75d99c", 0xba, 0x100}, {&(0x7f0000000140)="0936995e9508fce50df38b0dc4013f6216ad882ec908af4af369a7496b06b76b60ee", 0x22, 0x6}, {&(0x7f0000000280)="5cce22e63d07d39ade49e10c46ed9a1816838b68", 0x14, 0x7}, {&(0x7f00000002c0)="44e6f8ad6f4dee2fa329434440bc5890da8754788b94b491fe4ef510579b8187822b70d9349fd002c4e1e4a2633a18afa3dff888c5696e3e54f0f517e8402ab40c5730742c563dc2a4b09feae1d063d19c7ca0dd613418a046a3c4d71a873e88b83eaa864e8248d146e1343ee8c649a8430c8ee9f96b56e0a13561248eaf45e42dceaebb738416782bd7d071ff3a108d47cb3668ea40f1b31f2d458af0c152ca28c581c42afbbed37a6bcc4873b12fa52aca4db261dbf93c82f974d5021aa7dc0c027979e731", 0xc6, 0x8}, {&(0x7f00000003c0)="65f62c194002dd56e9262fb59ee7bde0a860614216bc48abe7156b04b980b4daff06c2b4979b83074153aed3ae95143e0879aab11f1f8496c7334f6f22387536acddc37f1809ecfba2a9f1db526ed6c9e512d183acb940010530b979d4e725cc91ee65e940d7a9702d5709f9569e3ff5ca5a4c1ccb5668964eb87f1be244ff1951e00e2b68ccbd0ae38ef77900a38945a3f28d30bfda8f98bbfba1c23991d887b3b3308035a55863b525dab5a2115f7a516b97396ed68f967a5c8e30f89cbafef7b00f498583d74c2caa7d45bd12a7bf3542cfac0811d41241eb9d3fec75a37067a72fbd1df37317ad0c9b973d845e55859f", 0xf2, 0x3}, {&(0x7f00000004c0)="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", 0xfd, 0x6}, {&(0x7f00000005c0)="7c6c249f2de3fc365f9da0b3dd36898b4f0a3213cd121ef844c05ed9e01c44f3eb5d1e66bce985623a0cbfa49d6def4372c54924acd8f26ff54ff3d872b08a84ce5bd527341edb5ee4b1016fc7af775fdc2434716d02f1fdc8d65d025056ea668237a7a2fb23b2ce59540006b6660cdbd9952de3b455f2967aa394bf13545540e51b471988810a29140d2c59ed24ecdc15684098ea5d86b18ffc36b268494309dcce987d66983cff1011deb4ebee848f930fca596fb779cec5396b5406c5cdd7dd177a616d2476339a7e084f", 0xcc, 0x2f4}], 0x8000, &(0x7f0000000840)={[{@map_acorn='map=acorn'}, {@nocompress='nocompress'}, {@gid={'gid', 0x3d, r0}}], [{@dont_hash='dont_hash'}, {@audit='audit'}]}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000880)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x214400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x4000) 19:28:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000380)=""/143) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000440)={0x10001, 0x2, 0x0, [{0x4, 0x5c797e0b, 0x1, 0x1, 0x4, 0x81, 0x1}, {0x5, 0x0, 0x0, 0x7f, 0x8, 0x3, 0x5}]}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)={0x85, 0x6, 0x4, 0x8, 0x7f, {}, {0x5, 0xc, 0x2, 0x8c, 0x1, 0x20, "b5ac8b47"}, 0x6, 0x4, @planes=&(0x7f0000000100)={0x401, 0x3, @mem_offset=0x5, 0x9}, 0x9, 0x0, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000090601010000000000000000000000003801ef0500010000100000040007800000cf17b97f267da869ec552a426ecf7399cf551bfd70e671ba49b81f6b66c09c8594afa921a7328cc5b9f900000000000000"], 0x2c}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) dup3(r5, r6, 0x0) 19:28:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000080)=0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:03 executing program 1 (fault-call:4 fault-nth:84): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 520.052325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 520.076874] FAULT_INJECTION: forcing a failure. [ 520.076874] name failslab, interval 1, probability 0, space 0, times 0 [ 520.095066] CPU: 0 PID: 32429 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 520.102963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.112318] Call Trace: [ 520.114905] dump_stack+0x1b2/0x283 [ 520.118538] should_fail.cold+0x10a/0x154 [ 520.122687] should_failslab+0xd6/0x130 [ 520.126661] kmem_cache_alloc_trace+0x47/0x3d0 [ 520.131246] sctp_add_bind_addr+0x6c/0x350 [ 520.133440] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 520.135481] sctp_copy_local_addr_list+0x2ae/0x400 [ 520.135497] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 520.153722] sctp_bind_addr_copy+0xde/0x430 [ 520.158049] sctp_sendmsg+0x1c15/0x2cd0 [ 520.162031] ? sctp_id2assoc+0x210/0x210 [ 520.166087] ? rw_copy_check_uvector+0x175/0x2b0 [ 520.170840] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 520.173846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 520.175675] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 520.175698] ? selinux_socket_getpeername+0x260/0x260 [ 520.194171] ? dup_iter+0x240/0x240 [ 520.197803] ? kernel_recvmsg+0x210/0x210 [ 520.201947] inet_sendmsg+0x11a/0x4e0 [ 520.205744] ? security_socket_sendmsg+0x83/0xb0 [ 520.210495] ? inet_recvmsg+0x4d0/0x4d0 [ 520.214467] sock_sendmsg+0xb5/0x100 [ 520.218180] ___sys_sendmsg+0x6c8/0x800 [ 520.222153] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 520.226920] ? lock_downgrade+0x740/0x740 [ 520.231070] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 520.236170] ? __fget+0x1fe/0x360 [ 520.239623] ? lock_downgrade+0x740/0x740 [ 520.243860] ? __fget+0x225/0x360 [ 520.247310] ? __fdget+0x196/0x1f0 [ 520.250852] ? sockfd_lookup_light+0xb2/0x160 [ 520.255354] __sys_sendmsg+0xa3/0x120 [ 520.259153] ? SyS_shutdown+0x160/0x160 [ 520.263124] ? wait_for_completion_io+0x10/0x10 [ 520.267800] ? SyS_read+0x210/0x210 [ 520.271426] ? SyS_clock_settime+0x1a0/0x1a0 [ 520.275838] SyS_sendmsg+0x27/0x40 [ 520.279379] ? __sys_sendmsg+0x120/0x120 [ 520.283439] do_syscall_64+0x1d5/0x640 [ 520.287329] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 520.292516] RIP: 0033:0x45d4d9 [ 520.295696] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:28:03 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000906019c6faabdf4b2ced9ca41ab4aa1b597fd000000000000000000000500010006000000040007800900020073797a3000000000"], 0x2c}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chmod(&(0x7f0000000080)='./file0\x00', 0x10) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:03 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x80, 0x6, 0x7fffffff, 0x1}) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f00000001c0)=""/211, &(0x7f0000000100)=0xd3) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x1c, 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) [ 520.303399] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 520.310660] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 520.310886] audit: type=1804 audit(1597865283.201:22): pid=32438 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1033/bus" dev="sda1" ino=15891 res=1 [ 520.317917] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 19:28:03 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x3, r2}) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_wait(r4, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x2) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) [ 520.317924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000054 [ 520.317929] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$addseals(r2, 0x409, 0xb) 19:28:03 executing program 1 (fault-call:4 fault-nth:85): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 520.407369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 520.484019] audit: type=1804 audit(1597865283.592:23): pid=32451 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1034/bus" dev="sda1" ino=15891 res=1 [ 520.522320] FAULT_INJECTION: forcing a failure. [ 520.522320] name failslab, interval 1, probability 0, space 0, times 0 [ 520.564146] CPU: 1 PID: 32455 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 520.572186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.581538] Call Trace: [ 520.584131] dump_stack+0x1b2/0x283 [ 520.587764] should_fail.cold+0x10a/0x154 [ 520.591923] should_failslab+0xd6/0x130 [ 520.595903] kmem_cache_alloc_trace+0x47/0x3d0 [ 520.600493] sctp_add_bind_addr+0x6c/0x350 [ 520.604734] sctp_copy_local_addr_list+0x2ae/0x400 [ 520.609681] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 520.614451] sctp_bind_addr_copy+0xde/0x430 [ 520.618784] sctp_sendmsg+0x1c15/0x2cd0 [ 520.622771] ? sctp_id2assoc+0x210/0x210 [ 520.626846] ? rw_copy_check_uvector+0x127/0x2b0 [ 520.631609] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 520.636460] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 520.641230] ? selinux_socket_getpeername+0x260/0x260 [ 520.646418] ? dup_iter+0x240/0x240 [ 520.650053] ? kernel_recvmsg+0x210/0x210 [ 520.654202] inet_sendmsg+0x11a/0x4e0 [ 520.658000] ? security_socket_sendmsg+0x83/0xb0 [ 520.662756] ? inet_recvmsg+0x4d0/0x4d0 [ 520.666741] sock_sendmsg+0xb5/0x100 [ 520.670456] ___sys_sendmsg+0x6c8/0x800 [ 520.674431] ? get_pid_task+0x91/0x130 [ 520.678319] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 520.683107] ? lock_downgrade+0x740/0x740 [ 520.687257] ? retint_kernel+0x2d/0x2d [ 520.691145] ? __fget+0x1fe/0x360 [ 520.694601] ? lock_acquire+0x170/0x3f0 [ 520.698574] ? lock_downgrade+0x740/0x740 [ 520.702724] ? __fget+0x225/0x360 [ 520.706179] ? __fdget+0x196/0x1f0 [ 520.709719] ? sockfd_lookup_light+0xb2/0x160 [ 520.714211] __sys_sendmsg+0xa3/0x120 [ 520.718012] ? SyS_shutdown+0x160/0x160 [ 520.721987] ? wait_for_completion_io+0x10/0x10 [ 520.726664] ? SyS_read+0x210/0x210 [ 520.730289] ? SyS_clock_settime+0x1a0/0x1a0 [ 520.734697] SyS_sendmsg+0x27/0x40 [ 520.738231] ? __sys_sendmsg+0x120/0x120 [ 520.742293] do_syscall_64+0x1d5/0x640 [ 520.746187] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 520.751367] RIP: 0033:0x45d4d9 [ 520.754535] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:28:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2b5417bfe0e64f3f8b65e2a997eef8e94631c866b08d41ae551eeb804dc1519d2c77a250d754d2216273a5ae362c90e933", 0x31}], 0x1, &(0x7f0000000300)=[{0x40, 0x110, 0x5, "b59da7331d6dec3a15f589c0e96912a6c6b93477e129c0e3798ecda22ba285a10722a3c9859d34418fd1ea"}, {0x1010, 0x110, 0xf160ca80, "5708e5f174783111ae51ba8230587d37c8a80fdac6fe82066d76884c28a6a9c83390c4b7a555761f18a49932bead8838acb0e1248fda6de5ddae75addf39b6529f411dc5d1ebc963fd43306a25254d6205cd069a19ad7009e6c78ccdfc0def95d048b952e85b5afda544c38b46eac96f3dcffea0be4f3dd0961070217de472edaca20a2b215e54f8fa1aae269309096d651228bd5b46f449ba0d61915e7b7bb72c6c705b4eb3cc14bf5ea20d04746b729a94bde7412e9cbaf8cfb090ce5e5f15ed40a7c3fa8fa74c8c4d1e521e07c04bc3718f7a4f435a187a72cf54f6efc4cb531faf072758b941ba20b7f430f705db5f0226b783ff2ed868f6a84194bb6e41b497bf3e291950f544bc65fb896b052ee7ac0e586fb8182d612be0d0e6d31997c33626bb53385475a9555ef16adb1d0c417f758f6a5722950d75cc193e6f8745d2ecd8b0356d0bca83aeb9c4890e55a51fdfe51693c7f80e28faf4dba8cc7bfe45ad41bb9f09e1c111551bdad1b68cf074fb109bb325005e6066eb91f5b028b02cc13fdb546edc7936d8a04ebf5b6386e50eb585b5c5d64b0a6266e1f37ca8ff15f9dd01b5461eab0324ec1cdf463b4558aa7b5edbef68496e2c5ba4095ba171963740460b19d3526c0c723012bba1cdfb6819f8c47ec40809a74787cb2053cc761456e030806fae303953b5a3367b29aefdb69d00119feb0a21d14535de4c23c6df4fe809202ba67ab8cefd14b51ee2e763ceebcf124d1e10bd25c427d0d39f47840d3a0e0d5f4b4ace181ae6dc5dd9802d49cd820c6ccc57d216426bf9a9c038e30416968cfbec1baaaa0ea91059868c035ee453f1d8dad5e2b53b69b06facae04d0598ec4d9a660e27d2434250343a6558707b921104f379aa143807a7fbf8038b3b6f02a451902fa99aa3e7de8d5610ee5ceb6c153ba28ac85808875ae03c703d386707f28d38f3acc8c0741dfaecc1b93f7ae254f04738ff1e92acfdc0c8d12fc64b935ec0e8e32b7a28ed2cbdf4194d7fe9549e96963dc2eef1584a84e6f06933a571977bf22b7ceda90d48eb9de9ed1b22725c92abc91cbb1311feea7951e580451cc255f49ad2ed5b9a150e7b884c69116a5db23762b499c5b74ca0b228f26c87b775ed96b2e0f44cce71c9710d7ff5c7e6826dabd1a230f0aaaa8b1f82f3571263c4e27ed0ec7463970d408c25f9b8815c56564e2c3ec3ec917520e1d4b4287fda3e61c973bdd3fa66ede5758bc5d4012a7f23ad140b264f84dbcc77acd11db400e97b9a4968b0c1f9e87c03ef6c71d0e13c0538fce13d819c6c3bbc139be1a3bc18bd769e1700f8edd1bcde2ac19674e698d50ce84167558823f245b0ed6320090e761598f69c29fb6c050089eadaf8aba934d757ac3ad52b783f7a080702c6c72c32041042aed4a780a8e5c258b48ff2e6581218998c25739d4a3b2bca086f945d1cd4ea8aeabf76d644652117c34f3b916948ca55137315b12e71ef8cbd2aae9f84730e85c5b58fd41c6733b88ea473f7f6780b3b5db651fb492ab67b72fddee17561311cfc64585d357aeaecd3582c6275848be53fc2586949be81147a4a9416bdf1db1c001f4e7fa3a71eb36119a4ac2f6dabdff040f7a0d26dc66f76b4e72f23d09e95b994055273df5c39b93e8acdaee8cbbd8f705c95ec0a4430c5eaa0affdbfe3addbde8734c4fbe201d120c139c61b91e1dd9bffe89c9d2b305a82c270fee324ba84b9a5cc6e67ae3168f5411df1efbfbd2ea3d1e764188bb559edad0d396470e24022a3b8ce406864f27edc02decccc784b263f87bd2912facfbc72801f4bcee169f0336e8a0bf46b34eac4949445c4091d87bd479f2594e76366adfc8a4c64347e00afc3a547cf6f7611c94535b235ed771e0004bb1cc0776df03beffa11f4f8d46b0f4d993317d19df54a718d4e8dfc300e6332c697507b31e01a725710576940d9e756d4c20afa25e4a8465e20b664d1c75bff31cc997b4b288f8242e25ea02cbec2b121efddbc375d4744cb0572cf96543e9061f6c2a35c2cf37d3c7fd53021268dad221203fcc22230f6ee29feb78a7d53b816a9a01a81bb5f330339c965dc4489e55e28630f4184f1e62e12ee5afa198562441b48bbe569decca84b58707f289c5dfb53750d864b19a2363655be63ec8edf64e1ec5a18ae9799796cd3dd7128f7ec65e7eab96fa655578cf78d3636e22435b43ae9578b4de93aaa3d4c603318f3b24819107fe00f1fd2d3d1e8af199978df4dbd5ec2263d4dfb4955f4d4c22eaeb8fa7d7574f760d6840212bb711e48084988b4fd10312242674677c968bbb6d4a7a7e7af23ba7d8173cb11657aec569b05c8c45eb814d4843cc95ca67c2a51ab78566585181fcf20760a5e1dbc568eba1bebe85b50ba063ebcb60c127f33eea1640b4ce395fb788f78f1b8651502798fc75ba3267e475638fef8c9360ec6d8ecf75f256d112426678ea0af09c9b6d3f55c531487d9c428a415c6bcb8a7ef0f6bf9419054f1fa70278da563f8e7e0cbbe78583f944af826eb076229d4218cfb1143db56e3bd7ae9e85db51b5eb179610194899128453c2227443ab1b211efecbe92ad527c525cdc5beb2a59ea7b1414f067cad3ce6a5d8d1c594744b428c1cd52472fa622414102401cb815de300af1a66bd21d68353179e0f5dfc104157141b682457d10320af5c6e6ad1a80e6e068fe73cd3cdf129a587a0bc02f55d38b8c2a305d9823c4d9ee29b9eeff4a2d9a2a66568526dce3185bbf1a97ff46f22755cc434ef3b9f9460487cbfb3408428d9711780b6bc8258615fae6895921b5fee9c06489669d5c62ffac871faf2e07d622c81ec3e8a0a839b3b8aa610f5f26888995174c20c0bf370b7d6f2b397c4efc1d9fcdf00443a11eeded63fd8a941a0e6e68d08a5c3c567d392dd92150d16e9ed0a337ed8b616578da1ceb878e812b05f3566fbcec9079ca2e185567290cac2b654ef2bde61e61bc2b99042672ca5993a062ebbb4fd154a5672f428f9d032815409cb7290c003affd89bb9799be34f68f2ee1c53ccc6d7eb86d16dfd6cf73b07a5876acd3ec4ab8ff4306113f98ab40fe42b368cddaccf21aa3b4deda8de6f7d046b67fdac6a4a0217d9631fe3d41c4c38d350d3fa9bd443eeefb12d5370554a3faf45084c13fb2b986bce33c49cb3f9623eb96fba8f82931789b607eed40e0c89ef9928d82eb230e72c65e3c62b4869719b1e844900c0775a39b2f88ecba5a5329570ff97817ab575c8236b4db8a02d9d81ab1ae3aa4f19ae66ef2c62af96839e25c483b0da73bca62816a2576fa8378bd8025d5aac959bd058cd9a9148380efb4fa97434c654927e43df021fd0ebbb976e809302e808d1d3b94e782f6abb154228cb2b5f9ad98b907e917c53ce90132694781e1cc98b14d82650c4d85d5cb07a9767bd7c01f2fa12db1c1faf7ed727b64824bd39811187dbdf5acb0e649ed9004be60a5b47fa4c3df3729291d1902ccf4b8b1e1ffdab5c42249178ee13df0df294a56e3c3fdd5e34e4cf822168f1a6f0c1e4c2287e1ef0e27f18e8c4bb8d2ce7d60bf63ecd29db0d1349e56db25f8a36ca4d215c9cf8905a910b653de3b572dfd82035613c191c2674c1b24f70e30b7185d474b980d77f3d31c357638036374f158d06e30930551484e0484e189e805402bf2b111d4d63693d47b5c06f35caffaa9beb0e02e649448ac9cce9c7c0c194129bda34f40d501fdd6f187e6ecd094b555e94e6a3f6f6bf47a6d90c3969298e22b32757b60802a979afe24db26d60b65e81f37f72325531c3bddf5603534006da44444de5dc21026842452c5baa4c76b8f60adb9b4d4d20dff5dd8567f83f3bfc0735ebbffd617b80831f95b9e6e0c98674871e5aed73e7fbae3d6c3d8cd1fc0ee86235041b542fa2d22c896c70972e5b8f2386d3fe13214393026378bb71482e62d992fdeed4164b00f2b3cd3f53e59ec7e99ba69f0079cdb0ff395a2ffe4630ac2ad14580080be7a2152294bb22aac68e2098a4bc6feb0b7587f42789986608754796659c47eeca8ccf1c4c25287ffd2b9759d35e248fdf210de118d8b7661e3ed4fbce7a4073078348889f6d03571502235bbfa973283348acc12e9c6a9ae670324f25cda55d9e641978a2cd074f42a66401cb62ae3ac01bf751f5e9e948b8bbdc90051e12bdff5e4f279e024e9fa04e891aa2885a64e16a5216180731aaf74bf8e2e46d20f67f581538408d4a68071756c0b54b9de00cfcd6de25dd1d8531948140997fc5aa48c0768ab8fdf76953bc6474380e3e3f3bc2719b608426ef4318c8b4a86bd9e27c0ea166f251bbbd3e28ce219d4a1cd798dda2d453f9feaf70acd7e736f2e1351b46af0308681292fbaee85aae93b4eccb79d38e244bbbe49f88b6aeb7959eeef3e43a438144717e71fea404b040996b38bfea817bd65be2bd2e78344273a8c59b346ee1968ba88f8653900104eaa0b544c9c2c97baaee893b99cbb4333ee6b4eb9abc3d0755db7027fd533b7f8ae22a3dd6a2220723210a0e7dc7814f3edbeb7285ec6687c0e993d4a3c9df765e629d77cc4806f85fa6512b8a837d18029837d3f9e8c0d3114297099c32ace9db2c68ad48545ea16a0b6d1b2e6f0cc8b7f5178fff4a993b96837c1735140382fea18958181679de08f4d1ada80a5a505910967180eecd45acfadfd54de453f1e58cb9e85994096f319da7c464047e1f0ec5ad5aa8736ccb44c38523f7cb32c4aaeadcd348b2dc9fea54218b6dd3fc7602c357bee7f34ffecb6a0763c30f8a9ccac6e281f657b2fef28c9fd14b81a1f38456e46c3b73b7b0dfbbeaaaa6ba1ec352ed76768a6db91184d1d92bb134d5810ce6885769fc67849e55a5176c327060a319f23a639ee3c6afcbd3e56f83c8d7c779bcb70cf2fe572fa32e3595c79adf63ceab0c8066f53f4f26f7c2a99f8859b6c17a20c044d773fbb6cb635ed643269b2adb7070cb175d4dbc39073beb587a8f38caccb6c1072ba8b95e137f203a7f76e2b5338741308324df4c37f3d5291195aca0e7974fa48c2c98a52036b2bce2aabdf200d396f6d47757f22bde30c8c112ebfc020d81d486a99994cf1b24b9c9aceed29a3186a939d8ca0519a54864a28a5523ad59c36bca9743a7edefd20bfaa441ff2a308363c425aabd202c77a7e676bd42f1236d5a04babfbab89f6d2efc105bffc20f0fc7b1bf7f2c97828de111b48808cd159d76112427cd78140bd36945f9b2022ae810a33072f52dce0aea160f821de674b72028381e3dc2997434097122a26ca18e6ec4a312504cbdca0a1e882959df7b720d80e7cebd5b52baa462fa7c0633f399b0825284f2553f1319721d5006763cbdc27d28bdd4366a776ae35cb976a16ee8c83a4cb2b7cbdb006f694b52654b1fedd8f16cb8b3fff1d34b778433246d2fae3804228dc43fa3a3dabf8ad291ebf9947a18270e519e5e7b1aa3fd7b9944665c233e8216a4b32e27fd71bec46ec1d4cac24fbd54d14a3db8db535403ad3bc3d3a174cf68f15ff84a22550b4ab380090dc910cf057ffb1480699d7330959c852ccc8b9262842ecd1d8c2db1bda6a8456bcb0c8534932452b5429bfc816b417ff22d607555a32b5c0071e63cada8aa056ae6dc1d47e6b83d5897b4dce204043e27a612b4c7ef89544b67c860658eddd0694f3e809dccf706dc9d6d0bfeafe44d24839262b0fa6e80384bb15982c370206b2e5ed7f79c5e87af73bc9c0f8a7a0510746238fca333ba335f225d097073945d3ff7dd6af85d9375d"}, {0x58, 0x10c, 0x101, "b6d9f7a2d0248fe63f4b2071223bafdf11305f6ca65ea565312a700f1b7c460159d89b6f5a9ecb83850057d87dbe7e02a23e35897646473f7f613154df72f098cc51f66da60fff4f"}, {0x90, 0x114, 0x6, "2a52cdd12fd4b97170fd24068c1315e3bdd418c897f32932e69a376253721af4386d7391c8447e82efe95a3c69a5e487cb767dce1103eb514ebbcc4b41d33830d67fb26282bc7d92d693f1c76ca68033fe54f1e621fd32771883c60d26f808ef68337782450279deda82afebdbd255f84f7ee41e504cbb571c345b7ba20390e7"}], 0x1138}, 0x40) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:03 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x81000, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r3}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r3, 0x5}, 0x8) 19:28:03 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0xffffffff, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000240)={r3, 0x64}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0x0, r3}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x7}, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r4, 0x0, 0xfc) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000000)={0x2c, 0x4, 0x0, {0x5, 0x1, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) 19:28:03 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x600000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/163}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, &(0x7f0000000600)={0x5, 0xa, 0x2, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendfile(r2, r5, 0x0, 0x4000000000010046) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000680)={0x8, "1ebf31229ae2b26373df4fc512a76f7dbcc0ac086e730a535b895b901f4a2f7b", 0x2, 0x8, 0x7ff, 0x4, 0x4, 0x1, 0x5, 0x1}) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @period={0x5a, 0x1, 0x3ff, 0x9, 0x8, {0x1, 0xf801, 0x0, 0x200}, 0x9, &(0x7f0000000100)=[0x7fe, 0x8, 0x9, 0x1, 0x3f, 0x8, 0x3, 0xfffd, 0x9]}}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 520.762219] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 520.778235] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 520.785483] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 520.792732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000055 [ 520.800065] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/7, 0x7}], 0x4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40602, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000280)) bind$rxrpc(r4, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:04 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000000)={0xd2, {{0xa, 0x4e23, 0xadb5, @remote, 0x2}}}, 0x88) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 19:28:04 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4601fc06f9080000000000000002003d0002000000df0100003800000030030000ff7f0000ff0320000200060001000000000000000400000004000014e13ff40007000000810400001f00000081000000080000000011a485712ad79357377d1b2c5650bc00"/1896], 0x768) open(&(0x7f0000000180)='./bus\x00', 0x101400, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 19:28:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000080)={0x1d, 0x3, 0x81}) 19:28:04 executing program 1 (fault-call:4 fault-nth:86): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:04 executing program 2: open(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x82) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r2, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf91b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x20000090) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000080)={0x9, 0xd, 0xfffffffc, 0x8000006, 0x3f, 0x3}) 19:28:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000090601dc00000000000004000004002780f6ff8f000000e618a581a56a4a84cce10000000000004000000000000000"], 0x2c}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x2) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x40, 0x4) [ 520.997152] FAULT_INJECTION: forcing a failure. [ 520.997152] name failslab, interval 1, probability 0, space 0, times 0 [ 521.037613] CPU: 0 PID: 32489 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 521.045648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.045652] Call Trace: [ 521.045669] dump_stack+0x1b2/0x283 [ 521.061221] should_fail.cold+0x10a/0x154 [ 521.062964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 521.065373] should_failslab+0xd6/0x130 [ 521.065385] kmem_cache_alloc_trace+0x47/0x3d0 [ 521.065400] sctp_add_bind_addr+0x6c/0x350 19:28:04 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0xa1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xc0400, 0x0) 19:28:04 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x11000, 0x2) sendto$inet6(r0, &(0x7f0000000240)="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", 0x1000, 0x10, &(0x7f0000001240)={0xa, 0x4e24, 0xfffeffff, @dev={0xfe, 0x80, [], 0x30}, 0x8e7}, 0x1c) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f00000001c0)=[{0x40, 0x80, 0x4, 0xb0, @time={0x8, 0x401}, {0x9}, {0x7, 0x81}, @raw8={"9181fa07a1aa4fc8060c8afd"}}, {0x81, 0x3, 0x6, 0x0, @time={0xffffffff, 0x8}, {0x3, 0x80}, {0x80, 0x8}, @ext={0x9d, &(0x7f0000000080)="d9c8efa0b88cc480d2fa90ac30830ec694faec091027a7649c9e55b4513606b5959af005e745f0e0e96aa069980e55d483db1c185bb3ed25c685e1c6f180d4893b39c7bf6e895de8fba5d8a2a093dd07225dc0544ca5a2b2df413945894db7b73c285a4efb64c09422552098e0ea5e1b542d82352448d2bd2c1f44fc58197950e51f3bedb388c32f2a61392704da1dbd6af9cf52bd3b05cbef3565a1e9"}}, {0x1, 0x50, 0x7, 0xd0, @time={0x0, 0x8}, {0x92, 0x7f}, {0x4, 0x7}, @note={0x5, 0xbf, 0x2, 0x7, 0x80000000}}], 0x54) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) [ 521.065414] sctp_copy_local_addr_list+0x2ae/0x400 [ 521.091678] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 521.096445] sctp_bind_addr_copy+0xde/0x430 [ 521.100772] sctp_sendmsg+0x1c15/0x2cd0 [ 521.104757] ? sctp_id2assoc+0x210/0x210 [ 521.108820] ? __sanitizer_cov_trace_pc+0x29/0x50 [ 521.113666] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 521.118439] ? trace_hardirqs_on_caller+0x3a8/0x580 19:28:04 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket(0x29, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'hsr0\x00', {0x2, 0x4e22, @broadcast}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000090601010000000000000000000000000500010006000000042007800900020073797a3000000000"], 0x2c}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10800, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r6, 0x8004510a, &(0x7f0000000100)) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000001591e96f8000210000", @ANYRES32=r4], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r4, 0x4, 0x0, 0x677d}, 0x10) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000380)={0x2, 0x9, 0x1, 0x4000}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) sendmsg$nl_generic(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x41, 0x3d, 0x100, 0x70bd22, 0x25dfdbfd, {0x11}, [@nested={0xc, 0x50, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48810}, 0x0) [ 521.122598] audit: type=1804 audit(1597865284.152:24): pid=32505 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1039/bus" dev="sda1" ino=15959 res=1 [ 521.123462] ? selinux_socket_getpeername+0x260/0x260 [ 521.123476] ? check_preemption_disabled+0x35/0x240 [ 521.123490] ? retint_kernel+0x2d/0x2d [ 521.161137] inet_sendmsg+0x11a/0x4e0 [ 521.164937] ? security_socket_sendmsg+0x83/0xb0 [ 521.169694] ? inet_recvmsg+0x4d0/0x4d0 [ 521.173673] sock_sendmsg+0xb5/0x100 [ 521.177388] ___sys_sendmsg+0x6c8/0x800 [ 521.181368] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 521.186122] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 521.191138] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 521.195898] ? check_preemption_disabled+0x35/0x240 [ 521.200917] ? retint_kernel+0x2d/0x2d [ 521.204807] ? __fget+0x1fe/0x360 [ 521.208264] ? lock_acquire+0x170/0x3f0 [ 521.212247] ? lock_downgrade+0x740/0x740 [ 521.216416] ? __fget+0x225/0x360 [ 521.219872] ? __fdget+0x196/0x1f0 [ 521.223415] ? sockfd_lookup_light+0xb2/0x160 [ 521.227682] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.227909] __sys_sendmsg+0xa3/0x120 [ 521.241828] ? SyS_shutdown+0x160/0x160 [ 521.245803] ? wait_for_completion_io+0x10/0x10 [ 521.250478] ? SyS_read+0x210/0x210 [ 521.254108] ? SyS_clock_settime+0x1a0/0x1a0 [ 521.258515] SyS_sendmsg+0x27/0x40 [ 521.262048] ? __sys_sendmsg+0x120/0x120 [ 521.266111] do_syscall_64+0x1d5/0x640 [ 521.270005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 521.275190] RIP: 0033:0x45d4d9 [ 521.278383] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:28:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="200000000000000084000319319a0002000000000005020000000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x4004001) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r7}}], 0x20}], 0x1, 0x4004001) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000140)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="5ed7776005e009997c68485efb25f0b4fac3341d45be3b41993e54de13e207d47dd8da2f3a6fd47ffd9381f1a1fb7e863a4b5908e88b53207d7d13c63e201baceeb702df742fcfab541ea7465c498b52a9a27b4bff889d6626b9892314ef740788042d33fd42ad6aaea22500621b22296006e5fa6cba8721852d8108d8d0656eb4d25c44abd7111971cb8f084f37051e0e235d12201a17092c2449ce", 0x9c}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0xfff, 0x6, 0x202, 0x6d1, 0x7ff, 0xfffffff8, 0xfffffc00, 0x1f}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x17, 0xc, 0x3ff, 0x942b}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}], 0xb0}, {&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x1b}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000440)="0cf1146fe9f0b39539f2f931709ae0e49fa18cac08077da2e362f57d4b6ea430ca9c1d5d961a20891547daec06a368f7fe5a25c70105074890bb1760d837df38ff513fa6dca682977a5d92d4299b8f02ff5eda478048b61410a87a84671ea56f3f53fe538c49e7ce6bd17e68b5643a8d277e9edb3576247bdadc02a5fa541711fc3d4a570ea622ca8b90d7fe7ceb8e7ea7e8fa5add3765dc332a63eb0bbe3343fc37e486eadb31d81c84b41a0af3e15d879d1ce4e8cbf450b7207063531de9883b07d60af47b9e6ea520c8f7bbe0cd2a70fbbf7f2e41ba4383508808f84d88bf9b6d992e7489e0b3e6e6510f46d431d7fc", 0xf1}, {&(0x7f0000000540)="0999baebf17fa1ff1a0713535bfa57831c1f5b365c75c1723da3040f98b4852f2e71cdd7074298510c2947c12c42ba9efd8791d44c154e15cc4ef51b91ccf9f7dc00363a92b4ac93816b9fd26368a9629fa214550f7227232fe358d1eaa5753beee143952a3dd87fa42f140ddd728452abec", 0x72}, {&(0x7f00000005c0)="e87f2afc6a9e8b8fa71a4e1980b8087e34b1527745560ce9b75e4590522a2808f9546c543da47c95e293b05a63b415aaa8b8e95710c2d53ef11058c7413a4ff0be0adcd8566d5e70413b9006a752983358464bd1a69b53c6b72b3b0717de5b50eb9733880c6e5c7023c1f19194592a8629d4e69e8035c428f61277ad61d37f016aeafebf2a8ae4f335eb352b53cc024406a6fed49c3683b266e812180e994238e47e3f439ac382ffd50786c472ae3fc4d46645f9cb5d186bf3738f40c44e5c2c81e55fe4b39ea774c8daa54bf8d0e2f597564256377fa2e622c3fb0ead158123fadc318984bea0fbedb4", 0xea}, {&(0x7f00000006c0)="a06fbdccc6abeb94d564c3ff155f2ca2767c88246e481a8414b4ae691e8c5a298ed89ce065cb98a19b6928ad05b1693a09cd4f5820b7f6e03c55660e7e604a979abae3205a2da33475a4ced4897056dcfb2e723c7ce184e713c233183891a07e564bf86a4372fa7ec5acb26e95c7d9ed76bd69b1c0fbaf0b33c2d1659261b12c92b838529092879f1e6a9aba7bd098b45fe4bb5d2851d12dffddad2251f0ae123e07a96556f5bcf26e861cd8bbd5115d2ce886f821b1f2b6fabd21ce4ad1dd0c5e5163a848d15d2d22ff89d6e0fc0262e1535f8dcc2225c6f6", 0xd9}, {&(0x7f00000007c0)="73a1d1fb08d2acb48adead6d7339140df74e2e2cabb6c847a79d16880e7b16c394cc94c9980601c4faf738", 0x2b}], 0x5, &(0x7f0000000880), 0x0, 0x20000000}, {&(0x7f00000008c0)=@in6={0xa, 0x4e20, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3ff}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000900)="eeeaf532198ebc2c3522a4e1b19f759c82fbeca22395b39fbd10701d035fecaa2d0a438a10fb06604a440f78529a72256b4abc211098f4f035b76be47d95b8403378953fdd990a5554ccbdaf4891f5f5f21a04384105181d7930aa22b3dc549ab28dbfe4cf2c1cb34d2e6ad5344dc9098d73467f6293033dcebe7a1932e9622ec5b4412f4b2951dfc85768c17d63f56040cd43f2588d09c0754d0952e8bb68af3cfbdbd0decb8992224ac871905b8d677d34736ba25b8b1ec527a22002a57a0a3c97b349093751666f004322a2fa2ff0bd6f467b394d0bc1e1ffd5", 0xdb}, {&(0x7f0000000a00)="0bd1eb7f043d91fc1ed8efa3d9354382ead4d24ac338cfac070f618bd870081f55a5ffa580592f1009ba0ad10e53", 0x2e}, {&(0x7f0000000a40)="f373452c4c699831a34ef81db38ec72199975f2c7526e136ae8d71c6c0f7a4cea977f3b52e1ee660c95f5fa33c1ac817fa4ada93d6a5254ca3595344c60d0c6d552099432ee078023202597d26e9525f444e13d2fa187e5a7f2bf891f5ba4e9738bb0dba621845d1eb88d69fc1b12f7b3c460a54cb6775563656074f1a9888345a9808263cad11d6034d5d1f41aff4215e1201c9f2fe8c50db2507aebb7f7b74a002cc8d6370fc36244d9e1b6025f04048c4a6864498a13838411617513240ac246f928c703c78be6e3e2ad655", 0xcd}, {&(0x7f0000000b40)="b5e9de213832330a2c8f2cd0b3b838806f7a3351616ab4fba8aecf9fdb9724d64a629e6ce9ffc57b1c3ad42ca96c11f1025a89842dc6a24a1ec801203c80c09c963b1ae243d478144767e3c4b27c27cd235e91576511fffad200fe429a6c07a1b328b5f7041dc25479128fa374359346d71bbf550539ec66430c617059b10be75c3f16cc5cbc9da53754a73a2fc65fefe2403ab5f58fcb1e178f9c169454a6f8c542fe97cb5e1ea51b30984ef15c2455e787032b65635c668beec2ebccb050c968d22e4704d5b8662bcf0b0d68d3a4e9147916390af816a9ca0ccf2a6298d316262dc1", 0xe3}, {&(0x7f0000000c40)="8db08352b7734fadeff9cdbb0b26e8d89cdf07f6bc2f4a3a956f71d8b1c2d8998d5786c6a7ec54b9752f24832cd179c63bf4807a997fb96f20e8bc6b56032f2df3461ef276403037248b547fd5090f448ae44043ddf42f4fe61b2d990dd38e651809b91e0c24c237afb1590682961c90df3af6473c909ee188f9b8a262cee86230d7e975da33851d57dc73feecedc6", 0x8f}, {&(0x7f0000000d00)="b504eaffab938b39467c9b19851642a770151bb5853f7fff5aa16c6236f4ee40f32f725ac9f6e8f886416dafdcd6c67aab89565c0d3823506fb9f82cb6b1bfe8057bd3d469ba731e9fc21ad9d18ab0ffbfdf3388f9d81ea5e902165c277cd8eb68844d32f6ba32e937274b1052885295d4c29dc5e4b02f0bd134e724caa26179385af179257f292b40d80fd68d5d2fd2360e45d7c8d26ef0077affed70e97091a5e4e5e99b48dad341254c1fcf05171719882955fe34e3c1ea89f9b9742b631793bc0ed76620776c50fa051aa2b17dc325", 0xd1}, {&(0x7f0000000e00)="2770fb0b8bc0267d0f06248748e4f461a4921a649a3828bac8509b0cca2318ef49d761f873ecf3c3389c5ed885b9", 0x2e}, {&(0x7f0000000e40)="a9f4a13e116ad5ec8b2c410c8931946bbd848e94d001c9e02760616f7235583546db163a7584af36af0935a7d7f425d7f1c40b561898d2c1dbd1987baacbf0c915dad67825b0fc4a780538fa941f4809fd004a3a5f182013bdf1f40c214f8d3a04c07ae500ce7219c421103f0fbf7df955a9142972dd41a01ea66a2570d8321a8ba9f54ecfcbb382e9487da9d0a9e2d549d411b34303753ae9c3bac1f9fa1287189bd7c335c103c3284f9b60b0f14dbc4032ef4d585e5617e5aee124e9b28bedd24a0aefab3b564901dc", 0xca}], 0x8, &(0x7f0000000fc0)=[@sndrcv={0x30, 0x84, 0x1, {0x24, 0xfff, 0x0, 0x1000, 0x1000, 0x9, 0x4, 0x80000000}}, @sndinfo={0x20, 0x84, 0x2, {0x400, 0x10, 0x1bd4, 0x1f}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x1, 0x0, 0x5, 0x8, 0x4d2fc671, 0xff, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x3ff, 0x8002, 0xd55, 0x800}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0x1, 0x0, 0x1000, 0x3}}], 0x100, 0x24008085}, {&(0x7f00000010c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001100)="3f75df4b597fbdb722385020449c4f4217a7555e16a003b91b085c808b23c3de488a119ef3c9340e96", 0x29}, {&(0x7f0000001140)="180b206a47d8107e1fba3375ac0c0afb889df5a222a9f8a682074d1f7f5abea76cabd4381ac33df20321d7ea3435396297f5b06f523991eff3466f49638b4442dc09ddfdd757be920c32829eac3daa837dbc3bd49560c8d1641d82ed246fdef91ca3564cb7ddb2fecf5315221706f617f7077695b44c2fca78a18d46dee5e5dbeb8ae06eefdd1ffe1bf069bb90", 0x8d}, {&(0x7f0000001200)="330bc674afe4997d4a274675d808cd093db4a9ed0f6d4821d0e2feb935260166f68eb74018200dd046d2d7521390846f557a116bd04c6eceb5b462ea", 0x3c}, {&(0x7f0000001240)="9e4e", 0x2}, {&(0x7f0000001280)="add64a5ee7d524672223d1b9ffaa8f3538f78758d331ed5cc445b9a5e4e59a2a55424a3c68ca5c7f9ac3d8022793748955a8f0adc15274c2f788886c8fe9e8ab17fc046afe374181c058cb806cdb08acda0fbec6eb2a43e6dd4ea554eedf34817a1bfd6ac9188c6b6b0e6e732cebe4f9738a0cacb55a60e0ba723da1388cf69c611eedfc62b7ebf53faca66365248a99c1c2be91ea1594a724dfa9fb96a14376e2fd840513f2992d6bfe7f240f8955bac6b048bc593a989b0afcfedc", 0xbc}], 0x5, 0x0, 0x0, 0x880}, {&(0x7f00000013c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001400)="56d8b0e1e71aad910f2152b5d604526146f3b60304fa7b171e3636fcb9a4c422589f115f0adde8e927a5d51d1be7d7", 0x2f}, {&(0x7f0000001440)="b9cd247106a2d71af6b7af44a326b598b2c75b8ff5c4f76369d55f0cb260798af53dbd70409194e584d6dcb73d9f9003d2b73ae37881164ce9fdeb6f39c45ca7", 0x40}, {&(0x7f0000001480)="6540e8d2aca6a2fba519f2b96dc96de3c0d5d1a0eb054822ba5b1746a9e2651f2d6ee9f03d224b28cf7a130acdd2a774c78ff997f0c92c838529ff76e968f683a2ff55ac59f63d74729c0db7962d970249a72f005bc6ad42b968409938341302e28616a76bd95d3a20ef8727ebdccd62a5611719c0f8a8f358a03b03c884fb274f3fdbe62dec0ef213eea685ce1de85755a97555fd6f8b458c05d54dd8c6d450c514ca35656e0993880322b45b", 0xad}, {&(0x7f0000001540)="fb11721f95cbea48e96f", 0xa}, {&(0x7f0000001580)="e5f044efb9d4730714c5fa3be6f2ce37fc49df2bad3aae9d8fa59b48c1ee4efc0d8bcf29993279a0517843a72e834277432b63bed736204c269cf6ea8784716755e547be52cefc27b8ba4a5a3dee78be91a557b0048e585a685378460400c7ded5eb90b579d47b30203d3fa9132e493305a6aad9d352ce8b68788e730ce2de674c6d6a4ccab68c0b7a1fd57332ea52eaac607f0b0e8f3f94050d3979dc9a44f817edf0ceca130a0908a1bd0180536bdd1f1261a73675f6dcec5478378ab9a0b35647dcd1188e02feb96b320005559564a93f6d64f07767dcca4e2ce00f515d70c35c94feb80f", 0xe6}], 0x5, &(0x7f0000001700)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x7, 0x0, 0x3f, 0x9c, 0xd0b, 0xeab, 0x80}}], 0x50, 0x48040}, {&(0x7f0000001780)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000017c0)}, {&(0x7f0000001800)="546b55df2735fbb95910a0dce319942eb3a209c5ecc099906c2fb59123c70cc0e0d6bf26471df388f8f045c3f109b11373403a9e883b20c17fd8781be53b9564", 0x40}, {&(0x7f0000001840)="6eaca92dfa0ace6dcc207e3cbc7524a87fe517c7f01e2d623c2e0ebe89dd62f58c37b2f641ba845e5fab06416ab47ee641cb78f394b5885f469f8e4cfa64de0385bf89fdecd09b438f12fe0382cde8cfa910fe024e0dc2f1170f86b6d1a5e941d3", 0x61}], 0x3, &(0x7f0000001900)=[@init={0x18, 0x84, 0x0, {0x3, 0x100, 0xb4, 0x7ff}}, @prinfo={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @private1}, @init={0x18, 0x84, 0x0, {0x1f, 0x5, 0x23f, 0x7fff}}, @init={0x18, 0x84, 0x0, {0x40, 0x1, 0x8001, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x6b1, 0x8008, 0x100, 0x7, 0x7, 0x101}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @init={0x18, 0x84, 0x0, {0x101, 0x1, 0x20, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, [], 0x1}}], 0x100, 0x4040001}, {&(0x7f0000001a00)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001a40)="3eaf27faa5bc36f029a3f233398d3e94b98fc12f94ec69a43d8d225298a8c6e9ae3a627ec1913283f1e7a327c5def97f247c735fb443aa632dd814c34b9591b61f7bc39d702d59c5714835671573fb0f8a525185b3c33e05e6334bee8acafebcef1860ecd149c519a2e210d998365ab1799d186f53ab1c8eb44c", 0x7a}, {&(0x7f0000001ac0)="f509a9df055e631d3076b43896f89a884901c20a61a29e77ab250f34e5c7a1b6eba9b5a5dfa64eda6eaed9c9441a40efb68050e4fd2d3cec82913ddb500aea638cb8ce1a331d84b8e170bfded0206e08351f52ef74ccd92845e2a4c914fd234741bbbaf9d841fb354687639720757cf87f2d451f20aea8d852503234ed38c19884f345efbe7f7e08945043c8002d4a71cfc2e26bf14db0513442b14e0664bbc826d63752427fdf46c0cf6475f0898a1c73ce71", 0xb3}, {&(0x7f0000001b80)="9a76062856f0c5446e22d239617fcc335c0ee2902b26c47ff210ae2df3c48619b99d43d0e05a1ff3c3789b4b2233835fa8bf90a3402c129387f0404fcb877840823dc3984dfcfcb44b580adc460e43668ad4269bcf63cdaf8a372a24ba333a2c2fd4fd7899d1eee44cf9eb600b50bf296fbc49bb8deec0652f61971834a2a504470230857b692b0e49a976d3fbe0a3889711bb1b91cdbcf6b5936994d50736eff190f8723e5156", 0xa7}, {&(0x7f0000001c40)="e671db6e398bf62a4c9ead25dd11d7d15fade9c5db6b57e405d39fb070c8941e1e2a214f9e22d36c6e42d2444e080c0ffe5d6fd5cb826a46b4b2cd9d7adbe5b6cdc1bc9dcc408131b6aac860b99a1c9734b1d0d6d0cde442c42f983921ca2bdd158ad5abdedcf0fa096fcee351377ff2cdb40f", 0x73}], 0x4, &(0x7f0000001d80)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x37, 0x1000, 0x200, 0x7f, 0x1, 0x9, 0x0, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @sndinfo={0x20, 0x84, 0x2, {0xe8d3, 0x202, 0x95, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x9b, 0x8206, 0xfffffffd, 0x8001, 0x5, 0x1, 0x80000000}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x8, 0x800b, 0xf54, 0x6, 0x5, 0x44, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x0, 0x1f, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x7ff, 0x1, 0x204, 0x5, 0x8001, 0x4, 0x3, 0x4, r7}}], 0x168, 0x80}], 0x7, 0x0) r8 = accept4$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000080)) write(r2, 0x0, 0x0) [ 521.286143] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 521.293423] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 521.300719] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 521.307972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000056 [ 521.315234] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:04 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x28) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) dup(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f00000000c0)={0x8, 'virt_wifi0\x00', {'ip6gre0\x00'}, 0x4}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x0) [ 521.340604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 521.349335] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 19:28:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x55, 0x0, 0x0, {0x0, 0x100000000000001}, {0x20, 0x40}, @period={0x5c, 0x2, 0x5, 0x3, 0x9, {0x100, 0x350, 0x200, 0xffff}, 0x8, &(0x7f0000000080)=[0x4, 0x6, 0x6, 0x2, 0x7ff, 0x4, 0x6, 0x3807]}}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./bus\x00', 0x0, 0x8}, 0x10) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="717e1ca0d661145bd93523efdfff03f3bb853a7003b394586bfbf27b1b84c966632532ad2e54befefed5c5155f89e8e45434", @ANYRES16=r4, @ANYBLOB="00042abd7000fedbdf250600000005000100010000007036677265746170300000000000002a00070073797374656d5f753a6f626a6563745f723a68616c645f6463636d5f657865635f743a7330000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80004) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf25060012001400ff0f0000000000000000000000000000000008000400e0005c96cf27376a53d30000080005003b1e3c59a2ffffffff08000500ac1414bb14000300ff0100000000000000000000000000012900070073797374656d5f753a6f62706a6563745f723a67726f75706164645f6578"], 0xac}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000045}, 0x84) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:fonts_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) fcntl$getflags(r1, 0x1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000240)={'nat\x00', 0x2, [{}, {}]}, 0x48) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f00000002c0)={0xffff, 0x1, '\x00', 0x4, 0x4}) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x2, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}}, {{0x77359400}}], 0x30) 19:28:04 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xd4, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x54c}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x48004}, 0x4810) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 19:28:04 executing program 1 (fault-call:4 fault-nth:87): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000040)) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) [ 521.784396] FAULT_INJECTION: forcing a failure. [ 521.784396] name failslab, interval 1, probability 0, space 0, times 0 [ 521.813666] CPU: 0 PID: 32536 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 521.821584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.821588] Call Trace: 19:28:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) shmget(0x3, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) [ 521.821604] dump_stack+0x1b2/0x283 [ 521.821620] should_fail.cold+0x10a/0x154 [ 521.841298] should_failslab+0xd6/0x130 [ 521.845276] kmem_cache_alloc_trace+0x47/0x3d0 [ 521.849865] sctp_add_bind_addr+0x6c/0x350 [ 521.854101] sctp_copy_local_addr_list+0x2ae/0x400 [ 521.859034] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 521.863796] sctp_bind_addr_copy+0xde/0x430 [ 521.868122] sctp_sendmsg+0x1c15/0x2cd0 [ 521.872105] ? sctp_id2assoc+0x210/0x210 [ 521.876170] ? rw_copy_check_uvector+0x127/0x2b0 [ 521.881022] ? rw_copy_check_uvector+0x137/0x2b0 [ 521.881034] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 521.890534] ? selinux_socket_getpeername+0x260/0x260 [ 521.890546] ? dup_iter+0x240/0x240 [ 521.900472] ? kernel_recvmsg+0x210/0x210 [ 521.904634] inet_sendmsg+0x11a/0x4e0 [ 521.904644] ? security_socket_sendmsg+0x83/0xb0 [ 521.904654] ? inet_recvmsg+0x4d0/0x4d0 [ 521.917135] sock_sendmsg+0xb5/0x100 [ 521.917148] ___sys_sendmsg+0x6c8/0x800 [ 521.924808] ? get_pid_task+0x91/0x130 [ 521.928771] ? copy_msghdr_from_user+0x3b0/0x3b0 19:28:05 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x600000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/163}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, &(0x7f0000000600)={0x5, 0xa, 0x2, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendfile(r2, r5, 0x0, 0x4000000000010046) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000680)={0x8, "1ebf31229ae2b26373df4fc512a76f7dbcc0ac086e730a535b895b901f4a2f7b", 0x2, 0x8, 0x7ff, 0x4, 0x4, 0x1, 0x5, 0x1}) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @period={0x5a, 0x1, 0x3ff, 0x9, 0x8, {0x1, 0xf801, 0x0, 0x200}, 0x9, &(0x7f0000000100)=[0x7fe, 0x8, 0x9, 0x1, 0x3f, 0x8, 0x3, 0xfffd, 0x9]}}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 521.933534] ? lock_downgrade+0x740/0x740 [ 521.937698] ? __fget+0x1fe/0x360 [ 521.941155] ? lock_acquire+0x170/0x3f0 [ 521.945387] ? lock_downgrade+0x740/0x740 [ 521.950582] ? __fget+0x225/0x360 [ 521.954391] ? __fdget+0x196/0x1f0 [ 521.957932] ? sockfd_lookup_light+0xb2/0x160 [ 521.962428] __sys_sendmsg+0xa3/0x120 [ 521.966231] ? SyS_shutdown+0x160/0x160 [ 521.970226] SyS_sendmsg+0x27/0x40 [ 521.973764] ? __sys_sendmsg+0x120/0x120 [ 521.977820] do_syscall_64+0x1d5/0x640 19:28:05 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) futex(&(0x7f0000000040), 0x1, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)=0x2, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000280)={0x0, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000600)=[{&(0x7f0000000380)="c81ec84a05210fc358966b775ce1bc23739110ef49f8b600be0559aef63cc5e75e5050ef15b9b2d1580bd93ac5143ccb17039784fb0117dab247ecbe8cc8c8ffdc676ec6a4b38d8bd3a1b2279f1bbf9d90221516ab9d0d01a1df463990b3f0f9c6", 0x61}, {&(0x7f0000000400)="c9651f7f8eebf41cb40ac217221b8bc5c224a5b3f9462e2e5f9dca925c9ccbf28b1adb87e4d8ad709bb976df905bb983d44a11c5cd1ce1e286d8b686cf21406b883103f7c1ee46f27add67502cc531c35dab27100548d9fc4f0fcb2fbb69c98213080ceae1f3da40d3bac73c9756739da359cec78071525b3d2e6d090cec5e50cc3a238a54ac89c375ddca6294", 0x8d}, {&(0x7f00000004c0)="c3546436f47564e090cbdc39", 0xc}, {&(0x7f0000000500)="1dc76a41ab96a857f3cd4736f69a554f3b0722b4d3c6f05f", 0x18}, {&(0x7f0000000540)="b3b13c4232d5256639a86349fbb425f747a716cf051c19d11bf8530f31ae6454ee5560e646c787605c2148fa6bbebff6cffae9854fdb2c70313a4c4e6115afde2c680f8a6eea0d748c957039ed231029b5736077527b792bb4e3b2fef2630bdeaff2485a3e83f04cb437b9d912998a208f763dc6", 0x74}, {&(0x7f00000005c0)="428d1fabf03bb3694edf337ca54d67914a9119be21b666be7c1438948eaaa4", 0x1f}], 0x6, 0x4) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x400}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x151042, 0x60) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e20, @private=0xa010102}, {0x306}, 0x20, {0x2, 0x4e23, @multicast2}, 'macvtap0\x00'}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x2, 0x20) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000008060109000035993b883c71f95b6c33e60486f7babd003ffa2f33399f0004000780faff020073797a30000000000000000000000000000052d065566e8dd7900302f1a9ee0d808d"], 0x2c}}, 0x0) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000100)={'veth1_to_hsr\x00', 0xffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) [ 521.981699] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 521.986867] RIP: 0033:0x45d4d9 [ 521.990033] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.997718] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 522.004971] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 522.012299] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 522.019556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000057 [ 522.027167] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x4c0200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) write$binfmt_aout(r2, &(0x7f0000000940)={{0x107, 0x8, 0x80, 0x2b, 0x83, 0x9, 0x21a, 0x10001}, "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", [[], [], [], [], []]}, 0x1520) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x900060, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f647a3d30303030303030303030303030303030303034303030302c757365725f69641d", @ANYRESDEC=0x0, @ANYBLOB="2c67df2b0e925caf87cf9a8a4b02656f75705f696435bdd3fbd0660ebbbd0b6ff07bc6f269b26311bbff3627d7c78611b270a9788e909e58ec4ce6d46e7a937c6af5c04f7ff5f85ea118c3abd6e8f260b6d24115eb8012f5626ac0414828ddfd44667bc2c59aa71c321687fa9533c54dc102fb09637a242c6236f874b3a87e0baf2b97eecbd37f1bd136d6bfa6d63ee66afb35a223aecbed81481d5336b946d12d7b335e443efc85f31bb39ef660a7d6204be676761575376237cb82cb801c969985089abe62b2387dc35e7c66b0fbe29401905d7b0b4a3129928edf78070000001800000000000000", @ANYRESDEC=r3, @ANYBLOB="2c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c66756e633d504154485f434845434b2c00859b3f3c5fc32774dbebbc3cb3ff28ae4667d6f309cd6451af5ff39029787f15b912f57f8f9804032349d88059fbf00186db030b0d3d28e4defa8b49c6a0f28168beb2fe7d0bb3ba201571"]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000300)={0x0, 0x3, 0x4, 0x800, 0xd96d, {0x77359400}, {0x5, 0x1, 0x0, 0x6, 0x6, 0x5, "9dc04e74"}, 0x8, 0x3, @offset=0x8, 0x4, 0x0, r7}) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000000280)=0x7) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:05 executing program 1 (fault-call:4 fault-nth:88): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 522.137353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 522.153441] FAULT_INJECTION: forcing a failure. [ 522.153441] name failslab, interval 1, probability 0, space 0, times 0 [ 522.158648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 522.177085] CPU: 1 PID: 32566 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 522.184984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.194421] Call Trace: [ 522.197006] dump_stack+0x1b2/0x283 [ 522.200620] should_fail.cold+0x10a/0x154 [ 522.204752] should_failslab+0xd6/0x130 [ 522.208705] kmem_cache_alloc_trace+0x47/0x3d0 [ 522.213270] sctp_add_bind_addr+0x6c/0x350 [ 522.217503] sctp_copy_local_addr_list+0x2ae/0x400 [ 522.222413] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 522.227154] sctp_bind_addr_copy+0xde/0x430 [ 522.231458] sctp_sendmsg+0x1c15/0x2cd0 [ 522.235418] ? sctp_id2assoc+0x210/0x210 [ 522.239463] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 522.244202] ? selinux_socket_getpeername+0x260/0x260 [ 522.249372] ? dup_iter+0x240/0x240 [ 522.252984] ? kernel_recvmsg+0x210/0x210 [ 522.257124] inet_sendmsg+0x11a/0x4e0 [ 522.260919] ? security_socket_sendmsg+0x83/0xb0 [ 522.265652] ? inet_recvmsg+0x4d0/0x4d0 [ 522.269652] sock_sendmsg+0xb5/0x100 [ 522.273350] ___sys_sendmsg+0x6c8/0x800 [ 522.277321] ? get_pid_task+0x91/0x130 [ 522.281188] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 522.285923] ? lock_downgrade+0x740/0x740 [ 522.290053] ? __fget+0x1fe/0x360 [ 522.293486] ? lock_acquire+0x170/0x3f0 [ 522.297438] ? lock_downgrade+0x740/0x740 [ 522.301567] ? __fget+0x225/0x360 [ 522.305001] ? __fdget+0x196/0x1f0 [ 522.308521] ? sockfd_lookup_light+0xb2/0x160 [ 522.312993] __sys_sendmsg+0xa3/0x120 [ 522.316774] ? SyS_shutdown+0x160/0x160 [ 522.320730] ? wait_for_completion_io+0x10/0x10 [ 522.325381] ? SyS_read+0x210/0x210 [ 522.328987] ? SyS_clock_settime+0x1a0/0x1a0 [ 522.333374] SyS_sendmsg+0x27/0x40 [ 522.336891] ? __sys_sendmsg+0x120/0x120 [ 522.340932] do_syscall_64+0x1d5/0x640 [ 522.344802] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 522.349968] RIP: 0033:0x45d4d9 [ 522.353135] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.360822] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 522.368070] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 522.375317] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 19:28:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x6, 0x2, 0x0, '!/'}}, 0x23) 19:28:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) io_setup(0x400, &(0x7f0000000080)=0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = epoll_create1(0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000009d7aa0100fcffffff00020000000e09b97311bfd4a00000040007808f2e35b5560900020053797a3000000000f1dce31f21d005194c3ce9c9daf599be58ff0fe84971063769afbc66433dfd"], 0x2c}}, 0x0) r4 = gettid() socket$nl_generic(0x10, 0x3, 0x10) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f0000000100)) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) io_submit(r1, 0x2, &(0x7f0000000480)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0}]) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x240080, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_iso={0x0, {0x2}, 0x6, 0x0, &(0x7f0000000100)="e492eef06b6db0a364b8873bc6ef95e419e59ddc64b01989bec5d52d000f2a70cc317112dff25212cbe3d4f394978e46dd002fca24f8defc6e6a5c68a271ab4b15", 0x41, 0x6, 0x1f, 0x44, 0x0, 0x9, &(0x7f0000000180), [{0x1, 0x800, 0x3}, {0x400, 0x61, 0x10001}, {0x1, 0x80, 0x6}, {0xea2, 0x118c, 0x6}, {0x0, 0x9, 0x6}, {0x21011a8, 0x77835c0b, 0x3}, {0x10000, 0x9, 0x9}, {0x5, 0x400, 0x6}, {0x8, 0x5, 0x437}, {0xc0, 0x400, 0xc}, {0x55a2, 0x1, 0x84}, {0x0, 0x1ff, 0x777}, {0x300, 0x1, 0x4}, {0x6, 0x400, 0x40}, {0x7d1b, 0x7, 0x1}, {0x2, 0x3, 0x6}, {0x9, 0x7, 0x591a74d8}, {0xfffffff7, 0x1}, {0xff, 0x1, 0x1000}, {0x4, 0x7, 0x3}, {0x1, 0x1, 0x7f}, {0x2, 0x41c, 0x80}, {0x7, 0xfde, 0x6}, {0x101, 0x2, 0x1}, {0xffffffff, 0x6, 0x8000}, {0x7, 0x4, 0x9}, {0x2, 0x1, 0x3}, {0x8001, 0x0, 0x7ff}, {0x8a, 0x1, 0x9}, {0x2, 0x9, 0x3}, {0xeeb4, 0x9, 0x10001}, {0x5, 0x9f61, 0x101}, {0x1, 0x3ff, 0x9}, {0xcc6, 0x3d7d, 0x2f}, {0x6, 0x7ff, 0x5}, {0x4, 0x8001, 0x9}, {0x1, 0x4, 0x9}, {0xfe, 0x9, 0x4}, {0x1437, 0x6, 0xfffffff8}, {0x1f, 0x4, 0x6}, {0x621e, 0x101, 0x1}, {0x200, 0x9, 0x8}, {0x3, 0x4, 0x40}, {0x5, 0xff, 0xb6}, {0xffff0001, 0x8}, {0x81, 0x400, 0x7}, {0x8, 0x5, 0x8}, {0x2, 0x3, 0x7f}, {0x0, 0x4000, 0x40}, {0xf9a0, 0xffffffff}, {0xe0b, 0x3, 0x9}, {0x1, 0x5, 0x30a}, {0x0, 0x7, 0x1}, {0x20, 0x2, 0xffff}, {0x8000, 0x1, 0x5}, {0xe4, 0xff, 0x10001}, {0x5, 0x5, 0xffffffff}, {0x9, 0xc4, 0x6}, {0x9, 0x1, 0xb13}, {0x2, 0xfffffff9, 0x1ff}, {0x7, 0x4, 0x8001}, {0x39e, 0xbd, 0x6}, {0x3, 0x5ea, 0x8001}, {0x1, 0x7, 0x5}, {0x2a, 0xfffffffa, 0x7fff}, {0x7fff, 0x1, 0x9}, {0x668d3ba7, 0x4, 0x8}, {0x0, 0x5, 0x8}]}) 19:28:05 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x400200, 0x30) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000001c0)={0x0, 0x1}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x101, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000100)={{0xc8e903a3c905054f, 0x0, @descriptor="9ba6cf7925fabda0"}}) socket$nl_generic(0x10, 0x3, 0x10) [ 522.382567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000058 [ 522.389813] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:05 executing program 2: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000100)=""/95, 0x5f}], 0x2, 0xa8, 0x7f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x6) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) clock_adjtime(0x4, &(0x7f0000001380)={0x7, 0x291, 0xfffffffffffffff7, 0x7fff, 0x7, 0xc6fb, 0x5, 0x9, 0xfb, 0xe9d, 0x982, 0x9, 0x3f, 0x1ff, 0xfffffffffffffffc, 0x962, 0x80000001, 0x34, 0x80000001, 0x100, 0x0, 0x7fffffff, 0x7, 0x9, 0x5, 0x1}) 19:28:05 executing program 5 (fault-call:5 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x80480, 0x0) r2 = getpid() write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000370200000100ffff0500"/24, @ANYRES32=r2, @ANYBLOB], 0x20) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x7}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x40010) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x80, 0x2, 0x3, "6dba5f30560dcfe464b530c233c68e04cedce947f67131ef4b1aabef1da1a49b", 0x38414261}) 19:28:05 executing program 1 (fault-call:4 fault-nth:89): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:05 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r4 = dup2(r3, 0xffffffffffffffff) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, 0x9, 0x6, 0x801}, 0x14}}, 0x0) close(r2) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xffffff23}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000100)={'syzkaller1\x00', {0x2, 0x4e22, @multicast2}}) 19:28:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="fe1f021d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r7}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000080)={r7, 0x9}, &(0x7f0000000100)=0x8) r8 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x4000000000010046) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r9, 0x810c5701, &(0x7f0000000380)) [ 522.613409] FAULT_INJECTION: forcing a failure. [ 522.613409] name failslab, interval 1, probability 0, space 0, times 0 [ 522.659333] CPU: 1 PID: 32603 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 522.667247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.676608] Call Trace: [ 522.679204] dump_stack+0x1b2/0x283 [ 522.682838] should_fail.cold+0x10a/0x154 [ 522.687001] should_failslab+0xd6/0x130 [ 522.690980] kmem_cache_alloc_trace+0x47/0x3d0 [ 522.695568] sctp_add_bind_addr+0x6c/0x350 [ 522.699812] sctp_copy_local_addr_list+0x2ae/0x400 [ 522.704749] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 522.709518] sctp_bind_addr_copy+0xde/0x430 [ 522.713848] sctp_sendmsg+0x1c15/0x2cd0 [ 522.717833] ? sctp_id2assoc+0x210/0x210 [ 522.721899] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 522.726660] ? selinux_socket_getpeername+0x260/0x260 [ 522.731851] ? dup_iter+0x240/0x240 [ 522.735486] ? kernel_recvmsg+0x210/0x210 [ 522.739635] inet_sendmsg+0x11a/0x4e0 [ 522.743433] ? security_socket_sendmsg+0x83/0xb0 [ 522.748189] ? inet_recvmsg+0x4d0/0x4d0 [ 522.752168] sock_sendmsg+0xb5/0x100 [ 522.755885] ___sys_sendmsg+0x6c8/0x800 [ 522.759856] ? get_pid_task+0x91/0x130 [ 522.763760] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 522.768520] ? lock_downgrade+0x740/0x740 [ 522.772676] ? __fget+0x1fe/0x360 [ 522.776135] ? lock_acquire+0x170/0x3f0 [ 522.780110] ? lock_downgrade+0x740/0x740 [ 522.784262] ? __fget+0x225/0x360 [ 522.787718] ? __fdget+0x196/0x1f0 [ 522.791259] ? sockfd_lookup_light+0xb2/0x160 [ 522.795753] __sys_sendmsg+0xa3/0x120 [ 522.799556] ? SyS_shutdown+0x160/0x160 [ 522.803530] ? wait_for_completion_io+0x10/0x10 19:28:05 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getrusage(0x0, &(0x7f0000000040)) [ 522.808225] ? SyS_read+0x210/0x210 [ 522.811850] ? SyS_clock_settime+0x1a0/0x1a0 [ 522.816258] SyS_sendmsg+0x27/0x40 [ 522.819791] ? __sys_sendmsg+0x120/0x120 [ 522.823852] do_syscall_64+0x1d5/0x640 [ 522.827746] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 522.832932] RIP: 0033:0x45d4d9 [ 522.836114] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.843819] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 522.851081] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 522.858461] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 522.865728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000059 [ 522.873006] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)}, 0x0) write(r2, 0x0, 0x0) 19:28:06 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x202002, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x3) 19:28:06 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x19c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x30) 19:28:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x16}, {{}, 0x5, 0x4}], 0x30) 19:28:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:06 executing program 1 (fault-call:4 fault-nth:90): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:06 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xffffffff80000001) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000926010100000000008ebdcb22aca31f2ea94432ba0006000008000000000040a71308c996c0b6d1000000000000140000000000483a2e99cc393207ca7770c3d26f2a95ffac3c6ad3a3b006922fe5b36b54eab9dc2e974fb745f3bf3a11d8ebac8a17b9ab523ca1a311fda3cfd098c6bd652fc15a90f2cab7172d303856508bce79a7357fc848"], 0x2c}}, 0x0) r2 = signalfd4(r1, &(0x7f0000000080)={[0x9]}, 0x8, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x4000, 0x4}, {0x9}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) [ 523.370090] FAULT_INJECTION: forcing a failure. [ 523.370090] name failslab, interval 1, probability 0, space 0, times 0 [ 523.420005] CPU: 0 PID: 32639 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 523.427922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.437297] Call Trace: [ 523.439890] dump_stack+0x1b2/0x283 [ 523.443529] should_fail.cold+0x10a/0x154 [ 523.447686] should_failslab+0xd6/0x130 [ 523.451781] kmem_cache_alloc_trace+0x47/0x3d0 [ 523.456370] sctp_add_bind_addr+0x6c/0x350 [ 523.460613] sctp_copy_local_addr_list+0x2ae/0x400 [ 523.465546] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 523.470316] sctp_bind_addr_copy+0xde/0x430 [ 523.474644] sctp_sendmsg+0x1c15/0x2cd0 [ 523.478630] ? sctp_id2assoc+0x210/0x210 [ 523.482692] ? rw_copy_check_uvector+0xc8/0x2b0 [ 523.487366] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 523.492210] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 523.496978] ? selinux_socket_getpeername+0x260/0x260 [ 523.502172] ? dup_iter+0x240/0x240 [ 523.505810] ? kernel_recvmsg+0x210/0x210 [ 523.509961] inet_sendmsg+0x11a/0x4e0 [ 523.513752] ? security_socket_sendmsg+0x83/0xb0 [ 523.518488] ? inet_recvmsg+0x4d0/0x4d0 [ 523.522444] sock_sendmsg+0xb5/0x100 [ 523.526138] ___sys_sendmsg+0x6c8/0x800 [ 523.530206] ? get_pid_task+0x91/0x130 [ 523.534072] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 523.538820] ? lock_downgrade+0x740/0x740 [ 523.542955] ? mark_held_locks+0xa6/0xf0 [ 523.546996] ? __fget+0x1fe/0x360 [ 523.550430] ? lock_acquire+0x170/0x3f0 [ 523.554389] ? lock_downgrade+0x740/0x740 [ 523.558695] ? __fget+0x225/0x360 [ 523.562152] ? __fdget+0x196/0x1f0 [ 523.565672] ? sockfd_lookup_light+0xb2/0x160 [ 523.570150] __sys_sendmsg+0xa3/0x120 [ 523.573930] ? SyS_shutdown+0x160/0x160 [ 523.577884] ? wait_for_completion_io+0x10/0x10 [ 523.582558] ? SyS_read+0x210/0x210 [ 523.586165] SyS_sendmsg+0x27/0x40 [ 523.589700] ? __sys_sendmsg+0x120/0x120 [ 523.593743] do_syscall_64+0x1d5/0x640 [ 523.597626] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 523.602903] RIP: 0033:0x45d4d9 [ 523.606070] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.613761] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 19:28:06 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) 19:28:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x3b9500) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x52, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x0, 0x20}, {0x0, 0x5}]}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x54b542, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5d8cb88b) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)={0xc19f, 0x3, 0x4, 0x1000, 0x2, {r6, r7/1000+60000}, {0x1, 0x0, 0x1, 0x4a, 0xf3, 0x0, "8e1d6cf2"}, 0x1, 0x0, @userptr=0x6f5fa0ba}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000b14000028bd70c0a8a96bb820dd87e84300fcdbdf2508000140b3ff0000230001000200000008003f0005000000080003ef0000000008003f0001080010000000b1986f44f12ff3d7929914e6bda937cc7ca6186755ba9d9ce953bc0c716592185ec0bafef927360e85fc41dba993d068cf00003d8c293ec63cf0aa9f7ce7c01e00a217000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 523.621018] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 523.628270] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 523.635520] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005a [ 523.642821] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:06 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x3) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x22000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendto(r4, &(0x7f00000001c0)="7e9cb9fa5b147e84d38c893bce327c9823e2a5445fc55685af713c149dd18e18ffd4c5235b56583b41e31264bd9f27e155a9e2cfb8cff723db110aa6ecfb14ead9597715d08b9e66095efabaf4", 0x4d, 0x4000010, &(0x7f0000000240)=@ax25={{0x3, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) prctl$PR_GET_SECCOMP(0x15) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r6, 0x7f, 0x3, r1}) write$evdev(r2, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) close(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x4) 19:28:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000009060101000000000000000000000000050001000600f74ee85007800900020073797a3000000000"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x13, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40018800}, 0x20000020) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000214000126bd7000fddbdf25050054000100000009d8285397797a3200000000399a29bca1d8d937a8b78915412e5460c0bb317499383297cf00a381a09522dfe3b04df8c63e598a59fa4b3e6ad17e69fc215263e013f1582fc26fcf26f8bb8b30f5d69f4f51c2ea93a7f71bf99ebdb1c243ce54aa00cf0d1088b5ac0bd1c6870c60c2a7a8f3f55befa2b47c95024450c140bd769850a0071d38c389d9afa6edd933e63cbe502dd7ee73a7d2cf159ac85fd7d89932109880dbceb5f83a23291e53b0c85046c9d97263010093ec721925c07cb29bd77c5969ffaee4b071e59c2418eb688b13924ac458d82fd7fc57271cd3cb5f4777"], 0x24}}, 0xc5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MAP_BUFS(r7, 0xc0186419, &(0x7f0000000c80)={0xa, &(0x7f0000000480)=""/105, &(0x7f0000000b80)=[{0x6, 0xab, 0x2, &(0x7f0000000500)=""/171}, {0x6, 0xc4, 0xfffffff9, &(0x7f00000005c0)=""/196}, {0x1ff, 0x7b, 0x3, &(0x7f00000006c0)=""/123}, {0x8, 0xdc, 0xffffffff, &(0x7f0000000740)=""/220}, {0x8, 0x16, 0x100, &(0x7f0000000240)=""/22}, {0x6, 0x24, 0x6, &(0x7f0000000840)=""/36}, {0x7, 0xcc, 0xffffffff, &(0x7f0000000880)=""/204}, {0xffffff00, 0x47, 0x0, &(0x7f0000000980)=""/71}, {0x8a, 0x70, 0x101, &(0x7f0000000a00)=""/112}, {0xe9, 0xc1, 0x2, &(0x7f0000000a80)=""/193}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:07 executing program 1 (fault-call:4 fault-nth:91): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:07 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x38803, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x5) 19:28:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @local}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@private2, 0x4d, r7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:07 executing program 3: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 524.231349] FAULT_INJECTION: forcing a failure. [ 524.231349] name failslab, interval 1, probability 0, space 0, times 0 [ 524.243837] CPU: 0 PID: 32688 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 524.251736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.261083] Call Trace: [ 524.263659] dump_stack+0x1b2/0x283 [ 524.267270] should_fail.cold+0x10a/0x154 [ 524.271398] should_failslab+0xd6/0x130 [ 524.275355] kmem_cache_alloc_trace+0x47/0x3d0 [ 524.279931] sctp_add_bind_addr+0x6c/0x350 [ 524.284158] sctp_copy_local_addr_list+0x2ae/0x400 [ 524.289078] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 524.293816] ? sctp_bind_addr_copy+0xc7/0x430 [ 524.298297] sctp_bind_addr_copy+0xde/0x430 [ 524.302613] sctp_sendmsg+0x1c15/0x2cd0 [ 524.306585] ? sctp_id2assoc+0x210/0x210 [ 524.310627] ? rw_copy_check_uvector+0x110/0x2b0 [ 524.315379] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 524.320211] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 524.324962] ? selinux_socket_getpeername+0x260/0x260 [ 524.330133] ? dup_iter+0x240/0x240 [ 524.334269] ? kernel_recvmsg+0x210/0x210 [ 524.338402] inet_sendmsg+0x11a/0x4e0 [ 524.342187] ? security_socket_sendmsg+0x83/0xb0 [ 524.346924] ? inet_recvmsg+0x4d0/0x4d0 [ 524.350886] sock_sendmsg+0xb5/0x100 [ 524.354589] ___sys_sendmsg+0x6c8/0x800 [ 524.358546] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 524.363281] ? check_preemption_disabled+0x35/0x240 [ 524.368294] ? retint_kernel+0x2d/0x2d [ 524.372173] ? __fget+0x1fe/0x360 [ 524.375617] ? lock_downgrade+0x740/0x740 [ 524.379747] ? __fget+0x225/0x360 [ 524.383180] ? __fdget+0x196/0x1f0 [ 524.386701] ? sockfd_lookup_light+0xb2/0x160 [ 524.391175] __sys_sendmsg+0xa3/0x120 [ 524.394954] ? SyS_shutdown+0x160/0x160 [ 524.398912] ? wait_for_completion_io+0x10/0x10 [ 524.403565] ? SyS_read+0x210/0x210 [ 524.407170] ? SyS_clock_settime+0x1a0/0x1a0 [ 524.411558] SyS_sendmsg+0x27/0x40 [ 524.415090] ? __sys_sendmsg+0x120/0x120 [ 524.419143] do_syscall_64+0x1d5/0x640 [ 524.423015] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 524.428193] RIP: 0033:0x45d4d9 19:28:07 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x90200, 0x153) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x28bc, 0x0, 0x0, 0x0, 0x7e}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 524.431362] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.439052] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 524.446301] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 524.453563] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 524.460850] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005b [ 524.468108] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:07 executing program 1 (fault-call:4 fault-nth:92): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000001c0)={0x8}, 0x1) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000ff00000000000000bdb434e1ecbe53300249a8da36f9cea76f73d620dedfe5b8b358037a0b863e182e86b6b2a4428a75283e7e1b9b78d7a6edf0f0088394c9f9eb8dbd9f48bbcfe27d5d60cf3fa2f75ea0b16c349d293b2e6392c9ebc20ec3bd76d1e3b36eee1bc2a939d96bffc8783ec4ae4d086ac1d7210e9378b8d86fb241d265575dfe68082a7a1ff16bfe533e6a6677226f9661cdf7cf8d3efe39477c"]) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000240)={r6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) r9 = openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x258000, 0x3) ioctl$CHAR_RAW_ZEROOUT(r9, 0x127f, &(0x7f0000000300)={0x101, 0xec50}) 19:28:07 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x210000, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x0, 0x2, 0x1ff, 0x10000, 0x0, 0x0, 0x10001, 0xfffff34f, 0x2}) open(&(0x7f0000000180)='./bus\x00', 0x40000, 0x8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000140)=0x800, 0x4) 19:28:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x4ad, 0x2]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x5}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="717e1ca0d661145bd93523efdfff03f3bb853a7003b394586bfbf27b1b84c966632532ad2e54befefed5c5155f89e8e45434", @ANYRES16=r5, @ANYBLOB="00042abd7000fedbdf250600000005000100010000007036677265746170300000000000002a00070073797374656d5f753a6f626a6563745f723a68616c645f6463636d5f657865635f743a7330000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80004) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="000428bd7000fbdbdf25060012001400ff0f0000000000000000000000000000000008000400e0005c96cf27376a53d30000080005003b1e3c59a2ffffffff08000500ac1414bb14000300ff0100000000000000000000000000012900070073797374656d5f753a6f62706a6563745f723a67726f75706164645f6578"], 0xac}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000045}, 0x84) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x8c, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x43}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4041}, 0x800) ioctl$int_in(r1, 0xcdc97d329688ff4d, &(0x7f0000000100)=0xfffffffffffffffc) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 524.642373] FAULT_INJECTION: forcing a failure. [ 524.642373] name failslab, interval 1, probability 0, space 0, times 0 [ 524.655033] CPU: 0 PID: 32716 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 524.662929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.672285] Call Trace: [ 524.672302] dump_stack+0x1b2/0x283 [ 524.672320] should_fail.cold+0x10a/0x154 [ 524.672335] should_failslab+0xd6/0x130 [ 524.672348] kmem_cache_alloc_trace+0x47/0x3d0 [ 524.691310] sctp_add_bind_addr+0x6c/0x350 [ 524.695554] sctp_copy_local_addr_list+0x2ae/0x400 [ 524.700488] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 524.705254] sctp_bind_addr_copy+0xde/0x430 [ 524.709589] sctp_sendmsg+0x1c15/0x2cd0 [ 524.713576] ? sctp_id2assoc+0x210/0x210 [ 524.717638] ? __sanitizer_cov_trace_pc+0x15/0x50 [ 524.722482] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 524.727241] ? selinux_socket_getpeername+0x260/0x260 [ 524.732432] ? dup_iter+0x240/0x240 [ 524.736045] ? kernel_recvmsg+0x210/0x210 [ 524.740176] inet_sendmsg+0x11a/0x4e0 [ 524.744019] ? security_socket_sendmsg+0x83/0xb0 [ 524.748762] ? inet_recvmsg+0x4d0/0x4d0 [ 524.752764] sock_sendmsg+0xb5/0x100 [ 524.756462] ___sys_sendmsg+0x6c8/0x800 [ 524.760434] ? get_pid_task+0x91/0x130 [ 524.764314] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 524.769050] ? retint_kernel+0x2d/0x2d [ 524.772918] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 524.777912] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 524.782650] ? __fget+0x1fe/0x360 [ 524.786128] ? lock_downgrade+0x740/0x740 [ 524.790259] ? __fget+0x225/0x360 [ 524.793691] ? __fdget+0x196/0x1f0 [ 524.797298] ? sockfd_lookup_light+0xb2/0x160 [ 524.801866] __sys_sendmsg+0xa3/0x120 [ 524.805656] ? SyS_shutdown+0x160/0x160 [ 524.809619] ? wait_for_completion_io+0x10/0x10 [ 524.814282] ? SyS_read+0x210/0x210 [ 524.817889] SyS_sendmsg+0x27/0x40 [ 524.821407] ? __sys_sendmsg+0x120/0x120 [ 524.825981] do_syscall_64+0x1d5/0x640 [ 524.829852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 524.835019] RIP: 0033:0x45d4d9 [ 524.838188] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.845883] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 524.853142] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 524.860423] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 524.867678] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005c [ 524.874930] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$inet6_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000000)="011c4afb70464255a6", 0x9) 19:28:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_init1(0x80000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) sendfile(r4, r1, 0x0, 0x7fffffff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0xf, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{}, {0x6, 0x0, 0xfffe, 0x0, 0x1}]}) syz_open_pts(r1, 0x80480) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x100}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x0) 19:28:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0x7492, 0x4, 0x80000102, 0x2, &(0x7f0000000100)=[{}, {}, {}, {}]}) 19:28:08 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0x1000, "33ee5272b5d0bc45f88fd7228bfc692627bfce0b345d813d46a7c5bcf5462f2396de4b02ca0ff3a58e5c88027909456174b8107ba9cb2da253bbe2900a0e3f7d0159996e0e66136d758a562fb0f316ce8ebef18045faee5d1029cfa493762cf2c3ea41ddb509d27996fe9e5381eb7525cf39ca1747954f48bfd6935927ece27f8cbbfd24c401d6f1ddc4e2fee000f657c278796142c3c0a088201fbec564bd2eb3282a8cc6920e0bcb2eaefff10d16e6d4ddcab7775f7f00517a4971c7e302f099f09e4096455d9db909a3b3469dfede5a6cd7ee4e5a50f6da38c6e4229af003d36b42d25e3a895bd74a8e0f1ed8771ea370e74d719bd3a927d7cf4c9aa57d8a8b2329094adf1a64d671bf84d6d4e8425c5ae440fd4c0acb6579a09f27873127bd6f07b81f267d835da4f1a9140905a0af8878e815b6bb36095c25c568b668a908d505606e1c9a55c8bc15440a76fe6cbac5be715c3284bdfdc6bc683230ec8e95a432c267907925ed471139bc4550057cd0287b3aabfcd54ca2cf2ecdf6757aefa33b747d0f0d57c92c1b8abeecb60f040348481a914c99b5ddf4c80029bee9778dc50c50a1ebb888867b989d90318effdffdeda9c47395f327e6a9a720a83840086c9063505680d96ea71dfe4260a0f8a0ca23de6f357d3424d7dc0eb2f407bbdda77fbb87732c55975a979cb94c5aac83ec94fb16f97da603dfcffa5a6f8e5bffb6888299c757124472718023837e1fbd046911696ef5a5671da5f13348ed29c340485331424bc670dda2f5135dc103801ebdef96f262e96058a80420dccff5cee3ba9500c7799feff69672fc1264288d41de17d1ca26cffcc4a4963072315b0c38744118787c4dd4e847649b57134e64b06720e8cdc0ccb2040780ec68e6e3c7d2f38a2e508a32d4a448371258ea33001ee53fabb26112acbc2598fe69b8699d7157ae2dfec2240c0ca5bc16f84da8690e0b073efefbe2572a0e0ec983f47841bdb3f77b3d0a93917b67941d4578710a1fb326b39815566cc8cf09e0c1ed5bf6c48f24b56112421723b7dc050ab680343fe9437b27fb4c745520fb59e80083d60fb3270922c4ab5402d0dd1040446b26b62ee8029a19d15bb6395582141d6ebefe9bae6e0627fe481a6342f012a35901b28fa3a3281c848c54ff3de617312d45527cf879f2caac786f76807c3f803fdd1c545569a9ef506f3c913cf0879d8852968bbd3236a1978e819a787f73cf8b3f4c35c04ce4ddf6ed740fce95c31482561ccf8d9d6c2a64be5c1810858d186e5bb0e8a946655ae758990cffa0bc60bf38618c01da007a1d28f1c69b966a237d280ecd8a33eafb88e0743fd5a8a58ef1db2c769b8164ec43f391e6545fcf00c4a1bcf85ef35189ac62c0495e0a98351bad7f9dc3330a624172f687bcc0f0c5f0a43ede20714f17ef36df23e19bee814445418f8a2e33af82c70df3b02de8e7e080c4b9779b9e15ec92fdaaf08549804cd8b61a7e3e8273887978b47bb5220dbd38e1dd0be4ec3b4cd524291637f7cd8101816d1616cf7db3de24f0b98941c3b419da4e93f1f698cd8c4869d1ef0a9a7ff6659eed1dc0bb34c3e1bcb4bf6ea75a8dbba7f42c27dc08b53472cec16c9c92cc889f670397ab4dd39069232c57c694a0130c667f00568abd666039ed5482e7511646e871bf054addee0c091105e5ee0017795ecb00cf77e2cc87f70ec8c530b69c50e602b037d07027d9db2dbcf3f2a1424c5f6941319e47fb12d3bc46b2c897944626af7e835d50abf85cb7f5cb363a92be4876951c0efe988f852578596362fbed0c1e347323fcdc9b3adae896ea525049ce892a1507acd61cbc332261299d34bb34b5a532a767fa92c836febb8b6c8cddcd1754d9e0504982953da27e0382c806926cf72e52708d012e20ee7702c1ebc5e83e121cf209fe204aa18ac49ac4cd0157b5b5a2ecd05c257a113476c136244ea088369217eafd363ec9dddd6559286a16fb54262523197762e065c69e445b2b438f1f1c37a2d2cd4f3a5d840ce71d0b85584aadcef934e6dd786d945f03a66caf92601075866f2afc90ae8d37848cd5ab956c985ef87d45076add53057cec5d9ccbe0a6254480f66e9e413e490f71d0eacb93a6effa600c9760d5b40e787f3e8d8b0a65dbf65dab991917b40497c6949948f0b244ffc43426f049f68172308520f71abd53973cb244df68da7216c8ecca33756e0998932a7b8b33e602e59592af863e529468b0599d606b19680a0a4f11d879964bd6d80542850393224161e878e284e76532936f9c1da232bd445075f41ced95e3fffcae4d32896b455e7d449cf6cba135ea7a4dabc492814e7750a38d23fbbe0b909f78eb61d69a164636344e0337a1fb4a4c2fae5aaee6c720b17242130cd3fa5c928c5790fe129ee635b0fc7cf11739176305d6e813ed8bc5a19389704e94d4564223ea6b37091af32c8101d371754d926b4b06730670208d1c536034762e79b6aea322c665d6df5d1bd84fea221e64555b99f9ece2bc0624be68af4d905443ca0366bc9efe05b51b10255f991868941187bb42eeb679ad1ec21788d02eea2d7b7017df00d25b7cb46327550c6414b505aa66e7c13efb7e962cbc422d099ca340610c10922ba154fbc952c6a6f48894e3665e2bbbdf66f61e2f6d07ac55a7e341cece4985b48d850e8d1fff1f32f441ba1bb9e26f93b308791ab2f9422973082f7c4283a97f1eedda541ebae1fcdc0f551234b68edfd91dde4dc9a146328911894b7b509cd2b1a7b2e69ab0552fffddf87cdc2ee25598d66be88d65b21edde7953cde170a5ed423af13421cc002657fd18c81edc7489d63435d427c55f997986609ce2c6b3aa5b47bb95fe28050aed04c83fedd804b71befc69a1309a97f018993c3811678142c0ac906dfa105e06dab2f5fff76b2b368a41f0bcbacc31766012568e252042bbf6997b5fe26876542fad71dfb6213f1c6aed844df3e9b2530f151142c7bd764c74fdd4ba474c93e59301ebfa2528472f391a8f629bb658398759178c4e74b261d926a35064216aa93e20f312adb25f26a44efa5852758d3c8cd5e49745165695999e0cc9383895bddbb9891aa2efc3e828f72a65f6337848b2e85a55bab921021b7ec6c5ab252d97bca5f8e898f2cf8ff5f828dab69dea13fed9a7ca0fb74d9af653af8484315353c862e3e7a2a98bad4c7453a065187e0ef61f4a78e2c3625fe49978ac45b4f6f5e1e596b728db5202c566edfc73ef544a0a62d8db8fdc92e957f4ac661d22b1d0077c9e132025540c07624019dd48a5325c1dd6df6a2f75462ab6c3f28f2b417f08cc5e5c022c90624912ecdc945996f00bdd5194a51bf71e7986c5d437150717a96aaf0b2ea97a7d7032658407d8a1d6af9668a898242dfc4b493feffcb31eed4b0f155a7b04ee5f7f9c3d2b21930c9725ae37d213800ddbda07764f64b7894341373bcc598312d42cc55a4ef741d439fe3dc699acce9117e4f24af00cebbb0c2b19468511992017204aebce7201cc11d98a73416e4c80559d831828f9e9922cce1a938a3aa36a56131106a9c7ada45c8345a4669121c77988a1930d8262f48e6309530007c29c7f3d316219f2783d087e2d60e654fb8cfab5ac009e52a2ee3143873f06bde47468553f8212183c009966445ab61e7ff978bc1ba45cdae0ae2403e89ec3a7b3ccd88a87f83f4888c2dae6119a8bc83cd245de0371cf5de407663c8fdc2f15f08db61be228f66ecf061fb0e6a3c072b0eb3a2a009f609565de7b89a4965f13c45bb83e3c06f9bc2e297f00a19e3b7bbdc0e4f8fbfb209498e83c45978deef3529c78c95f546938170b985853790289d0cf86d20180a29b8a26673ae937ecc1f4feca327355e5a76425436643a594fac3fafa3ec49b4ff0ddab0a31cd9d20f4cd7224a398db6a9d87251f01b2b1d9a1903903f420da3ee15d6b80160c5f4755550af071b2078a40faaaa776be5e0eba29c5b8fe04f70d3e1f0ffaad7716f9d9248a82f3dd86b73b3cb6ec0beb514ebe0b7f6bbc04c406446c90c8fb492cfc5fa92c45ed0fbb0a7559eea4444e6181870a12b17102343ef43f7ea4c07cc9c3661a3f98abccffe4beb12f12c8146a6b0ba7dae5aac8484618209f0e9b4ff9c4e5c7bcf39c6b1a7da93a983b985f84018f890b856e012e9525fead324b5efea0680c2009f6e5d88f792a88f31a972c3309eb7016ff8e338c7f402eb403085ea8ac034d40b83786877b3d61d6fea292d011eff1491472635198c65271537b9e2099e9237a967cf0bce3fc74d0b9689fb0a001a94c2b1ae73f2127ca66563c7f0b5cb36565c94f6fd27fb69669bddca60c16e66deee2bba31375fc07d6c0bd4470a7db41e503e9d26a0f0b30e98421b98445597928050b0680a0ce6884079f758bf12861937cc2ae8cb4e9c9130d9fb0be1e2723b4e6801c3e6d69e752ae974e6844248a50e2d41c26b63147fcd121631ebef214f444ac6a5187ace37299081a284f7f102f252cda618218b90653f6051743df40790e41c8f45d575f9c2437232cb45c61960d6741771ee8d99444e5e9c6dd3a51ff0c68b435748190c482f6c6412497a18bf92785a25b8660de9aa7c8d158983d784158971bed5ab9ea7b9402a5946da72f861a6b1f80c2455212f1b619de59cd1c76919c8454cb38ba67475793023d7a72ab808320562cc023bad03f09db2c3a376649f20a5ca61ed053f5c9670014b19f6238a14b789b406d1a65513e34a2d57faa9e39c247ba1561b62142ad51b77e1dc1e175a308c6ed6937b978161c2a2c56b3570190e91f6adf1f6de7061328179466ed0a5d3818105e100ca6099109dc8854dae25a46c62bf573e71a3c42497507d2cb64a68e3e99ef5eeb56d833ceebcd34ea331fcd12e1b4507ff265c16f242d88ca4c3d4e4cfca3ea85b8aa37c70dd39841a635b69c8c99100da950e11cd3fdcb0c4d72e6a39359d9ed61d1e8ff7c4c54426d9ec2fa95fc2e946bae99158bdae35bd640558595514a0095922fa0f21631b5b0911d2ef591b110921f26ff63c4024e2116aeddbe5351937b617f73537901df0c036185e1c32b1879ec0c286cf36fecd16d48be7d1c73e5c5da57f15ec512c5893a11ca0c93e8b886eb28571d6bfb9a5a1cbfbc8acfca56d2e3aefa04aa37a92197cad22d44a6b6c4d5ca8190f6a5222981467f8927bcc579fded8116fa500a00805a3fefd01b547d4ee4d2eedf712745f16577b0b0172c6c6096bc727a13d84b0474f7c2a08ed476480194616890e376e7089626ee54003d118ce4230aada508b9a6369eaa3b38eefccec117f0a8b4685d67fe995ebb742c6742f61117aa355ed51fca162c61f415b151f92ea1782ea3f0b67b01e8f233abae8dd98f9a1bab503498b421b9896e2d4aee9036007d732cce7af7c239779bd76f5a78fe702db68395973fa1414918d59ff821ff4ca18681678ac1647c6af4e9d2844aa0ad4b0608bfc801a8f9b1758b5947ff21e4df7de509fc561d1f849fd26544f67393fd981eafe7f877f21721ead520286cb02abbc977c48af6e715e6bf9f0104b8f740982d86276550dd1c852d79119e217932f155781b9aac09366d93b1f1ba52987eabea8cab7bd966d259d9bd1714d9335b887c53cb6261fa5906ea93732eeb14bf91735f077276465c3b065139a4798af8b80340d2b794afb7e1427f05ab496bcb8a0fae2493f30d46d6b06eb1b7fee3e30edbed13b8b97417b8cd49803dc7638bab4e7103982f5167e4986c1db20717"}, &(0x7f0000000040)=0x1024) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:08 executing program 1 (fault-call:4 fault-nth:93): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x57, 0xffa6, 0x0, {0x0, 0x4}, {0x4b}, @rumble={0x6, 0x20ff}}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000020000000000ff0012000900010076657668a8c5357be8863f00000000000000c7e38c6b6108aaa5579510e7af1a89c7a98a0c6d9787dd54f8d50fd777c44916fbb595f48635cad69712292c66b90be6a1d479f71082779cfac4cacd6e"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000002c00270d00000c000000000000000000b5d965b2fb5691554c75e6490db799f04ef4e5cd76237e3b16f6e1cc27412e0a7b01000000fb450a6baa5369f35f70899132d311b5dc45e845b6685ddfef71187403b08b9a26c339cc9575397b3350b531df6f144cf8a53b51cae27ea0f39ade33433eaf52b9d29d1f73ab4993530ad80af41dbca403cc6ae9c946924006520060538441dab7bf6ffafb552503b7be5f5501fa0ad218db5c82fa03ce568e2514ec014c90653a9639d0a6da643c6b53451d51af01044e8584f58170a115a491769a8faf84832f9c18855ec72970f04e47626ac97f1c335aa158074612fe6320439543c0ab6881f1852c541fad1ea79b7a33b1b765be11f7c036924881d784", @ANYRES32=r6, @ANYBLOB="00000000000000000e0000000c0001007463696e646578000c000200080001001b240000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x2c}}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x1a1000, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000100)='FROZEN\x00', 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x1, 0x1000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 525.060237] FAULT_INJECTION: forcing a failure. [ 525.060237] name failslab, interval 1, probability 0, space 0, times 0 [ 525.073285] CPU: 1 PID: 32746 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 525.081184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.090538] Call Trace: [ 525.093132] dump_stack+0x1b2/0x283 [ 525.096779] should_fail.cold+0x10a/0x154 [ 525.100932] should_failslab+0xd6/0x130 [ 525.104920] kmem_cache_alloc_trace+0x47/0x3d0 [ 525.109509] sctp_add_bind_addr+0x6c/0x350 [ 525.113755] sctp_copy_local_addr_list+0x2ae/0x400 [ 525.118691] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 525.123465] sctp_bind_addr_copy+0xde/0x430 [ 525.127797] sctp_sendmsg+0x1c15/0x2cd0 [ 525.131792] ? sctp_id2assoc+0x210/0x210 [ 525.135854] ? rw_copy_check_uvector+0x106/0x2b0 [ 525.140612] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 525.141204] nla_parse: 3 callbacks suppressed [ 525.141210] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 525.145454] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 525.145475] ? selinux_socket_getpeername+0x260/0x260 [ 525.145487] ? dup_iter+0x240/0x240 [ 525.145503] ? kernel_recvmsg+0x210/0x210 [ 525.145515] inet_sendmsg+0x11a/0x4e0 [ 525.145523] ? security_socket_sendmsg+0x83/0xb0 [ 525.145531] ? inet_recvmsg+0x4d0/0x4d0 [ 525.145539] sock_sendmsg+0xb5/0x100 [ 525.145549] ___sys_sendmsg+0x6c8/0x800 [ 525.145557] ? get_pid_task+0x91/0x130 [ 525.145565] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 525.145577] ? lock_downgrade+0x740/0x740 19:28:08 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 525.145593] ? __fget+0x1fe/0x360 [ 525.212607] ? lock_acquire+0x170/0x3f0 [ 525.216588] ? lock_downgrade+0x740/0x740 [ 525.220755] ? __fget+0x225/0x360 [ 525.224218] ? __fdget+0x196/0x1f0 [ 525.227759] ? sockfd_lookup_light+0xb2/0x160 [ 525.232258] __sys_sendmsg+0xa3/0x120 [ 525.236062] ? SyS_shutdown+0x160/0x160 [ 525.240038] ? wait_for_completion_io+0x10/0x10 [ 525.244712] ? SyS_read+0x210/0x210 [ 525.248339] ? SyS_clock_settime+0x1a0/0x1a0 [ 525.252764] SyS_sendmsg+0x27/0x40 [ 525.256303] ? __sys_sendmsg+0x120/0x120 19:28:08 executing program 2: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x70) keyctl$set_reqkey_keyring(0xe, 0x5) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x50) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000240)={0xd000, 0x10000, 0x3, 0x4, 0x31}) [ 525.260367] do_syscall_64+0x1d5/0x640 [ 525.264263] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 525.269447] RIP: 0033:0x45d4d9 [ 525.272633] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.280342] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 525.287609] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 525.294876] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 525.302151] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005d [ 525.309419] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0xa8001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x20}, {0x4b}, @rumble={0x7ede, 0x8}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0xfffc, 0x8001, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x401, 0x0, 0xfffd}, {0x0, 0x0, 0x0, 0x0, 0x2}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 525.353535] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 19:28:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x3, 0x2, 0x7, 0x3, 0x7f}) 19:28:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0xfffe}]}) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x81, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="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", 0xfc, 0x1e398958}], 0x2000808, &(0x7f0000000280)='/dev/input/event#\x00') write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:09 executing program 1 (fault-call:4 fault-nth:94): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sync() ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)) write$evdev(r0, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x0, 0x1275}, {{}, 0x3, 0x400, 0x2}], 0x30) 19:28:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x81, 0x0, 0x0, 0x1}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000200)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl(r3, 0x81, &(0x7f0000000100)="806e0d30e7f4cc5aed9adf49725d1f4ac3b62a719d157d851526091d6f30514b3aee35b88d38972a7b450bc5d1765cace1fcabd15801c56e696d54b3096e64e3c6c1babdf5b27bcf172e5b8fd50744e768e18c3a2ad1b45eb789f6b5253e0703c081ed96b47b884e2b84564fe06e4e3af6ca8a6ad1fa8f752bcce564f8682e6008cb5d4634542e562b5a592fd9e9befe5a0e9d100bc9a02635dae376839c8266fcebcb34c86ab05c13") write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x30) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x22002) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000001c0)=0x1) 19:28:09 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000040)) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x0, 0x5, 0x20, @local, @loopback, 0x8, 0x0, 0x0, 0x22ff7a71}}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000340)={@dev, @broadcast, 0x0}, &(0x7f0000000380)=0xc) r8 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x4000000000010046) accept$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd4, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004000}, 0x2400c010) [ 525.981413] FAULT_INJECTION: forcing a failure. [ 525.981413] name failslab, interval 1, probability 0, space 0, times 0 19:28:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "dabfe04c90efaf94", "bf782ef45409f324eb5d6beeefb5b98a", "06efe157", "586547dff099a46f"}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r4, 0x0, 0x0) [ 526.021798] CPU: 0 PID: 331 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 526.029533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.038888] Call Trace: [ 526.041486] dump_stack+0x1b2/0x283 [ 526.045123] should_fail.cold+0x10a/0x154 [ 526.049276] should_failslab+0xd6/0x130 [ 526.053250] kmem_cache_alloc_trace+0x47/0x3d0 [ 526.057836] sctp_add_bind_addr+0x6c/0x350 [ 526.062074] sctp_copy_local_addr_list+0x2ae/0x400 [ 526.067011] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 526.071776] ? sctp_association_new+0x14a7/0x1e70 [ 526.076624] sctp_bind_addr_copy+0xde/0x430 [ 526.080950] sctp_sendmsg+0x1c15/0x2cd0 [ 526.084938] ? sctp_id2assoc+0x210/0x210 [ 526.088995] ? rw_copy_check_uvector+0x127/0x2b0 [ 526.093744] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 526.098583] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 526.103348] ? selinux_socket_getpeername+0x260/0x260 [ 526.108539] ? dup_iter+0x240/0x240 [ 526.112172] ? kernel_recvmsg+0x210/0x210 [ 526.116329] inet_sendmsg+0x11a/0x4e0 [ 526.120136] ? security_socket_sendmsg+0x83/0xb0 [ 526.124883] ? inet_recvmsg+0x4d0/0x4d0 [ 526.128839] sock_sendmsg+0xb5/0x100 [ 526.132567] ___sys_sendmsg+0x6c8/0x800 [ 526.136524] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 526.141262] ? retint_kernel+0x2d/0x2d [ 526.145134] ? lock_release+0x41e/0x870 [ 526.149085] ? lock_acquire+0x170/0x3f0 [ 526.153035] ? lock_downgrade+0x740/0x740 [ 526.157169] ? __fget+0x225/0x360 [ 526.160618] ? __fdget+0x196/0x1f0 [ 526.164136] ? sockfd_lookup_light+0xb2/0x160 [ 526.168613] __sys_sendmsg+0xa3/0x120 [ 526.172398] ? SyS_shutdown+0x160/0x160 [ 526.176354] ? wait_for_completion_io+0x10/0x10 [ 526.181005] ? SyS_read+0x210/0x210 [ 526.184610] ? SyS_clock_settime+0x1a0/0x1a0 [ 526.188995] SyS_sendmsg+0x27/0x40 [ 526.192514] ? __sys_sendmsg+0x120/0x120 [ 526.196568] do_syscall_64+0x1d5/0x640 [ 526.200442] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 526.205614] RIP: 0033:0x45d4d9 [ 526.208799] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:28:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000240)={0xa10000, 0x6fcd, 0x7, r0, 0x0, &(0x7f0000000200)={0x9f0901, 0x8, [], @ptr}}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x300, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000300)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080), 0x2) r5 = dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) mount$9p_tcp(&(0x7f0000000380)='127.0.0.1\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='9p\x00', 0x284002, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e20,loose,msize=0x0000000000000005,cache=mmap,version=9p2000,aname=/proc/timer_list\x00,access=any,fscache,version=9p2000.L,dont_hash,audit,fowner<', @ANYRESDEC=r6, @ANYBLOB="b5c64d0041533ec12f58a17bcaf145d82ac0f676e0d764b5f090a708f948fa63e6904e00acf8bd62786ded00bc1f87ec6251ab4e"]) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) [ 526.216488] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 526.223735] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 526.230981] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 526.238229] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005e [ 526.245476] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x9}, @rumble={0x0, 0x8d}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000080)=[{}, {}], 0x30) 19:28:09 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$TIOCEXCL(r3, 0x540c) sendfile(r0, r1, 0x0, 0x4000000000010046) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r6, 0x6, 0x7, [0x7, 0x1, 0x5, 0x0, 0x7fff, 0x80, 0x186]}, &(0x7f00000000c0)=0x16) open(&(0x7f0000000040)='./bus\x00', 0xa800, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) 19:28:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) read$proc_mixer(r2, &(0x7f0000000080)=""/4, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)) 19:28:09 executing program 1 (fault-call:4 fault-nth:95): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = dup3(r1, r1, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cbc-aes-aesni)\x00'}, 0x58) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000180)={0x706, 0x7, 0x800, 0x93c, 0x9, 0xf7bb}) 19:28:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x4004001) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r9}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000100)={r9, @in6={{0xa, 0x4e23, 0xda70, @empty, 0x4002a}}}, 0x84) dup(r1) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}}, {{}, 0x0, 0x1ff, 0x4}], 0x30) [ 526.390390] audit: type=1804 audit(1597865289.502:25): pid=361 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1057/bus" dev="sda1" ino=15924 res=1 [ 526.404008] FAULT_INJECTION: forcing a failure. [ 526.404008] name failslab, interval 1, probability 0, space 0, times 0 19:28:09 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x509882, 0x1a1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) [ 526.503620] CPU: 0 PID: 368 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 526.511355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.520702] Call Trace: [ 526.523297] dump_stack+0x1b2/0x283 [ 526.526932] should_fail.cold+0x10a/0x154 [ 526.531089] should_failslab+0xd6/0x130 [ 526.535067] kmem_cache_alloc_trace+0x47/0x3d0 [ 526.539657] sctp_add_bind_addr+0x6c/0x350 [ 526.543903] sctp_copy_local_addr_list+0x2ae/0x400 [ 526.548848] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 526.553621] ? sctp_copy_local_addr_list+0x2/0x400 [ 526.558602] sctp_bind_addr_copy+0xde/0x430 [ 526.562925] sctp_sendmsg+0x1c15/0x2cd0 [ 526.566891] ? sctp_id2assoc+0x210/0x210 [ 526.570941] ? rw_copy_check_uvector+0x110/0x2b0 [ 526.575690] ? rw_copy_check_uvector+0x122/0x2b0 [ 526.580430] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 526.585185] ? selinux_socket_getpeername+0x260/0x260 [ 526.590358] ? dup_iter+0x240/0x240 [ 526.593971] ? kernel_recvmsg+0x210/0x210 [ 526.598149] inet_sendmsg+0x11a/0x4e0 [ 526.601974] ? security_socket_sendmsg+0x83/0xb0 [ 526.606719] ? inet_recvmsg+0x4d0/0x4d0 [ 526.610695] sock_sendmsg+0xb5/0x100 [ 526.614405] ___sys_sendmsg+0x6c8/0x800 [ 526.618366] ? get_pid_task+0x91/0x130 [ 526.622254] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 526.627007] ? lock_downgrade+0x740/0x740 [ 526.631335] ? __fget+0x1fe/0x360 [ 526.634773] ? retint_kernel+0x2d/0x2d [ 526.638687] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 526.643727] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 526.648564] ? __sys_sendmsg+0x8a/0x120 [ 526.652525] __sys_sendmsg+0xa3/0x120 [ 526.656395] ? SyS_shutdown+0x160/0x160 [ 526.660354] ? wait_for_completion_io+0x10/0x10 [ 526.665020] ? SyS_read+0x210/0x210 [ 526.668639] ? SyS_clock_settime+0x1a0/0x1a0 [ 526.673030] SyS_sendmsg+0x27/0x40 [ 526.676562] ? __sys_sendmsg+0x120/0x120 [ 526.680615] do_syscall_64+0x1d5/0x640 [ 526.684497] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 526.689664] RIP: 0033:0x45d4d9 [ 526.692838] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 19:28:09 executing program 2: open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 526.700529] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 526.707805] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 526.715189] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 526.722440] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005f [ 526.729690] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:09 executing program 1 (fault-call:4 fault-nth:96): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:10 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000040)=[{{r5, r6/1000+60000}}, {{}, 0x15, 0x4010}], 0x30) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) r9 = socket(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r9, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r11}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x8d) 19:28:10 executing program 5: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="735d75f9cbaf58e15ca278864f24683900000000000000078ebc9b0083ce17e2cbb6de4d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000000000000840000000200000000e7dbac25f9000502000000000000000062ee1a16650215a10d9461206ce7748e97f8b9ba4ba7c2d8dad4cf918c16b556d1c7287a638b15d562b31428a289b79ca8fc12ed4015f0823ae4369f3c0f002651d70f056cb286a9aff355f896ac0dac12d4a283924f4e9ccc7672d4f54d2bcebedf88697f30ae1289f7fa67448c7795ba28c67727ef6d41e0dc1d7de1349bf11c45e63505d4b57f7fdb6497050e8e244983333c45c12ae4fca0a6b46e79", @ANYRES32=r2], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2, 0x80000001}, &(0x7f0000000240)=0x8) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x0, 0x1b8, 0xffffffff, 0x2b0, 0x2b0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, &(0x7f0000000380), {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@multicast1, @ipv4=@private=0xa010102, @port=0x4e22, @gre_key=0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010100, 0xffffffff, 0xfffefe, 'veth1_to_bridge\x00', 'ipvlan1\x00', {}, {0xff}, 0x73, 0x1, 0x21}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@inet=@udplite={{0x30, 'udplite\x00'}, {[0x4e21, 0x4e20], [0x4e20, 0x4e24], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @private=0xa010102, @broadcast, @gre_key=0x5, @port=0x4e23}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@ah={{0x30, 'ah\x00'}, {[0x8001, 0x40], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @multicast2, @port=0x4e23, @icmp_id=0x65}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0x0, 'veth1_to_hsr\x00', 'bond_slave_1\x00', {0xff}, {}, 0x6c, 0x2, 0x25}, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x3, [0xf, 0x0, 0x4, 0x3, 0x7, 0x2], 0x6, 0x6}}}, @common=@unspec=@conntrack1={{0xb8, 'conntrack\x00'}, {{@ipv6=@mcast2, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, [], 0x1}, [0xffffff00, 0x0, 0xff000000], @ipv6=@ipv4={[], [], @local}, [0xffffffff, 0xff000000, 0xb0ef20d5eea81bb0, 0xff000000], @ipv6=@loopback, [0x0, 0xffffff00, 0xffffff00, 0xff000000], 0x5891, 0xae7, 0x4, 0x4e22, 0x4e21, 0x4e20, 0x4e24, 0x200, 0x1001}, 0xc0, 0x4e}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x6, @loopback, @empty, @port=0x4e23, @icmp_id=0x64}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x9fe6, 0x1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x38, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r6, &(0x7f0000000100)=[{{}, 0x0, 0x100, 0x9}, {{0x0, 0xea60}, 0x14, 0x401, 0x9}, {{0x0, 0x2710}, 0x16, 0x7fff}, {{r7, r8/1000+10000}, 0x4, 0x40, 0x6}, {{0x0, 0x2710}, 0x17, 0x3, 0x81}], 0x78) 19:28:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x1f, 0x7}], 0x18) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x14, 0x92e, 0x9}, {{}, 0x12, 0x4, 0xfffffffe}], 0x30) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000180)={0x43, &(0x7f0000000100)="5924a9ff3110aee1432771b72fc915eb6feac8d74586b2b63b8ae0cc7f3cff1c6d5ea22e1db4804d132d5c31269edc7cf22a10485a0292236e154e0540aab83770c331"}) 19:28:10 executing program 0: socketpair$unix(0x1, 0x2c94cbbe4d6d94a7, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000000000)={0x81, 0x4}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000380)=""/4122, 0x101a}], 0x1}, 0x0) write(r2, 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000300)) utimes(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x354, 0x98, 0x120, 0x0, 0x1f0, 0x198, 0x198, 0x1f0, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "d652"}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x34a) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046) ioctl$TIOCEXCL(r4, 0x540c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0xfffffe00, 0x1, {0x1, 0x2, 0xfffffffd, 0x2, 0x4}, 0x9}) [ 526.896456] FAULT_INJECTION: forcing a failure. [ 526.896456] name failslab, interval 1, probability 0, space 0, times 0 [ 526.940297] CPU: 0 PID: 395 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 526.948035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.957386] Call Trace: [ 526.959976] dump_stack+0x1b2/0x283 [ 526.963618] should_fail.cold+0x10a/0x154 [ 526.967775] should_failslab+0xd6/0x130 [ 526.971756] kmem_cache_alloc_trace+0x47/0x3d0 [ 526.976346] sctp_add_bind_addr+0x6c/0x350 [ 526.980593] sctp_copy_local_addr_list+0x2ae/0x400 [ 526.985535] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 526.990307] sctp_bind_addr_copy+0xde/0x430 [ 526.994639] sctp_sendmsg+0x1c15/0x2cd0 [ 526.998629] ? sctp_id2assoc+0x210/0x210 [ 527.002692] ? rw_copy_check_uvector+0xc8/0x2b0 [ 527.007357] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 527.012232] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 527.017051] ? selinux_socket_getpeername+0x260/0x260 [ 527.022234] ? dup_iter+0x240/0x240 [ 527.025845] ? kernel_recvmsg+0x210/0x210 [ 527.030012] inet_sendmsg+0x11a/0x4e0 [ 527.033806] ? security_socket_sendmsg+0x83/0xb0 [ 527.038555] ? inet_recvmsg+0x4d0/0x4d0 [ 527.042519] sock_sendmsg+0xb5/0x100 [ 527.046223] ___sys_sendmsg+0x6c8/0x800 [ 527.050182] ? get_pid_task+0x91/0x130 [ 527.054067] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 527.058804] ? lock_downgrade+0x740/0x740 [ 527.062937] ? __fget+0x1fe/0x360 [ 527.066372] ? lock_acquire+0x170/0x3f0 [ 527.070327] ? lock_downgrade+0x740/0x740 [ 527.074471] ? __fget+0x225/0x360 [ 527.077926] ? __fdget+0x196/0x1f0 [ 527.081457] ? sockfd_lookup_light+0xb2/0x160 [ 527.085931] __sys_sendmsg+0xa3/0x120 [ 527.089713] ? SyS_shutdown+0x160/0x160 [ 527.093671] ? wait_for_completion_io+0x10/0x10 [ 527.098323] ? SyS_read+0x210/0x210 [ 527.101930] ? SyS_clock_settime+0x1a0/0x1a0 [ 527.106318] SyS_sendmsg+0x27/0x40 [ 527.109842] ? __sys_sendmsg+0x120/0x120 [ 527.113978] do_syscall_64+0x1d5/0x640 [ 527.117853] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 527.123025] RIP: 0033:0x45d4d9 [ 527.126216] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.134031] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 19:28:10 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 527.141287] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 527.148549] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 527.155810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000060 [ 527.163077] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x8, 0x8, 0x0, 0x1f], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000140)={0x56, 0x500, 0x718, {0x0, 0xe47}, {0x3, 0x7}, @rumble={0x1000, 0x9}}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={&(0x7f0000000180)="55246ad7d170840d53b009dcff96ccd6a66b58eb0c5febca8988572e81e7dd5017515c9a1e311c2ef11b7b4e493154d44357f89217d422c7319951b6fcd43fc3e785873f847398933f68ca0de96a4cfc51b6553b80a730ba9e739c325b4af805332eff9c633db70c9d87c4397667c28ab4d26f86841ace357e125acb8eec261ecdb32af31015fcc4caffa41efeece74a958baa258813870ea43bc41ae80f1c71320acaddb8bd291b5cfbd190c657332859", &(0x7f0000000240)=""/72, &(0x7f00000002c0)="054921782a54121204869afcaa9e61fb26c6cd91d8ba0ecb6e43e8076d4e7e34bc32265d9000fdc27e5f45453d99f144da1b75865d19e4996f3f0a37279f70769f9ea758216dd4eacf9aca6f7749ed3f5bd2777c10a0b6636ad82d6e3af2fe056fe68a5731c351893454d67789440877954063bcd3ef2beab3b96dcd6e83275f6e1174", &(0x7f0000000380)="8815e7ec1b6ff416a780d8c436b2bea8d9b5e724a69b4953b1bf56bd7128a42d7cbad1163247112658b616025f05925a5457950f739a72fc376feac0c477d2fdd77a85a4ef9a393815a554ac77c0500af05c277991d2d540a836096dcfc0576108b7496968cc37de9ca73f51fe606e191a1fca5275323c94e7863e06cce59a680bdee6df950edd154b3e8221b77f1b5972c6925199c859dcc500d8a2b8f7a22014105e92b2fe55738f29ecf3a2ea8fc34aeaeb7feb44960eaedc7966e7190c349e313e02278b83c4e12f084c6c0839b5527970118ce3c82db20b8612ce7510c7abced045a516be31495eabcba2fb73f1", 0x9, r2, 0x4}, 0x38) 19:28:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/dlm_plock\x00', 0x11a400, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000001fc0)={r6, 0x3b, "c8b721b24fe4ef5600f0953eea822b2451217c3301e4d75af56b5bd012b9761899f1596a0679d1039151b81849e06c21676834215351ad4df493ff"}, &(0x7f0000002040)=0x43) recvmmsg(r2, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000240)=""/44, 0x2c}], 0x4, &(0x7f0000000580)=""/78, 0x4e}}, {{&(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000280)}, 0x1}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000840)=""/7, 0x7}, {&(0x7f0000000880)=""/63, 0xffffffc8}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000009c0)=""/243, 0xf3}, {&(0x7f0000000ac0)=""/30, 0x1e}, {&(0x7f0000000b00)=""/33, 0x21}, {&(0x7f0000000b40)=""/90, 0x5a}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x9, &(0x7f0000001c80)=""/190, 0xbe}, 0x800}], 0x4, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4098, 0x1002}], 0x1}, 0x0) write(r2, 0x0, 0x0) 19:28:10 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x202, 0x1) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0xb}, 0x8000}) [ 527.207325] Cannot find set identified by id 0 to match 19:28:10 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x6, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x9f, 0x100000000000001}, {0x4b}, @cond=[{0x8, 0x2, 0x5, 0xfffa, 0x3, 0x2}, {0xfff, 0xba7, 0x7, 0x0, 0x5, 0x20}]}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0xd0242, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), &(0x7f0000000240)=0x8) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000040)=""/7) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000280)='./bus\x00', 0x17f442, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, &(0x7f0000000140)={0x0, {0xfffffffc, 0x9}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x4000000000010046) write$evdev(r7, &(0x7f0000000040), 0x0) 19:28:10 executing program 1 (fault-call:4 fault-nth:97): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000080)) 19:28:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x52, 0x0, 0x0, {0x6, 0x100000000000001}, {0x1}, @cond=[{0x0, 0x8000}, {0x49, 0x800}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:10 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) r4 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000180)={0x4}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x4000000000010046) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@int=0xff, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x7, 0x4) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$SCSI_IOCTL_DOORUNLOCK(r7, 0x5381) [ 527.350833] FAULT_INJECTION: forcing a failure. [ 527.350833] name failslab, interval 1, probability 0, space 0, times 0 [ 527.386835] CPU: 0 PID: 435 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 527.394565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.403918] Call Trace: [ 527.406507] dump_stack+0x1b2/0x283 [ 527.410145] should_fail.cold+0x10a/0x154 [ 527.414300] should_failslab+0xd6/0x130 [ 527.418284] kmem_cache_alloc_trace+0x47/0x3d0 [ 527.422875] sctp_add_bind_addr+0x6c/0x350 [ 527.427116] sctp_copy_local_addr_list+0x2ae/0x400 [ 527.432051] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 527.436813] sctp_bind_addr_copy+0xde/0x430 [ 527.441144] sctp_sendmsg+0x1c15/0x2cd0 [ 527.445132] ? check_preemption_disabled+0x35/0x240 [ 527.450147] ? sctp_id2assoc+0x210/0x210 [ 527.454825] ? selinux_socket_sendmsg+0xdf/0x260 [ 527.459588] ? selinux_socket_getpeername+0x260/0x260 [ 527.464779] ? dup_iter+0x240/0x240 [ 527.468418] ? kernel_recvmsg+0x210/0x210 [ 527.472569] inet_sendmsg+0x11a/0x4e0 [ 527.476366] ? security_socket_sendmsg+0x83/0xb0 [ 527.481121] ? inet_recvmsg+0x4d0/0x4d0 [ 527.485099] sock_sendmsg+0xb5/0x100 [ 527.488816] ___sys_sendmsg+0x6c8/0x800 [ 527.492790] ? get_pid_task+0x91/0x130 [ 527.496678] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 527.501439] ? lock_downgrade+0x740/0x740 [ 527.505659] ? __fget+0x1fe/0x360 [ 527.509116] ? lock_acquire+0x170/0x3f0 [ 527.513072] ? lock_downgrade+0x740/0x740 [ 527.517217] ? __fget+0x225/0x360 [ 527.520665] ? __fdget+0x196/0x1f0 [ 527.524197] ? sockfd_lookup_light+0xb2/0x160 [ 527.528674] __sys_sendmsg+0xa3/0x120 [ 527.532455] ? SyS_shutdown+0x160/0x160 [ 527.536416] SyS_sendmsg+0x27/0x40 [ 527.540066] ? __sys_sendmsg+0x120/0x120 [ 527.544122] do_syscall_64+0x1d5/0x640 19:28:10 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x35, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)=0x3ff) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e80)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000340)={0x30, 0x5, 0x0, {0x0, 0x0, 0x401}}, 0x30) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup2(0xffffffffffffffff, r2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffffffffffe}, {0x85c}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in6, 0xfffffffc, 0x1, 0x0, 0x2, 0x0, 0xfffffff9}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0x1) [ 527.548005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 527.553184] RIP: 0033:0x45d4d9 [ 527.556358] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.564046] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 527.571296] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 527.578549] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 527.585826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000061 [ 527.593075] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @ramp={0x100, 0x20, {0x7, 0x8, 0x20, 0x8001}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) 19:28:10 executing program 1 (fault-call:4 fault-nth:98): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x0, 0x9caa}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 527.736286] FAULT_INJECTION: forcing a failure. [ 527.736286] name failslab, interval 1, probability 0, space 0, times 0 [ 527.775193] CPU: 0 PID: 463 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 527.782924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.792271] Call Trace: [ 527.794869] dump_stack+0x1b2/0x283 [ 527.798508] should_fail.cold+0x10a/0x154 [ 527.802673] should_failslab+0xd6/0x130 [ 527.806649] kmem_cache_alloc_trace+0x47/0x3d0 [ 527.811324] sctp_add_bind_addr+0x6c/0x350 [ 527.815565] sctp_copy_local_addr_list+0x2ae/0x400 [ 527.820540] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 527.825312] sctp_bind_addr_copy+0xde/0x430 [ 527.829642] sctp_sendmsg+0x1c15/0x2cd0 [ 527.833636] ? sctp_id2assoc+0x210/0x210 [ 527.837697] ? rw_copy_check_uvector+0xd4/0x2b0 [ 527.842366] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 527.847205] ? retint_kernel+0x2d/0x2d [ 527.851077] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 527.856156] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 527.860896] ? check_preemption_disabled+0x35/0x240 [ 527.865891] ? retint_kernel+0x2d/0x2d [ 527.869766] inet_sendmsg+0x11a/0x4e0 [ 527.873547] ? security_socket_sendmsg+0x83/0xb0 [ 527.878283] ? inet_recvmsg+0x4d0/0x4d0 [ 527.882240] sock_sendmsg+0xb5/0x100 [ 527.885937] ___sys_sendmsg+0x6c8/0x800 [ 527.889909] ? get_pid_task+0x91/0x130 [ 527.893783] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 527.898605] ? lock_downgrade+0x740/0x740 [ 527.902738] ? __fget+0x1fe/0x360 [ 527.906173] ? lock_acquire+0x170/0x3f0 [ 527.910130] ? lock_downgrade+0x740/0x740 [ 527.914290] ? __fget+0x225/0x360 [ 527.917730] ? __fdget+0x196/0x1f0 [ 527.921250] ? sockfd_lookup_light+0xb2/0x160 [ 527.925727] __sys_sendmsg+0xa3/0x120 [ 527.929510] ? SyS_shutdown+0x160/0x160 [ 527.933469] ? SyS_read+0x210/0x210 [ 527.937083] ? SyS_clock_settime+0x1a0/0x1a0 [ 527.941473] SyS_sendmsg+0x27/0x40 [ 527.944998] ? __sys_sendmsg+0x120/0x120 [ 527.949048] do_syscall_64+0x1d5/0x640 [ 527.952921] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 527.958094] RIP: 0033:0x45d4d9 [ 527.962927] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.970615] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 527.977863] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 527.985115] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 527.992363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000062 [ 527.999612] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000906010100000000000000000000fb84604ef1926fa1000004000780090001a473797a3000000000"], 0x2c}}, 0x0) sendfile(r3, r5, 0x0, 0x5) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000000)={0xa, {0xa, 0x0, 0x20}}, 0xa) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) 19:28:11 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000094a372618aa596e55000000000000000500410006000000040007800900020073797a3000000000157d5bf56fe3f6fa022ac21e24722f3a9186a9fb397c4c4eb954230ba33b18c4878629f5214d6f3f479c27497c4231d97834f76b45dc05752b2de6240dc1f1bbd78b61648e788f466cd7d39acb39bc9c0cb39b3393aaddfb3a4957760bd32ff04c9e3616a274f71b58fe42724162ba93b06086f945ac4f86bf348c5c97fbfea00ea9556edc94cd90ed4778812d1e331ae3e320ae70fa411a9c5ae896aff454dda03d9528a2d1137333e6c1048a71ce282aacdda59ede298e47209a8a38a433269c2a67fa88"], 0x2c}}, 0x0) r2 = accept4(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000001c0)=0x80, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000084000200000000000000", @ANYRES32=r4], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xdc, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2000000}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x5, @loopback, 0x7f}, @in6={0xa, 0x4e23, 0xff800000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000000}, @in6={0xa, 0x4e23, 0x400, @private1, 0x7}, @in6={0xa, 0x4e21, 0x7fffffff, @private2={0xfc, 0x2, [], 0x1}, 0x5}]}, &(0x7f0000000240)=0x10) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) ioctl$sock_rose_SIOCDELRT(r8, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, @null, @rose={'rose', 0x0}, 0x0, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) 19:28:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000280)) socket$isdn_base(0x22, 0x3, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) accept$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x2c0002, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000180)=0x4) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000200)={0xd88, 0x9, &(0x7f0000000100)=[0x819a, 0x109, 0x1f, 0x1f, 0x5, 0x4, 0x3, 0x2, 0x0], &(0x7f0000000300)=[0x50f], &(0x7f00000002c0)=[0xfff, 0x3, 0x9, 0xad, 0x5, 0x7, 0x1c, 0xfffc, 0x4, 0x9], &(0x7f00000001c0)=[0x6, 0x9]}) 19:28:11 executing program 1 (fault-call:4 fault-nth:99): perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x8, 0x47000000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000200)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$9p(r3, &(0x7f0000000100)="65fc4ec51d1ea121f7945c18d22bfbfa4663660d05555ba427f61b97e1ef53a3a037e74ca7b98de97e67b6229a68dede30d05d86c0c5dae9caae43fc8c61a6242ddbbc8c12c47b3a996108ccb05cf7c8d1e3c365ea8b69e2a834d093fd14c55c7dd09b844d1c11b08749214a401dbbb7d51ac77ef6b5e8a836610dc6057e9b3ace597cbbe0219b33846433e8472843ffa797af3386dbdb2caac94e69c90f397da1337cff98d5d0e2b651a1658b27353accd5579d8d08d24f7c567e4a1e38f4f262f74caf188d4da9ba225b3d068a67a7f1a21a69171d75a47c71529203807f9e", 0xe0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 528.138988] FAULT_INJECTION: forcing a failure. [ 528.138988] name failslab, interval 1, probability 0, space 0, times 0 [ 528.162502] CPU: 1 PID: 490 Comm: syz-executor.1 Not tainted 4.14.193-syzkaller #0 [ 528.163415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 528.170235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.170240] Call Trace: [ 528.170257] dump_stack+0x1b2/0x283 [ 528.170273] should_fail.cold+0x10a/0x154 [ 528.170290] should_failslab+0xd6/0x130 [ 528.170302] kmem_cache_alloc_trace+0x47/0x3d0 [ 528.170318] sctp_add_bind_addr+0x6c/0x350 [ 528.170332] sctp_copy_local_addr_list+0x2ae/0x400 [ 528.170348] ? sctp_inet_bind_verify+0x1c0/0x1c0 [ 528.170366] sctp_bind_addr_copy+0xde/0x430 [ 528.170379] sctp_sendmsg+0x1c15/0x2cd0 [ 528.170400] ? sctp_id2assoc+0x210/0x210 [ 528.170414] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 528.170434] ? selinux_socket_getpeername+0x260/0x260 [ 528.170443] ? dup_iter+0x240/0x240 [ 528.170460] ? kernel_recvmsg+0x210/0x210 [ 528.251011] inet_sendmsg+0x11a/0x4e0 [ 528.254803] ? security_socket_sendmsg+0x83/0xb0 [ 528.259547] ? inet_recvmsg+0x4d0/0x4d0 [ 528.263515] sock_sendmsg+0xb5/0x100 [ 528.267220] ___sys_sendmsg+0x6c8/0x800 [ 528.271177] ? get_pid_task+0x91/0x130 [ 528.275057] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 528.279801] ? lock_downgrade+0x740/0x740 [ 528.283932] ? __fget+0x1fe/0x360 [ 528.287370] ? lock_acquire+0x170/0x3f0 [ 528.291340] ? lock_downgrade+0x740/0x740 [ 528.295485] ? __fget+0x225/0x360 [ 528.298922] ? __fdget+0x196/0x1f0 [ 528.302446] ? sockfd_lookup_light+0xb2/0x160 [ 528.306924] __sys_sendmsg+0xa3/0x120 [ 528.310710] ? SyS_shutdown+0x160/0x160 [ 528.314665] ? wait_for_completion_io+0x10/0x10 [ 528.319319] ? SyS_read+0x210/0x210 [ 528.322926] ? SyS_clock_settime+0x1a0/0x1a0 [ 528.327317] SyS_sendmsg+0x27/0x40 [ 528.330835] ? __sys_sendmsg+0x120/0x120 [ 528.334884] do_syscall_64+0x1d5/0x640 [ 528.338760] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 528.344197] RIP: 0033:0x45d4d9 [ 528.347380] RSP: 002b:00007f1f1c591c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.355075] RAX: ffffffffffffffda RBX: 000000000002be80 RCX: 000000000045d4d9 [ 528.362343] RDX: 0000000000000060 RSI: 00000000200008c0 RDI: 0000000000000004 [ 528.369592] RBP: 00007f1f1c591ca0 R08: 0000000000000000 R09: 0000000000000000 [ 528.376841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000063 19:28:11 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xadc2, 0x0, 0x2, 0x8001, 0xe49, 0x1000, 0x4, {r4, @in={{0x2, 0x4e22, @broadcast}}, 0x1, 0x200, 0x7fff, 0x5, 0x5}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x3ff, @private2, 0x8000}}, 0x7, 0x184, 0x8, 0x0, 0x104, 0xd4f, 0x7f}, &(0x7f0000000140)=0x9c) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 528.384092] R13: 00007ffec4cb86ff R14: 00007f1f1c5929c0 R15: 000000000118cf4c 19:28:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="fdffffff1f000d000000965f4b708dd143630e773bb010a49a1c00627ac6673d37696c5a8ea931fb7565f26117a6749a97d15699bc9bd161c4f2040000009d43e4defe07f8e77b4400ce2b585733df6e1cd5eef4eab0893d52810443d898111619c091c09bb4d304803dc30c3d65b8802c8210e5b78c32a4bbe52e"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000100)=""/67) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:11 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000040)=""/49, &(0x7f0000000080)=0x31) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:11 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendfile(r3, r3, 0x0, 0x4000000000010046) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x3, 0x6466}) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 19:28:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0xac, 0x3}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r4 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="84", 0x1, r4) r5 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="8f657f63fed27129ce17548f74533a7a6bebb9d300125b15a565d9c9c416ecacfd62", 0x22, r4) r6 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r6) keyctl$dh_compute(0x17, &(0x7f0000000240)={r5, r6}, &(0x7f0000000280)=""/23, 0x17, &(0x7f0000000400)={&(0x7f00000002c0)={'sha256-ce\x00'}, &(0x7f0000000300)="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", 0xff}) write$input_event(r1, &(0x7f0000000140)={{r2, r3/1000+10000}, 0x16, 0x1}, 0x18) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 528.569737] encrypted_key: insufficient parameters specified 19:28:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400b747ad15dc879bac00"/20], 0x14}}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000090609b6001600000000001ff1a96fcdaf53b2000000000005000100040000000400078009000226fc736790a6007379"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendfile(r0, r2, &(0x7f0000000040)=0x8, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x120) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) 19:28:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r4 = accept4(r3, 0x0, &(0x7f0000000080), 0x80800) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @private=0xa010100}, {0x6, @broadcast}, 0x4a, {0x2, 0x4e23, @rand_addr=0x64010100}, 'veth1_macvtap\x00'}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252002cb18f6e2e2aba000000012e0b3836005404b0e0301a7b2c75f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1f0816f1f6000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x40}}, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) write$P9_RREADDIR(r7, &(0x7f0000000100)={0xe4, 0x29, 0x1, {0x200, [{{0x2, 0x3, 0x5}, 0x4, 0xfe, 0x7, './file0'}, {{0x0, 0x1, 0x2}, 0x237, 0x4, 0x7, './file0'}, {{0x4, 0x2, 0x8}, 0x101, 0x40, 0x7, './file0'}, {{0x4, 0x4, 0x2}, 0x7, 0x81, 0x7, './file0'}, {{0x20, 0x4, 0x2}, 0x6, 0x80, 0x7, './file0'}, {{0x2, 0x3, 0x4}, 0x4, 0xe1, 0x7, './file0'}, {{0x1}, 0xa69, 0x1, 0x7, './file0'}]}}, 0xe4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8002, 0x44002) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xb4}]}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x40, 0x4) write$evdev(r0, &(0x7f0000000080)=[{}, {{}, 0x1f}], 0x30) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x4, 0x101, 0x1, 0x8, 0xffffff81}, 0x14) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)) 19:28:12 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) sendmsg$inet6(r3, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000180)=""/152) accept4$x25(r4, 0x0, &(0x7f0000000040), 0x800) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r5, &(0x7f0000000140), 0x10) io_submit(r6, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) [ 528.939787] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:28:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000002c0)={0x0, 0x0, [], {0x0, @bt={0x200, 0x3, 0x1, 0x1, 0x4, 0x422, 0x8, 0x0, 0x0, 0x3f, 0x101, 0x0, 0x80000000, 0x800, 0x1, 0x10, {0x9, 0x9}, 0xc4, 0x87}}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) pipe2(&(0x7f00000001c0), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000040)=[{{r5, r6/1000+60000}, 0x0, 0x1}, {}], 0x30) 19:28:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000280)=0x10c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELSET={0x8c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xa1}, @NFTA_SET_USERDATA={0x66, 0xd, 0x1, 0x0, "7810ca4aeb1d6257a8efaeb9b48ec68628b53bbda7d8abe05d9f0f6673c40037403d03ce6160cef37d0f5d19873a678921f7b360f43020431d3f393891bb9f9674225232779e0a496220ef3d90d86f620733c93a308948e456802662f1125ab35dba"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb4}}, 0x4) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x800, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 529.029337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:12 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x14) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:12 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@private2, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x7ff, 0x1, 0xffff, 0x580, 0x971a, 0x40000, r4}) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x68002) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000090601010000808000000000000000000500010006000000040007880900020073797b3000000000"], 0x2c}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x200, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000100)) 19:28:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/12, 0xc}, {&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/154, 0x9a}], 0x6, &(0x7f0000000480)=""/133, 0x85}, 0x2000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4c}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x2, @local}}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) 19:28:12 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYBLOB="0000000020000d000000965f4b708dd143630e773bb010a49a1c00627ac6673d37696c5a8ea931fb6e65f26117a6749a97d15699bc9bd161c4f2040000009d43e4defe07f8e77bf65cce2b585733df6e1cd5eef465b8932c8210e5b78c32a4bbe52eb2bb77d6c0ab02704f9f84652c340a864c88c0a9f81d"], 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x97c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4587}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x8800) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) 19:28:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) splice(r0, &(0x7f0000000100)=0x9, r1, &(0x7f0000000140)=0x100000000, 0xffffffff84c0addf, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) mkdir(&(0x7f0000000080)='./file0\x00', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r2, &(0x7f0000000040)=[{}, {}], 0x52a) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f0000000400)=[{&(0x7f0000000200)="1a9bc1c2e4df079782ea38d6c5976871d6676cb5572cded41c317ab4bdb6cb07275fc41c41143377", 0x28, 0x3}, {&(0x7f0000000340)="f9a98e9bcfebb38cdc37c908fc2c0020cd3a5370859d3e16f4f7762e359f103f55c2589c360c7c7eb03b847a6f7482f4ccbe7c16001b78a9800204671d3c53233451425b43d7943ca86df21a247c997f0704b21e660093618c415d994809b0c064c2ccd46cf27f6a228dd99d368fc2bb7d86bde2ef0be5b0c3b0bc6d5ae67ee140ae83a559c2a85af9fb2739e1d455d21d16466bb66178f33f0793720ce60afc80aab51c826f86d97706793e3769fabcec205b660c436f73", 0xb8, 0x3}, {&(0x7f0000000240)="4166e77f16ed7a90eb24a4ac52125ecdac8e26816f35ceee97", 0x19, 0xd72d}], 0x12, &(0x7f0000000480)={[{@disable_ext_identify='disable_ext_identify'}, {@lazytime='lazytime'}, {@prjquota={'prjquota', 0x3d, '\''}}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@prjquota={'prjquota', 0x3d, '/!,'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/input/event#\x00'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@subj_user={'subj_user', 0x3d, 'syz0\x00'}}, {@fowner_eq={'fowner', 0x3d, r8}}]}) 19:28:12 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x76, &(0x7f00000005c0)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "b8f87452160bcd26"}}}}}}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000001c0)={'wg2\x00', 0xffff}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', r4, 0x4, 0x9, 0x5, 0x7fffffff, 0x39, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, [], 0x1}, 0xde12980619fb23b6, 0x700, 0x9, 0x5}}) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r5, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x17, 0x86ff, 0x9}, {{r6, r7/1000+10000}, 0x16, 0x8, 0xfff}], 0x30) prctl$PR_GET_TIMERSLACK(0x1e) 19:28:13 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) dup(r1) 19:28:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) write$evdev(r0, &(0x7f0000000040)=[{}, {{}, 0x0, 0x8000}], 0x30) 19:28:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x7) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x10000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0x4d, [], 0x1, &(0x7f0000000140)=[{}], &(0x7f00000001c0)=""/77}, &(0x7f0000000300)=0x78) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x942f, &(0x7f0000000040)='geneve1\x00', 0x80000000, 0x3, 0x7ff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000000)={0x0, 0x0, 0x1008, 0x7fffffff, 0x80, {0xfe000000, 0x8}}) 19:28:13 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x21, {{0x0, 0xffffffff, 0x3}, 0x6}}, 0xffffffc8) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f0000000380)=""/211}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000100)={r1, &(0x7f0000000040)=""/178}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r3, &(0x7f0000000140), 0x10) io_submit(r4, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000080)=0x4, 0x4) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b, 0xffff}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0xa5d3, 0x8000, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) sendto$netrom(r4, &(0x7f0000000100)="728b58e517740ed0388f53d5964aacb8ca24594a9e8a3629769c9f7e969686cd3a2822a5f50996aabd187fa2bd4a96f5ce2e17799733a27ae578d7a8d025cbcc66e517bcd0f3", 0x46, 0x4000804, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f00000001c0)) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) semget$private(0x0, 0x0, 0xc) [ 529.917221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:28:13 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 19:28:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x20080) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x4, 0x7]) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @const={0x7, {0x6000, 0x8000, 0x7, 0xc7b1}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x5, 0x5d, 0x1, 0x4, 0x234, 0x3, 0x2, 0x0, 0x800}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000090601010000000000000000000000000500010006000000040007800900020073797a30000000001383503e745b5d6a2cb81b65e728f9233fe5420322f7b5b4ac1b4340ced818b55bdba216747d9118aae413e144d348b9d5e4d23302ae0ba7e8e3c503b8f800dca96d98944724c3cc8f0e90d8e21c17126878922636e3b36112e0cb5558e7f3e4d6"], 0x2c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000100)=0x1ff, 0x4) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:13 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='.\x00', 0x0, 0x10}, 0x10) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000080)={@none, 0x1, 0x9, 0x101}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x96) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:13 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x19a33, 0x0, 0xfff}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r3, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x0, &(0x7f00000002c0)=0x0) connect$can_bcm(r5, &(0x7f0000000140), 0x10) io_submit(r6, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x7fff, 0x8, 0x3, 0xce, &(0x7f00000001c0)=""/206, 0xf6, &(0x7f0000000380)=""/246, 0xdd, &(0x7f0000000480)=""/221}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x35}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, r3, 0x11, 0x3}, 0x14) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4048000) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x30, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x240820c3}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xfffffffb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0xfffb, 0xfff, 0x3, 0xffff}, 'syz1\x00', 0x40}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x449b) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) 19:28:13 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x655a74b4f1fd0abf, 0x4) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0x3}}, 0x28) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000080)=""/81, 0x51}, {&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000100)=""/101, 0x65}], 0x3, 0x8, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000440)=""/74) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xc}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000040}, 0x24000080) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000003c0)={0x100, 0x20}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000340)={0x1, 0x70, 0x7, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x9, 0x10000000}, 0x422e4, 0x400, 0x0, 0x7, 0x2, 0x7f, 0x2}) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x32) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) shmget(0x1, 0x1000, 0x204, &(0x7f0000ffe000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="11380000", @ANYRES16=r5, @ANYBLOB="000200000000ffdbdf25010000000c2099000100000000fffffffa00010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000049c66a2de76bb10db2259df950de9600db7a37d84f4081f0851cbf7fdc261c8c3eb500072f23ca7bee31a10a74c240af3701c74b3a09db1f45ea8fe6c2ba2b30052a8a6bd998bebc9f8a022e7b448a8ce4587c72c678879e8395476d02c55010ac4bed802cca77acc8035f81726601364f4f64e0c50b6e483892bfa66703785c192bbf635d427cef636301ffce0f07b66b20f0a3000000", @ANYRES16=r5, @ANYBLOB="c56900000000221e8c3513aa6db30c94fc0c4f8045178ce746df8aba787afb0f3e537c1bb4fc8868413f"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044000) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:13 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) fcntl$notify(r5, 0x402, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000180)={0x7fffffff, 0x2, &(0x7f0000000080)=[0x5, 0x6], &(0x7f0000000100)=[0x200, 0x3, 0x3, 0x4, 0x7fff, 0xcb], &(0x7f0000000140)=[0xcc]}) [ 530.790367] Unknown ioctl 35090 19:28:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x5, 0x7ff, 0x2a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, 0x7, 0x80, 0x1, 0x8}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x94, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008004}, 0x40081) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 530.820635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50761 sclass=netlink_route_socket pid=684 comm=syz-executor.4 [ 530.875386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 530.898353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50761 sclass=netlink_route_socket pid=684 comm=syz-executor.4 19:28:14 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x8c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_macvtap\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x8c}}, 0x0) write$binfmt_aout(r1, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"/1412], 0x57a) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) sendmsg$SOCK_DESTROY(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)={0x1300, 0x15, 0x800, 0x70bd2d, 0x25dfdbfe, {0x1b, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x13, 0x1, "8122bed3dce2d19e5c8a1e1be6ac77"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "f0af08f261936fbc5803ee4f505d0905c1d2a6904a6099119b36d7a1a45a6612a231307f2e7860f21c"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "79999c551469f1e482b044f98ad0849f635529966d187693c4552f6fc53b1e17512dddbc0b5f1d682602c4453bfc6f494fe8971f3188a397f0a2850fcbf50ddf5383ecd29b7912f43a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "14ca778304e2d53d586e562d693d59b2e45fb3b69c5dc3e8990360f59e6285cce8b083696a372cad38e7e9090958bcf4b98052e0f7b3bd7084d6b34e1bd899438195803718a54f458fd80ecdb697aa9e61c4264c2c5d24dac3e20f6cb1f551e0adef8db5a8d42afdd3194c53deeba21f19341a1424a4c47ddeb2cc4e22dd344e74056cad7c5653f55798db06dc897af755d81591a61b45ca88398690812756bb51b71975247da47c4ef91729367234f76cb2a392aa362f4d1dd3194b5fd94689f72ce58f8b5f6e5b6b454b997da5bdd8039f1f91f47e0870521cd88a3e800ed32afe0d52f22a8303fe219c28baec4c0dc3ebaeb29b7b"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "f5b5e8a0bf7ae4e434676d5d6df5eb04bdecfaf94c5f818ca0e1e0e8b43c1d139a951f01b678e77911fb83820b179e0af764d9e04d53dec56ef931a13120438ff47cd437524615f0bd6a148b92c2f4d4430c6e9a500ac039f0be7dc7b866808ab3c605bac06767e413311d096450d2226cfe1b17e87954ee9a0a9b834b455abbfc4c2f460f820b6bace1d0583a5b2046af5b8cc8b9d0351c61"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "16529a71b16f3b3f33b431d0a846f899b8980e369619f345de6bbf0302da308554ec2c0ab5"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "5fbe4a9e53dd24773977443488e753e01c8073f67c7e6b1c51e3dac0d3832854"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "79a76c446f2bc1665b253b3db558a3dd5a1353db8976b1f6dec0fbcd7e69898ebe5383bc5de5b6dc5311c730487678dc26a7c2f944cf34b8b53422e2eb30ee8f089070bcdd69af314ea8027ff773681b8a1f2851daed30e271109e746639b052f3acf6fc"}]}, 0x1300}, 0x1, 0x0, 0x0, 0xc014}, 0x8001) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x9, 0x80) ioctl$RTC_PIE_ON(r2, 0x7005) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {{}, 0x0, 0x0, 0x3}], 0x30) [ 530.952664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:28:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x53, 0x8000, 0xffff, {0x3f, 0x100000000000001}, {0x4b}, @const={0x4, {0x2, 0x0, 0x5, 0x40}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000000010046) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) getsockopt$sock_buf(r6, 0x1, 0x3d, &(0x7f0000000440)=""/91, &(0x7f0000000100)=0x5b) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48070000000000000000000000000000af291bed52da1600000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00f3ff2c00270d0b4f9baac53e0000000000000000000000007dd738b5dee8e2608cd0ca8e413062810317b9", @ANYRES32=r7, @ANYBLOB="00334ffc8b981ca245dce55374cd00f7ffffff40020e0000000c0c00000081d954cd8b020c590fef47e78f0b22c05b04067846b79b567da7cef151a780bcce4a4b9bb4ba95dd3515c02cfb8c991dae737137296e2a8b590258d1e133f167869760717fc35cebd0c82cb46c6fb1f9be0c55a8"], 0x3c}}, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r7, 0x1, 0x6}, 0x10) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:14 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c8000002c00270d000000000000000000000000363988a5f56947c82d09b85ce70d7d876559f066305f16a8fea0f2b85adfcb9b0528addb83e324c9f8508975f613cffa0a60fcd3a1603d6382cafe7668554bf26ca3104a3f84e12c58b91ddee29c63548f785b9d9ddce403f2882d051f719bb3c64f7526f22d79994613a2893126f10400538787563a913d", @ANYRES32=r1, @ANYBLOB="00000000000000000e0000000c000c000200080001001b240000"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x4, 0xff, 0x59, 0x8, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x7, 0x10, 0x8000, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x2f, 0xf2, 0x5, 0x0, 0x3, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1, 0x88, 0x2, 0x5}}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 531.031465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 531.064499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:28:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0xffffffff}, {{}, 0x3}], 0x30) 19:28:14 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x800, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/23) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 19:28:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r3, 0x0, 0x0) 19:28:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0xc4a42) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0x100) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001400)='/dev/rfkill\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x1000, "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"}, &(0x7f0000000080)=0x1024) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)) r5 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x100000000, 0x100) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f00000013c0)={0x7415, 0x18, [0xed7, 0xcd4f, 0x4, 0x7, 0x1, 0x7]}) write$evdev(r3, &(0x7f0000001340)=[{{0x0, 0xea60}, 0x1}, {{}, 0x0, 0x0, 0xfffffffd}, {{}, 0x0, 0x5, 0x10001}], 0x48) pwrite64(r0, &(0x7f00000001c0)="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", 0xfd, 0x2) 19:28:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:14 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0xfffd, 0x0, {0x0, 0x100000000000001}, {0x2, 0x1ff}, @const={0x4, {0xe00, 0x7, 0xf67}}}) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000100)={0x0, 0x1, [0x1, 0x8, 0x9, 0x8, 0x3, 0x5, 0x0, 0x3]}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$evdev(r2, &(0x7f0000000040)=[{}, {}], 0x30) 19:28:14 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:14 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000040)={0x7, 0xffff, 0x0, 'queue0\x00', 0x401}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 531.581263] Unknown ioctl 35090 19:28:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x0, 0x1}, @cond=[{0x200, 0x0, 0x1f}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f00000000c0)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) ioctl$KDADDIO(r2, 0x4b34, 0x1) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = semget$private(0x0, 0x1, 0x128) r2 = semget$private(0x0, 0x4, 0x200) semctl$SEM_STAT_ANY(r2, 0x3, 0x14, &(0x7f0000000180)=""/67) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000100)=""/79) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:14 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012200900010076617468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0xffffffffffffffff, 0xe22, 0x2, 0x6, {0x6, 0x2, 0x200, 0x4, 0x4, 0x2}, {0x0, 0x2, 0x7, 0x0, 0x9, 0xff}, 0x4, 0xc83, 0x20}}]}]}}]}, 0x74}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000001540)={'syztnl2\x00', &(0x7f00000014c0)={'ip6gre0\x00', r6, 0x29, 0x9, 0x9, 0xffff8000, 0x21, @mcast2, @private0={0xfc, 0x0, [], 0x1}, 0x80, 0x10, 0x2, 0x6678db0a}}) sendmsg$nl_route(r0, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@ipv4_getaddr={0x2c, 0x16, 0x2, 0x70bd26, 0x25dfdbfd, {0x2, 0x1f, 0x20, 0x0, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x4e80, 0x6, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x20000010) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r8, &(0x7f0000000100)=[{}, {}], 0x30) 19:28:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)={r5, 0x100, 0x6c, "ad90c5ba9dadc22a4a68a8c35986a8fa721be2091361c2a1f4700de4fab00b3d2aa81eccd203cc89a6d49f718631b7f0b03851d9215eb570c48ed04cd29f397766603009fdb3e2af7bc8e05e2e9c93168324a65036f864c44a52eb49e4fbd4fafb4414c515f5a57851062150"}, 0x74) socket$inet6(0xa, 0x800, 0x1f) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000180)={{0x2c, @remote, 0x4e24, 0x1, 'nq\x00', 0x4, 0x80000001, 0x39}, {@local, 0x4e24, 0x3, 0x80000000, 0x0, 0x10000}}, 0x44) 19:28:15 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/cgroups\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000010046) r3 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x0) ftruncate(r3, 0x1000000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x109202, 0x0) sendfile(r4, r3, 0x0, 0xeefffdef) ioctl$EVIOCSABS0(r4, 0x401845c0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) write$P9_RLOPEN(r4, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x0, 0x0, 0x7}}}, 0x18) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000180)={r5, &(0x7f0000000380)=""/211}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000140)={r5, 0x1}) sendfile(r0, r1, 0x0, 0x4000000000010046) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040)="79303339786e306489142a353dc4cf2ec420b03e7172d44e4c2ba7f19a2440ea9da1b775b5a4802a56556ea19b36bfe5d0cb13e44d83d5", &(0x7f00000000c0)=@tcp=r6, 0x1}, 0x20) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) 19:28:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) 19:28:15 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000380)={0x7, 0x0, [{0x7, 0x8000, 0x6, 0x20, 0x5, 0x3, 0x81}, {0x40000001, 0x10000, 0x4, 0xff, 0x1, 0x9, 0xfffffff9}, {0xb, 0x7, 0x5, 0xfffff000, 0x6, 0x80000000, 0x400}, {0xb, 0x1, 0x6, 0x365, 0x80000001, 0x80, 0x2}, {0x1, 0x1f, 0x2, 0x7f, 0x5, 0x5c, 0x6}, {0x40000000, 0x8f15, 0x6, 0x1, 0x7fffffff, 0x3, 0xc5}, {0xb, 0x3, 0x4, 0x0, 0x3, 0xffff, 0x7f}]}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, 0x0, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40811) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r2, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCEXCL(r2, 0x540c) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fc) r3 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r6, @ANYBLOB="0000000020000d000000965f4b708dd143630e773bb010a49a1c00627ac6673d37696c5a8ea931fb6e65f26117a6749a97d15699bc9bd161c4f2040000009d43e4defe07f8e77bf65cce2b585733df6e1cd5eef465b8932c8210e5b78c32a4bbe52eb2bb77d6c0ab02704f9f84652c340a864c88c0a9f81d"], 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x64}}, 0x4000000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x800) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x800, 0x0) ioctl$SOUND_PCM_READ_BITS(r8, 0x80045005, &(0x7f00000003c0)) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r3, 0x0, 0x0) [ 532.583479] audit: type=1804 audit(1597865295.693:26): pid=821 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1077/bus" dev="sda1" ino=16139 res=1 19:28:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000080)=""/44) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:15 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x0, 0x0, 0x4, 0x4b5dfe22}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000080)=0x3000) write$evdev(r2, &(0x7f0000000040)=[{}, {}], 0x52a) [ 532.795381] audit: type=1804 audit(1597865295.913:27): pid=821 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1077/bus" dev="sda1" ino=16139 res=1 19:28:15 executing program 1: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r1, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r3, &(0x7f0000000140), 0x10) io_submit(r4, 0x0, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c01000009060101000000000000000000000006000000040047640900020073797a30e4ff000000000000000080a1074eda9004286f3b5934cc05481b398d68765aa33615cd0d8395cbbcbba79113c899c2183bca02b3dde1cf08b7754051323604e0e752259c4e4641fad073ac0023f1a326a01989c87cd5582aff6fc70610d4f82eed651e2630975e9069bed90405b260a69a4f2a6af640bc7d2bcaa5236508d41ffef1d2a5e4a8ad2cada218a73f051d1de1dd565a96f98ace93b08d4574393100a212939752a6027fc71fc5e72e4f2724b25962441240cd0c919c61d0e9111e79c64f5bfcc0946a0947d514f8f9"], 0x2c}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) poll(&(0x7f0000000080)=[{r5, 0x14a0}, {r6, 0x101}, {r0, 0x1100}, {r7, 0x401}, {r1, 0x2001}], 0x5, 0x6) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:16 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) getsockname$tipc(r3, 0xffffffffffffffff, &(0x7f0000000080)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x4000000000010046) bind$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 19:28:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000380)={0x5, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r7 = open(&(0x7f00000003c0)='./bus\x00', 0xac940, 0x4) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) ioctl$TCSBRKP(r7, 0x5425, 0xe3b) setreuid(0x0, r6) fsetxattr$security_capability(r3, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x7ff, 0x100}, {0x1, 0x8}], r6}, 0x18, 0x2) 19:28:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r5, @in={{0x2, 0x4e23, @local}}}, 0x84) [ 533.068070] audit: type=1804 audit(1597865296.183:28): pid=855 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir027044625/syzkaller.MyeHj3/936/bus" dev="sda1" ino=16158 res=1 19:28:16 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x9918d0411834beed, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000080)={0x400, 0xfffffff9, 0x4, 0x9, 0x2}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:16 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/94) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 19:28:16 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x8001, {0x0, 0x100000000000001}, {0x4b}, @cond}) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x1a0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x4, 0x40000000}, {{0x77359400}, 0x0, 0x0, 0x2}], 0x30) 19:28:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x51, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @const={0xfffd, {0x3, 0x8, 0x8a7d, 0x2}}}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101002, 0x0) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r3, 0x0, 0x0) 19:28:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:16 executing program 2: open(&(0x7f0000000040)='./bus\x00', 0x401442, 0x116) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:16 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)=r0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x55, 0x20, 0x0, {0x0, 0x6}, {0x4b}, @cond}) write$evdev(r2, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:16 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', r4, 0x2f, 0x7f, 0x0, 0x7ff, 0x0, @mcast2, @local, 0x700, 0x10, 0x5}}) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x101000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x7}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) shmget(0x2, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/218, 0xda) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x40000, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000240)) write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x2710}}], 0x30) 19:28:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x7fc, 0x4000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x54, 0x0, 0x76c0, {0x2, 0x100000000000001}, {0x4b}, @cond=[{0x4002, 0x10, 0x5}, {0x0, 0x0, 0x0, 0xfffd}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:16 executing program 1: perf_event_open(&(0x7f0000001340)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x40880, 0x1f, 0x0, 0x8, 0x8}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x40}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000000c0)={0x5, 0x2, 0x40, 0x3, &(0x7f0000000040)=[{}, {}]}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x3, 0x4000}, {0xfffe}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x200200, 0x0) unlinkat(r3, &(0x7f0000000200)='./file0\x00', 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 19:28:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus/file0\x00', 0x10440, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000100)=0x4) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}, {{}, 0x0, 0x400}], 0x30) 19:28:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x151000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x2}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000080)=0x2000420) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r6, 0x56, 0x7f, 0x1a, 0x8, 0x48, @empty, @mcast2, 0x1, 0x7, 0x4, 0x2}}) write(r3, 0x0, 0x0) 19:28:17 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11070000000000000000f600000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2f64627f245e7c7b1e86073c389d36f4a212b72c5b2f61930e1dad39251ea8d143c8f6a7a7a721aa5c385547506eabd61befce8bbb7ee3e0442f4a433304884d882023f56537ed465448be2a62c1a929612dc38404849bb907eced2e", @ANYRES16=r2, @ANYBLOB="0000faffffff5971005a0f4e3c"], 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x800) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x8001, 0x9, 0x5}) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000340)=0x8) 19:28:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x18001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0xca8, {0x0, 0x100000000000001}, {0x4b, 0x4}, @cond=[{0x0, 0x400}, {0x4}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="090000000906010100200000000000000500010006000000040007808800"/44], 0x2c}}, 0x0) accept4(r1, &(0x7f0000000100)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x80000) eventfd(0xb1000000) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x0, 0x400}, {{}, 0x7, 0xdd}], 0x30) 19:28:17 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, [], 0x2}, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) socket$inet6(0xa, 0x6, 0x8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="eb000000afd31565f4c4857ffbdb64d85ebded6a2b7439f5379e1da6a53b4f8a25ca4d413d358023d3aa7a8d9c3984bc70ef99d927687cdec7b87c993b8fe69a1b2d401b9164f2f86bfc10879468bdabf7409a8e82661196dba5390ee94344de327c1516c4a07e0afdfde5bb6035d49fdc911e9ec3898f27e802b70d787997979f4dcc66c622da3a5175626b97d9cb47d19086cae9ff01000080000000008aea1c7a1d0966052c03d2960dec6461c126bf3af5683fc83c09600bebb8b34fbb2a5ea104b78b5e5f939ece38aa4e0b9602d59e24d66312fb4da80e7840f206c972961cab9075f51c70e9ea28948f8144c7bf32a631e0313d8ca2ff493fa4ef40b0e6166adbf065247a6e6147ae334157e2085354e02608e359c469ce3e6af7cf8cf5e759ca4c9f1cc1499cede15f3e5c0fd44244838989cca45aee5d55ebd3d329b1458d48572a7e76096a7977a486dd2619eba7e2fda6d5400d0e444d8a89ac922a658455fde47b7df52c8e35c36206b098e45f0aaa2704b44ed9d5919442cb"], &(0x7f0000000240)=0xf3) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x426040, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x4c}}, 0x4008004) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) 19:28:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @ramp={0x3, 0x8000, {0x2, 0x3611, 0x1, 0x7ff}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000280)={0x142, @time={0x7a06, 0x1e82}, 0x9, {0x5, 0x4}, 0x80, 0x2, 0xec}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) openat$urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x204000, 0x0) bind$rose(r2, &(0x7f0000000240)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7fff}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000480)={0x5, {0x2, 0x7fff, 0x6, 0x9}, {0x7ff, 0x9, 0x7, 0xeab9}, {0x80000000, 0x1ff}}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000609060101000008000000000002000000050002000600deff070007800900020073797a30000005006b0f8a79f6702d7be8a2504a778448f58e54c6f23b37f5a816c7f72d745ee97f750a3239437892c07c63ba1904e6ed30d104be1fa11bd50d48a02e8ffcb9ae4ad7136b58846261f355c5837d6f81583674914fea8568412c514d7ed713829469c85c"], 0x2c}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000080)={0x1, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000200)={0x401, 0x3, &(0x7f0000000100)=[0x4, 0x2, 0x81], &(0x7f0000000140)=[0x401, 0x5, 0x9, 0x101], &(0x7f0000000180)=[0x7, 0x9], &(0x7f00000001c0)=[0xfffffff9, 0x1, 0xff], 0x0, 0xa9}) 19:28:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x100}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 534.453906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:28:17 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f00000001c0)) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r2, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x2) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000140)=""/85) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') 19:28:17 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e21, 0x9, @local, 0x9}}, 0xfffb, 0x5}, &(0x7f0000000140)=0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f00000001c0)={0x3ff, 0xd7, 0x4, 0x1696, 0x4, [{0x1b438c69, 0x36cd, 0x0, [], 0x800}, {0x6, 0x1, 0x9, [], 0x880}, {0x3f, 0x1, 0x3, [], 0x2500}, {0x6, 0xfda, 0x34e, [], 0x480}]}) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) fstatfs(r1, &(0x7f0000000040)=""/209) 19:28:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000001c0)=""/224) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000000c0)={0x0, 0x6d, 0x0, {0x0, 0x100000000000001}, {0x4b}, @rumble={0x4, 0x4da}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}}, {}], 0x30) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x9) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) getsockopt$inet6_buf(r6, 0x29, 0x2e, &(0x7f0000000380)=""/162, &(0x7f0000000140)=0xa2) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x80100, 0x0) sendto$phonet(r7, &(0x7f0000000440)="9b4b347d6810b0a455fdb45f2c56e83601c42831e8a489014e1525943932710db0d3affe7b88e141a3424a0d99a0803e94b94c41396e5e87ee7f3f99e2ede7e55613c5b019bf34e02626b17ec57c262664b3fa5c69d143ea5794de20564171f93173d161b1f43bff4593271f538d5d22705db4a6691810e4f4efc6bba9199e43d4ffa2addf623b05a1a2a7c2d4215115f64b354d676d32122f16e9f11628b433470810628062693fc07e1d44464bc026340864a341238b", 0xb7, 0x1000c880, &(0x7f0000000300)={0x23, 0x6, 0xfb, 0x40}, 0x10) 19:28:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000009860100000000ad0000000000000000f7c20332abd4a59dc14f5a53b00500000005000100060000"], 0x2c}}, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r3, 0x0, 0x0) read$proc_mixer(r1, &(0x7f0000000100)=""/187, 0xbb) 19:28:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000100)={r4, r5/1000+10000}, 0x10) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @period={0x5d, 0x1f, 0x4, 0x9, 0x20, {0x0, 0x1, 0x800, 0x9}, 0xa, &(0x7f0000000080)=[0x3, 0x52f, 0x1, 0x2, 0x7ff, 0x3, 0x7, 0x0, 0x3, 0x3]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:18 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FITHAW(r0, 0xc0045878) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCSBRK(r2, 0x5427) 19:28:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x3ff, 0x5]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) 19:28:18 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) remap_file_pages(&(0x7f000001f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 535.191449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:28:18 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0xc0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x3, 0x0, 0x20e99c36}, {{}, 0x0, 0x100}], 0x30) 19:28:18 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x4004001) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r4, 0x7, 0x5}, 0x8) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r5, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:18 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e24, 0x100, @private2}}}, &(0x7f0000000100)=0x84) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) 19:28:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000005c80)={0x5974, 0xd, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000000000000000}]}, {0x13e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd0, 0x6, 0x1, 0x0, "5035af021e43e4b737459632d550028d4fa5155158957358389f774d47e91573e7fb921454a4ef2fe0b650c37d731f39f37dc4b056622765f833a9983cfcaf070483905fab6694f27088917394d07432195fe489c1223549a3c20715332acfc722a7a5a9fbe1a4b1ebf5b2a36ee5356c83037d3646cb0f8b5863ecdc48af551508d06ad7780947f24bc04fd7f7f0245847f138716ce2512c61bdc96e94abda4eea82dc0cae5dc03489e9586287780a84a142c9f51b056ac3ababbef4996b09b6787d19666b5cfd490703c39c"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x30, 0x1, "e335db74bd5373f76678b8c578e1da7e2ad0490991a4943ba8ec364c87b7757b2a0448685c56202284d061f4"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x12a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xed, 0x1, "a199b1d04a52564cd3af9522be0ad1d78a9566346f242ad71e6aaf8401f5047f3a2bbf96c13a9028d13cd41e537903417d10c4267af99d4628394a4d010f91b81f2bae40f0f0907f3254e3471c32c8b4f70c12fa3ed2fd085f55b7224dd7a9ce0cd0ec2adbbc3834daf5a841d0c218ad44af48e4afb99e34aabc2b3d28290885ad4409ddf65b00f5fd049ca99ef2e7e53f92fdc1c878e5642a9e97e0a1281a5da4a9cf9924f51c9623cf0d32a43f3fbb0f9d426492f813c67e299e6aa9fdc85369880f39dec7038bb76cb3ab7f2629986f25841de57363b592f2092b50ebbd950f4b839b220f79989d"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "286f1781df391c1d9295812871859ef24385d47b2df0f4500bad5f01ff45503f117bc8081075d1172b6dfb0183d802999c32c82dfd7c825af3eb142a3246b9467916bb5fc5ffefa7e8"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x795}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x198, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa4, 0x1, "db6810b3e7f3d40846505d2494c2d6075930937d9c1c51e476a1022a30a08c4cced403aa29c08f0ef6d7c70593c0beb193e8fb21163cc147578a5a1006abea8c4115b9a63ea2a4fae705aaa0314bd1005e18c81c1beec8fc4f566040aa0395ff5a7f9c9faa3f91ab1f39d553b98fc3e4fa1c61b9e0bf236e7740aa96a5960c6b73bc5d9331eba685cb0a7fd9b647ae4bf850e71f5cc12a3811bd55aa5aacff2f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x62, 0x1, "17eac2591d8042bd82f4e0c3825cc53dc75534fd8011e04c0ce8f19e69206a56390116c268cdd6e22f1465aaf4caa194da9d559f375d13e40788929aae447ab112e6e849030e7f3efcb024fcea7c643b5696a82150603c4160b11e92858b"}, @NFTA_DATA_VALUE={0x1b, 0x1, "52279fda7fa19a220ce029e185fd66cd27ffdb0b4f3320"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x67, 0x6, 0x1, 0x0, "7a30203b7953bfb9392eda484cef8403da12933b0affa60ffe59d93568b7fc39fecfabf39956e554a2a7d87337d063a9e80f810fa0e19198d1b17a2c803c910ff0c7aed35d8e97b5fccf33fb85b4eb41d984e37f17ef6b69b33e45d26332b0e278befe"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x27c72607}]}, {0x3f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x3b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9c, 0x1, "8964586cd5c9cfb5c27423b3fecc63bd728c86c4d68dffc8fc395b08e22a47a29154f772103103482f1668f76eefa920051d51435cabd0c4bb2c64183b243611c96ed1cb3bd1d2289c9a5e29f8899d4593f5418d4e521959a4b47b20a53c52e052e50d1e45cf9b78e0f4870e4b0100dfdb99ffce372b964b0f0476a3161979d9dddd4b4a04a07abdd3cdb61fe0e5511268f84cb2199bb8af"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x103, 0x1, "c22540704efd4c6198466e1d53d274490b136dad1f1013012205e4da61319ade13201ffba47ffdcbe16e2e1422bf4c20d4a997b88174ca3fd45bf76838f36109b34a85e5016b06d99d2310586bf4309aeafefde10053b9de71e37586ed3cb3050f3481d805079ddaef479e4f2f44d3983bd34ea72b53d82cc53bf977dbdd3fb4189025cf91b15cbba252c532e22e5b9e6072ef3bf34189810a3cf74a647c0921c2f023859d2fc8d9bce6080cc930a67fea452c17206b30e50154d74c7ee4f0adf6c4b5a75f5f54d82661e0f919dc6af687d5d325c056a1477d0c2a840b67ff315a465e254f1366d469535dc2ccc219835867a04b2900f7ffbc3b313fc71c54"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3f14, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb3e96678000}]}, {0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x184, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "6f810ac81c0bfb39d75ffac8ef17e2a70ad99d92b2acb7d371341ec153544ad07e1f9025b729d6eeab15cbacafbc9c10dc8b87d3edad511678ae9175c3d4a225bfffc5ac8ad163d8cc5d3f9122e2cfb3ae0add4c0b344023f1b53422"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "7c7f0b071188112f97adbc58f579b1c0fad2463e466b4b8ccea6ee"}]}]}, {0x540, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xef, 0x6, 0x1, 0x0, "0d1982fb790369c242b992d3b6c37a53ea31b8b0f3bf1f8b3cbe39aa35dfb071cb8ae16b6ec25ea6c07d6124a9fcc77cb7e8063e6dde4ab28369acd82699ef86b9a8c693ff9112de0fc11120afeee72da4a78f42ee2ac6126ac3114d96cf02b5adbc48d6a40e916da56980062e36c6a51d9541d95a6424390035693b2cbdce59fad1fc2bfa90130cad20d3f2c6e4518adbb04d29ea42894731c590adfc8565316e170d6352fc02b226e834c660d10e3eb21011fc6a0b8c7820b50454e02baade880e53c1cc5e23a9bb4ed904561694b8ea5839ca158b40eb50a9c9291b715e9f58588c40ef0b88f0133d69"}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3b, 0x1, "2a64e0ae675d5162093c85b3ca01829674a7eaadc72b058feca795cd11285b7e8a1d7fa6978a9e2914dd7edf854f240818abbbaf376ee3"}, @NFTA_DATA_VALUE={0x61, 0x1, "289ffb16893015b3f190fc81b4ceb3f052a5941c0a198d064f93463860fa869dd8cf2175257454e680358110e55c79b9907c73ed817f4da9e11e721b2ae2da37f6d0aefd0ac6c3a7cf98b8366f859d9b45879accc64a1ccbcd55039b8a"}, @NFTA_DATA_VALUE={0x18, 0x1, "520c98d8b8c86426e2ebc4e216ccdfb489db79aa"}, @NFTA_DATA_VALUE={0x4e, 0x1, "050badcf5b41d8458fa94c2bd6d84f552843efce235eadf1e037ac9df01e8ec441b21070f0406afebea44c94f2dc4f6c1f062c7e29c797dba85576ae86dd3996ab3fac7920ddfa4bfbf6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_USERDATA={0x66, 0x6, 0x1, 0x0, "f003f209a25be8f48bc49125bb8f00722a6d690d0bf5c13dd5a8cd39fc26a391afb1260d168c41a81981c96cb5817dad29355ed397374c69f477879f3cce8445813d9168790749f16cfd18ded106f392230c0814e594b65acb9b788e3696a0130837"}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf1cd}, @NFTA_SET_ELEM_KEY={0x25c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee, 0x1, "f04cbbb86a1732e6e6d7fd4fb5abdd07861cce618510fdb812161a38e2072c4a4c939aace26d1c3afb11cb516c68e4a333beaae2ddcc53b1da65f0863c3f33dabffbddadc487842ff74dad1cb34a23a448ea03e5e1792de6fe8462ec8ef9b7d02e9ce82a693cb65723b4ce77ddda768183fec5f64dfb08ea340e244dd06cbbcb2384ac6fe5cee8098d525dc8bfe63a30136da3bad98494585836069a20e74ebec345327b8ae06513e7c5a6fd0b837fcaa2d5250eef34e4e91a1f25c035c927e5b6b4e5fe88f261d8215cd8796d322e0f708c387c45bdeec54dd51c5e1421b27130e72753fa1868d02139"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xce, 0x1, "a9ad08055fcabfa09ad8f38b9979cd8cd9d20840271fc7353100ddac877b11e0ac581baaa7b416c7006369ba29e3a18a2b441f1493e3938985d2d3aea6517762312690c2c93404841d7226025d16f5473e0bea55778c432410fbfd10ea41c866a01b7015a4f739a354a66f36f1e9d8adcbe74bc4ddb2221645c852e57b4df2cd4127a7a1742b45d7de552697678de208c485e6393476648aa4a1a4965f44d9aaef7145661680aff3400be05788baa20950cd21a1dcddd5bfcfa60a2534bfcae1ae75cc3097f6462d8bb3"}]}]}, {0x142c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x11ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbf, 0x1, "0fd7319fa12ab35d0ba2484abc446e3b691ba2599d92d2e5340ad1b69ad613cc7b51cb9b8214c53aeb46a1bcef4f83d19320959bee5ee205f83a35e16e13070af6d40eac8d8fc537e4a2c5e1186dcb4e5d5da14b6d081073c66e498410c2120788654d540ff5ad14f2c082b2a1d1bd49a7a600f82c2085173c7511a6119ef4b4e019ddb0910a57266dc7ab071a3281e6b774e79ea319e253af11c1476415350db09ed29f3c26f68faa027ea2a09d3c61c87bfa86c29d097a928cac"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xe0, 0x1, "2c6f75930a0a0c69dc1e8f87c32bcccef4b2e7e7466fdb3526a56e191a37b23566d06601748c1c04f930a240501046d265273a6acef4a5e2abe4896f27c1f9c97e41ce834e7e682a0718af921f0b5ee279bc0e60ae99a9c5d62604b7d890bc6456fef047d9fe17c13ef8e640624b3a11c066abfbbe3cc64f554499b774e5e5b63bd08e0ea85c6641f55c7f2ba38a9a11c93cfce3c73b1e608030bc5a5c19e0e9d0c586e06cfac319eb89a5bc6f3020232d4e1200fb8af989d283911b449c738e9ca43e82332d203006f11880c4117294561f50ace29b050f901d6ca0"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x7d, 0x6, 0x1, 0x0, "d37aa7154d5ccf3bbd8664a8758460c790df6ba72f8b0a1d5d9896bdbe6de0f2dfc9c96e09d543a7c74d05a9d9fca2405a026553c38cf2d1fdbf0edf50dcd333dd83e193793e785f23906e8ad843cde85bc0e73b3ab3354204ce3728c0347de915a4f3d008888af398b23f255596892d07ebb2bbc021be85c2"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x1cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "8bfcecd1b20726178c6df8d90b2b1a7976ff4544fe56b7da21601fb06f8582571326c5dc5ad5cc4a149900942292735fbcf50a5d8ae05b0190671b915294df3b3e02c9e07bbf304d3ccd6e5c77020dab88a6ba58d005098220b3641033b86495cedce846b4aa29256bb9448a5a22501bb2b663cd3809a531705a8d28f12125cd6fc416a9460d86a57b3faa05fbcdaeedbbd2a84ce0314cab9a692bfb3bfd23e5898d7308cab91cd68233ed05048550f7a073b040dd"}, @NFTA_DATA_VALUE={0xbc, 0x1, "f5a57f09467e5deeb890bd298a82e7fd9d119fc0ceda9efe85efafba574b884f42cb61b04ed4f4e8ad358f05eca4f27d20ae003ae4a7197a5bde0bf3494871154e5a8df1e7c72d9fdc6899180e7f9d553659321c73e62d3d3de2f8da8c3ec7d7c6ceb00dc55dff6f6d06f820361cf0e36d2ed8af896fc3b8e4e8b9b8460622f9ae2ecb584a86c1ace3ee4645b10080aff4906a561e3325422c2bb6d0f1b3e7c92d993d5163f0225d2e3db6bc4453afc10c6c9afa5af24d07"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x12d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x87, 0x6, 0x1, 0x0, "c3ac82db51824dcebe9fee2b00843977035561a5b25efb90099725622e65341a1fdb67bbeafaedbb6c328d7f6af3fce5de84bc468eb8d57e8c6e677f05b8089589a3747ba11e19e4b8c4edadbcb876eb425d2136cad27194d309bdacc7ba3ca7749a87bf020863420762cea696c62d9d203194d73d36613a7d0775f7093d4f42740d0e"}, @NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "93c696f57d05c24cc40d0a1fe11a20f7f43351cd5d5fabc0d458b4b6c86336665c85f590dda4725f3191eff10e80b72a61619d9ad08d62fdbf9e39d73ec656cd9ba1431983dd11878e8f02f0791420f4fc440ab36d8162eab7a89da0df262ba5bef1f2d6e19cb3e91f178df1fb06c0e8c3e24361ba2c3a5d3af2f224479878da4c56e4e1f5de50d573fc764fbd93d4483539872ab4b6ae5b5d72614cb663b1e305947a10ce834ad6a3b80ee07648df3b573987ca7e19cc8ac0ccdfaf76f13daf4547c4b8da3a42991afaaa649841a77d7d6be543f8d340fb33d58aa14b33d18fad5b81128830c4dc5321b2573836f00f0335"}]}, @NFTA_SET_ELEM_KEY={0x130, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "2cacce88df8e09417860d1399b121a1ae3a0f387112b8bf6845d007239bbe1e6f41a038d0617f8e521249f564c20b215fb66544b8f84f4f90090018459e374ad372a905dc056b912e8e3490d4cba139e37c322c94623b274c36fb7a838c264495ad8eb194af8283788a5d2145a219b6a3b1e42f654ea52c9e2bd03509ecc5954635fa86fa900ffe538b7195717559488fac052f89c2bc961c0c483058aedf5cc477b87bd1eea"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x10c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "26410e0258ad0304871e714ee62c6e7112112861ed225c72bafb85889d5b30013b9651985b385b9a81c0cae1e1f9a15a73dd82243b46374cef85d0fd86904e093ffbe230a04297db0cfd884a4a0e8e690ce40d0cb057052cf09361bd4a8b53f3424facddb269926d21807d10a9af1e749dfe1d77c41a3a7dcf0c0f539923353d191ccc62712abf49a6c663bec7685cc195bd35394cdeef04104ddb2172055931ef7151dc0839769ac40eb7cb1178ebe9938212b31e16eabfd0e7"}, @NFTA_DATA_VALUE={0x1004, 0x1, "f806fce79af75092cc5aac3de1a38d1ce9864b625450b473880d657db7024e35b84d6d988a6fd95c916332df915e6e61fd12219367516ac784344c5e1cf3256aed6e79c1b29a21265f33a97ef2ee14af68608cea8079716d32b15ee1084523c3c8fb7247ac41a4abebe1da8235c9e122b478df62bb8a608b8990d818b09520fb3c434c35380af736b34d127ec52263500a1cc4ec9c6160c937e3e4aaf321e4b4a0579ce4a73998a00ecd930b45f3899b7ba09b2167bb79af2bc6af008e666cc7b1f2fd32fa656e0e005d110caee4eacd527479fc73122276120ceca3b48ff4808b5818cafeebc4518a0e82ca69bc4db0ef8a4c3601357cfcbe3ede84b927ba0d926b5c0c91ba9b47250301bd215f01f6f357af6a1f6cb68543d7df8f9f46fa4d186a7304a2d5aeb26e35f363d4948f0444d56164a5d2fea9061d9ca901145b1657572978c42a0b3ded764a38f030476c97b46ff61f4d3cb83003b44f89cd9aa641d23ba1e2786a350ffbb98fac56617fbd7c601a3736ce69fb72bb48ab4bdbf575ff484d6639610a3b2668807d45dae105d4f45151a9eaea05818235d951dc8a91181f1c999f65e7e7a831cad76193f7c5c8b98a0603ab529b9456316676f5c531cc39f65ac256fa6ff5a791fa2fc0e0a43317387832b25d94d15a989dfcee29c935a5193e0bee2e749a5737b143f801659864c8210317b4e5eccccc55bdb090009c67fe9f94a39d7c3b4e8834d79c570cb0e32026cc376a5334569be1569c1a12bfb92194dfb55c4ba696a7f7fc08900b4ea3bfe291dabfff495665682dc67f7695b2699e1b6dc3b7bde9ad21edfeee99690a478faee9dc250418ffdb5f593f73949b09ee70e00912dd4195f316ea832d8c358ff296ebf34375797192fb8b19cc2a15ea8911935fcd2e524ca619add8089792af9fd000e53f87858574a3b0c8507e96a6ec72cf4a1dae007523ed0145ea1d03a0960b0c979946893a10fa255bf2380f66cbaaaf973476168bfa4898a93e102ff480ba4ddf8b470e58261b2bfd23f1685042706865aba74f20ba004cf9468e22417a9ed5251258454a5896f89959027d0b01baa4258179f711c0df582c319bbdcfb91844ce642c3cddeea09f4d4a09e2de8694db38c864410580cb24ef8e8bbc2d34b755c869374a4b37ec7d93e82418a2aba7e365ce8114c022b6deb60ac2cbb49f1a172c019642a2d5dcfa905af5759b022bf50fdf26c2395edc554d9723febb75a4f523e0f26ce0dcee6402eea191d765a1485a2836d94d062200cfef2e8fbabd88bb997d69d753610130042f310f56daab0eee5b89c075b5bb10477cbf74b6f4282b004dd1fe8943bd94421825bfe51901411c9353d63690717ae2d75253479d9a14aa0af0bec1d7d63e0ea8875e952ee1c48905f4c88b9e01fd30d21843b9f92d5a6ee72ddc2972978add1166abbbe0e086bcce44231caceb8dbe61128c830fad0d40b9d7aa5e87b5a48af86a9117920f13b3c30bbd360caf81438062425a1039f26f0922fcde016ef4ee2433a4fa3822e6ca62c16ffc8f30ede32c4dec3aa6c25bc8519a4e697ed346de5272c16b4942b89367501e767a713407403d159c683996484436c1a390faf6670c5044939b2b0141ca779963dde47e7050926174693f6048a37f9c427bcda17665a1982ed52b4b72566616f9415ff0c96e3a799e05c38733f374899bd40ffb83db18c86227d4313ddd8e67f2a02d41c2cf4db4b27c05f484920cc468321c8a470dec3ddc5930f9e1d85c3d65da84ae46a53b36fe662fc703118b793c2f4ec94daf69be2f2cc977781de7a3ff1673dc75fb140641c6ed782003587e3317d14780f77179582ebe4542b7cf63a5a7205ee39b285f11d2e0ef9efbd264e45138ada435e9b385cb799e9d165942b6df4e673a7c46741f990e47f822a80cc79387c946e5a959eef54ae7dd4249ab0f49d6ff787a10417b838d101cc0a32d0d1719be7f11231c9b3043715ead853b426eb5e985f3c97e794bf1f36a7915c3d14f5a78679469340c1b4ca42fcab740bff85983ac3931563748ec574c099909ebd63cf04abee3d67bcafbd2665ab5ade777295c92a6dad33e071cf81230496f44e104302f6360251a53c55f1dbb6b5acb8a32ec79759da6fa6414c9774ab0b09e660b89de78b59210a9751e238dd1002ff83f95460c231fb35858c9c54a1c71e6bdabb5f49abbfa204307090c73d98e0fa491b41ed34ab916f242684f3275913a7be52e076afabd8df39669f592c45d02e54e687fbc78a3adb326e786cbf283b44e6a2c79a12702550020cb153d45c5b8b321452a59722d689c028ba0b5eca733c4ed61f7e20b28d48a9741d4287dd93abd985d3fe1537e2dd422b27b80a9643db163a30eb897c4b79b31bb562ce81152013d3da5b481a3dace7715f6c91821be923f38d61efb9ca0790180be9d270f835c0a433088d47f3eb56044169c1c583ee26e9169e3ea6e6f69085ec38acaad4c29607481c1c5d58f59b40d039c58add5982ca9511b0dcb7c25b08620de60a9f1fe56d4f718f15498d431a81197166cd43ef4c2715ed48646878a95a753b20e1114ff6d85424f6d7725378c9b193842c12b2fd9c10b10261247ec2441ac6fda6cbf292cd443a0f824bdba9a7a800b008d50af9c18e97ba8d0762a9e046d6ef299272ae0288da769c9437840ce6dbb79dc8afba13d9cd3ca5c26e245427018914e5323d1fc20411dfab47a353ca68c622b726a3d922994d949a673c0c9d5c360448b189e20552db75dc5e329ddff38b0a4daca84234f0d6f9925b654583f75276b9591b7b2e760761f2d8a1d4061ca35279c1b895453a46fb08126bef19cd85ec7f3cbf384326264b9605d72d7d84e9bfda7a2c709eaf6d2f0dcfee3d8bbdd17a62f1cd8e382724514687cfd8fbae74c802deea192dbee6d1e93a79803c645fee4fe9b87694c32128d63809dc5f0c3f6f016442fd1e66869c13c845447077303ccf318a94f5eb20a8b2611636ef15c0e41774807a489d5b1a299dbdd284b803bf9cde6f5a83c082e002840f0e820de54b045dd1f7ae387c7acd14c85b4a8fccb1d6e3e1a748755eabc9f8e3177b802530c34822b3bf6decf11911d6fc800048e487adbeafa0acc428c6f8df98bbb5877afafb8923f485783b77e90f96723c4f164c520f5dd957d750c9cb0570a44e6a8ec59f7899abe0f3401b76f5e46be3b04f2bffa5b6ba8d1d144d334a23e9b01150f2a97d9ab1cf619ffea1bb49fbfe9a09c3ae5477b8a8ed0a067f1f4adf0dd9ca9e568f3f6de1e12bf15e93a9ab7c96aa98a711e29665b2d227ed7bd351f1f83e0528f056a54baa17c96c14328909e101f508bc6f197bbf7c3764a87f19fb4499cf99d69c55d292e2f3bad3241cf9b4d0c984b402096de6d86d342ed753fb8557aed9058547dc24fb68bbee7439a2ff068afb36262ca51feede45de89eeceabdf64d48ff2585ad6731a9c3d0dde7926e123660566edcef028dcb2c98efd40192dff716f3d375b39db8b70d9267f9aef29fd98fe01fe7b220c630bf5f67239ca07b5f675d91b160d99ceee1f2c722d635fb102af3a9dbdb0ae87becab05d22066775cfc8c8400811b77b893fd7702fc46a128c8b72ed9d354dee214f9b3d7708e7b66bf089688fa28f657bc4933221848313b9d1ada56543e404933299c65ecf107c414c572ced60caf493cc95a0d7ee777ac451338ccb87402da08991b762b9bb7c11794b1e769acd3c1592242ceb75b78b8d180ec37a23e97ac393cec291b1b7bfb39dd1c0f03fc012d6b45b4ba3d9c531575f9a4879050b3362884d707912006adde8449ca33133b7138a5ef12f0b7b10ef6975ed88f398e420d31c13af6d4e55a3e04e0448d919c69a955e4700ffb5fc6edbe2fdca4b3c6f8a7f6b3464e5e377df90ac4a7af5ef113b5730763eeba0fb979dce4e79b1d782a2059aac976e26a7e3b65ea87abed9c06eab4ac096168e05247f69751420e8a05b21fb9d07aabf659ba0800865c8ad36fdb7b1d77c8d4549b5b9d9e14fe06c4a6aec68e1acb05a128c437d9ea8a56f5afa879e7d76adfb0011f7f6e449f1bdfe3ec7b655c228d120e86f12f2ee6b75e1e8ea8590517c7d69c09931e3fb80a14c5b50713206a6040e0abc85f0b4a615380e6d3f4b693c4a6ec196244773c267ad9eba165d43d1eefe31adf4d5e280ce6747950147617b0709173d01c04c1f68986f92a45a45b8cb04f78bbf48806bf753b754f015d88036d309b5e9bbeb21365de561e949cc589e9ef1e423bf22b5b3e84dfeb91e337b70eeae05bd416a69c434ffc5360f121e50757b99f61924fcdc63cfafe413d388819cad4aa41d98a39b8c99eda89ae9b4160f7461a6c4aeffbc598981a1867c21985863adaefb2a723ba92ce429fba184433bbf8ed4efeed9af5a59976e9644fc715cb1c6e13b5f573d1e25bad4b083ee13bad8ea47ff06017d473e0647d62a3c3b6dbc6b5cb0283c59a7318417fc993922e95a5a01c1967ae61d00ee92a2c689c9cdefb851fb4498baa86aa8338e1a79b89bab28c301b83eb70b7a346aee4bbb4ca35f653ac06d22be6ef0e95c73f11ce72882624b785b094b8e3a93cf8fcffd44481d064f397c69e6bae7861781c7803fea60eb76e9ebab341d0240ad8d239199f5ee9c2c9cc43de916709b7f222033d64ed6f29260829e20e7bf5ec6550a8d3f4feef1877f1cbdd10d36dbc3837121de357cfb5eece6b26a2621e834a98a9fb074eb576f611feb5f36d8f4b6066c6fa977f90ff819e1199366f06d5a68d7427fead97ddd5e91b66c515fe44406047b945513007f5bfa2917abc9708b7ad701f3483a325f5c2feea1d86929a34f70d991d70e3c63b288d573476ef35b8479ee82d8a3243b41a1f2c550f979d03f53109c56016d570aa0a3f3b5200925aa2c0579ca93a20d1d03663cf5c3308a2d071cdc25027268292bd31497497689ade07e86b7b1b4564708fc4596eeabc5c635d40b5f04a2f6f3df81a1f52826c170be11ff01809532eabc5358d2c718ade16f029fcba3e3721f2d82a530bb81d2d09d374cfd8bd8b2de7ffb26807a53a90c1dd59226cb9e3a07eb1411885226e19c03a7f4e7fb66a73a1e2d004f881b21f102292eb2690f169226c3d39d358202f971dd4e577db6515283a54e833c367c7c8727c7fb74cf96f24b7e1a2c013408278e860841afc71e080f85b5b199620b653eed1167b9d106fe4bdc483b5a1ab02f7119320574bd278e24b48ea02b98eefd18cd2a326778141a2b514d1ef85800153bc46d4e2ce298a651ddb2296004c9a9984fc052a4dba1131e80ad6b0c1b06a459427a88905f229055858a561b617322e70357e101b375ecc1ff195685714e8c400f91eb17669e4b9c9a3a0c9d5ba4ebfa76adaa3a43a6eb29735ed3072206e9acabb5ef30dea3df41dbf1962a17f5d3fd845fcf6fd7510de7cb79511449e36909522dbf2d1ac7a661c1def91e69a8b92c438265c3625092e5523a129035a85592ac1f0d4e95abdac00fea4428b4b4232d582c254a1016d3f0a49d0dd1f29b7709b677a6ed0c4ea3b02c7b5107d4c779595ccb854cfeb404ba69abd799ce0b95f4ef61fccf194216d99b13112010111c8f1a812b056cc718a7b82b8f0d8601c64f98a7f3b034d6b5d087a2ad034c5e1490d029804e9c4e92cf79897b99fb7f90bb8b87fa950437c0f1c0591694af5a878dfb1988c4f411ab75d8cce94976e5fd0169ebfb153d0527ef874002c055b0a1acec55a3586e613"}]}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x47, 0x1, "1314c4760ba5166692203815f1df678d0c85198f7dfb266734b1ca3b5d642743c1183b62e5a0a3d52580cea10294d14b12252241ea73803c6f72fdfea66cb1b5512fb0"}]}]}]}]}, 0x5974}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f00000001c0)) 19:28:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c000000090601010000000000000000000000000500010006000000040007910300020073797adb2449f13947bfb5cc7d2cf7a8afae38513ee2b70caeb968c0928a1dc27b7496ba13c5b2dda46fe0d5c30bf2"], 0x2c}}, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/180, 0xb4}], 0x6) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$unix(r1, 0x0, &(0x7f00000001c0)) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/94, &(0x7f0000000280)=0x5e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000090601010000000000000000000000000500010006000073797a30008000001450e58d83f2"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000000406010300000000000000003a0000070900020073795947486248ab229b0100070000008b071600f70cdba1dbb0c2e626502eb84b568c2a7c30de6c1495d7f6f9b82df4691b22455ddf"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x52a) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x901, 0x0) ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, &(0x7f00000007c0)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2a0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)='ip_vti0\x00', 0x3, 0x2, 0xfffc}) 19:28:18 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) recvfrom$rose(r0, &(0x7f0000000040)=""/147, 0x93, 0x10000, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0906010100000000000000000000409519a93c6991b9ac0ab2f0e1d60e9b0a5e000000050001000600000004a107800900020073797a"], 0x2c}}, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) [ 535.457054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.563110] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.600314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.611787] audit: type=1804 audit(1597865298.723:29): pid=1038 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1085/bus" dev="sda1" ino=16175 res=1 [ 535.683123] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 19:28:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x29, 0x5, 0x0) dup2(r0, r0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000300)=""/4125, 0x101d}], 0x1}, 0x0) write(r4, 0x0, 0x0) 19:28:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x0, 0x100000000000001}, {0x4b}, @cond}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000040)=[{{r1, r2/1000+10000}}, {}], 0xfffd) 19:28:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000010046) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x35}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, r4, 0x11, 0x3}, 0x14) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040000) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x30, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x800080, 0x20000000, 0xffffffff, 0xcb}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x4000000000010046) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000080)={0x2, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffb, 0x97, 0x3, @scatter={0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000180)=""/33, 0x21}]}, &(0x7f0000000200)="199becce778864b05f46e46f6364317c88a1003d14c84cf2ea4f01c0b57acf8add57709ea589fbc68a9472e5fca1abe6f8d80be79c8ac8d2dcb09cf98f97c04cd9787e142a5e78dc9515426a8bff36bbd3ba2059d873352538947102e480edcf0cbe1dddf19d7fe1d1046b822bd756a1a89ef09d25011a8e702c9cb0fa2c81c401728375b34d1ec6730b2668a7143a100f1d500bff3756", &(0x7f0000000300)=""/32, 0xfffffffc, 0x20, 0x0, &(0x7f0000000340)}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000400)={0x7fff, 0x6, 0x20}) 19:28:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0xffff}, {0x4b}, @cond=[{0x0, 0xfffe}]}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000300)=""/213, 0xd5}], 0x4, &(0x7f0000002cc0)=[@mask_fadd={0x58, 0x114, 0x8, {{0xc4b, 0x200}, &(0x7f0000000440)=0xffffffffffffffe0, &(0x7f0000000480)=0x6, 0xb8dcdee, 0xffffffff, 0xe0c1, 0x1ff, 0x18, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/87, 0x57}, &(0x7f0000000540), 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000580)=""/168, 0xa8}, &(0x7f0000000640)}}, @rdma_args={0x48, 0x114, 0x1, {{0x10001, 0x4}, {&(0x7f0000000680)=""/124, 0x7c}, &(0x7f0000002740)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/53, 0x35}], 0x3, 0x2, 0x100000000}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x96}, {&(0x7f0000002780)}, &(0x7f0000002c00)=[{&(0x7f00000027c0)=""/98, 0x62}, {&(0x7f0000002840)=""/112, 0x70}, {&(0x7f00000028c0)=""/37, 0x25}, {&(0x7f0000002900)=""/124, 0x7c}, {&(0x7f0000002980)=""/159, 0x9f}, {&(0x7f0000002a40)=""/26, 0x1a}, {&(0x7f0000002a80)=""/61, 0x3d}, {&(0x7f0000002ac0)=""/117, 0x75}, {&(0x7f0000002b40)=""/135, 0x87}], 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x160}, 0x8000) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x7fffffff}, {{}, 0x0, 0x0, 0x100}], 0x30) 19:28:20 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) socket$rds(0x15, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7ec1, 0x0, 0x1, 0x6, 0x1c99, 0x2}, 0x20) io_submit(r2, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x4, &(0x7f0000000440)=[{&(0x7f0000000140)="2e3be724e64109646d8f82c437c897f7f0a066bf81bfbd1c8c06690ba87571fa87b7e191d4b7bb97e848ed2985c8c0e8af97bec68a12e04ea3f51abfaa6a57e27c326b509a468ce4e79a1e49b8f927d22c57e36ebe1624a07cb89a8ada8a8f22db2f8523903cf42b3f7c4bef8f3deb5db72230b9aa5f099dfeacae2b7eff4149caf2f05fbf1512e2d2", 0x89, 0x4}, {&(0x7f0000000200)="0742a4d114c3be2aecd0fcc3cc63cf04e6295457530e7bf0d70b4142e1a7ace4b1515f7e6f762d4c365bc0a6f51fe33516e5e6ae824b52f1b36e361573dc33e5b6147c0e5badbf7d5d6baa68b1b45337d1571ab9771692e2acde18", 0x5b}, {&(0x7f0000000300)="49a15af9e637858a1b92e1e3e83a599f06213fe6b9582f9fcf98731378f704caea57a4735d2407b4e5879527625eb3305ddedddf9d2f66f531de3ffcfabd5f8015548a802a40158e62e050b1a47763ef59e58b7fc41657e3bc18b05b6f955e4e00d620eba462509ff511a477333761164ccb66a54629dcb0cccd60ea49e8af0167c1", 0x82, 0xa9}, {&(0x7f00000003c0)="2a0cdc45fdc6d88d380151fed095f4b0dd5f92de7e9e1465bd2fba86f29598531da12f8e9c4dcebae41d6105243e21b0b3d92731092df25e264ac93efd5ee5ab418dc719c651fa84b7f357c8500b3825b741b5d2b3f30fce68e0a326fad7b806fa48d185061818dafe9e8c86e2b4eed798d1", 0x72}], 0x4, &(0x7f00000004c0)={[{@lazytime='lazytime'}, {@block_validity='block_validity'}, {@abort='abort'}, {@stripe={'stripe'}}, {@orlov='orlov'}, {@data_writeback='data=writeback'}, {@nolazytime='nolazytime'}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/input/event#\x00'}}, {@uid_gt={'uid>', r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/input/event#\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0x200}}, {@hash='hash'}, {@subj_user={'subj_user', 0x3d, '@*:-'}}, {@subj_type={'subj_type', 0x3d, '/dev/input/event#\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100)=0x8000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000280)={'veth1\x00', {0x2, 0x4e22, @empty}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x4000000000010046) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000140)={0xffff6000, 0x2, 0xe0, 0x7, [], [], [], 0x8, 0x105, 0x74b6, 0xe622, "d428859aad0a47a80f7f5108c8b398a7"}) 19:28:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0xfffc, 0x0, {0x0, 0x100000000000001}, {0x4a}, @cond=[{}, {0x0, 0x8001, 0x0, 0x0, 0x20}]}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000906d0010000000000000000000000000500010006000000040007800900020073797a3000000000"], 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) sendfile(r4, r5, &(0x7f0000000180)=0x3, 0x9) write$evdev(r0, &(0x7f0000000040)=[{{r2, r3/1000+60000}}, {{}, 0x0, 0x0, 0x80}], 0x30) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x169000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000038c0)=0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000003900)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(0x0, r10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)=[{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000340)="7c227ccef1b0e043aeb8ff4fa454b4c78432149942032ec95b6c2c0249f2581393f03571b86ce36077aa1496792432a6f424b0f9940d4e499cc71c7cb549868f79a47d107aae670dd49b4411a7df0883cd7ffba130e9b7e6a1cb9252f04d677bf747f927ad9837ae336c9a7001241878a351f8bd89261603ac8a91b4a58c06b00ed18cd19cfb7381ace17e623a987a46572686e77a84a481cb39fe9ff63e5b17f04fc5a0f319f90cc52fe7d7bd02862870182153c691136f0ac4209a234cc18d2b4099dfdd3e64f45c5ef0b9b0f6d80f7689020371c9d89fe93e07f4d7d24bb653af39961246062cfceaf83f64da043a584d41", 0xf3}, {&(0x7f0000000440)="2520c4f089d751d1925715e590c38c6b8661b2e0fbef687aa8490ba23436ffbf98a32b2cb3bbed86ed1ee189d4cee7e4676c41d3108211", 0x37}, {&(0x7f0000000780)="d68d9da1d1352972cb4092cdacd8fb729cedd50650f312ba8814c1a607e6e284f01cf0588f18e51dd2e746847a84ccbc883bd4bf78b342d81e29630a839cabfb45a3004f8414b6ace8384839e820cc82fa865fc79ebb94631c182d65854b8a7962b9a27701d28eea62a67a383daabbb8d92d38866ae6e7320e886db71dff63cb5eeb726cedde9420fb28671bcca8cf0336eea2ec4eb60885aab8d0c0ad7f", 0x9e}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0xd0}, {&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b00)="3a3ee3ac5cef1fd7f09d7cc1a8b537a598295e56afc895e8d13a8762a21b7cd75da7a04a557a43822b06ee9b7faf1e9bcc5eff9287293987c75dc20d0edae5ecc179b7d7ff1827690d48b7f1d2fb1896f08754d4b6d75771e9a7429b3980e39a748dacf1eb146afa250699caef8a5b5a936e550e2283074be10aee13d97a0ea3bc2d26bffc5816c65b5addf2b150bd76ff639cc33f983d6c303a9f60ad318647b0b85657d215694ae6d8a274d3eedafffe300367aafd6b4f95367f8d62833bc7a6c03b073ddcd4c6112c5f", 0xcb}], 0x1, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70, 0x4000004}, {&(0x7f0000000cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000d40)="4da26a6d94a1db273fc0433f785b6df9678df2b104566fa0cc6d46896bf5755c3ea1457417ce68f09953dea107553a88", 0x30}, {&(0x7f0000000d80)="bc89d8511ee20a52fadd134d065a96b137f453d336ed8ee6cb8cecdf76e39be3d546367e1113fb3f1bb46388a1430196b5c45e62b922f89dd4427fa7ed2f31fc582f7608d32e482cf337dbf4b95de8d058a66a1026a59d71d2785e9a37317db6fa5913e27e67fbfa02958a9fd9c4a2494d6868476585ad0034aa875fa68db4234df0f855cb45ac62cd820c735a2222cd369d3441fd448f42d8fa3f19f077b173f911db06705dd904b82eed2c575840fbff6dea6bc53183458273d3", 0xbb}, {&(0x7f0000000e40)="5933f77d8f0fa3c2cafc1887c99982d92eac563623f4efe5b4", 0x19}, {&(0x7f0000000e80)="07a580905f34f5124dcabc17993a265444c0a28fdff7adbfce402ffcfee1f607f1d913db867e54248d06f4cdacfc36e9ca69b8038f6f", 0x36}, {&(0x7f0000000ec0)="2189ef25d49ecf883e4c03b5e33ba1f523a8f763de04eaaeb7d075d148f2141d0dfba36c7981e5d9b35697b4b603ac3cc822dd987a97a9cd5d53e6183421c9cfc2c409867808040e4229adead1aa116d423b6543a1ec401d21e009c15f041b20bd1bd51ed02f5047246353b21aa7aaa9b166d1c0f1aa94a2c4d320cf04d1e4055da6b89b61fd760111cea25cdfaaf4d13e6fd91c18accb1431fc41c43256a20f0fe7f39459e99ed08f887ea25f9fa813b2089cf5dd94a204e73b03e394e7560e30495b198609236dc05ed61bf722be9db4fee590847f8809456948adb8228358a9b2c3bf900e51ca8a16d66d0e2c70c9f5681663fd14", 0xf6}, {&(0x7f0000000fc0)="8a70276617cf30a6019588ab88090a7143d0", 0x12}], 0x6, 0x0, 0x0, 0x8001}, {&(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="b63c26b1cf4e3dc72e895266e7d66e79c28814026dd78fb89f6e070bcf6177375633ed01d19ff4a293bb3e624daacc330d5b09d5f0892050a0578a25b535761a02aacfe8ea", 0x45}], 0x2, 0x0, 0x0, 0x4000010}, {&(0x7f00000021c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002240)="0688915b6420b6806e81acf60f057f2d04f81da8012ba9806d5ddffe3c599057c71facc4620eb0bc005ffa4ab5e82991a3e322c3b942a77746745891bfdf16b239e7aa8a5e565ec3afafdc4bb64f", 0x4e}, {&(0x7f00000022c0)="26caf1beaef258be693b27bd42ae8afa16e3cf70a9ea76f0c7fd99c714ee34583eca0c6a2d4246cd535cd9af6d9aa889816076649fcf0ed3758627671c6c2991e94d1e3a85d0e0c86f08b9f957857405ade9fb9c66747245cc89db8cdf6c2c3ec3f393bb1e0afd0f91af6110b10a3e77cd349dddfcb4ebe3c1390d9779e63cb175c121400c6d97f2d532f3d7714cfedb90e3f8f34f53b1f97b2b60dfc706aee78b72438156a93e1490e1d73f701294f96daf76055c39164a7f7a78884262ae3b39a64d072fdc695da3cd8ce863ded04adb2b58ec66e7f0813fe2e1111f322f340d0fd70370dc39", 0xe7}], 0x2, 0x0, 0x0, 0x4000000}, {&(0x7f0000002400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000003480)="4363307ce8b9ad977ec1604b1532860eb32c886aaa92f4f05c5437d5df77a3910647ab565b562f9a3b184c67afdbe750ea1346f1d91299e0a24d041b5ac8e93e73ffdccfd7165aa64327513d712c1d4ec3d63dd3934fa586cd7d23a69e8aa41e0d2d95a0e6fd3932f2fae12d9e51d2808fc726e3c192e2a908a0e50da7e55f457224ab56d75b834e0144", 0x8a}, {&(0x7f0000003540)="ea802796069f751d6e714287cc637dce975ee4845d036900d111675312d94d1b9ba89091dc1728c34c12bfdfbd1ee472ca50f5f57692b8e4c1bd364d6c3b40141815d003b236d057f9e706d6aa4e65e6603b2d3db91e1293ca20e69c1d56c0d56b866d5c6e00bdee46d68c8ff2", 0x6d}, {&(0x7f00000035c0)="fe9604f6e0203d7d6d4e21eabc40587eb2d230f90af4f1c2faf4796fde30aef2", 0x20}, {&(0x7f0000003600)="5d347f9a31834e5c714692db8526b3ab9ee307a98dde65c04f491b77c79b74ad2c8940bdf5cf2bc4b70cd0e72b793259328e7abf5afcd1d47f13b7e18a4340960df6975c7bc3556399efdf8fee015f1ebf6a31fcd7ef181561cf3fee11518a8b12c5f5e52d7e4ee8aaaeacf108841bc3bf32b51f227288980dab1380102c553ae89c71fe652bae98159a4daacbc39e7a8b69fece0ae5e1fd331cc4", 0x9b}, {&(0x7f00000036c0)="6b6996625a371c57aa20f4dfb0eec805932774fe1ff9feb2ae3d43d1f88a89ae36b9eba73be06c63c428877b0260064a14e3a3d58e208baa69489382ccae0b7675813a16513b68a1f227c9c968e22a9b8d1cd34ef0995c4a8f092beed2ae8eed582b7e4eb335bb1e281ec09b528d942ddd34a80e8e7f222f7e8f2418874d4188002f5be7531cbdbf1b581d365152fd051a32a16b8682ade7d620ea382a3fe2ea0475bc620a637908934f96df5ecc131052f4c2956041ee70b3b2b7d0c5be07919266656ac08d53068a532dad36efc9f8a2759f59b6cef7c75ff036aec906b9f2c28ec39b018c357c19ccbf5fe885ac2d7a18102670044d", 0xf7}, {&(0x7f00000037c0)="153940eb3470e1aba82009e4cc4318d4f814496215d277fb30bc461bcafe00b2c1d9ec58d4274b064b2055f6558100af81c7a765750ad5cdc08b1c594fdea54cf4eaf8d1f8642e9840a63e8ff29c12bc5b6cd0e84ab407075d513f15887b60d1e5e8addaac7b9082926507d45b1981dd76672fe6c6a3bd5bddb41e", 0x7b}], 0x7, &(0x7f0000003940)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x10}}], 0x68}], 0x6, 0x40080) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000100)={0x32, 0x4, 0x101}) 19:28:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="9448f9e67051", 'team_slave_0\x00'}}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r4, 0x0, 0x0) 19:28:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="08150000000000000401d805020004c910fc02000000000000000000000000000105020004010100c910fe80000000000000001f0000000000000020636cbd0e06fb1f0002000000000000006c07000000000000ff07000000000000c2040000535b040104d94ec02d48b7b4670892a823f2bab327260632d83edea4fff4e318adc0e47c0df03211f9a5c8aaa9180d770c6a34f7c9a574fccb339d8f2cf748b33491e7de4db5dd2c69eac85912fd2c372d168cf12e000000"], 0xb8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x51, 0x0, 0x0, {0x0, 0x3c}, {0x47}, @const={0xff, {0x7f, 0x3, 0x8001, 0x2833}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fremovexattr(r3, &(0x7f0000000080)=@known='system.posix_acl_default\x00') write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000090601010000000000000000000000000500010006000000040007800900020073397a3000000000"], 0x2c}}, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000100)=0x8) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) eventfd(0x3) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:20 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) delete_module(&(0x7f0000000080)='/proc/timer_list\x00', 0x800) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000300)=0x0) getpriority(0x3, r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x4000000000010046) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f00000002c0)={0x6764, 0x4, [{0xf, 0x1}, {0xc, 0x1}, {0x4}, {0x7}]}) getsockname$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc29}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044880}, 0x100000d0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x2a001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000100)=""/191) 19:28:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x0, 0x0, 0x657d}, {{}, 0x0, 0x8004, 0x4}], 0x30) 19:28:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x22cc03) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000080)={0x2}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) copy_file_range(r7, &(0x7f0000000280)=0xfffffffffffffffc, r1, &(0x7f0000000300)=0x1, 0xffffffff00000000, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x8, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x328cb182ae584e67}, 0x40000) 19:28:20 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/83, 0x53}, {&(0x7f0000000180)=""/98, 0x62}], 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000000240)=""/245, 0xf5}], 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4107, 0x100b}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) write(r2, 0x0, 0x0) 19:28:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x12) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000100)=""/77) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:21 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) connect$can_bcm(r3, &(0x7f0000000040), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x4000000000010046) getsockname$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) 19:28:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000080)={0xb01e, 0x3, [0x8, 0x6, 0x3ff, 0x40, 0x100]}) 19:28:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = epoll_create1(0x80000) sendfile(r1, r0, &(0x7f0000000080)=0x2d9, 0x8) 19:28:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {}, {0x4b}, @cond=[{0x0, 0xbc}, {0x0, 0x0, 0x0, 0x0, 0x4}]}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000040)=[{{0x0, 0xea60}, 0x0, 0x0, 0x40000}, {{r1, r2/1000+10000}}], 0x30) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000004c80)={'syztnl0\x00', &(0x7f0000004c40)={'syztnl0\x00', 0x0, 0x20, 0x10, 0x9e3, 0x6, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x66, 0x0, 0x9, 0x29, 0x0, @empty, @loopback, {[@end, @ra={0x94, 0x4}, @end]}}}}}) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000004c00)={0x9, 0x0, 0x80000000, 0x2, 0x8}) sendmmsg$inet6(r3, &(0x7f0000005580)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, [], 0x37}, 0x2}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000140)="39b486b6192309f5fe311cf17a87188eaee259d64deca2da46d5896765e4eb5c8ee73c5630141b9300be32d1c46cb3a97af24761362033b6d09985747acfc603b34a2db22708782f191a64406b1b3875ca4c1521b15392658abf1b2658a1874d724e58268874c05f7068f4c3da991638e03155c4ad", 0x75}, {&(0x7f00000001c0)="a467806b9b90628216e0a488d8f9ca67968f7e098f27ab40ee0dc547b2b906b540c9b3b3cff7", 0x26}, {&(0x7f0000000200)="917141431e2ea9ad18befa7f8c0c8265aeff7d87ccd9198856db582c711ce77c04bea48a3eb8ba036a3b16c0b8b34ecbd12633a4f6c5a9615fb5179276597cca65650417dd2f944d4659b9421b928f1dbe8f46b70963b889c6428cc343a9201fb46eb022c1b6bfd0197ebd2d8e4019e62e7222fdf30c4f114f1accf86f6f0f5cbdc4afa1abf64d0eacc946efb181a30648ce90096b5cfd", 0x97}, {&(0x7f00000002c0)="c5063ed36132d1e499ef69fd0da674f7eda3afcf08ed355c476e4a012ab5046f33e98d0afce02c010559e4dbb9530c8f6dc514a0bda1748ba9b44d064ca7e73c9be4d3151a43324dcfe6248c7da9e112001d08affa10", 0x56}, {&(0x7f0000000340)="d92122d8e3e9fb07ec1279bd4c3353f003889d3b1b0e806e8665afbd302d34ef67d36956c8465e0dc56a78ef9e09fe831e97f7557dc75216b7afa069719f74cd25869850f6871a597aa36abca6641b838d26d90c1992313917eb0554813d15bf93529dd71831cf5e018386b9f19d10ce42ccba560b993308521343faad0c9c04292ef62dd997ff1396642f085ad82cc5d87286f59a07a75dfa156766cc3494cb3c8cc047c99e49decb292c36b0df", 0xae}, {&(0x7f0000000400)="f2eb3341d697a9f9a5b52131989efb2e55e9e612b58c2dd5642409bd74eb766b773fff5bd2f5eabb011bb9df39034ef2fbbf228fdd73f552b1712fa4decabcbdcfe0070bd9b90108987c8f0d8b9484ef1ada5d172e568dd0e40b62443dbf44b652503cf2482a6622248843096254044395ed27fa3634d9100db2210c8853bc642833dabebd0938a6dca25821f4ceacf5c1bd9cbcfe32eda61a32b64916274dc7efed2fe07590a98126e458c96caccd3c94dc1ad5cd46", 0xb6}, {&(0x7f00000004c0)="809ce5f37f58ddc2fc4af0d72c4eea0d05eb68f11b979a1be643ace7f260796ffac0fe6bb02743e2e8f99814adc0cc49b2fada810cd1bb9d1be7554f1e3ad3549231cb3138aba96c210d8e22588cf95db94af44025750219aa74f983635beca2c6d4d6a048c1bde514b9009073b9bc157e0b382f96e86978c6514f769fee592a107876a3e8a5fae849cece592363a6d3547778736fd4281acdf7ac629ec03fdbfaaf61f12483eded2780d20e1cf93c9fecf897a1852d8eb77c0540617c13f42d2068700a68ade91f4f41338aa3", 0xcd}], 0x7, &(0x7f0000000640)=[@flowinfo={{0x14, 0x29, 0xb, 0x3f}}, @rthdr={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x0, 0x8, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private0={0xfc, 0x0, [], 0x1}, @ipv4={[], [], @local}, @dev={0xfe, 0x80, [], 0x36}, @private2={0xfc, 0x2, [], 0x1}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x84, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3ff}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}]}}}], 0xc8}}, {{&(0x7f0000000740)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000780)="633605595ff60499f795a9357a86893626d9a8136ee1f1ccfe46433a3f5d81590f8017aae7040e68", 0x28}, {&(0x7f00000007c0)="b60e2d8cb56e2f9d73e072a572efb313ee51ffa4091eeb1ed8e364f56e5bef6e6158f6d39904c190dcac0a6f2531bb30126c1738ef8dd30a0557356c25c6134d0ece440b9766f4fd2b47ffec53d8d7d33a365f3cf15d61a9a96c8318f1a5ceb7d7d8364b371410e600a173595aa9a9", 0x6f}, {&(0x7f0000000840)="a77ff6ab60e06f336054eed8ea7180b37bfc6187884b047120f3b4ceabe0", 0x1e}, {&(0x7f0000000880)="5dce3401b85a8082aa7b53be26ba1a42419ea1443eec93e021a0454400ca2d5e304bd9190197391ed5470f6022d7829a878bce5bbc1e98c3136bfbec2e2d613ceca4c542d0218287c0ffc59a0b1254125cef4e488fcfc50cc4402ed3af7f02c087ba04a6768d07ee3acf8efb9134116bab6b67156c809c029ca98428001c9d018d062468f09bde919ae854d8adab03ffc07053d0e6f959ef36b00c76d7c3b07631a7ed96f25c0ee5b6189152c8be34c4a4324d461dff457cab6e3f70884791319ff73a2cc9d4cb90c0aa39ed90d4cba919f806db", 0xd4}, {&(0x7f0000000980)="036c81696c1f064e7724a56125885ca38a185342f3771039420a25c900d859e2a3347c09a5e21ee2523b3c3d8137acf596a3e0a1f62cb365b2ce9a6e20fa50fc05b03933cfc4661c965636ccc2acaef7fb8e0bc095853454d1581ffca46e972f6b26dfb2843ae4d2db899346c541488d5c77e3ee3a54acfd608ce2fada84938847882fe98d6c24eed18f18e932791bec22bb1a1afecad8d63e8ded9b8f5740a6ead56716a7c02283f55e64cf64ba61e7113ccb3cf48b0a1b9aab9d20fdd44f0e176747c487b72e5e712723a6592a45ef5e892d45b6ab514a3a", 0xd9}, {&(0x7f0000000a80)="96aa613dffb1b55fd58c081bb61eb3b265f1050454e4ed2baf2796741ee70e27d79fa9467002b05e4cdce2d46fb337e425b45046ce72c771d8cd77fd21112866f202346713b0490e7305e328713197f9d4052f8f4ec8fb8f56b3b162edeaa2303bad7eace2ea7cb775306212a1a32cfb18ca67d314f65507eaa79d9c68ce6b46", 0x80}], 0x6, &(0x7f0000000b80)}}, {{&(0x7f0000000bc0)={0xa, 0x9, 0x9, @dev={0xfe, 0x80, [], 0x3a}, 0x8f}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000000c00)="805a2fc0e4b335051633c3dbed0f478667306f315d281e0cfc0dc3015e1bc8f836078967069d27905e7c32e4c7397e42bc0a812cc08b835224fb7c38b86a22ed46073f71dff11e57d7cf172de2d09a0c41bb60766c3528f051b39fb801f535ae12d1f5b1fdf623b15077ce3fb0f0099d74c72185c91fe58d07a0fe68152ccbc49702240c7617737e3be05957880bf8dfe194df0608cb1e0e407c7f7e3d489b7eee2ec8ffbe594e11191d2c419cd7313aa8cca47fde16d34bac3abd086c179d45e302e524cef90f780e6c8c236a4849fb0b2b9aaa0867f9a46b3f9660c227f0f514c10d2f90ce0e66d93a", 0xea}, {&(0x7f0000000d00)="2b12aee6e7f991035736f5442c0063a4ad43e6419c0b7a92523ebf4a0c61b23dbb81f69c4ef49ee1de0332", 0x2b}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="0aa65940bbb77337a969565fa481bd6dca05b8e0aec10ce125f1094dfdcbcdcdc3039f80ffd76926a3eaac1244af86ac349997c92dbb4932ebdc04e3ddc672fb353721e5d8e84da1540ed1110d5e172b66af0fde94c8e7f1df5d607419f107cfa9297684a73e07df1bfd1ac688d4100ad9f5479f3b46bc24c5715dceb0faa67e93b32cda9a05aa76f15ea9e3f9a044", 0x8f}, {&(0x7f0000001e00)="b3d77505f446af8f627a46683d111e94dbd5968cf24c728fd8aff8270ac228a860bb803c7a58d8299b0e14869ac00164cf5d40383845f7a2b9766869ee80599c3f8190d5b4cbcb831d91b4f96f91f99e94731fc4b246b85256d25f4f586f11cc0f3009d9f7912e1552fb081fe41b8b4fead75348a98768dd9401fbc573fb51e23bc831ad0506d1d2fd8de9b1a660176ab872a561cf1b83cde23aa92de80e9f158bc548539830f9bafa00a9cabccbad4aaec08af3b6dde0a9a90390d03c618236c3c0f603bf804eeab38fd1f1eec69d75ef018210a7b9b5c78c1598a4d07538fcae6fcebda085255df3d78b3790456e2e0fb3b5", 0xf3}], 0x5, &(0x7f0000001f80)=[@tclass={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fff}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x3b, 0x6, [], [@enc_lim={0x4, 0x1, 0x3}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}, @pad1, @enc_lim={0x4, 0x1, 0x20}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @ra={0x5, 0x2, 0x40}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x98}}, {{&(0x7f0000002040)={0xa, 0x4e24, 0xee, @dev={0xfe, 0x80, [], 0x3b}, 0x1}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000002080)="de8f9937cd74d956b5e57f74dd7b13d7d1ed6c51fc9d4fab1723330fd116bdaa961ad50c0ec3c76b10e812c5f83f750fd35b31dad2687c8fc2e915de5bc7c5e216e8942ae2eb2c7a4a9ecdd230afcd535cd1dffb54423ab454e5eff6433c0fc6d23f12f9e3facdb0cae886f35e87485600882dbc604708db767e786a3a69e9a44958108f5eb8", 0x86}], 0x1}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002180)="cdabbf1489e165719378d77dad4637e34470d16f388612e4c4df05f83c6eff5a87e6696fd6448b4a1164fb6d08c8da548a6c1ed9c0a60be90410403571099b2d8ebf4906f50161bfebbfd0f1ec1ffee568b6b88342d514d53cf0351af80cf3cd470d12f90d3bfd958a67be6a97a2ea0a1cc023d19db92c8f5f9edf5f56e78ffee114cc0124f7d749ec08b52b4c7171c1500aec87c91476132546b0669760ad68aa3f59b9aaa070cd102796c951214b0aefe12f853cc51f5a2c05bb1052becaaa274be273cbe103bbdb8ac1ee6a638018e9012325bb20376b650e4ae45dbfe788715162c2da5ef7156e49b7881d31307ac7", 0xf1}, {&(0x7f0000002280)="fc4da1b7b12a44a4a82c7d700c3be7313309b6ef762285c7fcff92aa749b8efabeb7ca7411a8039dc500de68ddfe6ad1180243de910f8ec5823024dd3b318f6dffa681eccd4727bc640c885aa37420aeabb195d2867a0041", 0x58}, {&(0x7f0000002300)="55e2564b5f9f99d1d6f7e76e40c0aabf840ac5a9900f7a6659446bffe8cf21a7fd33d30690125c162a7012979ef64bd74857e5736bc55b578ec0b57b20139295f1e673f0dd5b14396da3594e962252bf2a5f0cc4ec8a95777101a003769d41e2491dd59b990fc197245f9f253409e44bae84dd84486ea7abc986b4e59dab0af04f14ae29710d02af7795323fa66dde41fb2cc1d311910c1dd5ba11266d176d91fd451ce87c98e76dbbdcda59a09be2296f", 0xb1}, {&(0x7f00000023c0)="3889d620093340ec2dba87884536ee51d0c55deca21cf16d2495ce304178c7f75fd9ba0c0daec5fde98dbc431b77a4d1a9e412e63dab42d976", 0x39}, {&(0x7f0000002400)="ac259131189bbc06c9f5a8bea634ce46f14447be78be3b104e9edcd19d0447737e01a26ad541050a654fcf641c87f88e03f4dc35e216225e2a394a633c57cf7b2fe39d42dcd49da7288f6c7fa067d09f62b575be3411d1455c9e00ebec29afbf23b0307ae6dfbdd3252d744a3bb5213827e0179007c29e6bb46137bbfc82900f2a562fcfa8d40c57228c1d0abdd6f3", 0x8f}], 0x5, &(0x7f0000002540)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r7}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x89, 0x2, [], [@generic={0x7f}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xd}}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2e, 0x1, [], [@pad1, @padn, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0xa8}}, {{&(0x7f0000002600)={0xa, 0x4e22, 0x7, @mcast2, 0x200}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000002640)="5bfde9773a412ff4a28a8a932f9c42a198df31d277713f123a7c009cf17b03455c5db3dd4f332c8a000c1f1be87c39b3", 0x30}, {&(0x7f0000002680)="c47510f2875e865f87f8e73e6f56768cd4c09641ddb8150c9d3f55fb98f7dea5b984d5d95a24af434ae25ffe477e17950d9a53bbf03a75f650285b9fdc65d57dd9a978efe40f97bf4702cbac0e97d660862556751ae05a5eb4d2b9fb2afa396efd680ca9235bca4699b611bb27e71d2044aab52df421a33a762e38c4d3d6ea36e062882aa138ea368e741d025c8fb9a1aab828575d128f5571d367", 0x9b}], 0x2, &(0x7f0000002780)=[@tclass={{0x14, 0x29, 0x43, 0x597}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x33, 0x4, [], [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x80}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x3, [], [@jumbo={0xc2, 0x4, 0x3f}, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x7, [0x94]}}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x6c, 0x1, [], [@pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xb0}}, {{&(0x7f0000002840)={0xa, 0x4e20, 0x351c3f99, @mcast1, 0x9}, 0x1c, &(0x7f0000004b80)=[{&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="ca87cc2d4518588f6426eb7664d886a25ebfa9894489fb564cf8b22692f9eedde9d0542cf090247bfc2adf56a2b40b4fb73f629968dee12f28f30b5061040865c4c763a1a9538173e65366b594abc7a5254273805eaadf98074430ef4a35b74ffd03a7dc472dba03f08a3fac417e64ef6884a32089cc02664e0ae1572e79216658f5", 0x82}, {&(0x7f0000003940)="a43725a5914bf04f081019660bf92b62f15649fdbb8df08c40bd61a1ac60993bc369cca988164480298089236a72f0aba3c3d0b6f139ed24fe89424abb7e43c23cac705c5ce165de1f48b5f9a8fcfe584cc5851cdca237ddb48abc12fc4841ef2dde28d5ba09fcd52922723fe2bafd46b55692", 0x73}, {&(0x7f00000039c0)="197053ee8fc7ac2d3e753e4ac97aac14786b3e42c9b5c5a4787869e27568b6d70b4a1a4fd2df4beeed5f65634b3efbb878ae14c2b58fc4cb312ff841df209f58741a44f6f3c0c8f138c59aa1670631affbabfe66dc89cd3b3da9", 0x5a}, {&(0x7f0000003a40)="e8f18d8159a4eab33e8067e3396c3a1579b4141caedd047c105c411619feb6ec6c29cdf5aa10bf6a7a40b31b4dfbcca924663aefb2da6aace8fd8f115d1133094479ad136db5e5f2bde1c9427a4494554a383d87fa741a9e820e138c4a87c5510202f83c0b72b90c87f19f18487e6e21e0ce28fd38aeaeba53ee522f5195b762471189c4d0f0e5958d3a78a1652b0d891019e83a6139aae85040fa639781ec87376f03204a950f5f542ccaf1154fc33bd8b12bf23115cf7753a9026313693e4e5d12e0ecd09ce2a64a83c2a8da2af45298e9c82a2ddf08987a7cb873a8c626be6b0abfd82b548c3c53107ed70a7dbe29135bc564b8b0bd6bf4d9b17dd63496fae13d46aae83580316455fa8155019b8821d467f25adf474973e70aab6c34c2860d2cdba6159cbbee4d648932a73d79b3164c7f70aab56077aadcd91cf92f2af49c30b79bf4bb3f2e734b9f3864df85195dab2e42be355a0a35316128ec5adc9c9a7a2787bdb2c317a12aea5ab9058bb5dc41ae3abb706121912b1228e44ae5bc2bc12556765a1507afc7aac5d388bb5cf39301d9cde1094ca08665da93bb740b449d09757b1e9b4b95b0d93626014e95104db48349ca1e33cac71c7595d91f7a2c129e4ff0ba571933d2edc5a0c0d99aab3e78bf0b1952dc4f46811af59faf112e3a20a5deb89c1a95c2bea7a087effc78740795024ec7cc1e0d0ec58d600f122e6d7435b7a63f8517211826bc20fe10a7f6b5b1e92afe36f608ce73ea3777033ef8e0b20da9b2269461d46911d0800181c6a489bad8514ab21896b92be81c9a526fc09ab4a1a8213f9b159eb69a9731264b2b639a5a98c8fbaf89484488da6e0beb2d87e7a9e8988b9c149b9426705650ae96d665c22fd374e24103596ff1f7dfaa37594b7bdadc6144465f23b1f40a2366b1d831e006fe053fd908d7069200d6a1a66f8eb2d4c72d6ac8e01e2811bf43812504e995bc1e59a83c24bdeb525097088abff603d7a6246adf65f403fa0048550fd6fe9e74ab0785013e5a572221ac340348aff1afdf16c7e8e7460329c02a167581df89a1ed5b8f2556298d0f266b7c94512b12ad1bf8e8fe2314509be7c35a5fa54a871e932e1a852c8ffa6f5b2388e2864eccd148bab8b1a89ddf890fec07230d9215422ca34dd57d30378eeb0c419fd0de4714a55a31f0a036e9112ff517d3784a720c9dfaf119ebd34d95786e6cf614981b8bfc1ef630de4adf11fc4273dd87672ef25c7f954881d057ad7d822b55ac7220b07c38fe15e841d32208435e1ae20facf384b93b61408f4ea6903adb01a693710f794aa4783ee85c20efab04e365a4e8bc09f98f93b53bfbc4ab396a09e2b6adad5d494303f62948a12f914643452f582468d13692c3b0dac026c26eab853114a62473b24ad4c716b415b5ad0ed02ab93e50657ca27ba3ba0e6d5d348cf09f7bd4369d34c54b5777231f741f00de1c494578e2155e93fd34cbc8f962aa505fa2a051651cdf25ec69951b999b47eea0a0a8208f3bd3a6474df0b8490cac02c62e30d7ee61f476041f34075f13d7a21fa51332b268f67e0145fc409d694d8a1f8af824bf1217d50cd15e3c6e231ee03f96518105ec691b15c1e250f52325ea30195487bd54fe595150592f4427b51084c46b6395ceb740d15d6d757704f9cf83b8cd3320ced918db267fccdc663e9b002c390a29d3edbcc7c3ca2bdad88cca0f8d8148a60e2b28dcac52155ad0416fa5e58021408a475d651b4080d9c8a08ec10a3486ad1896b674a4e4e38c7347dd663712ab634cbb21db59168ab65b1c9c82fe806cbb2e5dc1a4b47a51ef833875855c9a2edfd9598337a9c7bb28fedff6e1f3f06ae2c27a5297f734141d0839a8efd44ea8d6675a3a7d0f8b41509de4f6df4f7fbfe8772219a9710d1bcfbe8e8c8b671c8b6614b71e0313469f83f46402b4ccc10c1bb18c0ace9c2dbf9afd0e98123d1d273e443ea7d07b2c82c451aa6cac10df0b3ab69407fa9fd0cf571831b7007345f7d493d22e91df3c6570e3f893579969c594866eed2ae28d628d4a7d43429055c72439b9ad65709fee38d37ad6b78b28580159b1379bd8bf0d9eb860f3f802e901ddee8ffb7f892ad441af7db3905562b92056738830882383dff4abb03ab48eedc20e5826051a341fbf8d1adb4e75b15c50db8ba47efb48c28f9ac1c1853f0879fc4ee499bc695fb4bcf966ef2332bae371e2d082cbd9d959026b440e4e065bc2a075852a2c571ef682c98e6abc95f8c15b213c2150312440ee5e6d0faf1ea0e53b8af3c5d4b7de6b4f5bae2e08609db9c02c5f0f952632babf84d2804cfa45a4217945893f9a652722444d6e3bb28f83431e6a2b116597c61d0b404a0d54316f470d5cdc54eb5719db041bf7e6304a3459c909d74ec5e79b79478517386bcb1c2e8b04703326222bcbdad59cce3ab415da3b0fc57fc4ac0e1257b3b96d080d2e446a75c7f87e28b430c4a3910d4c8aa756dc48e04cd9b86efcf6bf0278fbb8f787d79644e69dfe9b88d8c42f6807e7afbb9c27334d85e71185fd291a078880da2f3d9752674826239a1b64d04f0687ae882776c0450e7eba84fd680bd5a354fb6db93f359d0c5ab221a2f90519828c08da372bface113baa6acaa6f4a1ce415b0d1743177b67bcdb9c0bfaf00d308a5c13994b977a4f09ceee87d1348aa28e7c9319af97b95ce15bb99e7ab3743c6427669cccdc8173af82305bec3c42895b65ea9d58e83a9ca7e76302021f9a8c1319e76a27064d620626d86a90a65e02bbb14810e70cea95656b8fde493ae4fa77e7cdbb96d30d61e6bc28da73e7daeb61f35a18e2df41ac467160bcc45fca4d1447e4d9727066c84d7fcd617ca30452445f3a280bdac0883f2952f48a179be2c14d7df6c5c12674008be5051c06bfbecf0be974498ca3ed731fe400d4e1a62fe08134e174332a2756c5dbfb0f5dd33907659d1723f64a6fe3c06902b1f960375d7451e04170bec09039a6cd5334b9a76f4f17335e31150330fa3884a5f56a532b913798bbc112c4294b765dcd7f2f15aa86aaf8320800da03c5c75477f4674585005f639b7b7192b6e3c6fdadc9b9cffe059cecc7f8349f69324bbec6a9d23a4ab68726bfa9195fdd9545d111b23d3b714fa3da30fcbe2ccd568287989806fbbc7bdda8207d331d5025ef625f9534299e99601345d56d728808017648ae9a696ea411c443f445d872647da007d1b4fbbd5c5541b6c65cbee22983e85963d34e879d2844ff5aa0a724b871d80cc38266fef0d88266f9e7499fcc66bba2ea4074d3a947f939c85150fb857797ba42eab35d25ecaaa86db252dc878a7e8c1ca95de05e42e5f86fd003dedfb629042af4192fe44ce824270ebc5b18126bfcbb3ca1572beb3e67abb6fc14b5f8619fac7eea2d5acecfea230a39e7c467da2e1c86b7c432ad21b977177f9488c330604c98bb40f3b99f993987cb44d786c002c64b46d8d93dc8e7950a7049d4fcf2b36878139658cdca3e3b10d53b79a13fc11fe3c89785e8ef72aa4cc7fbbbde53bb233b95784f958c40d9da147809c36915d3d2995004352cefc6481cf5b864eeb38a38f5cf59426aad7e91ecbfd6667fc0a15dc815a4c67d48042863e4bb94148eb7658f00cfae1051eaef0612b496ba12f0bdf94eccab6e55745acd06c8a6d9a37dd6a2682dc22ad87a7597c15b423bf78490fefb42ff5e1a0e35ffd2a9e80621906feebc1b864dc0b8f70f2c30d441409f0cb566addb11a94b9b0e48411e2f71bc7a0bac419f34cb0a982a1cf8b6cd4345db5f6b623b4303154a60fec3bf773701558e1d614ad01803e7fa3ffd8a7529c083f53092d4fa0f57f91705eba5d9f4bc6ebb95ef0d9bf9fc993a6b8258a1e81dbba3a4cef1888c50ff3a21b1d76ebef1358d4e427e1af773844f8dc31055472269c095d7b33107b16b90f83f067132cfa2d19fecf1fc252466b24e40762b9786c583ac56800214c6dd6e8204a87732feddcf17b97ef67a0630f6b967422cad95b3220bde78ce8d84083f2b0216f55047195c92aedff043c3e6e2d6073fee883ee645477af2061e1d52e7fb3ffc490cab804d5b5084b52476cd182956914269f5dff68be56086a861601cc79e08e004c2060ba53e2f420a91953bdbaefdc01ab1304db5f43ad8fd1c5b94b09490700f2df93984570ce4b0b56826e788424b93e15e36ec5f474240e907c5daf6268f9f1edab3da7c7af9221e1455301856a195315dc6e6802d7447b0f9aef063e3f74d6608e9fe739ddcac968ae7fe888b058a45a8f9c0fc6337920ef219d751f370a1dfdea9b44e764c6a8f7cb0687eff09377e157babdcb5d8922f94b0864a332a9310995cdb7921be3d249c18e72343699615c6745500a8f1a1c6ce2bb297bafe50e82a2b72a06ab8a767998149ee6b2bc823e16a61c8dbcfb78cdfdb9a3af5f279c034b69e89e49f84af0911be62bfbceb6a7396f121ceccb94dd9b2d3bd6b20f9cf85dfc639f5b170976773d05e581bd1c1bb54d751ac84b6645e9b038188a13df054997b771e135372b41df0f3cf87f59f2bf47c84b627f3e6b53bcfd08f64dc03cf1b5172ad08fb38f834f5af37662eabd44060b58e2444be2d5d974e47c85d0f3d0a0786b5f97fdfdb16a6a630273d29c5744c3ab7a0f1f6f788aabeffc306e0d3c65b0acd7c3a7909321662c61d3125d50e3c884986a464a7829c0d57f4c5a63aab6ab877afd52b6a0032dfec1b484fb43e2acc02ad0f3d5ebec9bf92025acba315b6d31aa06426155cefc2ec0121b9a9bf0325d1726a13f791c0505f9efb6bf4805752c401f31e3e2e1c11658d783e43e00c1f8cf866621d8c1566daf1bac83a8b4f701848d3ea43931915ea18b6acf190bd3f07833578d79275e753a963ea1d4e03b742f0479c4734a3427011df24359b136d7d3c30a65ab05cec3cdc3376ed86450039da9ec0fede916112f859bbfa5b01b2f955695b54c0d2fe8f3b2935b67a7f8ff798b5dafa080c950f627a8e5df2fe415fb315da748caa3717405436634acb591f6856591ddf11ed0993a56516bf26a34c0d65413fe4283df1653c0bd8af8bb6816ca4b9bad79af3aeec25236c202c982cbf5fcfda5a6316d739815039b3b1c8a8af4399245d4655c41d4703c564111a0aadaf563fedade2338ee1ff635d0e7a723b02e7c45f10bf59971d11e6a05c0c2a573188cfc5794f3bf99e129a1f5a2eddca1d037a05af59d07007813d8f8bf861ba0fa116f52ad3143b01e1d8633128f8afeacff92180e1121ccd44557f17df86f97c2778e26f9935e9d113dad425f80d01ec3ab719121ca92846a60ddea814ccf3287772d19cfc810cc7de9bc194f66369edd0cf251f2a1a61fde58a8ecb2b14aefd1375fd8994364d53ce27d8691c54b225caf8647f7abe0ddf802bdfce8180124e0b94edafa151e69775816832d3ab47455e75359360a41f11104c396519dbc62ad1165126e2bb0cfc622d73a6e291ab9f3be68001943d146247c485ee69689aa63b22cf1b4619cafd1ac9206fde974527b989564f740065b3b60e9fe5570016a0a969616d68b31f3d57bc5158d4bb00839b8801a4656b83485250c5eb5cdbed077cc144c4425b2a3cab96f363a699c5e025fe05b817d535f4aaa1dc88029b62c3e260ba71e0800e88c1c4acd1dbe07a18ba5694f3d427ad2815f4e7f3b1f074630ac6cd7fec0d64f180325c4fc15c9fde6c0a8be7871538b9b86f59009c7a99e2c462450c72d47d4c1b338d450d1b5c4b44481940f9", 0x1000}, {&(0x7f0000004a40)="89693a46e7598558807a5551bc56f184cc0770df085c1ed24cea264fc299aaa191d0821a2b2914a39a1f4834239ccd55c78acbc95db290a025d922e73544359b59552cb50595a68613c791b819d5914bc59190de0dd1bff3c31a34bc25dabf3013daefc3bbecfd87669db29340d93c718c", 0x71}, {&(0x7f0000004ac0)="67c4a5d05a8003541b54d942a978e9e985931bcf5df6ec187c9fedd48106028d940b1f862cda089a895fa32d020fa70e6e53481c1f12ace8eca5b6345808af56fa3e9d4987427179ca789d1f6e6121b9fc331103e780", 0x56}, {&(0x7f0000004b40)="cec5c0c2354e15d17b0e77de107627505d15e52e10bd55b17b6c41f461355efbc21619921ca081f84b6568dce5e327", 0x2f}], 0x8, &(0x7f0000004cc0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x87, 0x0, [], [@enc_lim={0x4, 0x1, 0x9}]}}}, @hoplimit_2292={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r8}}}], 0x60}}, {{&(0x7f0000004d40)={0xa, 0x4e22, 0x2, @empty, 0x9}, 0x1c, &(0x7f0000004f40)=[{&(0x7f0000004d80)="def781559001349807f46bf52eb15aa9fbf54fb4545cbef6227e86a5b47a02a5756220e951596d43f7ee075711df46b2e9afd92deab6f5dbbfbaf674fcb6ad8be925354fb31618108721abf1bf838b3923d5b8827a9ac07c227364ee775b913ffa1a4c3430b7c1ba6ea4a31d5b0f47c99657c4a72d1763864d6c264d472052da581a8cd9230b8d1e33514024c84d5087de197a7f5fd61ecaeefb70e14cdaf1a1cf050e3809881af8965201f31677db47b8cbb147cb", 0xb5}, {&(0x7f0000004e40)="6d9c64133a56f5ed2f635d5d35f3216dfd78a6a28f113aebd4c9036268ab8118e785686f7df16cb5af008c6fb8ad0206349538ec83a7cc7a45cf53ae05b6b3d8898f2966c2cd14510993dc2a45c3aa919cd2246021b7461e47961156e7dcc7c528e5023cb4227575ddb81b2973847098e6e63a72a23be19f5709a3fa26c2e5d4dd4e56cbfde239c7b63dcb2e072c606dc5a83f8990cc14a37801a1d43c87981e1214b5b61146af6541bd5e1826a79cd02431e2b837937aa4ebe206f1eb650fca69c49fe2baa4978a3a10213d454c85c5a806685a5e4a07d2aa3c4a5a9ee4cec26d4923bc323f", 0xe6}], 0x2, &(0x7f0000004f80)=[@dstopts={{0x188, 0x29, 0x37, {0x0, 0x2d, [], [@generic={0xef, 0x1, "d0"}, @enc_lim={0x4, 0x1, 0xc8}, @generic={0x1, 0xe9, "8d715031da696caabe1a1ba4e1d940d45f407ffc30cc8fe84f21d47945c5e800003c2dc86b3265f413368b3cd2d15bd042ea556bad13cd03691a8cb9b81ed848b896092e806c341666e437b4c1b15ec24986db50e5dcdc1b9236be64520c380bf9526d253b44215c7fab273fb3c6279ba936eba5a9553ea5fe397dd06a4103e57380ab9f917f83ba74c9e56e9c4df47f439c7d8b902370bce682f29bf95732d671209f137e0ae4686befab5b9071b274e49ebf4eaad796333939f0060bcc584a58a807b8711bb1c101578039133d0cf33a28457f9e7b65110bd6f0f8df8cfd71b7f455e3183be23fbe"}, @generic={0x6, 0x72, "55c127a2ec322347dfcdc96d2362318710dc88db3c35a65ca048ea18f08618574c14bfbc5828b08cfd98723631bbfd4b627e73d03c5594dc38d700edf4c424be1ecb2a28394d7e3fe5b505914a0adbe4ea3a80a86da02945dfb1d3586a00e9a8fe9f04a69393a78b0b54139a121ee652e3b7"}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0x188}}, {{&(0x7f0000005140)={0xa, 0x4e24, 0x3, @local, 0x1}, 0x1c, &(0x7f0000005340)=[{&(0x7f0000005180)="9eaf6a81dd96d9e671797f4d241947ba984b093ac8f74151cfc5d2784ac793b829d53850b0f144280204c988ac4f3f0e9e36498515babf07dee1cd6477bae537e47d84a5891d79d114d991f9a905f21a302d85550e3d1893fac90ebd0541453853a7edeebf280b3225af4ff299b4c98509d6076a99cf4c28ee23ba0c94ceae8b0f25e65984a46ab6c283b9ac74144d9697db464d7b1eef4bf42b82fb3a2dcc65dd11bcc625b287fb94d042af808c5ae11925ecbdf4f887d30899d50556cc586ac34d546ed4259b0c0f388c34921a59fdfe21d398f3", 0xd5}, {&(0x7f0000005280)="99a1dcb243aae9771a4ed0de0fff3e65a527f9f47452f3469262b3b5208770bb0f2af74f4d50b57620badba524f39ed64953712cf927f3c1bff31b1794aa994200fe32376bfc61ff50a17a89a7fd0ea835067a942aa98add3e05251e2c8d0cd75ec1691c95e45a38600c5c84c937163fb20520812a9e558e6ed0222dfbc8c3780b91a9fc3badeb659bdbcc16d592f88d5cdf37aa0bf9c088d5d1337e1130e4f2b4174a4849cc8b3a", 0xa8}], 0x2, &(0x7f0000005380)=[@dstopts_2292={{0xe8, 0x29, 0x4, {0x3c, 0x1a, [], [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x4}, @generic={0x2, 0x8a, "c578cc5fa63f9e94b8692cdff1a3746596394621068d23915a428ac393d285c8223b7efd11d66f0904f9d638464c57cf8b8d3a3fad2cebf041a1f76c7adad8a5af97c4a26ada87fc0fcd9a179af184bacd395c02358bda0a2807c08c3bfd175e2aaf719e55c50633f00ab464a9920f17ec13720ed4414be214f2a333838b4fe4bb37d40bdefc409b88b8"}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x5, [0x9]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x3f36, [0x10000]}}, @enc_lim={0x4, 0x1, 0x7f}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1f}}, @flowinfo={{0x14}}, @rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x1, 0xff, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @remote, @local, @mcast1]}}}, @rthdr={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x0, 0x0, 0x0, [@loopback, @dev={0xfe, 0x80, [], 0x1d}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x32, 0x3, [], [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1f}}], 0x200}}], 0x9, 0x4084) 19:28:21 executing program 4: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) copy_file_range(r1, &(0x7f0000000080)=0x100000000, r0, &(0x7f00000001c0)=0xfff, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$P9_RCREATE(r5, &(0x7f0000000200)={0x18, 0x73, 0x1, {{0x8, 0x3, 0x7}, 0x7fffffff}}, 0x18) 19:28:21 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x8) io_setup(0x3, &(0x7f00000002c0)=0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{r6}, 0x5, 0x5, 0x1}) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x7, 0xb0, 0x6, 0x0, 0x0, 0x6, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_config_ext={0xfff, 0x7c40}, 0x1c233, 0x2000000, 0x0, 0x8, 0x9, 0x1ff, 0x1}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 538.282572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 538.356660] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:28:22 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x420201, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) sendfile(r2, r3, &(0x7f00000003c0)=0x9, 0x1000) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x9, {0x0, 0x100000000000001}, {0x4b}, @cond}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f00000001c0)="dbfe388bbe9cbbc1476cffb94300aadd8e765b5c5556b8de891459987866c8c4757e2962094ec06a9704f933be490360fd809a5b48bce967edb5283b2b8e0d86a35e43e541e66e3697fd2cc2fe4b772b61774b0dd642872d124cef2f094d00ee176cf174ac5bca685d1b8b6439baeb6447ea8480e18f3f2f9979db41d05a25f64fc8943fe727c2d41de5a4659bf95484d54afe9f8417c779efb7573df87a75ce4981aa0914546f817ea85e4646423becb3c8d6af7c1ba6f53d4560bf05abeae8f077a205ae37b309c2597201c0880edc660b07b4", 0xd4}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) fcntl$setpipe(r6, 0x407, 0xa04c) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f00000002c0)=0x100000000) write$evdev(r4, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x35}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, r4, 0x11, 0x3}, 0x14) r5 = fcntl$dupfd(r3, 0x0, r4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4048000) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x30, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x48000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$P9_RSTAT(r2, &(0x7f0000000100)={0x69, 0x7d, 0x1, {0x0, 0x62, 0x6, 0x7dde, {0x8, 0x3, 0x1}, 0x4900000, 0xc1d, 0x7ff, 0x5, 0x2, ')\"', 0x9, '\'\'\'[!-,\xe7)', 0x12, '/dev/input/event#\x00', 0x12, '/dev/input/event#\x00'}}, 0x69) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x800000008001) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x59}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) write(r2, 0x0, 0x0) 19:28:22 executing program 1: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r1, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = dup3(r0, r0, 0x80000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x53}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r3, &(0x7f0000000140), 0x10) io_submit(r6, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:22 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x26) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x7ff, 0x4, 0x9}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x401, @dev={0xfe, 0x80, [], 0x16}, 0x5}, r4}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r5}}, 0x18) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) 19:28:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget(0x1, 0x4, 0x29) semctl$GETZCNT(r3, 0x1, 0xf, &(0x7f0000000100)=""/192) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}}, {}], 0x30) 19:28:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8}]}, 0x24}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000090601010000008100000000000000000500010006000000040000ad9263a50617c74b0000000000"], 0x2c}}, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U-', 0x92ed}, 0x16, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:22 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000090601010000000e00000000000000000500010006000000040007800000020073797a3000000000fb27bcdebf45f6aa2479a63abedb80ecb6b7225ba428b89568f2f44b612f9fbf60eed9af872ac61cbddb5e33ae58c592c1e80792d93dba0610daee4dd35c290b7520f8650c92937d5e161776f9265da53a833f8db84bf3e8eb18ec94ab48700e89277434ee7144c5"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4330b282cfedb795}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$setlease(r1, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x12100, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x1, 0x1, 0x0, 0x9, 0x20, 0x401}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x9) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xc) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8000000200036150, 0x800007b, 0xffffffff, 0x0, 0xffffffffffffffff, 0x4000006}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 19:28:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) [ 539.243610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 539.244498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 19:28:22 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000040)=0xa36, 0x4) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000004ec0)={'batadv_slave_0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000063c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="c6a88651f8d5ea3a64b84c69c9313a07a6db1f75a40559925a5f4cc33e24b670d601df942fd6251b03213d54450441f26312779923c2ca8a754845", 0x3b}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@generic={0x94, 0xd, "34efe51b002fddf3cc32ad"}, @ssrr={0x89, 0xb, 0xa1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @cipso={0x86, 0x50, 0x3, [{0x2, 0xe, "8d2be39f1e2ebd72c6c8eb75"}, {0x5, 0xd, "32c8188425abbecfc7559c"}, {0x2, 0x5, "431bdd"}, {0x2, 0x4, "8b1c"}, {0x5, 0x10, "8d97eadd39d6e218b4b3fca6c0b3"}, {0x1, 0x6, "19563972"}, {0x6, 0x10, "27bda31c5154f77c66765344b1b3"}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x4a, 0x3, 0x4, [{@local, 0x9200}, {@local, 0x1}, {@loopback, 0x1}, {@remote, 0xc1}]}, @timestamp_prespec={0x44, 0x2c, 0x82, 0x3, 0x9, [{@local, 0xc43f}, {@multicast1, 0x7}, {@remote, 0xa91}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@multicast2, 0x14}]}, @ssrr={0x89, 0x7, 0x9, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x10, 0x1, 0x0, [{@local, 0x81}, {@remote, 0x1f}]}, @timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0x3, [{@remote, 0x54}, {@multicast2, 0x6}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xf7, 0x0, 0xb, [0x3, 0xfffffffd, 0x1, 0x80000000, 0x0]}, @rr={0x7, 0x17, 0xe4, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0x7d, [@local, @private=0xa010102, @local, @multicast1, @empty]}]}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x53, 0x3, 0xc, [{@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4}]}, @cipso={0x86, 0x23, 0x0, [{0x6, 0xe, "6e0b3a69317c283b9ea68f88"}, {0x2, 0x8, "49b8a6eaab64"}, {0x6, 0x7, "1c7eb8dceb"}]}, @timestamp={0x44, 0xc, 0x9a, 0x0, 0x7, [0x0, 0x1]}, @lsrr={0x83, 0x23, 0xa6, [@local, @private=0xa010100, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @local]}, @rr={0x7, 0x23, 0xd6, [@loopback, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x81}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x278}}, {{&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000440)="3881edaf02023ae4b33ea1aea206aa2222ac959f410e8ac02225564d717688c6fb03825f937ea892", 0x28}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)="ef98241d6ec409d4007238392c58b34078ebac0183006629ac40b804e0e356263a9be29ef2dd5abdd4cd59f79e3aad72e62d", 0x32}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000740)=[{&(0x7f00000005c0)="127c526998241e56b13c3438158f30daef17fa62d6806d9c40c949919b883179f0d056dc7d0f4f54d887dc24af206af04f1459ae76df5cad79c139b3e149c723d87474e4234d89a4a14ff6acfb65cb37da97a5027b98303ea8d38f83a1112ac65e9db2636a81e02c9c37f3761d74855a49ac6ba7300f61887391d772ad4d109f0bef08d5b841c78bc6", 0x89}, {&(0x7f0000000680)="f2c0bc3802b55f74a49a9c376798f6d8c439b3b5b6bf8eebf44bd6c4381d273f867e051b64fa75b8f6f386bd9977daa5ede10a42e8ce032e628107ddd6da17e81825ecb9502a8ea7aa0b6d3bfebc380958efd83c5a54dcde3ba9056f7472c67d91c51cea731538c24a261242ab7e8c1a7c00b406b8f811593ada7a3c04428bb0f5a96678cbc26e8f56cd5f1741f5b9c0269432cdb720ca1e2a9da5817ae69d8600a7c39baa6df8917b249fd7425f37c1a4e974b3a9f6ff05", 0xb8}], 0x2}}, {{&(0x7f0000000780)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f00000007c0)="cc366655ff83f51fdd1c828341ba1d7082f1ee462ee029ed2f0596dc87e78baadd4c2625e9d3869ea65aebce3b449b708f74251ac240", 0x36}, {&(0x7f0000000800)="539ea5788ae227b0de75dd60d1260b03eaa13b980a32", 0x16}, {&(0x7f0000000840)="7f2fa2ea68dc7aaffaf4e52eddaaeb66fc9acef67779207ea2ba5ea0751970f2ad015d3cf70ebd6f448c6bbd853a68e0bba14242b672914d243a3eda91a9e4f0207aa06adb100311fae9f0f31dedc66a2795cabf37f4198c18eef574cc40f2b837c7b08856c27d4cd5174a8265756cc9126021b150b9caa9d9b104eec74296464bc34279b9274f417285bb00ae7450d8406318d97be1bd7b90f5a20c333eed0accfdf96cd30db3651ce3208a7612741a78d7363bbd8a63e91421614efbae5422e7a28937988550b70b9a7ea4919dde1e31b890c07cb21ea8f6663264649af93124", 0xe1}, {&(0x7f0000000940)="83a60897aa0028e9bb7acd3ded", 0xd}], 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="1400000000000000001c0000000000000000000000faff0000", @ANYRES32=0x0, @ANYBLOB="e0000002ffffffff000000001100000000000000000000000100000001000000000000001400000000000000000000000100000007000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a0101007f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffffe0000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140c0a010102000000001400000000000000000000000100000004000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac1414bb0000000038000000000000000000000007000000440c0b310a01010100000007441ce8e1ac1414aa00000000ac1e000100000001ffffffff0000003f"], 0x138}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001580)="e2229a69bd621a859ada70101d1b5847385c054377560fb2135813ac757195079315c2a5b9cb9ac7eae783bc608ce03b85aad8c612aa7a0cbc7c0a2f22fa772afe4ee59ca21c95bfb5c2ea22984aa1bea0dd93abafb80572bd3a8b7d17674854e7a394c83c7aaa4bf17e355b9f3b2ba282f9dd55570d35efff7d8024ea2b3d3efa3f1984c820740031a2dbfc48b9793e7265552820421f624ba2d2c236301d3e2b6e8ac0960feacc1722d81f21e6ce24b7fa98eb20bbc4c84af51ae891f5158554b411fdef3ee1b2433ad25f20d52da6e7a1b2801d9e553288f3927792", 0xdd}, {&(0x7f0000001680)="6e42bcfefca092043b9b8d94823ea1a4430030277262b6de42ba35b71ff86f0187f6ba721bb505daa19a1490e44f1bab7fd8857c516121fddd40860e49470c38f6b0fb71e3600aa1462e455bc8346f7e8701ad69a490b7632e", 0x59}, {&(0x7f0000001700)="baa7f7c3f891435c3e01c5d980dabd93e69b34373be851bca4736f284e5a1b78309a4240ea1a66875ee93b5b0506992a8ed8ac3638c39b5f0e8bd61464e6ab5566f3864ffcbdeadf9cade40bd8b8d356562549e0098d506bea4a34f0b392ad5f701135ded0268916d4b1fd7ebbf7e3a18c75279da177e6b5c3f4fef033518da99eb6cc9055fec0cdce93ca28", 0x8c}, {&(0x7f00000017c0)="46c231b52ea0b95b388399c81af19c8461de2e18477afc8d29089be4a3891e11fd93bca0d3f4186b886bdf2ed4c0051113b0b47e7fe99bb057aa0b251d8ff0e4e4d282e723cdb8f1b4c812bc", 0x4c}], 0x4, &(0x7f00000018c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x825}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_retopts={{0x54, 0x0, 0x7, {[@end, @ssrr={0x89, 0x23, 0x5b, [@dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, @remote, @empty, @multicast1, @empty, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x3, [0xffffffff]}, @timestamp={0x44, 0x14, 0xd3, 0x0, 0x6, [0x3, 0x81, 0x1, 0x400]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}}}], 0x150}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="24a3eed79f36959cb423b8ddf411bffebdec9f5ca9ad42e4fce602b14dba45e874dcd1e33189973cb6f96b34a2384e59be65f1923a92a02bd8e693ab16c0275898ac20c056e59796f2774e88bf1c8e25fea63a44a657970344d30d1d6892075a3df94fbdd6a5dd438d59e17e59cf4e3b2d0fd3e9a900bf3c7075c88de7d6c3b4901e18388feb82f377c9493edb305b27f815b9397caa", 0x96}, {&(0x7f0000002b00)="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", 0x1000}], 0x3, &(0x7f0000004f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7c, [@multicast1, @multicast2]}, @cipso={0x86, 0x27, 0x3, [{0x0, 0x3, 'O'}, {0x0, 0x5, "ce15c5"}, {0x6, 0x9, "e37c68699bfd2a"}, {0x1, 0xe, "0b2c10c2ca12742b6eddba42"}, {0x5, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x3, [{@multicast2, 0x9}, {@empty, 0xfffffff7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000005000)="7a33f57cabbe91c6408914974d191a0c02e7775f1b90717075e35a3e706a290568ac5e15b185200033b36d7e47d7e9b3006514781189b1859077ac", 0x3b}, {&(0x7f0000005040)}, {&(0x7f0000005080)="fe82dfb14a6d339fb9d36319bd100bf043d73d414fda19a9c11f5e88f0f424a9068647c93a3fadba0d588bcb9a5b5440b4ab7ba870413ced758a7d79bc9dff99776b35d0fa8a9821f3e1823ed348bd0c955124ca4389f5f4032247cb6cbd", 0x5e}], 0x3, &(0x7f0000005140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x837}}, @ip_retopts={{0x68, 0x0, 0x7, {[@noop, @cipso={0x86, 0x56, 0xffffffffffffffff, [{0x0, 0xe, "0f9e0cfbd7ee3e1e34c8460f"}, {0x5, 0x11, "1cbe4b37055d61bf8fb8115c85f348"}, {0x6, 0x9, "0470a0853882f0"}, {0x0, 0xe, "82bb72e16b3bd24d7c6f2ed8"}, {0x2, 0x12, "cd8cfaf559f370290992b8d849633ef5"}, {0x5, 0x8, "a3438bab2d4b"}]}]}}}], 0x80}}, {{&(0x7f00000051c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000006240)=[{&(0x7f0000005200)="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", 0x1000}, {&(0x7f0000006200)="c241ef75e084813ebffb27b199c7bd9a5f3b9c5bdf", 0x15}], 0x2, &(0x7f0000006280)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb952}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xcb, 0x0, 0x0, [0x1, 0x2, 0x6]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5f7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x376d}}], 0x108}}], 0x9, 0x80) 19:28:22 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x81) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000000010046) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0xc0002, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r5, &(0x7f0000000140), 0x10) io_submit(r6, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) [ 539.319573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 19:28:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x32d001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 539.523144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x204000) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 539.602100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x72}]}, 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00e6ff0009050000000000000000000100000808000340000000d3"], 0x1c}, 0x1, 0x0, 0x0, 0xc440}, 0x4042001) 19:28:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) 19:28:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r8 = syz_mount_image$reiserfs(&(0x7f0000002440)='reiserfs\x00', &(0x7f0000002480)='./file0\x00', 0x37, 0x4, &(0x7f0000002680)=[{&(0x7f00000024c0)="203c22f92a44caa3d722063de476858c4039f84512c142a1227913acd8935de43e914fe6a2f82630181504e43f25c3af6e7261b3bdee2b9f2534eaba72ed855eba4c547880de1669b96e47722c1b22ed7ec34c69f9089808d6940f7d2de32a5bf8774bf2c9909e596ddbe210603c9c8cb353702b7086664bbfa8ed775c72c20de5d576f03c6badff00fe729ef0cc007ba8ef3e17bb4593132f457c57914cb7fe96b847b850c009f8e241e841e5ce5bdf2c3d7586dceaf710d123dd0e117ab63c875c210a5f8e0c47370cb0c9e6c8620f362771", 0xd3, 0x6}, {&(0x7f00000025c0)="be2f083d23", 0x5, 0x1000}, {&(0x7f0000002600), 0x0, 0x3}, {&(0x7f0000002640), 0x0, 0x40000}], 0x40, &(0x7f0000002700)={[{@data_journal='data=journal'}, {@hash_rupasov='hash=rupasov'}], [{@appraise='appraise'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_gt={'euid>', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/input/event#\x00'}}, {@smackfsroot={'smackfsroot'}}]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$unix(r4, &(0x7f0000002800)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000180)="ede0b9095bf7c76e3fe3fa2bd921e8079baf6b9f22e377b485eda24b154659d0c8bfb85a1ce4c29334460af8c6e726628f326ef6ef26ab36a934cb9b9b6659d080638f4ddbc1b279b04ee1", 0x4b}, {&(0x7f0000000200)="9e6bd068059fb74025abe3a8a42c27a0cea220fdbf28ec672175f4716e473484109a747bd7656b18e6751f571e6c7e462c2350fcf07a42bb4e7dd78244acacfcc18eada1cbc5bc5f74d89d01bfed6c7d3c02ad8b67bdaaff5165b7b1ad605e04ac00088f12466d4fbec4aca8e5e20e4bd39c10bbfebc105d4e7662d876777724faf79af1ed66887db2baf5bfc5026f19054d2045f02ac4b3ff4f52b3393be02479", 0xa1}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="96df273df22ab3073b149a822b151662fce600114b8f710935576081f73453c159b7d1e2174a366f2b81da9683d9fd3924894608e5cde40b08d91c5e72e20712226848ef73f0f6b319e995b4550368aea04bb513816c350c02273702ad08ded8a145f42f8bd96a2205f6d898f98fabf8b29051ffa714a0cd7751d1df49c18787e35c7354fc24fd176702f967f50e1dabdc43c185afe1724f0a3e8a1b17081ee3", 0xa0}, {&(0x7f0000000080)="b41e4638281e1fe6af", 0x9}], 0x6, &(0x7f0000002780)=[@rights={{0x1c, 0x1, 0x1, [r2, r6, r7]}}, @rights={{0x1c, 0x1, 0x1, [r2, r8, r2]}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r3, r9, r2]}}], 0x68, 0x110}, 0x1) 19:28:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x42c841) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 540.030088] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "hash=rupasov" 19:28:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200001, 0x0) 19:28:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r4}) prctl$PR_SET_SECUREBITS(0x1c, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/187) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:23 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000040)={"9a02a660bb7ebb4209f5ec67d0820e2cd5c2042ea9041dbca063b82c6e4e", 0x0, 0x2, 0x401, 0xeb7, 0x81, 0xfffff801, 0xd8c5, 0x1, [0xbc4, 0x8, 0xda, 0x70000000, 0x9, 0xc7, 0x0, 0x7, 0x401, 0x8, 0xe8, 0x4, 0x9, 0x7, 0x0, 0x20000, 0x5, 0x8, 0x8000]}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x6c00) dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x52, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 540.418293] serio: Serial port pts0 19:28:23 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:23 executing program 4: pipe(&(0x7f0000000140)) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @period={0x4, 0x5, 0xfff8, 0x7f, 0xffff, {0x66b, 0x7, 0x8001, 0x6568}, 0x3, &(0x7f0000000080)=[0x7ff, 0x2, 0x1000]}}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x2040) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000240)=@gcm_256={{0x304}, "dec5306c9625cc1d", "fd70899044e0eb34527050916db6895a585fa9aefc2aaf788d2a4573009efa3c", "3da2e01a", "73ae1dc0352add77"}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {{}, 0x0, 0x8000}], 0x30) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x7fffffff, 0x0, 0x14}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) 19:28:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) recvfrom$l2tp6(r1, &(0x7f0000000100)=""/231, 0xe7, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000910333744bae22c57f2fd5ba9b386460f17b4df283cabb82d9259f9a8463a6cc5cf61de9e3549b9e5eba0f91e7a885530e45893190e243fcafd38aabd6addd26906be844bdb8a7571d7d6ba34dc9a4a4ae7361e9dcd2754c6c50ce41c62904ab9b5d35a0e0a05b0face4", @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000900010073797a3200000000"], 0x20}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x11) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x200) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000100)) dup(r1) r3 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r0, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400c6b87498845cdf627a987e000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff2}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', r6}) write(r3, 0x0, 0x0) 19:28:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffff9d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280212000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000140)="b08e4e1be950fc0fcc9972a82a4128de96ea5f58251af96c3fa43bbcd44181b350f8c96754a1b50ea829efd6174158effdb9307978f48c4e9554ccb8bc20a6bb5398b1d30480e3853ee9f3c4164194478d79b66ee5e6b35f8af1ce757cd4984cdc3c9a6da76800fab54d4612514e3b2c717211aa", 0x74}, {&(0x7f00000001c0)="2dbce3f418d1da73a3e941df86685f7ffa9658b3cbfa5f7b484615c362e60a082aea497ec349402521eb3b44bb9f08a0e73c6cee12e71d652d005fb1093dd7c32d131e5d1da1e240b44c43f396fb4085e7f0f0c6e21b882f7d3123be606d272707cc81f8a0fc8932c9ab055a8e4dd447e6ee5ff1fa238eb829ed1fc2b6c814bdea37ac7b263b989587d6dd833ad62e32a4885280770d9b30447a45cc427d251db38ef9a1b72a8a5c8e1a171954932309308b6de624383afe52c5b0a93e1c7f3e12eeb8083f3e16a01178084ce8794aad816633e79d751668930dad039ccafcfeca68d101e2b93110ebddb388", 0xec}, {&(0x7f0000000340)="2a6bc1abbe3b34e3da8ef8209bb5c442cc03ea7df73e423dca1092aab198ccfab5fb984d96e58d51ce0a11c96fa2365dd76a41dba3b810f266dc119c29eb261ed4658ac5599eccd7d1a0d56084461cb3306f34566290370edcaef0c0ead0577e32218ad6e8a9fc55d4d115ed5d6a158def952d8c5656d24a0811b730d52ede91c8f3263508853437c7347536ac0bf00b0e", 0x91}, {&(0x7f0000000400)="f371f4be2d6fdbb5fa38c766db0e68ed45d6ec18d157911d201f6ff653c9873bbf5dd585920e809a7b93849f752d7b0d36c03d0d8276bd093b595f576c663747bca15fd7dcc9f13ed967062c3d3ff4875163de7fd77958d185d9c5a5433a23ec58f908de8a18225bc9ececc70bca64da792c23e10fa6d53c0baedf92fe690ffc67937cb6972a86c287f0577a50742dd9540f7f9b2dc7cac2242a8c58494b4f64065305330d21a2c29c74231ae3155435a0b9faa439f356c70a0ed1da7e5e56593bd5736423addc70cd2bae1caee6bc7a68b4de723b", 0xd5}, {&(0x7f0000000500)='o', 0x1}, {&(0x7f0000000540)="acee047fefb9846ff8bd13f573c5ca958785ede15751b54d934e267a93bc39e7bcb23da4f951c65a58b36fbaf24b1491f24ac5f0e8db8e59eb2ece8cbf370f8b94ef2c", 0x43}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="ca6cef1c809effdc8f420cd48f2fb4db44ad8bd44d0cfae2c1088072c406fde8271acb8a5bbb8f5b4340b76ad2b712e4c5f788c6c7d07db48d6acaa0a5b82681cba4840d481ee4ec388cf0c8321bac58b82865e9b2ff89a0f7ce8867de68b23bba97e20b9de69ad8b82cf005a811a08b57d0f2ef044968a1e743b5c142e51b354538489ab462e616b09772499224b66ec0bea277ce2fb0204b2c27722fe6bc8ba647b3b36a92c7fefb439a4dace576cade1cf77c9f3e3aaff4b0cad0fd6f", 0xbe}], 0x8, &(0x7f0000002f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x47}}, @ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @end, @ssrr={0x89, 0x23, 0x42, [@multicast2, @empty, @multicast2, @local, @loopback, @loopback, @multicast2, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @generic={0x44, 0x10, "e29a99355aa4e90013bc92a85e97"}, @end]}}}], 0xb0}}, {{&(0x7f0000001780)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a80)=[{&(0x7f00000017c0)="3532c04774c2321159ef0ea6de27aa9c0d9491eca0596cb5ea1463e053a3e96a6c74cd53ecd9c8a94afa6ce5c7256fbf2b804a346cc510d2365656d8f09f1b497da8349dc9f40838e28cd24ae41203a4c4e646145d2239c85895776c3cfe07f35683b90da66895806a68fab9d931f0e8878f057a870ae77f67ca2ccb7866979e27d9c38bae5c112ccad6519bcb30473bc8d5d4e28e263fa9c83dfa0ec747bfcac1ec6bd5bf7ae4b2b78424fffd69b2741b42cf0e333b54936bbbd37fae92a871e856ab8f5d665fb946e813db8dc106f418287c33e21c0f0529e095fedcc7ff02ea57e9ac89d44fbf8be83d8d62e3b8d34c", 0xf1}, {&(0x7f00000018c0)="691fe5ca9113e2d5ff7960d45e36c719cadf47db7954cced8f2c87f25a77685af54e50a92d0a76741f361bc057091c407b363c1e89378f0a17765595605a5dd605eb7a7657d2811559cfb337d474fa6ae3298916ab211d9ab370b8005d5dc858d1503a3f66ce6df92e012c69b13e4ef366c1f69bae2bd1c65d86dd7ce03f3d76ea781e4bf982591f691228e2cdd0fb79da59822d0eb9806f220802e6d243eb0b2912d33fd9083dc4ef0c2ae91c1ad4234d0b0da3483416bae8e802d9ef7d8b8bedfb7481eab0e8", 0xc7}, {&(0x7f00000019c0)="a8c281ea08c6088c25c4af508805c57bc1193168f210889a72ef6f6d43e0b28fca53250aeaf869f15c9ab5ff78a465f273ca5460debd0bebd37724a5e9b7b5d83be6e5fae257dbd9feed4897cf71899bf957e98923cd964670f7bec06b881213485301df6337837efe84f106a7b822d816fdac7b40d876d28f7be8aaf6fef4492254961c92e6b97453aa", 0x8a}], 0x3, &(0x7f0000001ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x75}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001b40)="fd432aee4dd377e0b0120c246946f04af0ae932a4fb221694565682145d9d253621804683feb2bb8846491710e3e517f8e06e1b4ff314ab6cc", 0x39}, {&(0x7f0000001b80)="d6f3b0efd0632e314687d46639c0a152b9efdc595ca98a32f3827cdfe9e46ac13ac2", 0x22}, {&(0x7f0000001bc0)="86648fd1ef0c8d8edc1c006b5c1ae9f2f4f4a06d9ac63cc6c0080f10faca9328f9ec791ea99a24d7b00e40eb24bc35b7bf369d37f09e8afb48a4e720684d5729b4081593306d69a91b177d04310ce1ae94", 0x51}, {&(0x7f0000001c40)="f5ffb6e0d19bf8491908617b7d134553928327658705848022da01559627c9adc6911b64263859e1ad1c6f34dee4fb059e3ee5bd", 0x34}, {&(0x7f0000001c80)="fa07aede5752b9ec0f4c43cd66ff8057ad4a3bbb659a779a8a6aad909ea5e994823d9af5431a83a52589f10118401d239abedb50a54d849816ca29783cc77ac2f1f810a6c85d83e791c801d6daa1ff45e1c63eaedd575eb2043a70b18539a58223025c612d1e5794f33c2382910a86fed8966cbc999a1f75aa12ce75614303d4d463a53f014d003fe8531d1a460f4c3f096e43ec2cde001db241d99f450484f81b3be4e7adfd1d3a852c4de259ee6af629eefeacb3434b2399ac71883be3517671c92ace41317b10a2b8f41dba3120ddf8c54b3d49a0a5a11ca6e56f2424b14e88146d2d6b66767c36b02d3827dd2b6a76f4ec2e62335333b5803db6c04edded311d9402691736c0d5038c867d8cb98433f35e97677b204f327f44018dd187936bf59e3c9bc8d1fb1888ef9f96465d0c6d993b477183f3f977b405daab0f3e126dbd12726d38343d0c6a748f9fd447229b71189b46ea8d894fe5db3469a322c38e43b470cc819379b667cf9f26fa85c65cc13b5aa5570ca4676a1cd3959d2eef44c9e15c6a2cc56f27cb7b14dbca6448ada6b7075805b53f2a140ca27fd8805a7d5bedd1f20d92004efdf7a64b99265bebcc2ab44bdb2f63c2599286a2fa4023e605475b553d753ea6168b5b6da5a58b39e3fa7c55a6c04c00ae4683f9d6318c3a12ae3e323e40123ce2e3ab2f2c33c14853a7962758e09525d1d505e9351e168f3329a4ee98d08b23530b38fe6535fe567f74bdb7712cc9f0436d35a29409beb63fd40c2c80fc5444323625d228cad1ac74571ab9ae0d258e9cb054279ccade2e489a90dd994ca0bf09cf6900e3681fbf8a2c4750523339dc4b4f32d79a6b42294a4f70edffd69cd592b24133e9fbcf0ec9ff190a441b1ee464f76e450f8f0704f6b77e7428fc312d596b3514b2c1c9ad1f1a86aaefc4dc395144b7db568c5541be4c7f65dbed47082beae6447e1d6221bc0acb2951c0973abfae7ddff01b4a5e482d57d2a270229fe5dc239029f919ba52c1e0f675b21f50748ced9e717979efde23fbca55e5a9a01dc98c9245153bfa7dfedb1c335bf253168228b0b4254ffd2d3a5593449265c172b32ef3532b47048ddfdde739bc6a3895dc461c50dca6c7814db5ee3382cf82e5602766c3720283027d1eacd12218fa2aa15a49837752e519a1c380302b44d5bbd5d732520641d21b77fcc331cc0220fcbf90b7ddd19a3c548c955e8612093c68d2ccbf911f9e3588e2b7eb0e4f091c1a943f13bb7c66c5ac059ae1dc3f34a7d3048eb4a31bfca13f3d2802672174e63333174552c42e86c09187bede2dd146aee0e38b237828c75a5a9369f2643d2ce360548a6642aba5d52dd64cbccb77fe0a5ed47765b7780c99a2d3aedf46d88dbcb971c1bf183de39baf2c0dbbe4daebcc8968b703b92720a6e67b0180950fbdadc0486413a09396e84ff1e9af33a9f04bbccec2d710101b27e18631c2a754be54f956293477114c4ce9351a5c786281c4f049ebc2dc158ac1fea25baf80837dc8685afe9850ad143241b05cede45efbded5d1877c45c0a58db0c91b61c55015aac0be0d50699674fcbf659593bdf0552b35bef5eddb271ab11144078a4f034da99d7561c94fd6de09940e37e762943c533f6668de8c29da1dc6bf49ee01cdd058272b2a7f814a443bcf1bc14e08e17db69c34faae7284b8b207e2d9f218091d95e0b87ef765a27216ca4793408e3ad0de24943d85365075a5ee371a68dbafdbf578a3e4076dbc6ec31817fbab107431f9f1cd248288c65dfd22591bd2981d2c308464bf4358fbe56c254b56efc79d3ba89404c78275c14fa0b37843a9466e689ec89cbfde226e59497eb428a1e5463a9b78897f224d32640e2ddfaacd7cc9d70db18fba643bcbf3adbdc8f8415820a14755fba014d34b2a120e5ee3b7e037747e078686accb42ede0e2430daec686c3c9d9b31238986e2454d9a69f51fef6863272520ed294a3a86766ff778a5ad2e8aed10439d3cbd3d95b2841e05a005dbedead88e9df3072437ce047ef7433d788a530597d31c15365bb38924d8e5129de3d465412cb49afd845486668ecfc5472f062a0499e969a2a55ceb555e24aab54641e384fbaebfcfd7a3fcf14599c8382df842d4600030efbabec1a7f1d20f6a76510361fe9b10e87ef84e13849a4decb0c140f88376c20553f008f3dbb2cf4809bfc1e6b092e1b977c7600350e204578c773400176562e08fb1c2d936f797302f30d3948986031ce133a3b9b8fa8679560756992748b5b72d928be488d5015cd618fb90e40a86a337a04f70d1661d083314dc95d96bde769cf661306b40285dabc1f02e7894ae4bb0d8af40317b47fba777c5d14eae71e65a70ac2aef70dd89a5108d09c8980df051a0c852fc4b8fc3b94b035052fa0d600f345fca9b4c5488249633daae7c736502421cd260b7fa75514fb3c42eef36360ea8a50f1b8ef4afe1065c369987474a4bf63069db87686fe94ca8716dce3c61ac33a89be15266ddcaa0baeacc84a484acbc7ae6987fe9dac449a0be5926e6ac18fd15ed45052c174acc59207eedadf371f8793d0ccf5fdd2a52f3aa3a15aa3c085b4916911befc3af16b58476e33c4f2201317d9a4e3ab6cf4c131bcd15fbd2ef16d560d33acd49819c534adeb6f71c897247fad102b8cbd6165573c8402f80ae7f347a15385ca6e4ccd0ca77f051630e8848fb5ecfb3d2052469f2535bcaff3e8ec35c27fe08b8c6b0636c250b5dacc226f02030718ae1fef4ca9e56fd4abf21478ef3c0ffc2d7b431a36e1d1718db6e23752aa703b88115bfc76764256eb8b29cbc01e250105d9c766090ed6919ccac6e901da4b8ad8f8d0149e96346b4dd0cd0144609e153565ac1db467474e2643fa0b29fdf1edaf130c0489df6e1bb004825e143cbbb0dcdaf399acd72e4147b00af53a4bd1a5c5b2d64c0e309d89043405d5dd761a774a62f1de7ff58f9e571e0055c9ea069441dcbf1eb1584b7d2e70de3b9234f99b8b107d2be11b6de0e6adb3d2a69fb11178e1ac294e6c190bc4b1c827623ada04ab28ba80d0606aa09a7581e82956c298fd92e28ccf83fdae0d124c1617fe2e5ffe302e8c8f3885668ac22e2387c46ae676ec02d498ab4eac27b4f5e1b78f541ce60faea95bea8dda0826f60b85069edf7f5ec80c78cd9fb8db5c1df63d07adf51645315ee4ffc12711f8151eced8d2a4bb7c55247af4f5f5f743d48998f9e823252901a1b02817137167dc523008189b51c915e123e3071d4e1a88f6b4dec23a6ff8774aae70a7a46bd5254f841fbb6206f1d62fdb9aca91a1313a5ae6f33b1ba4d51799b6a6a5112ec4980b7295eda175de2d78f45bd856b81b588914de117370ebe76dcb79a393c7fa378da51a339747d0aa8810738ad7a1757f12a7f6f2738525a63e303c46f842e4385cf72e30d8d75158f52372bb0e61202913513a14bfd3eefd3ad43db6c2a02e2564efbce2d9cbf3f26048609743957b308431bb713e7e90b23781841bbf74bfd9748fc7bae1da487506e6dfec86e5ef193eadd98b694ecb2cd5b4f8d2b5e8c3e0acab2903ea16698cd0841abb701afae54ae04db95e3127838ce7caa9d0c119b2d68d9f1296421476aa8620fcc30685e0cc8f3f04461694e44cc2f45594d43151dba0241a4b4bcbf5edc1f0c7922f95a0e66ea920c13bcd57df3eb22c675b681b3c35317e141474e9b630ea12f3e2fbc5dc6b11ab220622fce1df3baaff99b326828705ccc0867def714d3995539749584bc960cb10723b69565f3eb4d188ac6ab95d799cb7255c72b46fcdc54b2c48b916d212a57a3ac82fd7eab310122c6275f3fd57cf559b920cae921fbae5327f6ab898e9576dea491ed37bb6407ef1484ed624e3cce9202bb900a39b8fdf703de73baf6acc660995c84566508087fb67d742946f7289fb3058fb58b1a6e0c835d9f8aada88011b44f51b0809814533481e6d0f4a34304a34fb1b373576d185b6fb6a66e2bcf8a6f1bed19514fa04e9fd9165d22d1f84a5dfa15c1a62ad30f1f1288ee34e1a30917c2adaec8217d88b45b36fbf414edc3d91f2d1d434a723aa30f2b3361d54a33d16159ade47fe845abe4df6e584acfdeb1c031fc5e659f91922a9db614a3f3bb8fdc79de1f4dd0128bd99dd6b85c2d101486b45f12ad05602c20651ad9995408d3df5285b14dff310c4532cacbfb31b5967412433c209c92d85ec89d10fcb40418300d82836b382df690c0fd3cc809f3d94d12f46058ee2f3705af5cd1756520fc669ea3cea93d2c4a99adf69df42a3b7628aecb7215fe1a7257a297da92e4578f86a2c390e74470eed99c9b58cb454f40da43e7ca04d16c163cd4f288089b3c0fc6b7da052f5eb915e2b8a3221c397411bf7a4b1829adff4023b3e3e5e976d4fd1b45554ec1796f4d29dd3b8e638319a1d4daef4a8f331d2718f93bc789f8003c11dd99b7e05693d5d077f5348b497b8b4c09cbadb0a040a3b8add36e9cbc392d068c6141b7b2d2a6bfe4a007b958b07aeeb898da8870d97c8a408878b46fe9e5828a9f71e912bbe1dfe3c822bada9b577f425136e08c1efd6a1bf3d58e2ba3d5549205fdec2a27c5407738f9ed051be30f44e11be894bcb37b5d6709edcf2daa7eb316efbd7168f5e2ab86f69ce7cae817bd9b80236c01a7ebf6cf10f597d6be73a749fc8348b441c1878804dffcad885a7fd4cf4f4a6c678a632b20cfa9e9d13e020f4bc1e3e5f0f39f232f569a9de7afd0f182f326528789adaf4fe88cc2c09615ef531099546cc45d0aeb1e8929da7cd0c07fbcddfcbcecb48ae41e853768f3856b876ee267af0de9edef1a8eab4fedd550e114f8a1f38c86e6110415b88768556b0b5e0f4019ba05d0b556e70a2332c8228c14b6d1e52fae1981aac27083188d80ba58113524a376349d567848f9029fcde9f413c5cb0d1345ad7ceebbfcb11d36d11f262803dcc8644e955ced641750e07b9d7dcc4253069bdcfda884f86ced643efbfb1086415205b3370dd3a45eddd5c3e51d9d895afd75104aa5cbaa4aad6ee97f646856eaa6c2ca52ab2e4ac0b6d37a891621030a6ea874b8e404ed95dcf33ff76d310d3887afe32ab38326f422726839f12afb90506098947797048643af9ac02f70fc35803b937a1402fb7f619805413b0bac1f5c37addf6608a07d4061b7b42dbcd649780d56296dc611bceb4f6058daf8a4840061e67a469e71f7c7da803fce1e94ac2fa9024a782767f1a36d84b95d4f63ddadfbca2c2bd425789816f4058403fbc26b2c8d14c464456df7d80ffd75484e2def4dce9566a45ad6ac57ae3097f99642f257d0e6e869f8067ccae7816fc9d0a1a026f0face89e3f07892983e60247c37030e4535be1373b0f5c7fcafc567aac6c9caca2310e3562efe5fbed690ff7d7d23202fead5fd3aecabd44f659e51d262ee7c40e5f68082dcd6b4bf94b0db618a43688579d4c7043276e8dbc4b420bc5a9f918da2486df1ea1b022fd992e70d9727470d805f6fbeb211d3c306c1d75cf30491313b40d27692b95e2b4e057ccd339761079a8cfe5320420fb0f21095474974a8dcf0034ef413cc3711544ecbfc33a72fb881182e3e52f95addb69255a8325b7f918f1d48cd8dd0f68e1e0dca03c0d8990a4345f650f64907d3c1f230e0b05d4f4b025c2d67dac98f36f2551446381bde584d30a69230279d7ca6d28b761d29135be69f6fd24d618818e6c18983e682557dd804f1bcbc12f4b75f0055541a5094b917a6312bf131a0100de4ea1", 0x1000}, {&(0x7f0000002c80)="711427c19f5f5fcd843d29c6bfc80c2c0ad1e96d2ae48138cf3759d922e9ac72d119dd36a97d3cd52423d51033e781620662e0edd23e196a5d4d6e53a720e6052c89b75fcbcdfbfdee73d771c420b0c3781a34c09ba5c110b53377f18b1f3b5cee3ec598ba32d7623e7316f18873bdc1c19fb9f6a84201382071e331dddcee957c390733a3326862461127f4a6c5ca43fc430281cb481f2842afd279e9b287deee9b58208b82f15e647c919b9d95ff88678704bf6739", 0xb6}, {&(0x7f0000002d40)="c018ed88a68bda368a8d86", 0xb}], 0x7, &(0x7f0000002e00)=[@ip_ttl={{0x14}}], 0x18}}], 0x3, 0x4c004) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x214082, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r5 = dup2(r0, r4) ioctl$CHAR_RAW_DISCARD(r5, 0x1277, &(0x7f0000000100)=0x9) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000002fc0)=[{{}, 0x14, 0x0, 0x4}, {{}, 0x17, 0x8, 0x10000}, {{}, 0x0, 0x1, 0x8}], 0x48) 19:28:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000140)={0x0, 0x7fff, 0x0, {0x6, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000100)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000180)=[{{0x77359400}, 0x0, 0x4}, {}, {{0x0, 0x2710}, 0x3, 0x3f, 0x334}], 0x48) 19:28:23 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$CHAR_RAW_BSZSET(r2, 0x40081271, &(0x7f0000000080)=0x100000001) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000040)={{0x0, @addr=0x79d}, 0x8, 0x1, 0x2}) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) 19:28:23 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x0) r2 = socket$inet6(0xa, 0x3, 0x3) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3ff, 0x102) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x8, 0x8d2, 0x745, 0x0, 0x3, 0xfff, 0xfffffffffffffa56, 0x80, 0x2, 0x0, 0x1000, 0xfffffffffffffffd, 0x4, 0x0, 0xfffffffffffffffc], 0x5000, 0x2080}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') sendfile(r2, r4, 0x0, 0xa808) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000090601010000000000000000000000000500010006000000040007800900020073797a30000000001abafb892f3378db3cd46cfbab6ae97645b2285001b4425beda0577af273bd9653297643e8b6ca8346033f30a77a2179122d00ec1eb0ea90bdcab569bc1e81036615ba3151db5bccb00629d4dca8523528156d293a1420c3e07db8de03bd1ea01cbe7f4e6cc3615ccc632be0edc677201ced6b978e606a19f7946872c401e54f1d3db5384b1027c50bfaeb2f338db911c6c254dcde16"], 0x2c}}, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xdb5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000d98500ffffff7f000d00003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000002c000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000e0000000c0001007463696e646578000c000200080001001b240000"], 0x3c}}, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @dev={[], 0x26}}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$evdev(r5, &(0x7f0000000040)=[{}, {}], 0x52a) [ 540.839754] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 540.874940] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 19:28:24 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xe4, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000890) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) 19:28:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x0, 0xffff}, {0x4b}, @ramp={0xf001, 0x0, {0x1000, 0x87a, 0x1f, 0x4}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000080)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r3) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:24 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x200, 0x0, 0x80, 0x12}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000009060101000000000000000000000000050001000600"/44], 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x3, 0xfb, 0x7}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0xfffe, 0x0, {0x2, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2c1200, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss, @timestamp, @sack_perm, @timestamp, @timestamp], 0x6) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f00000001c0)) [ 541.028436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:24 executing program 4: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000000601010000000006000000000000000500010006000040041f00000000020073797a3000000000"], 0x2c}}, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000001c0)) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x40) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000340)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000380)) write$evdev(r2, &(0x7f0000000040), 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000003c0)=[{{}, 0x17, 0x7e, 0x17dc157d}, {{0x77359400}, 0x16, 0xc04b, 0x4}, {{0x0, 0xea60}, 0x1, 0x4, 0x5}], 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, &(0x7f0000000240)="5084f8"}}, &(0x7f0000000200)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r7, 0x1, &(0x7f0000000080)={{0x77359400}}, &(0x7f0000000100)) 19:28:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x8}, @cond=[{0x0, 0x0, 0x0, 0x8, 0x3}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x840) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r6 = socket$alg(0x26, 0x5, 0x0) recvmsg(r6, &(0x7f00000005c0)={&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000400)=""/247, 0xf7}, {&(0x7f0000000500)=""/24, 0x18}], 0x6}, 0x10102) 19:28:24 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = getpgrp(r4) ptrace$setopts(0x4200, r5, 0x200, 0x12) 19:28:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendfile(r2, r0, 0x0, 0xf73) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080)={r3, 0x20}, 0x8) write(r5, 0x0, 0x0) 19:28:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x54, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4c}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x6c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6gretap0\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_COMMENT={0x0, 0x1a, '\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000200)={0x1, 0x101, 0x1, 0x8, 0x8, 0xffff, 0x3, 0xffff, 0xffff, 0x4, 0x7}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r1, 0x5}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:24 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)=0x2) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r7}}], 0x20}], 0x1, 0x4004001) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) vmsplice(r8, &(0x7f0000000140)=[{&(0x7f00000001c0)="755006554942d26c6abc507a3ca4a64d2aa96e062a978e970fab2a2f173d238d622efada3d791d40d9f62e551e51e94bf1dd1be280edd0f0de56bb42facbba9fa0f102ff4217a0b8450f93fff4d93bb18b5a9ff96add2311d3d93a0416f6c1f00b39eb7084c8cc997405108e7cad", 0x6e}, {&(0x7f0000000380)="99daccd6639c48ead50052b8f3075ffea8fbf1208296b67fa583597b0c7b4187f69c4043a74ea672bf78f33486731b291719fe8ea8d4b1fe5457ef3dc52a502ba2b4f9d2aa99338509dde06abd9cc29c4de465232a27a02fc7f77680db6169e77b8e5397b07e8056b0167c5f13eb4599ac4aae63bef41a3ef52be4be66f7cabe26f9fc335eeebaeebaa433b15636d05d58b31e54d4c0a4fec3a12c111d657fc4231c3f9763f70f537a93f85e4a6d01d179eaeefda6dc39b591d6a21bfe3ed67dc49b3e53bd1fc7ee6062112f0785929f3579fa58702c5ecc9980bbe11678976385cb5f6794e569fb5c", 0xe9}, {&(0x7f0000000480)="0d88102d6a7bdff37a9b6c73ff3c1635cead6c89fc10b1d55911463374777d760efbe71dbbb9d48c7eb2bf51fc35161c882d994583e28ec45623d4448a2a37b3b8473f441b061d5c6e7a697f6d6c7b8830661d9af206a778cca343844e08bf2147efd5dc0b01b0d97398cc952ea3aeaa359334ebbf4ef955b9266dd2d17687369e057acd95f19126b51fab", 0x8b}], 0x3, 0x7) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={r7, 0x9}, &(0x7f0000000100)=0x8) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000090601010000000d050001000600009ad855fb0004000790990d00f1ff0000009200"], 0x2c}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{r3, r4/1000+60000}, 0x16, 0x2, 0x85}, {{r5, r6/1000+10000}, 0x11, 0x896e, 0x78}, {{r7, r8/1000+10000}, 0x16, 0x200, 0x9}], 0x48) 19:28:24 executing program 1: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r1, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000090601c6e9a2c2621c381f16000000000500010006000000040007800900020073797a3000003f00000000000000001c80"], 0x2c}}, 0x0) sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f0000000080)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="470bd9f27b90a8c5041a46132dbcd941d5f7dd6d899d7dee2029cfc1e128acf36181fe40218a9c8af91501c9cb74d888541a5e16797e0428cb9cee0026fdcf5872a9e66e9f5592d4d1013ff1cc7f25aeed547260ad0022c154c360279ff0c0f890c3e4f6c5716c5c84781d95e2d97b96aaf684b4a8d41c27c8cdd17d8d9d3f13b0a2", 0x82}], 0x1, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0x30}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000004c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb3, 0x8c, 0x3, 0xbf, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x1}, 0x4, 0x4, 0xe5, 0x4, 0x8, 0x6, 0x7}, r3, 0x5, r0, 0x8) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000040)=0x80000001) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r5, &(0x7f0000000140), 0x10) io_submit(r6, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000ad5f782553f17dfac1ec3dac2a12988c8d615025768b3639888cedee1fa40dfcc10d8f3c43042b4c29f9", @ANYRES16=r5, @ANYBLOB="00012abd7000fddbdf250300000014000400ff010000020000000000000017802306"], 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x24004000) 19:28:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3}]}) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6, 0x100) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x5, 0x24}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) 19:28:25 executing program 2: open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) open(&(0x7f0000000100)='./bus\x00', 0xc0000, 0x2) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000200)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) renameat(r1, &(0x7f0000000080)='./bus\x00', r4, &(0x7f00000000c0)='./bus\x00') ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) umount2(&(0x7f00000001c0)='./bus\x00', 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xf000, 0x4000, 0x2, 0x2000], 0x87d, 0x31, 0xfffffffffffff35b}) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40800) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x5}) 19:28:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000100)=0x4) 19:28:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x3}, {{r3, r4/1000+10000}}], 0x30) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r2, 0x8, 0x8, r8}) [ 541.977922] audit: type=1804 audit(1597865305.094:30): pid=1497 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1090/bus" dev="sda1" ino=16626 res=1 19:28:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='/proc/timer_list\x00', r2}, 0x10) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) r9 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x4000000000010046) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x4000000010000009) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$TUNSETTXFILTER(r10, 0x400454d1, &(0x7f0000000140)={0x0, 0x1, [@broadcast]}) 19:28:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x2, 0x0, 0xfffd}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0xfffffdcc, &(0x7f0000002800)=[{&(0x7f0000000300)=""/4129, 0xfffffffffffffde5}], 0x1}, 0x6) write(r2, 0x0, 0x0) 19:28:25 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="000000000000000000000000090001006866736300000000010002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', r5, 0x700, 0x10, 0x8, 0x9b2, {{0x1c, 0x4, 0x3, 0x2, 0x70, 0x65, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x5b, 0x1, 0x8, [{@rand_addr=0x64010100, 0x8}]}, @cipso={0x86, 0x1e, 0x1, [{0x5, 0xf, "a370eb88f84b3b0a9c322e4475"}, {0x2, 0x2}, {0x6, 0x7, "4a38883446"}]}, @cipso={0x86, 0x6, 0x2}, @timestamp_prespec={0x44, 0x2c, 0xe0, 0x3, 0x4, [{@multicast1, 0x9}, {@private=0xa010102, 0xf76}, {@local, 0x8}, {@broadcast, 0x9102}, {@loopback, 0x2}]}]}}}}}) 19:28:25 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r3}}], 0x20}], 0x1, 0x4004001) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x1, @remote, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000080)="7442c12d78a2d77e8a285a3f690a77a3a757d855b5069692e3793566d4408b731b6984f247ff30feed24540a2d554e200f70ff7fa40c6af0568e84e5407328b36805da9694ca21e3709c7f8290ebaba980a7603d002437c65a87083078c537bd810c7d77281420b185882ad842ad5af959bbedaad97d073db549e4047c794cdb761f4fe0c9b6feb4cb18d6ad9b4d4a2d4221b9e02957ac0163a4d69d", 0x9c}, {&(0x7f0000000240)="ac5723e0da195e41ca6630a1c032f3f0c5491cfd336819d99974b9a58c90c06ada2d933b89f21380210455ff9e8413692604333d2afe81fec74fe8616086a743747d99f5bc711cf8e881ed3534", 0x4d}, {&(0x7f0000000300)="5b4f9371fd62a9db64fc8054b90e31ef7d41ebf8b529f243aa17a7e25ef6a5bb03744572b37d2c4cbeac7a649f5d225c9fa6baf566ae18c432bf8999e162", 0x3e}], 0x3, &(0x7f00000004c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x386c}}, @init={0x18, 0x84, 0x0, {0x1ff, 0xfd8a, 0x100, 0xc4b}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7fff}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x4, 0x8000, 0x20, 0x5, 0x7f, 0x800, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x3ff, 0x8000, 0x100, 0x5, 0x4, 0x5b5, 0x2}}], 0xc8, 0x1}, 0xc5) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r5, &(0x7f0000000140), 0x10) io_submit(r6, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000080)={0x8, 0x2, 0x40}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x831d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) fadvise64(r5, 0x100000001, 0xfff, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x220001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x70e, 0x0, {0x0, 0xffff}, {0x4b, 0x4}, @period={0x59, 0x2, 0x4, 0xfff, 0xfc5, {0x9, 0x1ff, 0x100, 0x3}, 0x3, &(0x7f0000000100)=[0x800, 0x3ff, 0x81]}}) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="feb048ec", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000200000000000000000000ef00000000000000000000000097080edcd2add6a9f0e178fd9a882c7b5217b5a4a059b5c05fb30b94c68ca7b2fee9b289dcf4dda0c9bb2af0e51739b3c1a3fe24d01d7c7a2097f8b85d9d9820aa1fbcd7ec60600f91f702d477b9d6b9a6abfbd6d1a08400ab00d324b5d165161ae0f51a9c67eab0e8cecdf002efe30016efc53e17d9acbfbad812651794db4e8817cb5f68fede05d7ff1a71cfb0bdd76145912bbc10be3ed508916c1eddc03ead7d3b644864362a25e876c83956", @ANYRES32=r3], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000080)={r3, 0x2, 0x8f51}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$SNDCTL_TMR_METRONOME(r7, 0x40045407) r8 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x4000000000010046) ioctl$SCSI_IOCTL_STOP_UNIT(r8, 0x6) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x5}, {{}, 0x4}], 0x30) 19:28:25 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="210000007ac7559ea17180e6523012e2ab9c473a7329eb76724d55254f94de60ed28fdb24405c6874dc417d0957a716e6b20e62dd62ef8728adca673fd011a89dc894c6334360f3310768e80f49c9651971d5793b60f94ff625ba848ed947605ac32fd5da7119c72939f8d0c8fbb237f6643ad2b4009aa92c0956646d8eab758604bff47ad67368572b1e16d694602dc6532cd71c9e6ca23631ecf04ca46139af6c4e660e54c4d1782c2083c3ee2510eda5fdc5d2a377f0ac027d30dbba2b480b6d8b282a887328467b928f7802d56c878efeb0b", @ANYRES16=r5, @ANYBLOB="000825bd7000fedbdf250600000006000b0023000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x2c}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYBLOB="000826bd7000fedbdf250600000008000200030000006100040002000000080004000300000008000700ac14143b4f4926b6276cbd48c02e8d51b6f6f932976883be263f3bcb25ec0905a717702ed0c20b298c3f2f234bdc29903c01558ddb7303cb83dd89e1b714d4fe765167f7d550d5c8d924dc44668b413c2c867fc050f7e8aa23b3c00512a93df664de0e3693c10547584432a9dca68fe197e0d86ca33b3421923d232d53440732337978a658534c91387d3aac29143859c834b0c98e99e59131385c227ae0a592"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x402c890) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{}, {0x0, 0x1ff}]}) write$evdev(r6, &(0x7f0000000040)=[{}, {}], 0x52a) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) 19:28:25 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x82c00, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) accept$nfc_llcp(r4, &(0x7f0000000080), &(0x7f0000000100)=0x60) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000001c0)={0xf9, "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"}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e24, @private=0xa010101}}) 19:28:25 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="080000a61857ce9dfe9c1f00"]) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="784e7f0c8021d045ec200c484d2c", 0xe}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000100)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840), 0x0, 0x20, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) 19:28:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000080)={0x20, 0x2, 0x1, 0x4, 0x1}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:26 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) prctl$PR_GET_SECCOMP(0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$isdn(0x22, 0x3, 0x21) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000040)={{0x4, 0x0, @identifier="2d2eb7a9ec8e4ce60f42652547fce433"}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000140)={r3, r4/1000+60000}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 19:28:26 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x408840, 0x82) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'veth0_macvtap\x00', 0xffffffff}) 19:28:26 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r3, &(0x7f0000000140), 0x10) io_submit(r4, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8, 0xc240) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @ramp={0x4, 0xddda, {0x8, 0x401, 0x5, 0x9}}}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:26 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = signalfd(r2, &(0x7f0000000000)={[0x5]}, 0x8) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000010a0702000000000000000001000007a03649be26170900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x496ff3ad5b34a9cb}, 0x4851) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4112, 0x1010}, {&(0x7f0000000180)=""/111, 0x6f}], 0xd7}, 0x0) write(r2, 0x0, 0x0) 19:28:26 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x5210208}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000c14000126bd7000ffdbdf250800010001000000080001000200000008003d0004000000080001000100000008003d0005000000080001000100000008003d007f00000000ee0000040000000800010001000000"], 0x58}, 0x1, 0x0, 0x0, 0x582d1f27f1fd69bb}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r3 = open(&(0x7f0000000540)='./file0\x00', 0x2382, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000080)={0x3, 0x3, 0x800, 0x2, 0x4}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa}}, 0x0, 0x0, 0x8, 0x0, "72ca3db9e12a987cac7923a1b13b2ef8b815a894cb341cef328e8071da6fe4a5431a5dba47faddacacdaf28e684bf4ffa9d5785a534cafabd3d0e8d5861b7080939dfc13779b45187f3ea214504a14a3"}, 0xd8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) lstat(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r7, r8) write$evdev(r2, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) 19:28:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000100)=""/80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:26 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) uselib(&(0x7f0000000040)='./bus\x00') r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000280)=0x20) setreuid(0x0, r7) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(0x0, r9) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000800", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="02000500", @ANYRES32=r7, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="040004000000000008000300", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="10230600000000002000060000000000"], 0x54, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x2, 0x2, 0x7, 0xffff, 0x75c4}) 19:28:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x90000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) pwritev2(r0, &(0x7f0000000300), 0x0, 0x3, 0x8, 0x14) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000440)=[{{r2, r3/1000+10000}, 0x0, 0xf7b, 0xde}], 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x4000000000010046) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in6=@private0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) 19:28:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r4, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004108}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r4, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x940}, 0x20008000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:26 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151043, 0x22) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 19:28:26 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000100)={0x0, 0x24, &(0x7f0000000040)="ee2e76a4a6efae0065465830b0b1969a9fccdd6b993fbfd20f7c1a7b92464575a481c3c054f69e41d0ac566c2554925e74e88f408eaf78bc263761c4ad57a1d18503f027468e4cbf8d0a2345b2b5a9fa1e811a22effc917736d92d269e50f201f51c10a2da2d3a716ccc97b0b9ea6a3d8ae53ea9e279f0c7cfa597941d7f26bdfdd0250f368a1012d67f5441a90658b1d228502e1043645b84b566656564291b3182ace0f32df73f191e9fbedf86b0e7be0516c6e4", {0x1f, 0xf81, 0x3631564e, 0x4, 0x5, 0x4bc0, 0x8, 0x18}}) connect$can_bcm(r2, &(0x7f0000000140), 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000240)={0xfffffffffffffffe, 0x3, 0x5, 0x0, 0x1f}) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:26 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) writev(r1, &(0x7f0000001380)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r4, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000080)={0x1, 0x1ac, 0x7}) 19:28:26 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0x400) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xb8, 0xd7, 0x20, 0xffffffffffff8000, 0x3, 0x3e, 0x1, 0xa3, 0x40, 0x16c, 0x3, 0x4, 0x38, 0x2, 0x5, 0x4, 0xbf}, [{0x60000000, 0x3, 0x200000, 0xfff, 0x1f, 0x104484d8, 0x3, 0xb45}], "3f585a08a560062991ac3a09caa8c5fa023e7449c5056cbacdd9775cc63ccfde4d4d636636961c7aef0c1ada1214e87aeb15e351c884217dd0f9489f800548559df36fbac9d40a71e83da1248f41ec522bde7f6771a82950acc10641450e950398ebdb16ba979b9ec59f9e8a2fc20815db71f8d72dcf0ad8a432d61a17955e15cd997a5e067f", [[]]}, 0x1fe) 19:28:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000100)=0x5) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000080)={0x3, 0xfff, 0x1}) [ 543.800646] new mount options do not match the existing superblock, will be ignored 19:28:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0xfffffffffffffc7b, 0x0, 0x0, 0x0, 0xfffffffffffffd3f}, 0x40000}], 0x1, 0x40000130, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) 19:28:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = accept$phonet_pipe(r4, &(0x7f0000000080), &(0x7f0000000100)=0x10) connect$phonet_pipe(r5, &(0x7f0000000140)={0x23, 0x6, 0x7, 0x2}, 0x10) 19:28:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = socket$netlink(0x10, 0x3, 0x8) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000100000900010068667333ab2f07b211a1b6"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000240)={@private=0xa010100, @broadcast, r9}, 0xc) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r10, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000010}, 0x5) write$evdev(r0, &(0x7f0000000040)=[{{r3, r4/1000+60000}}, {}], 0x30) 19:28:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) clock_gettime(0x0, &(0x7f0000000080)) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0xfffffffe}, {{}, 0x1}], 0x30) 19:28:27 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xbd, 0x0, 0x7, "2aa68641fe5a98d7d64fb6ef9305920a", "d34829e01ffe826de7ba197f853331d608e26dc991571475d8c8f4e19ccc67f3ee3a68fcb294f13e2f5e21b17970af26f34794425c3ebfae176ea48f829cd7d9dd55d446fd2bb2b745fadba9a7e12debe15d35ebaba50c99c79bcb2726dc01b0307995023ea031a22cb4bc3c3cc6e0e435f5fd75ea0b4de475947e3a99b81f8dba39164399a539694ee670b490dad1a0648dfedbd108dd234ebb6ffd50f3cfc1a36ed29a0b0bbab7"}, 0xbd, 0x1) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) bind$unix(r1, &(0x7f0000000240)=@file={0xc2cc2ad6a8577e, './bus\x00'}, 0x6e) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000001c0)=""/87) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 19:28:27 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x88041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80400) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000100)=""/175, 0xaf, 0x2000, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) 19:28:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xe6ddda) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:27 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x402140, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0x37, 0x7, 0x6, 0x16, 0x4, 0x4, 0x1, 0x56, 0xffffffffffffffff}}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x1, 0xb, 0x0, 0x580, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r5, 0xfa6, 0x30}, &(0x7f0000000180)=0xc) 19:28:27 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@null=' \x00', 0x1, 'ip_vti0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="4f000000e65b617f26cbe2e34d7de21d9100f447078bb37482d78841e8d4c595354858583d9048c32c22144b432e8d0bf932d5ca000000000000c6386c993e310000178663", @ANYRES16, @ANYBLOB="23090000000000000000010000000500070000e300000800090000000000060002000100000008000a00fcffffff08001700ce47a2d74d89372d6696c66bd0c9579b6e3688f1f7d0d1f34538155a7f712923d54b5bcdfdb2d4dc7a1430cb7701000000000000006585a5d1a5f280d091f4d8316ec64bb9d1c789fa0f472872b568f580f809cd2b604e6a5c917ee49474892f458ebc50a7", @ANYRES32, @ANYBLOB="57fe3f8e883dcc4607582d2a38d52c70d5456ff712b75e95fb81327c35b06bee309d76cfc5d419aef59d036bfe299bd7a78bbd6ac844cb9883e3b102000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x24008818) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000100)={0xa, 0x5, 0x10000, 0x7}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000080)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 19:28:28 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={[], 0x12}, 0x1ff}, 0xe) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, [], [{0x1, 0x47, 0x0, 0x5f, 0x800, 0x6}, {0x7fff, 0x5, 0x101, 0x1ff, 0x6, 0x400}], [[], [], [], [], [], [], [], []]}) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./bus\x00', 0x6, 0x6, &(0x7f00000007c0)=[{&(0x7f00000001c0)="568219585a8b2e3583d56bbb21d7da4b8e130abb516118a031f45709d9f7c1bb416919b1618bfef33800dd3db9d2d6d1c50ed64d7b398c33656b884423db157909ccdb323e4cf291c4bc0704aecd308707dcf1245cbd6fba885c1c7f1bb3de3cdbf4dfa195ccd7b91c37c07093d34340d86446e9fd89ea1e55910003409784dc78d280665d9a89b569b509b074a211855d1d", 0x92, 0xfffffffffffffffd}, {&(0x7f0000000100)="672fb2c69dc667566c", 0x9}, {&(0x7f0000000280)="2302929b4c362a2f74bb19ddc0f1b53393c618677d35a15c1e49d9b9641bfe0ff1673b14341cf0d6a3d4c0c2c45bee9742995116b85c81d4e303c7a6aca90d8e275c3ca4624c180c80aadf93468a654ac25b17ce9bc06ae275c1568b45d6203ece8f9fd6d597c5b49b", 0x69, 0x9}, {&(0x7f0000000640)="b871e9869b3c86af6549e37ee1128f7c10695713713d9e89d8af976c03e9a1e15de0129d3d129fb3ffd1d8bd38416d10d413fa9907de94df1dc9ce2969004416abaca2a6fe42ff10b6", 0x49, 0x7}, {&(0x7f0000000140)="29c63a4f47b8c606a738fe6d30b420", 0xf, 0x80}, {&(0x7f00000006c0)="d11cdd089b1567415c873d9b63e96f03f85b9f661280dedf5ddd9760cec96114d460888f521f02f323a0f6b3cad2a586edc68e1c0c7f10b72982c69562e72abb74a53fe6526a767c0de45594434fb10f29dd05babea37fd3e874258083aeb0905542e004988c30c86e4d8fa455d89fca0b51a3743b0c0386da5040e0182715f4cb19dc5eccb8927bf7ea9446b0c5ff4a88aa2c214d5295ce1c2f481746fa30c4b1306c92a5fb3e7630476d1571aacbc3b215e0146c9e2fe9cf93b4f90f067ede919fa985d3a244a65741c0b0aadd947aaaf0b82645ba91cee9f1cc402c5d60ad387755fc5eedd6afd1cd837df28d5509cb", 0xf1, 0xffffffffffffffc0}], 0x20, &(0x7f0000000880)={[{@resize='resize'}, {@noquota='noquota'}, {@resize_size={'resize', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@resize='resize'}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@umask={'umask', 0x3d, 0x9}}, {@discard='discard'}], [{@obj_user={'obj_user', 0x3d, '\'('}}]}) 19:28:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x8, @mcast1, 0x81}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0xfffffbff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc45}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x4f77857f, @loopback, 0x5}, @in6={0xa, 0x4e24, 0xc000, @loopback, 0x7ff}, @in6={0xa, 0x4e24, 0x4, @local, 0x745}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x2}], 0xc8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x304, 0x1, 0x7c, 0x3f, 0x2}, 0x10) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x4004800) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000000)=0x1) write(r2, 0x0, 0x0) 19:28:28 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) io_submit(r2, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="11380000", @ANYRES16=r4, @ANYBLOB="000200000000ffdbdf25010000000c2099000100000000fffffffa00010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000049c66a2de76bb10db2259df950de9600db7a37d84f4081f0851cbf7fdc261c8c3eb500072f23ca7bee31a10a74c240af3701c74b3a09db1f45ea8fe6c2ba2b30052a8a6bd998bebc9f8a022e7b448a8ce4587c72c678879e8395476d02c55010ac4bed802cca77acc8035f81726601364f4f64e0c50b6e483892bfa66703785c192bbf635d427cef636301ffce0f07b66b20f0a3000000", @ANYRES16=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x20004080) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_STA_WME_MAX_SP={0xf, 0x2, "900d66e5a3e5b6e104126e"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x40011) 19:28:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x100) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x183300, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f00000001c0)=""/112) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x4000000000010046) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000100)={0xa4, 0x21, &(0x7f0000000080)="9d6d59d29db79ecb67fb22ffddf61e115ae519282990d50f129b021ed383410ad60914531b707d0cb96e5e8530dc7c8f", {0x7, 0x7, 0x30314442, 0x0, 0x7, 0x4, 0x7, 0x200}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x11}, {{}, 0x0, 0x0, 0xffffffff}], 0x30) [ 545.350194] audit: type=1804 audit(1597865308.464:31): pid=1716 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1100/bus" dev="sda1" ino=17138 res=1 19:28:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x53, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{}, {0x0, 0x0, 0x0, 0x0, 0x7f}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x308, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, [], 0x3d}, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x100, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff85d2}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "23ef7e38f393fe139d60edb4118d4981dc376548dd22cfe27d54b775c74f2b19a99cbf7d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa87}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f01e2c6ff3636d6e0ff4b72b3bd0ad70dd80e1881b81de"}}]}, @TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83d9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd23d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x736}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfb2b}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x40881}, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:28 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) setpriority(0x2, r4, 0x1f) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x40) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) getpeername$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0xffffffff, 0xa2339072dbadf71d, 0x6, 0x0, 0x1, 0x1}}) r2 = dup(r1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000180)={0x0, [0x100, 0x8000, 0x3, 0x5, 0x100, 0x100, 0x81, 0x101, 0x1, 0x2, 0x8, 0xc3e1, 0x9, 0x8, 0x0, 0x8000, 0x200, 0x8, 0x7, 0x81, 0x9, 0x0, 0x8, 0x8, 0x8, 0x4, 0x4, 0x1000, 0x61, 0x1f, 0x5, 0x5, 0x3623, 0x80, 0x6e0, 0x1, 0x7, 0x100, 0x4, 0x401, 0x1f, 0x85fe, 0x64, 0x3, 0x9, 0x40], 0x4}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x587200, 0x0) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 545.494230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50761 sclass=netlink_route_socket pid=1739 comm=syz-executor.3 19:28:28 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10001, 0x228000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100010000000000000002000000050002"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x241b}]}}]}, 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) 19:28:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4c00, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="11380000", @ANYRES16=r3, @ANYBLOB="000200000000ffdbdf25010000000c2099000100000000fffffffa00010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000049c66a2de76bb10db2259df950de9600db7a37d84f4081f0851cbf7fdc261c8c3eb500072f23ca7bee31a10a74c240af3701c74b3a09db1f45ea8fe6c2ba2b30052a8a6bd998bebc9f8a022e7b448a8ce4587c72c678879e8395476d02c55010ac4bed802cca77acc8035f81726601364f4f64e0c50b6e483892bfa66703785c192bbf635d427cef636301ffce0f07b66b20f0a3000000", @ANYRES16=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3996b96ed5"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) [ 545.578254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50761 sclass=netlink_route_socket pid=1739 comm=syz-executor.3 19:28:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x14}, {{0x0, 0x2710}, 0x0, 0x8000}], 0x30) 19:28:28 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x44000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 545.685987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50761 sclass=netlink_route_socket pid=1765 comm=syz-executor.3 [ 545.711361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50761 sclass=netlink_route_socket pid=1765 comm=syz-executor.3 [ 545.738346] nla_parse: 11 callbacks suppressed [ 545.738352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 545.787270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0xfff9}, @cond=[{0x4, 0x4000}, {0x0, 0x0, 0x0, 0xfffe}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000240)={{0x81, 0x80}, 0x0, 0x0, 0x1, {0x6, 0x9}, 0x86, 0x1}) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x40000c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)="4de62cec60ac9f6567401cc3a9f31887edc2ab7cbfe54a8470cbbf43fce7a695437174c342c11c32d38fb6a747af921cd9592e67bed7fb5876e9abf37718f927117f0e4517ae10a9bde61dd1323782a88af4ba4940f32e1631965458a350b923aff10a197c874db81ea8613a2d202d56f3daf03653be00674c25697d453a08fdee77df55b489a4e98a06e4dae5d2c02b425a09b194a9b60c2e068c3e553f43435bdd70535dc29418a70aa47aae29836fed6d22", 0xb3, r1}, 0x68) 19:28:29 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) accept4$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @bcast, @netrom, @null, @remote, @rose, @netrom, @bcast]}, &(0x7f0000000100)=0x48, 0x80000) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r1, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) fsync(r2) 19:28:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:29 executing program 5: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x7, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040)="a5659fd1a1", 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r2, &(0x7f0000000080)=[{}, {}], 0x30) 19:28:29 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:29 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffe1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4044}, 0x4000000) 19:28:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x2080) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000100)={0x3, r5}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000380)=""/4096) 19:28:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000001c0)=[{{0x77359400}, 0xad90a11532746e0, 0x400, 0x20}, {{0x0, 0xea60}, 0x12, 0x7f, 0x7fffffff}, {{0x0, 0xea60}, 0x4, 0xfffc, 0x589}, {{r1, r2/1000+10000}, 0x12, 0x2, 0x7}], 0x60) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000180)={0x40, 0x0, &(0x7f0000000080), &(0x7f0000000100)=[0x0, 0x7fff], &(0x7f0000000140)=[0x2, 0x7]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:29 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x0, 0x2, 0x1}, 0x1}}, 0x18) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/225) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:29 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000040)={0x1, 0x3}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:29 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) 19:28:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x80201, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000100)={0xd88, 0x5, 0xa, 0x0, 0x0, [{{r0}, 0x8000}, {{r5}, 0xffffffffffffff80}, {{r2}}, {{r1}, 0x1f}, {{r6}, 0xfffffffffffffffb}, {{r2}, 0x3b7a}, {{r7}, 0x3ff}, {{r8}, 0xbd5}, {{r3}, 0x3}, {{r9}, 0x3f2}]}) 19:28:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0xffffffff00000001, 0x802) r2 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYBLOB="0000000020000d000000965f4b708dd143630e773bb010a49a1c00627ac6673d37696c5a8ea931fb6e65f26117a6749a97d15699bc9bd161c4f2040000009d43e4defe07f8e77bf65cce2b585733df6e1cd5eef465b8932c8210e5b78c32a4bbe52eb2bb77d6c0ab02704f9f84652c340a864c88c0a9f81d"], 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x48, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0xc841) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f00000001c0)={0x140, 0x3, &(0x7f0000000080)=[0x8, 0x2, 0xb0a], &(0x7f0000000100)=[0x2, 0x98f, 0x8000, 0x100, 0x4, 0x2], &(0x7f0000000140)=[0x6, 0x5], &(0x7f0000000180)=[0x1, 0x80, 0x3, 0x3, 0x9, 0x2, 0x800, 0x9a7]}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) 19:28:29 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$TIOCSTI(r1, 0x5412, 0xfa28) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r7, 0x4, 0xc1, 0x2, 0x3ff, 0x20, @empty, @remote, 0x80, 0x20, 0x1, 0x4}}) 19:28:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$KDSKBLED(r1, 0x4b65, 0x5) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000100)={&(0x7f0000000080), &(0x7f00000001c0)=""/144, 0x90}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="84", 0x1, r6) r7 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="84", 0x1, r7) keyctl$unlink(0x9, r6, r7) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:29 executing program 4: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r2}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x5}}}, 0x84) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0xb8001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r3, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x20100) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:29 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0xcaf, "ada4ea62889d38f171d42d0adc6c59f5dc3221e00e9e1aa5d276e712b05cdad5", 0x2, 0x1}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) [ 546.694578] audit: type=1804 audit(1597865309.815:32): pid=1843 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir343092949/syzkaller.BhbbU7/1106/bus" dev="sda1" ino=17236 res=1 [ 546.705493] encrypted_key: insufficient parameters specified 19:28:29 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x60, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'tcindex\x00'}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000ffe10e0000000c0001007463696e646578000c000200080001001b240000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf251d000000140023800600020041000000050006003f0000000c0099000000800002000000080001000300000008000380", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="1c002380050008000700000006000300aa00000006001200300000000c00990001000080030000002c00238005000e00040000000500070000000000060002003100000008001a00020000000600040006000000080001000200000024002380060016000000000008001500e400000006001900050000000800150041000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x400d5) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r3, &(0x7f0000000140), 0x10) io_submit(r4, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000300)=""/4096) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:29 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x51, 0x0, 0x0, {0x5, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x2000, 0x0, 0x100}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x42) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000300)={"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"}) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/81) 19:28:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0x100}]}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) bind$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x0, 0x2, 0x6, 0xc0, 0x4, "a0a2c3ce9ef6a2c965634177e726b37b319ec0c08509ab7540e0ad4c82a402796f2afe93fc19ac769a22d6d37220b15bf18b37c189318c310cdae2e85e01c8", 0xd}, 0x60) 19:28:30 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4a}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:30 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x347ac0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0x7, 0x1}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x4, 0x0, [{}, {}, {}, {}]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000001c0)={0x23, 0x6f, 0x1, {0x2, [{0x89, 0x2, 0x8}, {0x1, 0x1, 0x4}]}}, 0x23) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x16, "7a4e24364b9d518cd4d3af143d55bcbc085872c37366"}, &(0x7f0000000080)=0x3a) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:30 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x3, r7, &(0x7f0000000380)="5c4e4d53121e0d2956bec274964dcaef3744157c6daea56de5422ddc74a848fb635715f71adfb90679e3f77749eb5b71069c1e1959d0e88374aeff92a0eb2b0311b1d7e4e280e150cadf69ee9375faf534ec6de32e3958f3d0149e7e7efa85953a9881ba83ececee6a5c3a23c34cd82e64c936e3f7834e07d172263fdb3d15d41de26dd34ddce0fb064307", 0x8b, 0x4, 0x0, 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f00000013c0)="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", 0x1000, 0x3}]) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x181400, 0x0) ioctl$FIONCLEX(r1, 0x5450) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x0, 0x100000000000001}, {0x4b}, @cond=[{0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x2}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r7}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)={r7, 0x0, 0xab, "64e4b11a1fb17112a3667506aa0055ef9530fb8df70825aef38e4979c0336ec3397ce8cd06d9f0bf909a4d52f594fbf51ede024e5566e5845a17b7aff34362cc8a8ed9847ca9246a5dcb7242339b80ef47baa86dc977bc0e6833666dfa4038e1ef15c1b7d0b86a83c024ed26e5f1acfea53a376d9dff42319efbcd12887d3d2e5e2c802ff13963b76970e48ec9294f91c0b955520854738a6513ca2b7d30dbb39d4dd8eb7a2978891c5acd"}, 0xb3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x68, 0x9, 0x8, 0x56, 0x9dc, 0x3, 0x3, 0x7, 0xf6, 0x40, 0x165, 0x81, 0x93, 0x38, 0x1, 0x7f, 0x8, 0x3}, [{0x3, 0x3bb, 0x9, 0x2, 0x31, 0x3ff, 0x5f5b, 0x9}], "d6166527c7ff418ecc6d528c7c7a5455eafaaf8186ed8215d926babb497f3c9a3d08f99c1f0c3e84403c47352a220c8b41eb56d5f8494e3c3cfde4a5240785511cca780de7b3a6e2562012ed9fd25443659c66140e395e88975cacb834f6bbacf016f1a6ec718f8bda75ffa760f25208e9004a66e0e8235b547b0162e2e1f937dcb184ddab89", [[], [], [], [], [], [], []]}, 0x7fe) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r8 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x4000000000010046) ioctl$EVIOCGABS20(r9, 0x80184560, &(0x7f0000000100)=""/87) 19:28:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000080)={0x400, 0x0, 0x4}) pwrite64(r2, &(0x7f0000000140)="657d16ad7f8826199ad1f58545aa56d44a94e4bd19cdc23dac8a9217187eac0857ce2a806fd1e8d56351022e809b4454aa2ebc7e7c057f35b0c668dfb42a5ce8e51142e818d7e3bef0c9a08ecdbcf5d664ad99215245ccaa87a90eac13c4c83f8022d7f958f9990be66a3d3936e401b9f22d0471cacaa8c9df6b0a231db59e3b1feb0b189ec2d12270575ab52f28afa9bdfac25c595cbfba785dc5a353859ff8d0b1cc8e7cdd33e496cccdd3eaa809802ce3b83d0301d118a1bf59d1ba8ecde50c54e0e7027273615834f8c5e92e986cbff25a853f8208634a547ca449fb8169e7995219020d", 0xe6, 0x8) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) [ 547.068609] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000200)={0x7fffffff, 0x6, 0x2, 0x3, 0x19, 0x1}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ftruncate(r5, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{}, 0x3, 0x6, 0x6cf7}, {{0x77359400}, 0x12, 0xaf, 0x2}, {{r3, r4/1000+10000}, 0x3, 0xff, 0x1ff}, {{0x0, 0xea60}, 0x17, 0x5, 0x5}, {{r6, r7/1000+60000}, 0x17, 0x40, 0x8}, {{}, 0x2, 0x6, 0x3}, {{}, 0x2, 0xfffb, 0x2}], 0xa8) [ 547.139509] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:30 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:30 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x88102, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) rt_sigreturn() ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:28:30 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, {0x6, 0x5, 0x4, 0x4}}) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x52a) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000001c0)="8bc1e1cf9d14622dfa8d0f76f4b60394a3fd086eb57e676a5f4910c29f05182eda6036f0a8bdcad1279fb6fc730fbf18444f3a6eca69570798427b2850cf2b727884a9e9a4b8ba1c74a46229bddacb009d46d019bdaa1c8230", 0x59}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f0000000100)) 19:28:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x1000, 0x4, 0x0, 0x4, 0x8}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x4000000000010046) write$6lowpan_enable(r3, &(0x7f0000000080)='0', 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e1ff1200", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x4004001) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x8, 0x3}, 0x8) 19:28:30 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c100000090601010000000000000000000000000500010006000000040000020073797a3000000000fed9559a16aa54ed100dc2fd83a49c0fe48a3f72a3917a6b762ed8042a55a38ade478cce039cb95a716fcbaedb6aebd537b69112a4e517bbdb4656cc5f7ae794b111b9d2"], 0x2c}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x3f, 0x1ff}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 19:28:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@echo=0x7) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="84", 0x1, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000540)="727fdb691ec6c294335b460439fd18508bf3d0e84f8e86cf038581fc27d5930bd69e48e768c0ede220b6361764a2dce4611c66797288d9766c55f0d1e4d610d927e8dcab2f9416d86b589b920c23e9b11713aa", 0x53, 0x0) r7 = socket(0x11, 0x800000003, 0x8) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0xfc, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x3f}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xffc1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x40}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x4004004) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x18c, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 19:28:30 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x4000000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x5f) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f00000000c0)={0xa, 0x4, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000240)="a519f061d132b1b1f8e68d396bd3d5c1e4d4ad5bf6d0f8b3f87e3de67291033ac95f3ace5ddd36b422faf224da8704ba8e82f6e158a60198790047024b3714475f29758ad8cd93e46320d131afc10ffc8ebffa6a90253c7630f3c7f05c7b0cdfbf57c21dea605325d4052b8dd1", 0x6d}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xb4, 0x80200) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x23, 0x40, 0x1, 0x8000, 0x10, 0x9}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000180)=""/152) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40000, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000060006e90000ee6631980000010006000000040007ff075d3f5daf2ff268fd6d2200000073797a300041e1b07fc56517eb0000"], 0x2c}}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000300)) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r3, &(0x7f0000000140), 0x21) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000300)) rt_sigpending(&(0x7f0000000080), 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000140)=0x1) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="5f38000000030000001400010091f78061000000000007319cd3be437a6b0189d09f66274cf901ab2804b08b9159a19bd335a496acced8837ac0"], 0x28}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf319}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x24000080) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:30 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000140)=[0x59, 0x8001, 0x6, 0x7, 0x8], &(0x7f00000001c0)=[0x1f], &(0x7f0000000200)=[0x401, 0xfff]}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x5, 0x100000000000001}, {0x4b}, @cond=[{0x0, 0x0, 0x0, 0x18}, {0xfffe}]}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000100)) r5 = open(&(0x7f0000000180)='./bus\x00', 0x110243, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000080)=0x8) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) ioctl$KVM_GET_REGS(r7, 0x8090ae81, &(0x7f0000000280)) write$evdev(r2, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:30 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 19:28:30 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = socket(0xa, 0x1, 0x0) close(r4) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffff, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x5, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x205, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x4004001) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7}, 0x8) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) 19:28:30 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000040)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/229) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400100, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000100)=0x6874) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) dup(r1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x410082, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @period={0x5a, 0x2, 0x1, 0x4, 0x280, {0x6, 0x2fde, 0x4, 0x2}, 0x9, &(0x7f0000000080)=[0x3ff, 0x8, 0x3ff, 0x8, 0x3, 0x8000, 0x7f, 0x2, 0x4080]}}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:30 executing program 4: 19:28:30 executing program 2: open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 19:28:30 executing program 4: 19:28:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x2}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400201) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000100)) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f0000000080)) 19:28:30 executing program 2: 19:28:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40081) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r2}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 19:28:31 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001600e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:28:31 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:31 executing program 2: sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000100)=""/249, 0x37, 0xf9, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200003603000000000000000000238500000000e79900950000009dec74b60826c32459ce03000000e150a2a7341dfe19b22e00000000f523d5d5320ac2175a7c67860b1b767417d3dfbbf4eca4077e1f4ad37a2ae19cd233a485342acc5ea6f91ef9f0dd477a41b4103dca176ec4a83592f47895f3f02df1fd240f0c6ac812856f1bc31e55f5c05bbe40896bae6b396b7a0d298d453333a0661113f58b05ed71ffaa0fa4000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x1, 0x10, 0x0, 0x180}, 0x70) 19:28:31 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x82) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x3, 0x0, 0x81}, {}], 0x30) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000001c0)=""/226) 19:28:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40081) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r2}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 19:28:31 executing program 2: 19:28:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x8) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x129100, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000100)={0x12, 0x6}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r2, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000180)=""/152) socket$nl_netfilter(0x10, 0x3, 0xc) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r5, &(0x7f0000000140), 0x10) io_submit(r6, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_dccp(0x2, 0x6, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:31 executing program 2: 19:28:31 executing program 2: 19:28:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xff, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x14b, 0x3}, @rumble={0x1, 0xff}}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {{}, 0x15}], 0x30) 19:28:31 executing program 2: 19:28:31 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0xffffffffffffff66) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x357400, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) dup(0xffffffffffffffff) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file1\x00') mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000240)=ANY=[@ANYBLOB="16d7fb00e035492282e3ffff9d6b067fd4f5c20cd9fffffffa230042cc4417e81ce887f6f6d544fbc8b55f87ee254cffff91a160b23779417ae57b7a3efc9d4022b2a86f"]) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)) 19:28:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x24800, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000140)=""/107) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000100)=0x7f) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:31 executing program 4: 19:28:31 executing program 2: 19:28:31 executing program 4: 19:28:31 executing program 2: 19:28:31 executing program 4: 19:28:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r3 = accept(r2, 0x0, &(0x7f0000000080)) getsockname$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:31 executing program 2: 19:28:31 executing program 2: 19:28:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$SOUND_MIXER_INFO(r6, 0x805c4d65, &(0x7f0000000100)) ioctl$PPPIOCDISCONN(r4, 0x7439) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:32 executing program 4: 19:28:32 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000000c0)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x13c2090, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x7f}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x1000}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0xcf}}, {@mode={'mode', 0x3d, 0x80000000}}, {@mode={'mode', 0x3d, 0x80000001}}, {@mode={'mode', 0x3d, 0x6daf}}, {@mode={'mode', 0x3d, 0x1f96}}, {@mode={'mode', 0x3d, 0x5}}], [{@fowner_lt={'fowner<', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '('}}, {@smackfsfloor={'smackfsfloor'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@dont_measure='dont_measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x63, 0x36, 0x35, 0x65, 0x36, 0x36, 0x32], 0x2d, [0x36, 0x66, 0x34, 0x35], 0x2d, [0x37, 0x36, 0x61, 0x64], 0x2d, [0x30, 0x37, 0x66, 0x31], 0x2d, [0x30, 0x63, 0x61, 0x62, 0x63, 0x54, 0x32, 0x65]}}}]}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) io_submit(r5, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:32 executing program 2: 19:28:32 executing program 4: 19:28:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x202000, 0x101) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)=ANY=[@ANYBLOB="0100ff0f0000"]) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000140)={@private, @private, @multicast1}, &(0x7f00000001c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:32 executing program 2: 19:28:32 executing program 4: 19:28:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x8482, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000406030000000000000000000c0000030900020073797a310000000005000100070000ff03000000000000000500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/mice\x00', 0x2) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000200)={0xffffffff, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000240)={r5, 0x64}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000400)={0x8, r5}) r6 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x82c00, 0x0) sendmsg$rds(r7, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r6, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000009060101000000000000000000000000050001000900020073797a30000800000000000000000000b60645c5c7556101f59d83413d86fd7a458b2b72a155e3399781438c7ef2db9bd2617a9852ee44e5f3cbec34171ab41bec2ee27b0690dbbde9e7b81b03ca0208c8e47f63003b3e083b780b29634d59327fab4b931ad90a84d43b5e0105b4132e65811fed3085b6dc3422418a53312e46459955f725532efff66c"], 0x2c}}, 0x0) getsockopt(r8, 0x4, 0x101, &(0x7f0000000080)=""/161, &(0x7f0000000140)=0xa1) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc02, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000040)) 19:28:32 executing program 2: 19:28:32 executing program 4: 19:28:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000001c0)={0x3, 0x0, [0x8000, 0x101, 0x4, 0x8, 0x1, 0x3, 0x0, 0x3ff]}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000100)={{0x2b, @private=0xa010100, 0x4e24, 0x0, 'none\x00', 0x60, 0x1, 0x68}, {@multicast1, 0x4e21, 0x0, 0x81, 0x180, 0x80000000}}, 0x44) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:32 executing program 2: 19:28:32 executing program 4: [ 549.248903] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 19:28:32 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/152) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x0, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) io_submit(r3, 0x6, &(0x7f0000000600)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)="ad1a5bd2d856cd75dc15c1629075fb9217d6d663ac0c622378f9f5caf3b1cc1233732cb052b04f90624d8a1b89704559928e841d031d2d585e38b189359c75ead8e7bc392df32b1e18fea2f0acb48faf06442511210b1316da2a0debfda58bd52a8a7d1640d5374b2306e2abec93d33cf7b289d49594f6a5130defb0f6887c128e71f6613e7abf685cf6457b159098f6a6ed540aa4937df4047ae30e40412a03efe20cdeea0000ffde764cddebeea1ebedf777eda95b454e00e71efb4dd428aaf75f7fb3f2c80a14c9d04a4ed2673da0036cd6272bf4afa7276a08043c5e2181204bc776c8a892b385d038e5380fa413fe39d429", 0xf4, 0x1, 0x0, 0x1, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, r2, &(0x7f0000000380)="7cd49228e2970fa2e6dab6f3ae0bb8e676938d9cb458e64ec6c209723e98d33899dc15335bfbc1535dec88545b330232cebb59d28ce26dc984f287c4f72e738b5716026e2f7c4c98fbce7cba5a796b4f04d3fcfe9af3885181c58b76ff172d6f911cadc1306b49933438cf3c33043da25d3cd8d20260ab0d", 0x78, 0x3, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f00000013c0)="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", 0x1000, 0x8, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, &(0x7f0000000440)="6e99ca59574289c625a9cc63d3a457", 0xf, 0x375dc9a1, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f00000004c0)="41c6b6220655f7d0c9e88f1669ce5801e8f8548a6a1c3667d2a570e4b23ed0e1e91d3915209b39a74b9b8d022b3dd26ac3f1fa6921a25c115acfa7", 0x3b, 0x726d, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x7f, r4, &(0x7f0000000540)="fb26156ef8e473dcaa4d4739e4ef4890b745ba00342c8362c2b2a0af2140211c433823845887003e512ac1790cdb1e2fcfe6b83b1e7a104001e66b19ea5cfb95a848", 0x42, 0x9, 0x0, 0x6, r5}]) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:32 executing program 4: 19:28:32 executing program 2: 19:28:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)={0x5, 0x4, 0x4, 0x400, 0x10000, {0x77359400}, {0x1, 0x80c4d65f614886ab, 0x40, 0xff, 0x4, 0x7f, "dea717eb"}, 0x1, 0x1, @userptr=0x9, 0x3, 0x0, r5}) 19:28:32 executing program 2: 19:28:32 executing program 4: 19:28:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r1, &(0x7f0000008840), 0x1, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x3f) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000000)=0x5f, 0x4) write(r2, 0x0, 0x0) 19:28:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) 19:28:33 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x14}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x345000, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/146) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) clone(0x21000, &(0x7f0000000040)="7cd987fc3a493b9a89ac26964d0663dc0199d5e0c9753ebf36669f81ab929a403c2aa785990e1e5220788e994426653252a0091309d69fb40428f898e2cb31e3ee9a7a62e3330524e7ed135c116c8b213b0c9321823a6fc80d13524fc703a8221eb32718a80400b32ae21d2119fa5762a628af301ee46e7a3e93", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000380)="e19ca335709244f26f85e43469d7099e37d33479402e5f7bb074af1606d7f1fc336c83da158ef3afb3301f5b63fdf3ffb1d2210b2eb3738ec7485a05277e8189e68950e01a951a1dd85c406e8b955da0d5bdea9f46e9670f4831108f2ff00e8c796d64840d5c1c14e4f1a1ec1e544f868cd9805ef4f8f399785fea3df57d3be39d316d40b747a8cc780b02576a01e9b60aaa24b764d062de83249325fd3a1100d26994a0190e702892fe25e8f6144373d45dd3a9b36d4193384b4094d330a7442681cdbaf33f0ed98746f83bc74ce7fd1d5e087e8efdbd537118dba6e71b9dcad1ff1e0fa146242fbf63d71f64f9281bdd12704266fc3665bd") io_submit(r3, 0x0, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200) 19:28:33 executing program 2: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x9, 0x20000000001, '\v'}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') lseek(r0, 0xfff, 0x0) getdents(r0, 0x0, 0x0) 19:28:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = eventfd(0x590f) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)=r3) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 549.989863] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 550.076188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.091042] ================================================================== [ 550.098655] BUG: KASAN: use-after-free in __ext4_check_dir_entry+0x2f9/0x340 [ 550.105853] Read of size 2 at addr ffff888076a6f003 by task syz-executor.2/2108 [ 550.113304] [ 550.114936] CPU: 1 PID: 2108 Comm: syz-executor.2 Not tainted 4.14.193-syzkaller #0 [ 550.122726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.132078] Call Trace: [ 550.134670] dump_stack+0x1b2/0x283 [ 550.138311] print_address_description.cold+0x54/0x1d3 [ 550.143595] kasan_report_error.cold+0x8a/0x194 [ 550.149076] ? __ext4_check_dir_entry+0x2f9/0x340 [ 550.149262] __asan_report_load2_noabort+0x68/0x70 [ 550.149275] ? __ext4_check_dir_entry+0x2f9/0x340 [ 550.149284] __ext4_check_dir_entry+0x2f9/0x340 [ 550.149298] ext4_readdir+0x7fd/0x27e0 [ 550.149322] ? __ext4_check_dir_entry+0x340/0x340 [ 550.149333] ? lock_acquire+0x170/0x3f0 [ 550.149344] ? iterate_dir+0xbc/0x5e0 [ 550.149361] iterate_dir+0x1a0/0x5e0 [ 550.149375] SyS_getdents+0x125/0x240 [ 550.149385] ? SyS_old_readdir+0x120/0x120 [ 550.149395] ? compat_filldir+0x340/0x340 [ 550.149408] ? SyS_clock_settime+0x1a0/0x1a0 [ 550.149419] ? do_syscall_64+0x4c/0x640 [ 550.149429] ? SyS_old_readdir+0x120/0x120 [ 550.149440] do_syscall_64+0x1d5/0x640 [ 550.149456] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 550.149464] RIP: 0033:0x45d4d9 [ 550.149469] RSP: 002b:00007ff1beaebc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 550.149478] RAX: ffffffffffffffda RBX: 0000000000003f40 RCX: 000000000045d4d9 [ 550.149488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 550.247984] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 550.255249] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 550.262519] R13: 00007ffd910adecf R14: 00007ff1beaec9c0 R15: 000000000118cf4c [ 550.269802] [ 550.271421] The buggy address belongs to the page: [ 550.276345] page:ffffea0001da9bc0 count:0 mapcount:0 mapping: (null) index:0x1 [ 550.284583] flags: 0xfffe0000000000() [ 550.288382] raw: 00fffe0000000000 0000000000000000 0000000000000001 00000000ffffffff [ 550.296264] raw: ffffea0001011860 ffffea00017ec8a0 0000000000000000 0000000000000000 [ 550.304234] page dumped because: kasan: bad access detected [ 550.309932] [ 550.311547] Memory state around the buggy address: [ 550.316468] ffff888076a6ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:28:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='attr/current\x00') setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x1000, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x248000, 0x0) mq_timedreceive(r5, &(0x7f00000001c0)=""/175, 0xaf, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = open(&(0x7f0000000280)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xce, 0x100000000, 0x7, 0x2d, 0x10001, 0xffffffffffff0001, 0x400, 0x7f, 0x7, 0x3, 0xfff, 0xd0b, 0x6, 0x80000000, 0x1ff, 0x4], 0xd000, 0x2}) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000080)=0x7) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x8}, {{0x0, 0x2710}, 0x16, 0x1400, 0x10001}], 0x30) [ 550.323818] ffff888076a6ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 550.331172] >ffff888076a6f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 550.338522] ^ [ 550.341880] ffff888076a6f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 550.349230] ffff888076a6f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 550.356579] ================================================================== [ 550.363928] Disabling lock debugging due to kernel taint [ 550.381928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.396029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.419258] Kernel panic - not syncing: panic_on_warn set ... [ 550.419258] [ 550.421074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.426645] CPU: 1 PID: 2108 Comm: syz-executor.2 Tainted: G B 4.14.193-syzkaller #0 [ 550.426650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.426653] Call Trace: [ 550.426668] dump_stack+0x1b2/0x283 [ 550.458521] panic+0x1f9/0x42d [ 550.462089] ? add_taint.cold+0x16/0x16 [ 550.463363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.466056] ? ___preempt_schedule+0x16/0x18 [ 550.466073] kasan_end_report+0x43/0x49 [ 550.481763] kasan_report_error.cold+0xa7/0x194 [ 550.486429] ? __ext4_check_dir_entry+0x2f9/0x340 [ 550.491266] __asan_report_load2_noabort+0x68/0x70 [ 550.496192] ? __ext4_check_dir_entry+0x2f9/0x340 [ 550.501030] __ext4_check_dir_entry+0x2f9/0x340 [ 550.505696] ext4_readdir+0x7fd/0x27e0 [ 550.509586] ? __ext4_check_dir_entry+0x340/0x340 [ 550.514434] ? lock_acquire+0x170/0x3f0 [ 550.518413] ? iterate_dir+0xbc/0x5e0 [ 550.522211] iterate_dir+0x1a0/0x5e0 [ 550.525924] SyS_getdents+0x125/0x240 [ 550.529717] ? SyS_old_readdir+0x120/0x120 [ 550.533947] ? compat_filldir+0x340/0x340 [ 550.534858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.538110] ? SyS_clock_settime+0x1a0/0x1a0 [ 550.538120] ? do_syscall_64+0x4c/0x640 [ 550.538131] ? SyS_old_readdir+0x120/0x120 [ 550.545632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.549865] do_syscall_64+0x1d5/0x640 [ 550.569828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 550.575013] RIP: 0033:0x45d4d9 19:28:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b}, @cond}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000fcdbdf250600000014000500fc0200000000fffffffffffffff100011400060028010000000000000000000000000001140005150380000000000000000000000000002c0500010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r7, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, ')\xf0(@/#@\\)}%\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x30}, 0x8001) accept(r1, 0x0, &(0x7f0000000080)) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 19:28:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) read$FUSE(r2, &(0x7f0000000880), 0x1000) sendfile(r3, r2, 0x0, 0x20000000000000d8) [ 550.578194] RSP: 002b:00007ff1beaebc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 550.585892] RAX: ffffffffffffffda RBX: 0000000000003f40 RCX: 000000000045d4d9 [ 550.593154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 550.600416] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 550.607678] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 550.614942] R13: 00007ffd910adecf R14: 00007ff1beaec9c0 R15: 000000000118cf4c [ 550.623554] Kernel Offset: disabled [ 550.627166] Rebooting in 86400 seconds..